$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: mRVHX4HYBj//VB6+YrXvHy7FTWzsjaHTJsBbp22GRsk= Subject key identifier: CE:AD:DA:B2:26:5C:25:4F:FA:A4:65:D4:1E:1F:71:97:FA:29:9D:03 Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 0854 Signing time: Sun 02 Nov 2025 20:41:37 +0000 Manifest this update: Sun 02 Nov 2025 20:41:36 +0000 Manifest next update: Sun 09 Nov 2025 20:41:36 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: +ZybGOSONQma+3AYO4IsY6yCej7jHWhaU6H/mzZKxG8=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: CW8cYbzHOyc7H5WlbPNiikLuHtC0kPX2gHGH/bCo7qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Nov 2 20:41:36 2025 GMT Not After : Nov 9 20:41:36 2025 GMT Subject: CN=6907c200-3400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:76:5a:1e:1f:d5:60:05:bb:7c:1e:80:47: 36:6d:48:e3:df:d3:f1:58:20:00:b1:73:05:e9:ac: 92:20:28:cd:e7:92:69:9f:bf:d4:49:b3:bf:71:38: 79:7a:9f:71:37:44:50:48:2e:9d:4e:bc:36:0d:26: cb:aa:d2:63:ce:30:b6:7a:b3:4c:99:aa:40:88:d5: a4:42:07:05:f2:dd:bb:bd:53:af:32:fb:28:b2:cf: 6a:e0:54:da:0a:12:7f:da:62:42:84:cf:c1:d1:64: 7b:50:71:61:0d:c6:c6:64:f7:85:dc:11:42:b1:a9: d3:1d:38:0f:b7:91:db:b9:5a:88:89:bb:99:ea:37: 68:74:64:62:7a:55:aa:14:63:83:5a:99:d0:88:cb: 9d:3c:3e:bb:c0:6f:b5:ec:fe:2e:82:78:66:62:e6: 5f:0b:7d:4c:14:00:3e:c3:1b:66:31:ff:08:71:d5: 72:db:8e:64:c7:d0:6f:f4:71:1e:c4:18:7e:04:84: b6:88:00:c6:c3:e7:f4:c0:65:56:59:d8:eb:ad:c1: 8a:25:c2:b6:0d:5f:a7:4f:07:d0:54:bc:f8:6f:6f: 83:08:26:2e:0f:77:96:46:05:17:51:26:e1:d2:ae: 29:3f:1b:19:fe:d8:a8:a7:39:9f:7b:27:da:07:81: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AD:DA:B2:26:5C:25:4F:FA:A4:65:D4:1E:1F:71:97:FA:29:9D:03 X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:84:4b:e1:af:a3:13:d3:f9:cd:af:23:7f:b2:fe:71:1e:53: 5a:2d:e3:dc:e2:7f:91:9a:d7:8e:32:9e:b5:f1:da:f6:f3:df: 2d:79:e4:ff:c7:66:55:95:98:32:dd:4a:7e:61:ea:31:32:09: 1c:1d:5c:a9:0a:d5:b5:dc:1e:c6:51:f4:9c:9b:85:a4:ad:d9: 2b:0e:e0:29:ac:b2:b9:7d:78:05:ee:08:1c:40:f6:2a:2c:8f: 76:92:c1:41:f5:02:0d:94:70:4d:43:0c:57:ee:91:db:a5:18: 6f:ea:a5:90:d6:2a:e5:3f:6b:2a:e6:4f:ff:7a:1d:45:66:8e: de:a8:3f:52:d6:01:62:be:4c:f7:d0:73:1a:85:8b:cd:04:b5: 8a:21:c7:27:b6:9b:f0:27:14:28:7b:96:17:0f:04:61:da:70: 61:44:2a:81:29:3d:34:f8:82:5c:f1:e5:74:68:fd:a7:be:13: f3:45:69:d6:8b:fa:79:e3:9f:59:a0:3e:d7:69:36:50:b4:e3: 90:dc:55:2c:a6:19:b8:fd:f4:c3:9f:b3:e5:35:43:7d:af:5a: 37:e8:f6:1e:8f:a9:e7:ce:1c:67:0c:1a:1d:af:b8:ba:15:91: fd:2b:72:3d:d7:22:fd:1d:3a:6f:0f:97:0d:da:4e:0b:0c:ff: 72:2c:30:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjUxMTAyMjA0MTM2WhcNMjUxMTA5MjA0MTM2WjAYMRYwFAYD VQQDEw02OTA3YzIwMC0zNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8V2Wh4f1WAFu3wegEc2bUjj39PxWCAAsXMF6aySICjN55Jpn7/USbO/cTh5 ep9xN0RQSC6dTrw2DSbLqtJjzjC2erNMmapAiNWkQgcF8t27vVOvMvsoss9q4FTa ChJ/2mJChM/B0WR7UHFhDcbGZPeF3BFCsanTHTgPt5HbuVqIibuZ6jdodGRielWq FGODWpnQiMudPD67wG+17P4ugnhmYuZfC31MFAA+wxtmMf8IcdVy245kx9Bv9HEe xBh+BIS2iADGw+f0wGVWWdjrrcGKJcK2DV+nTwfQVLz4b2+DCCYuD3eWRgUXUSbh 0q4pPxsZ/tiopzmfeyfaB4EzswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6t2rIm XCVP+qRl1B4fcZf6KZ0DMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAohEvhr6MT0/nNryN/sv5xHlNaLePc4n+RmteOMp618dr2898teeT/ x2ZVlZgy3Up+YeoxMgkcHVypCtW13B7GUfScm4WkrdkrDuAprLK5fXgF7ggcQPYq LI92ksFB9QINlHBNQwxX7pHbpRhv6qWQ1irlP2sq5k//eh1FZo7eqD9S1gFivkz3 0HMahYvNBLWKIccntpvwJxQoe5YXDwRh2nBhRCqBKT00+IJc8eV0aP2nvhPzRWnW i/p5459ZoD7XaTZQtOOQ3FUsphm4/fTDn7PlNUN9r1o36PYej6nnzhxnDBodr7i6 FZH9K3I91yL9HTpvD5cN2k4LDP9yLDAC -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:36 2025 by rpki-client