$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: 7ykPmwTvvyX7WB6r37iKYDvOZ+TOfhZ0taCBWSZYm/Y= Subject key identifier: B6:0D:25:6C:83:8E:50:21:57:B2:6D:89:61:F4:73:0A:F4:E0:14:49 Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 09C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 09B9 Signing time: Tue 04 Nov 2025 20:05:50 +0000 Manifest this update: Tue 04 Nov 2025 20:05:49 +0000 Manifest next update: Tue 11 Nov 2025 20:05:49 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: 8gikQrDV+HJab1AVawxevEWahyylDh0czb4mfXSXLD8=) 2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: fiBakfl0c7PhMdoRRAbYSKMEPuxbVJY/KVuQO5mDKMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2500 (0x9c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: Nov 4 20:05:49 2025 GMT Not After : Nov 11 20:05:49 2025 GMT Subject: CN=690a5c9d-74fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:75:c7:a7:4a:0b:55:d2:51:96:5a:49:7f: 55:05:ef:59:4a:15:81:2a:26:78:22:d0:cf:f1:43: f9:0f:fa:c0:98:96:61:b5:1a:23:75:13:4b:bd:a8: c9:25:77:08:ee:97:1d:2b:64:f0:62:59:d6:4b:a4: 57:cb:74:a4:99:af:be:2e:5d:7d:20:35:72:dd:32: d6:2a:38:01:05:cf:26:dd:74:c7:b1:06:f8:e3:2e: d8:3b:e0:fe:ac:2e:bf:7b:07:33:0a:29:85:5d:57: f3:3c:c3:24:df:3f:86:82:7f:47:83:0d:ad:16:36: 6e:41:c2:37:58:06:71:0a:6f:74:c9:53:ed:8a:3e: 26:37:b8:98:70:83:18:50:87:5b:1e:38:bc:50:de: 64:a9:b9:ae:03:81:73:39:cd:be:6b:02:a6:f7:94: 55:1f:0a:22:c0:0c:be:d2:94:27:bb:8a:53:f5:98: 1e:bc:d1:8a:e8:a1:32:64:cd:fa:0f:5f:48:76:25: 5d:1d:cd:9b:74:72:45:23:cc:2f:e8:c5:65:09:d4: 08:3b:ae:05:84:0e:fe:25:5c:6d:90:da:3a:a7:7d: 9f:8b:a4:ee:79:a5:fa:ba:18:08:85:31:69:cc:33: 82:cd:a7:06:dd:0c:6d:a2:1d:e9:50:07:fa:7d:48: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0D:25:6C:83:8E:50:21:57:B2:6D:89:61:F4:73:0A:F4:E0:14:49 X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:2d:53:b5:b8:3e:2d:0f:43:cb:4f:e0:4e:8c:64:30:15:5a: 54:e5:8c:f4:6a:4b:e3:34:40:43:3e:bb:23:b2:8f:32:6b:6d: 10:4c:a9:39:a8:aa:7a:b4:c4:7c:cd:a1:01:c0:41:cb:f3:ba: aa:be:c4:80:f2:e4:51:3e:25:04:b1:65:75:7a:67:0e:28:40: 08:5f:9b:f2:7c:3f:14:f0:ad:57:0e:0e:5d:5b:1b:1b:05:69: 4f:b0:0a:f4:d5:34:a6:02:04:c8:75:fe:85:79:9d:ad:b7:bc: 5f:d2:44:10:46:78:0a:db:00:28:93:da:bc:c0:8c:f5:25:2e: 66:84:a4:ba:c8:46:07:6d:c5:3f:d1:69:cd:bd:14:cd:e9:92: 6d:99:60:f1:8a:06:e8:fb:61:eb:95:9f:88:32:57:49:29:c7: e7:2b:82:61:c4:94:ca:03:73:91:d7:81:85:8e:00:88:00:f7: be:c9:10:ab:d5:2d:3c:c5:da:4d:a1:7e:e9:f5:11:34:03:91: e3:ed:e7:27:7e:d2:4d:89:83:76:b9:4b:39:3d:cf:eb:db:96: b0:ed:f6:a7:15:56:3f:40:74:54:e4:4b:89:f5:d9:cf:8f:f4: 42:5d:39:b3:ee:d0:fc:1c:b7:04:a1:ad:8d:05:6d:84:d8:b5: 15:f1:7d:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjUxMTA0MjAwNTQ5WhcNMjUxMTExMjAwNTQ5WjAYMRYwFAYD VQQDEw02OTBhNWM5ZC03NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaB1x6dKC1XSUZZaSX9VBe9ZShWBKiZ4ItDP8UP5D/rAmJZhtRojdRNLvajJ JXcI7pcdK2TwYlnWS6RXy3Skma++Ll19IDVy3TLWKjgBBc8m3XTHsQb44y7YO+D+ rC6/ewczCimFXVfzPMMk3z+Ggn9Hgw2tFjZuQcI3WAZxCm90yVPtij4mN7iYcIMY UIdbHji8UN5kqbmuA4FzOc2+awKm95RVHwoiwAy+0pQnu4pT9ZgevNGK6KEyZM36 D19IdiVdHc2bdHJFI8wv6MVlCdQIO64FhA7+JVxtkNo6p32fi6TueaX6uhgIhTFp zDOCzacG3Qxtoh3pUAf6fUhuCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYNJWyD jlAhV7JtiWH0cwr04BRJMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwLVO1uD4tD0PLT+BOjGQwFVpU5Yz0akvjNEBDPrsjso8ya20QTKk5 qKp6tMR8zaEBwEHL87qqvsSA8uRRPiUEsWV1emcOKEAIX5vyfD8U8K1XDg5dWxsb BWlPsAr01TSmAgTIdf6FeZ2tt7xf0kQQRngK2wAok9q8wIz1JS5mhKS6yEYHbcU/ 0WnNvRTN6ZJtmWDxigbo+2HrlZ+IMldJKcfnK4JhxJTKA3OR14GFjgCIAPe+yRCr 1S08xdpNoX7p9RE0A5Hj7ecnftJNiYN2uUs5Pc/r25aw7fanFVY/QHRU5EuJ9dnP j/RCXTmz7tD8HLcEoa2NBW2E2LUV8X0a -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:10 2025 by rpki-client