$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: 4lT0Hbe+/UP0BGeVZdF7MQziqtOpkTxizAFnDEzFM1g= Subject key identifier: 48:B7:F2:B9:01:7A:91:F7:4E:DA:35:DE:00:80:08:05:5A:0D:00:05 Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0CC7 Signing time: Fri 31 Oct 2025 18:32:36 +0000 Manifest this update: Fri 31 Oct 2025 18:32:36 +0000 Manifest next update: Fri 07 Nov 2025 18:32:36 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: 9+FJKZWnCB1p7IUKI7qviKgbs9WgudX9xXz2Rr6Y0U0=) 2: 12561046368911EEA0CB766BC4F9AE02.roa (hash: ZsNiLxfxjjXIOR9efOK6g19RpsthQOBE4XYCmM1hnq8=) 3: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: UuY5qtUwk8Dlu801YZxvnO/xKQaWGop0bKAvOOHuar0=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: e/Kuo5QdtsaM/mztDHYG4XkizjKIPPrgUEb1ap1W45w=) 5: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: tEtTFQOPTziC3M/Up8UOSv6VFGJx+4dP/cUQCVWj4l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Oct 31 18:32:36 2025 GMT Not After : Nov 7 18:32:36 2025 GMT Subject: CN=690500c4-5cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:48:8a:d7:8a:de:96:58:26:5d:ea:4d:34: 62:65:7e:08:cf:71:a3:12:ce:b0:50:d9:58:95:fb: f4:16:ac:85:50:cb:09:a6:0b:0f:aa:01:9f:87:15: 88:69:8a:49:85:cd:54:50:13:a7:ba:72:c7:b7:3c: cd:33:d2:b7:09:f9:e0:60:91:f5:89:4b:9d:a8:5e: ae:0d:c8:8a:5e:82:7a:b9:58:79:a5:79:cc:3f:2a: ab:63:6a:3e:48:56:c0:7b:be:da:7c:78:83:cc:17: ab:85:5e:b9:92:a5:6d:1b:8a:46:39:e8:56:6d:81: e0:70:74:e4:32:db:fb:00:95:8a:7f:c5:c6:fb:2e: 79:cb:8b:ae:a5:d9:41:37:b1:30:ec:e2:6e:28:24: 4b:02:af:8a:65:65:76:a2:64:fb:b7:36:73:be:0f: ea:f3:1d:fc:68:15:dd:22:e5:e9:f7:23:20:5b:25: 17:85:e3:fd:5d:9b:94:95:01:87:c8:ac:e3:5e:84: 8a:80:b2:d5:63:dd:07:7d:93:ce:d3:54:81:4c:67: af:a1:9d:8c:68:40:5b:5b:53:d6:5d:06:7a:c3:2c: e6:a3:44:dc:08:97:38:43:af:92:ff:fd:32:45:02: 00:31:76:ba:0b:5a:04:71:44:43:81:b1:9b:e7:b7: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B7:F2:B9:01:7A:91:F7:4E:DA:35:DE:00:80:08:05:5A:0D:00:05 X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:5d:13:0b:46:22:46:17:43:9f:d1:71:4c:79:19:f3:47:9d: 93:4b:68:39:a4:00:55:88:8f:9c:1c:c0:5d:8e:5b:ee:33:de: 43:ee:63:08:d9:88:73:6a:c2:2d:fe:71:aa:76:0c:ad:bd:e5: 1e:c6:94:12:62:f4:ff:9b:2d:02:e3:10:14:7b:f0:5b:ea:d8: cc:10:3e:61:0b:4f:ca:cf:35:0a:35:7d:43:ea:7b:f7:bc:4c: b8:d0:10:c3:b0:7b:a9:cf:09:e6:47:8f:ab:6b:c7:57:ff:fb: 17:7e:99:a7:89:43:b7:4f:65:55:a5:90:db:cb:d0:88:89:d0: 3b:f0:45:43:f0:12:8c:76:39:ff:7b:c5:e5:47:e6:46:e4:49: 1b:4f:58:32:48:75:0a:33:f3:f0:60:d3:36:54:08:ab:b8:d9: 1f:42:aa:ca:56:61:5c:08:fb:9d:78:b6:79:d2:f0:f9:6f:ea: e7:12:b3:53:82:d7:c9:b1:4d:60:69:70:3d:16:74:3e:b3:07: cb:32:d4:39:47:e0:c3:7a:71:f3:2d:82:8f:9e:8b:ee:ab:70: 8f:13:db:23:82:09:ac:af:58:35:21:a6:9e:65:fb:65:02:57: 3d:62:4a:3c:db:71:e1:f8:5c:f1:52:66:b4:3d:80:73:15:b8: c0:35:30:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjUxMDMxMTgzMjM2WhcNMjUxMTA3MTgzMjM2WjAYMRYwFAYD VQQDEw02OTA1MDBjNC01Y2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmutIiteK3pZYJl3qTTRiZX4Iz3GjEs6wUNlYlfv0FqyFUMsJpgsPqgGfhxWI aYpJhc1UUBOnunLHtzzNM9K3CfngYJH1iUudqF6uDciKXoJ6uVh5pXnMPyqrY2o+ SFbAe77afHiDzBerhV65kqVtG4pGOehWbYHgcHTkMtv7AJWKf8XG+y55y4uupdlB N7Ew7OJuKCRLAq+KZWV2omT7tzZzvg/q8x38aBXdIuXp9yMgWyUXheP9XZuUlQGH yKzjXoSKgLLVY90HfZPO01SBTGevoZ2MaEBbW1PWXQZ6wyzmo0TcCJc4Q6+S//0y RQIAMXa6C1oEcURDgbGb57f5IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi38rkB epH3Tto13gCACAVaDQAFMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9XRMLRiJGF0Of0XFMeRnzR52TS2g5pABViI+cHMBdjlvuM95D7mMI 2YhzasIt/nGqdgytveUexpQSYvT/my0C4xAUe/Bb6tjMED5hC0/KzzUKNX1D6nv3 vEy40BDDsHupzwnmR4+ra8dX//sXfpmniUO3T2VVpZDby9CIidA78EVD8BKMdjn/ e8XlR+ZG5EkbT1gySHUKM/PwYNM2VAiruNkfQqrKVmFcCPudeLZ50vD5b+rnErNT gtfJsU1gaXA9FnQ+swfLMtQ5R+DDenHzLYKPnovuq3CPE9sjggmsr1g1IaaeZftl Alc9Yko823Hh+FzxUma0PYBzFbjANTBE -----END CERTIFICATE-----Generated at Sat Nov 1 14:59:18 2025 by rpki-client