$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: xcN2/tW7iiUOSpUBWRtzp0imrcf8HZcnQgSiQ/gOMl4= Subject key identifier: A5:96:6D:D1:71:7A:EE:FC:8D:CC:F1:B8:90:BF:DD:80:67:80:BC:C3 Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 0A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 0A3B Signing time: Sun 02 Nov 2025 19:41:33 +0000 Manifest this update: Sun 02 Nov 2025 19:41:32 +0000 Manifest next update: Sun 09 Nov 2025 19:41:32 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: xgPzDuEqq6xggtiWswFUzFyo2E/zmHvKnTdCSqR1lgY=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: HX1z061ITJ/Mm5axSNQ3ySg9hGI3PSjhgq8jl6nzC3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2628 (0xa44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Nov 2 19:41:32 2025 GMT Not After : Nov 9 19:41:32 2025 GMT Subject: CN=6907b3ed-aa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:91:34:5a:87:1a:55:bc:18:46:9f:38:bf: a7:79:45:9a:db:09:60:45:19:5a:8e:84:8c:55:ea: a3:93:ba:ba:f8:89:e7:a2:6b:19:46:59:d3:7f:cb: f6:48:5b:7e:3f:6c:c4:fc:66:c1:ae:03:ed:90:15: 54:4d:bc:a8:b4:60:ff:5c:8a:20:0e:e9:24:ba:a1: 63:42:84:93:03:e4:c9:77:54:67:ce:9a:cb:33:d5: fc:91:49:cd:91:d7:42:03:74:8e:aa:e9:d5:60:7d: a4:b2:60:e0:c7:a4:f7:5b:20:ee:86:0c:5a:21:29: a2:cd:ba:2d:60:60:5a:ad:1d:11:38:fb:55:3d:62: 00:f3:6d:ae:82:9a:c0:79:ee:84:ac:64:15:3f:4d: 79:43:b7:9c:4e:00:b1:07:c4:cb:03:89:0b:07:c6: dd:ca:00:a9:08:d0:34:9b:06:9d:dd:74:92:18:3f: f1:3b:8d:8d:ec:dd:98:22:1c:58:78:57:68:4f:c1: af:02:5c:4a:7a:41:66:22:ef:91:e4:07:94:e1:8d: 42:85:b5:ee:ff:af:75:aa:0d:24:77:1e:8b:58:82: 00:e4:02:4e:ca:15:49:66:78:05:17:a9:09:4d:bb: 58:6c:cd:89:8b:d0:a6:90:85:bf:32:87:07:72:bf: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:96:6D:D1:71:7A:EE:FC:8D:CC:F1:B8:90:BF:DD:80:67:80:BC:C3 X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c0:97:de:4b:6b:e8:ef:ad:4d:77:bf:05:49:f5:a1:4b:71: 4d:6f:5f:db:ba:29:2a:a4:33:f7:d3:e2:df:e4:ec:f8:81:05: 17:c6:4f:3a:00:a9:81:c6:b0:06:29:88:7f:25:b7:9c:74:0f: 38:44:4b:03:e6:0d:6c:3d:16:f1:35:76:38:c6:e4:d6:19:7e: 01:2a:0f:51:59:f0:ca:44:cb:e5:ae:31:c5:61:79:d3:9d:0f: b2:27:3f:c4:db:18:f3:9f:c2:a3:1a:22:2f:e8:72:ea:3d:1d: f3:fe:23:34:24:99:e6:a4:83:7a:c4:de:79:a7:96:b5:fd:ec: f4:02:db:1e:26:4f:ce:4b:a0:df:10:87:ae:94:5c:ba:ae:d6: 20:a9:2d:50:ee:fe:b2:ed:3b:fc:45:5e:f0:83:75:70:44:35: 98:ee:41:6c:e1:39:0e:0d:5b:8c:92:63:dd:10:13:92:95:75: 82:6f:43:a5:c4:ab:19:ea:c6:be:67:3e:84:db:a7:c8:69:e9: 7a:88:a9:cc:1d:95:78:58:40:e3:da:32:24:5a:c6:cb:82:78: c4:35:3c:96:f9:80:f8:02:43:11:fd:a4:25:a0:7b:3c:24:7c: a6:f0:e9:c1:cd:07:cb:3a:28:64:b6:0b:d2:a5:90:55:e7:db: fa:90:2d:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjUxMTAyMTk0MTMyWhcNMjUxMTA5MTk0MTMyWjAYMRYwFAYD VQQDEw02OTA3YjNlZC1hYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZyRNFqHGlW8GEafOL+neUWa2wlgRRlajoSMVeqjk7q6+InnomsZRlnTf8v2 SFt+P2zE/GbBrgPtkBVUTbyotGD/XIogDukkuqFjQoSTA+TJd1RnzprLM9X8kUnN kddCA3SOqunVYH2ksmDgx6T3WyDuhgxaISmizbotYGBarR0ROPtVPWIA822ugprA ee6ErGQVP015Q7ecTgCxB8TLA4kLB8bdygCpCNA0mwad3XSSGD/xO42N7N2YIhxY eFdoT8GvAlxKekFmIu+R5AeU4Y1ChbXu/691qg0kdx6LWIIA5AJOyhVJZngFF6kJ TbtYbM2Ji9CmkIW/MocHcr/JKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWWbdFx eu78jczxuJC/3YBngLzDMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARwJfeS2vo761Nd78FSfWhS3FNb1/buikqpDP30+Lf5Oz4gQUXxk86 AKmBxrAGKYh/JbecdA84REsD5g1sPRbxNXY4xuTWGX4BKg9RWfDKRMvlrjHFYXnT nQ+yJz/E2xjzn8KjGiIv6HLqPR3z/iM0JJnmpIN6xN55p5a1/ez0AtseJk/OS6Df EIeulFy6rtYgqS1Q7v6y7Tv8RV7wg3VwRDWY7kFs4TkODVuMkmPdEBOSlXWCb0Ol xKsZ6sa+Zz6E26fIael6iKnMHZV4WEDj2jIkWsbLgnjENTyW+YD4AkMR/aQloHs8 JHym8OnBzQfLOihktgvSpZBV59v6kC2Z -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:14 2025 by rpki-client