$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: ZFzRKx/gbhPdps5Xi+02LMCMavBi2BLpBCSeO51Fkmw= Subject key identifier: 65:F8:C9:F6:E0:98:BA:FA:F7:5F:57:A8:0E:0D:90:6B:89:F6:36:07 Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 016D Signing time: Wed 17 Sep 2025 04:23:51 +0000 Manifest this update: Wed 17 Sep 2025 04:23:51 +0000 Manifest next update: Wed 24 Sep 2025 04:23:51 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: H9Qe8IZj4xHTEtnC54RUGTMKoWWm+2tMFt/7ZQwo/eQ=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: Sep 17 04:23:51 2025 GMT Not After : Sep 24 04:23:51 2025 GMT Subject: CN=68ca37d7-1900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:77:68:13:f0:09:fc:33:76:0e:3e:dc:d7: bc:9f:bb:61:50:41:58:31:5a:4d:dc:de:83:a3:65: 22:af:38:f5:14:2d:0d:d8:26:9f:c6:cd:93:45:fe: 1c:26:da:64:6a:f1:2d:28:96:f9:74:1b:60:ca:9b: 4d:e2:df:16:1e:28:9e:d1:8a:e9:f3:0f:83:06:ed: 76:fe:b1:f3:70:10:43:89:eb:38:67:36:22:ff:4f: 84:d5:68:04:b0:de:0d:60:5a:cd:6f:8f:35:50:15: 46:b6:98:2c:87:a9:27:46:c1:8e:e3:b4:18:35:9b: 31:00:47:83:02:0d:9f:b1:ef:4f:34:6e:f3:fb:14: 22:fc:76:b1:2d:be:55:63:56:bf:3d:83:6a:df:b7: 96:a5:03:71:05:33:17:fe:11:8f:bb:c0:22:87:60: 96:a2:01:fa:71:94:95:14:9c:4b:88:ea:08:d3:c5: e2:8d:27:ce:f4:3e:83:57:ea:a5:47:bc:c0:ee:81: 5a:5b:a3:17:87:f1:74:1e:89:49:c3:6c:b1:7a:d1: 59:68:a4:93:31:de:41:b7:5c:0e:cd:f7:94:58:cd: e6:53:9c:b0:67:da:cb:35:96:ac:0e:ef:16:56:69: ec:b4:37:9c:f6:17:97:ae:c9:8a:30:36:4f:b0:a7: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F8:C9:F6:E0:98:BA:FA:F7:5F:57:A8:0E:0D:90:6B:89:F6:36:07 X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:92:62:56:6b:b2:35:19:c9:98:dc:ac:ea:29:f4:e5:96:a0: d8:e9:7d:a0:e9:3e:fd:75:72:77:e9:67:72:a4:91:ab:d8:d5: fa:24:02:12:b9:65:ce:84:83:9c:12:c7:eb:8f:36:dc:73:3c: 99:62:ce:9c:ab:75:db:54:6c:2c:c2:fa:51:84:e2:8f:cf:0e: 77:39:23:d3:07:d5:c3:cf:14:06:33:1a:94:85:65:42:de:14: fa:e8:95:f9:63:36:da:36:0b:5d:8e:df:85:20:09:00:a1:b3: b4:1a:0d:9b:37:d4:14:1e:cd:16:01:23:5c:bf:9b:9a:c4:31: da:62:cd:2e:5b:f2:6d:52:ae:81:4b:25:0a:2f:c9:dd:e1:c3: 1d:7a:6f:c7:59:66:b5:30:34:88:c8:a7:e2:15:70:5b:48:d4: e0:46:71:d5:0d:7f:9b:53:17:fe:9f:4d:2f:74:40:02:66:7c: ef:c2:b3:d6:82:63:de:66:ca:76:13:5a:2c:c4:42:d5:ac:66: 32:46:5a:f6:f2:ef:f6:ab:e0:d0:b2:c5:e3:6c:bd:d0:4c:8a: 92:4b:0c:26:88:03:c7:59:9a:bc:c0:1e:db:4a:83:89:7a:83: 6c:c8:af:87:ad:5a:be:7c:bc:15:41:20:d8:77:d0:27:40:2f: 07:1e:8d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG Mjg5REIzMzYwHhcNMjUwOTE3MDQyMzUxWhcNMjUwOTI0MDQyMzUxWjAYMRYwFAYD VQQDEw02OGNhMzdkNy0xOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpB3aBPwCfwzdg4+3Ne8n7thUEFYMVpN3N6Do2Uirzj1FC0N2Cafxs2TRf4c JtpkavEtKJb5dBtgyptN4t8WHiie0Yrp8w+DBu12/rHzcBBDies4ZzYi/0+E1WgE sN4NYFrNb481UBVGtpgsh6knRsGO47QYNZsxAEeDAg2fse9PNG7z+xQi/HaxLb5V Y1a/PYNq37eWpQNxBTMX/hGPu8Aih2CWogH6cZSVFJxLiOoI08XijSfO9D6DV+ql R7zA7oFaW6MXh/F0HolJw2yxetFZaKSTMd5Bt1wOzfeUWM3mU5ywZ9rLNZasDu8W VmnstDec9heXrsmKMDZPsKf0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGX4yfbg mLr6919XqA4NkGuJ9jYHMB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHkmJWa7I1GcmY3KzqKfTllqDY6X2g6T79dXJ36WdypJGr2NX6JAIS uWXOhIOcEsfrjzbcczyZYs6cq3XbVGwswvpRhOKPzw53OSPTB9XDzxQGMxqUhWVC 3hT66JX5YzbaNgtdjt+FIAkAobO0Gg2bN9QUHs0WASNcv5uaxDHaYs0uW/JtUq6B SyUKL8nd4cMdem/HWWa1MDSIyKfiFXBbSNTgRnHVDX+bUxf+n00vdEACZnzvwrPW gmPeZsp2E1osxELVrGYyRlr28u/2q+DQssXjbL3QTIqSSwwmiAPHWZq8wB7bSoOJ eoNsyK+HrVq+fLwVQSDYd9AnQC8HHo2O -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:52 2025 by rpki-client