$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft File: bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json) Hash identifier: zCeLYQmkObcOrh6qFM9pIATZRPzn5KJEyDlU9LDv6DQ= Subject key identifier: 56:9E:4F:86:B3:F2:F2:04:88:E6:B0:8D:79:5C:0D:EA:A7:83:A0:0C Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Certificate serial: 05D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft Manifest number: 05D4 Signing time: Sun 02 Nov 2025 23:00:04 +0000 Manifest this update: Sun 02 Nov 2025 23:00:04 +0000 Manifest next update: Sun 09 Nov 2025 23:00:04 +0000 Files and hashes: 1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: +CxImRkTYA2OA2RgK+Vs15UfwdfFzV/FbLqRY5glW1o=) 2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: /8hy3Bbn1TLOvORzZ60crKTvCR9C6tYBcsWimqCiQa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CD2, serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Validity Not Before: Nov 2 23:00:04 2025 GMT Not After : Nov 9 23:00:04 2025 GMT Subject: CN=6907e274-1db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:a9:1c:33:e2:e9:07:31:54:63:cb:70:1f: 10:b1:12:52:a5:9a:1d:fd:6d:e3:76:0c:ac:d8:a8: c8:94:e4:ce:02:3a:10:26:c2:79:b5:b2:b9:c0:3d: 00:58:48:0a:30:04:64:9d:ee:2f:8c:82:a8:a7:58: 35:88:ec:80:ac:b0:86:9b:b3:95:2d:08:8a:d1:ba: 1b:d3:2c:9d:58:da:2c:b1:42:dd:80:ad:70:3e:9d: 81:68:7a:5d:b0:38:56:1e:8a:f0:cd:4f:fa:fb:19: 70:15:19:3b:9f:5d:6a:7d:9e:ed:ee:7a:09:e9:42: 3b:d4:aa:e3:d3:a3:1c:12:ef:f3:41:2b:bd:ba:71: a2:32:25:65:18:2d:8c:85:f1:de:85:49:13:34:ac: 80:c3:97:7c:4a:c7:47:1a:fe:53:f3:e3:f3:c9:d0: ac:bc:c7:f3:d7:ac:39:c1:d0:a4:98:8b:75:e1:7e: 13:6c:ce:52:fc:82:26:f1:e5:8d:eb:72:dc:90:1e: 13:5d:97:83:c0:4f:7c:55:4f:2b:6d:33:d6:b8:4f: c3:a6:a1:50:ae:56:84:dc:8e:ea:3d:0e:4c:56:09: 88:a1:6b:86:d9:41:52:4c:0b:53:15:bf:f5:53:1b: 1c:7e:db:9a:03:57:b7:94:1c:fc:6c:a8:d6:5d:d3: 9a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9E:4F:86:B3:F2:F2:04:88:E6:B0:8D:79:5C:0D:EA:A7:83:A0:0C X509v3 Authority Key Identifier: keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2a:94:30:c1:36:ca:31:7f:4e:37:c1:ec:90:16:bc:bd:9a: 99:b3:06:93:d4:e5:bb:6c:72:6d:af:5b:8d:b6:d0:79:4d:42: 91:e4:45:94:06:34:1c:9b:51:81:9f:a6:e2:c1:c4:ed:3c:df: 84:c2:9f:1d:90:5d:69:0e:b3:ba:43:1c:74:2b:61:27:4d:e5: ee:da:a8:d1:28:90:e1:30:59:c4:c3:98:93:02:19:5f:a3:f5: ba:bb:2c:ee:e0:01:b0:bf:6c:b3:b8:b2:93:9a:8c:8f:ba:3a: 9b:9d:fa:3c:80:2d:d7:b9:55:d8:a3:17:e3:0c:6c:d5:ab:74: 96:05:d0:7a:88:db:15:64:6a:31:84:ef:f0:fa:4f:e5:9d:8d: 5a:53:b1:ab:6a:ab:16:0e:63:ce:3b:99:dc:c7:29:c4:58:e5: 29:7b:b2:5c:a7:34:34:79:e8:c0:0d:fb:49:05:62:f6:b7:4e: e5:ea:fc:83:21:27:66:44:db:f1:30:07:77:8f:7d:72:2b:48: a2:44:b0:70:1c:72:5a:18:ee:1d:71:ab:8c:ad:3e:77:13:82: 84:6a:d6:61:8e:44:d6:90:b3:c3:ec:bc:46:12:0e:3e:00:b8: 13:97:ad:12:12:55:e7:04:de:f2:2b:27:15:e7:64:ab:b6:63: 86:ef:57:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz N0JFQTc5NEQwHhcNMjUxMTAyMjMwMDA0WhcNMjUxMTA5MjMwMDA0WjAYMRYwFAYD VQQDEw02OTA3ZTI3NC0xZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPGpHDPi6QcxVGPLcB8QsRJSpZod/W3jdgys2KjIlOTOAjoQJsJ5tbK5wD0A WEgKMARkne4vjIKop1g1iOyArLCGm7OVLQiK0bob0yydWNossULdgK1wPp2BaHpd sDhWHorwzU/6+xlwFRk7n11qfZ7t7noJ6UI71Krj06McEu/zQSu9unGiMiVlGC2M hfHehUkTNKyAw5d8SsdHGv5T8+PzydCsvMfz16w5wdCkmIt14X4TbM5S/IIm8eWN 63LckB4TXZeDwE98VU8rbTPWuE/DpqFQrlaE3I7qPQ5MVgmIoWuG2UFSTAtTFb/1 UxscftuaA1e3lBz8bKjWXdOavQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaeT4az 8vIEiOawjXlcDeqng6AMMB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4 RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENEMi8wNDNDNkFGNEQ4RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5 dE5DRmszem1tczAzdnFlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgKpQwwTbKMX9ON8HskBa8vZqZswaT1OW7bHJtr1uNttB5TUKR5EWU BjQcm1GBn6biwcTtPN+Ewp8dkF1pDrO6Qxx0K2EnTeXu2qjRKJDhMFnEw5iTAhlf o/W6uyzu4AGwv2yzuLKTmoyPujqbnfo8gC3XuVXYoxfjDGzVq3SWBdB6iNsVZGox hO/w+k/lnY1aU7GraqsWDmPOO5ncxynEWOUpe7JcpzQ0eejADftJBWL2t07l6vyD ISdmRNvxMAd3j31yK0iiRLBwHHJaGO4dcauMrT53E4KEatZhjkTWkLPD7LxGEg4+ ALgTl60SElXnBN7yKycV52SrtmOG71cL -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:48 2025 by rpki-client