$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: 40PW6NaZOneMLoGWEggJdMgwyK0SWCLpVKZSvW5SFhs= Subject key identifier: 6F:FD:1F:4F:65:E4:15:AD:A1:5E:4E:57:EC:C7:FA:F7:95:30:68:23 Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 0154 Signing time: Mon 03 Nov 2025 04:11:07 +0000 Manifest this update: Mon 03 Nov 2025 04:11:07 +0000 Manifest next update: Mon 10 Nov 2025 04:11:07 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: VE94BVMYNgHbj60DVDZlsHzqijUIfi73FQXU/O3a/Qo=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Nov 3 04:11:07 2025 GMT Not After : Nov 10 04:11:07 2025 GMT Subject: CN=69082b5b-66dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:8c:81:66:ed:c5:48:63:17:68:4d:f8:1c: 70:27:8e:57:6f:10:e5:83:23:c7:79:8c:50:41:d1: e5:76:6b:4d:90:f6:38:ab:bb:0a:f2:14:71:8d:7f: 3b:47:e9:2e:83:7f:66:39:19:ac:a6:7d:82:3b:34: ef:04:79:d5:95:4a:de:d3:5a:d2:e2:cc:55:a5:f6: 02:34:d3:7e:fc:d5:1c:bf:db:e2:ad:54:79:e5:8e: cc:d3:0f:ba:b5:47:60:c7:65:e2:d3:91:ce:a1:66: 37:4b:54:14:56:43:e0:2f:33:21:22:3a:06:17:04: 9f:b9:12:4c:f4:28:ce:c8:e4:6f:d0:91:aa:2c:75: 53:fb:22:00:0d:ca:8a:75:2c:0c:6d:76:9d:26:4b: 69:2d:6b:28:79:39:c7:f4:6e:09:10:78:ae:a6:da: 4a:0b:08:4f:84:f7:c2:4c:57:7b:27:ed:7d:44:2e: b2:6f:1a:ee:7c:56:28:86:16:69:ee:a1:c5:00:65: ed:a9:83:39:7b:4c:07:04:d9:38:fd:b5:1f:57:34: ab:ad:97:3c:4d:f0:b5:b9:31:90:5d:1c:76:1d:cd: f7:cf:9e:15:e1:bc:8e:d4:63:f2:e3:63:2c:84:00: 47:a2:b7:ba:bb:7b:39:43:1e:be:1c:48:1f:d2:13: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FD:1F:4F:65:E4:15:AD:A1:5E:4E:57:EC:C7:FA:F7:95:30:68:23 X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f8:d8:9d:b5:70:31:14:1f:7f:02:3f:d5:21:16:c5:78:39: 1e:41:ca:e6:7d:48:fb:63:f1:35:61:a8:5a:ed:5f:8a:f7:67: 7e:56:22:af:bb:a4:40:04:dc:0e:f2:2d:69:b2:73:25:81:be: 77:59:ad:17:6a:f9:99:c3:01:22:cc:66:24:6c:a6:ad:b1:4e: fb:12:99:c8:94:5f:1d:dd:a6:ed:a3:35:20:10:1a:95:03:2b: f8:31:7a:aa:c9:9e:d7:64:5c:81:6c:c1:a4:4e:e6:5b:2e:ca: f0:13:86:25:26:6b:7f:e5:71:df:03:2a:dd:73:15:dd:e6:64: f2:c5:e2:e5:0a:7b:04:07:96:ac:b7:ba:20:fd:fd:07:38:c7: 34:f8:5b:f0:c1:a4:fc:58:96:61:32:a9:97:ba:ba:2e:6c:39: 32:63:3e:bb:4f:f5:5b:7a:6f:be:28:3c:9c:4e:a1:0a:37:95: 2b:82:dd:b1:35:86:91:2d:85:b1:f3:8b:de:dc:06:7b:fc:3e: 55:f4:34:81:93:ea:71:97:07:e2:dc:c6:55:9a:7b:1f:40:51: dd:a2:0b:c2:5b:e8:91:91:b8:9a:4b:93:dd:3c:ea:57:26:f8: f9:5b:88:c1:7f:18:21:4f:e6:82:5c:48:c8:29:09:e3:41:df: f0:f0:9c:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUxMTAzMDQxMTA3WhcNMjUxMTEwMDQxMTA3WjAYMRYwFAYD VQQDEw02OTA4MmI1Yi02NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm2MgWbtxUhjF2hN+BxwJ45XbxDlgyPHeYxQQdHldmtNkPY4q7sK8hRxjX87 R+kug39mORmspn2COzTvBHnVlUre01rS4sxVpfYCNNN+/NUcv9virVR55Y7M0w+6 tUdgx2Xi05HOoWY3S1QUVkPgLzMhIjoGFwSfuRJM9CjOyORv0JGqLHVT+yIADcqK dSwMbXadJktpLWsoeTnH9G4JEHiuptpKCwhPhPfCTFd7J+19RC6ybxrufFYohhZp 7qHFAGXtqYM5e0wHBNk4/bUfVzSrrZc8TfC1uTGQXRx2Hc33z54V4byO1GPy42Ms hABHore6u3s5Qx6+HEgf0hODLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/9H09l 5BWtoV5OV+zH+veVMGgjMB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU+NidtXAxFB9/Aj/VIRbFeDkeQcrmfUj7Y/E1Yaha7V+K92d+ViKv u6RABNwO8i1psnMlgb53Wa0XavmZwwEizGYkbKatsU77EpnIlF8d3abtozUgEBqV Ayv4MXqqyZ7XZFyBbMGkTuZbLsrwE4YlJmt/5XHfAyrdcxXd5mTyxeLlCnsEB5as t7og/f0HOMc0+FvwwaT8WJZhMqmXuroubDkyYz67T/Vbem++KDycTqEKN5Urgt2x NYaRLYWx84ve3AZ7/D5V9DSBk+pxlwfi3MZVmnsfQFHdogvCW+iRkbiaS5PdPOpX Jvj5W4jBfxghT+aCXEjIKQnjQd/w8JwT -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:13 2025 by rpki-client