$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json) Hash identifier: 8PsfLigpsoLLcHuUQlstC5gOvmHWupT/9uuuI9Ka1sc= Subject key identifier: 5F:B3:B8:C6:CF:A5:A1:24:60:84:76:8C:8D:64:56:84:EC:97:88:9C Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft Manifest number: 93 Signing time: Mon 03 Nov 2025 06:28:38 +0000 Manifest this update: Mon 03 Nov 2025 06:28:38 +0000 Manifest next update: Mon 10 Nov 2025 06:28:38 +0000 Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: WgQ9Zh0cMLRsJQkMRkoSo1xf0EzjeGLkJ7D0J9RAtjo=) 2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: 4d4Ou4cSb0acdXH9Bn2waQ4IMkbvtakYfcIPMGQdXao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Validity Not Before: Nov 3 06:28:38 2025 GMT Not After : Nov 10 06:28:38 2025 GMT Subject: CN=69084b96-43f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:a9:30:4d:16:d7:52:60:8e:4b:dc:53:ee: 91:b4:69:be:dd:f1:cd:e6:d9:3d:e5:d1:df:e1:a7: 0b:c3:63:81:32:ac:4c:36:db:43:bd:15:32:c7:35: 69:5d:b2:6c:5b:f7:79:03:92:0d:fc:04:88:8d:fe: 5b:d5:e2:19:bd:9a:4a:b0:8d:c9:4e:ad:74:df:26: fb:cf:27:13:7b:20:43:d1:fc:d7:cf:20:08:30:11: a6:be:09:9d:e7:36:33:46:c1:d3:05:be:97:8a:7a: dc:37:6d:8c:45:c9:d6:43:4c:cd:e9:10:77:2a:9f: f8:3c:0a:62:a0:0a:5c:92:60:5b:bb:8d:c0:83:ca: d5:0e:81:27:23:c3:d7:be:4e:76:14:14:0a:9f:ff: 8a:4a:bf:47:02:f8:83:ba:7b:c8:f8:23:9a:9c:28: e9:59:16:08:6e:13:bd:1a:39:98:29:38:3d:0e:d0: 28:68:81:a8:d8:16:cb:0b:1d:4c:f0:b9:4c:85:96: bd:f1:5c:96:a8:24:78:84:fe:5e:83:7b:ed:b2:66: 5e:4b:48:09:4c:af:1d:7e:b5:58:5d:d5:a3:9a:d8: e6:35:d8:51:ff:9c:07:82:34:e5:a1:10:46:9f:18: 56:a4:e9:5a:4a:a2:38:8f:e7:85:56:00:fc:c2:c3: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B3:B8:C6:CF:A5:A1:24:60:84:76:8C:8D:64:56:84:EC:97:88:9C X509v3 Authority Key Identifier: keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:67:e9:7a:67:73:00:00:ce:89:28:91:b9:e4:f3:2b:16:b0: ca:1e:a7:50:cb:e5:81:d4:05:1d:1d:7c:35:d3:6d:f0:5d:cb: 65:c5:15:37:eb:52:64:75:99:f1:21:dc:05:a5:69:2b:10:ee: 46:44:94:ca:a7:83:13:0b:77:8b:56:07:26:4f:19:83:85:be: e8:41:62:b3:e6:4a:b8:59:f7:6a:a2:dc:74:31:90:2d:70:ed: d4:f0:41:e4:63:20:91:6a:94:4c:4c:6d:a1:70:35:45:ea:3c: 41:8b:5d:72:b8:80:17:95:5b:37:34:6c:d9:c7:15:cc:eb:10: 4c:c7:78:df:79:2a:5a:da:96:92:86:6e:28:1f:f0:4f:e2:cc: 50:03:11:a8:fc:a4:ff:9f:be:51:a7:d8:5c:15:64:bd:2e:af: dc:e3:a7:f5:39:0e:70:40:8b:48:32:bd:5b:ec:79:c2:08:d1: 54:bc:a2:af:ae:05:6b:21:79:78:11:27:02:0e:33:b0:95:fb: 36:28:0b:aa:c9:79:c7:06:b1:80:9f:b9:3e:7e:d3:5b:63:1c: ac:a8:b0:75:fe:ba:0b:a6:03:d1:ee:8b:6a:b3:29:1e:0a:43: fa:17:16:d8:18:f2:e1:47:95:28:04:92:48:a9:6a:9b:57:9a: 97:3f:53:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNjMxMTAvBgNVBAUTKDZDQjM4MjBEQTVBNEE4NEIyRDk0MDlCREYwN0YyNTQ1 RkU2RDBCMTEwHhcNMjUxMTAzMDYyODM4WhcNMjUxMTEwMDYyODM4WjAYMRYwFAYD VQQDEw02OTA4NGI5Ni00M2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dupME0W11JgjkvcU+6RtGm+3fHN5tk95dHf4acLw2OBMqxMNttDvRUyxzVp XbJsW/d5A5IN/ASIjf5b1eIZvZpKsI3JTq103yb7zycTeyBD0fzXzyAIMBGmvgmd 5zYzRsHTBb6XinrcN22MRcnWQ0zN6RB3Kp/4PApioApckmBbu43Ag8rVDoEnI8PX vk52FBQKn/+KSr9HAviDunvI+COanCjpWRYIbhO9GjmYKTg9DtAoaIGo2BbLCx1M 8LlMhZa98VyWqCR4hP5eg3vtsmZeS0gJTK8dfrVYXdWjmtjmNdhR/5wHgjTloRBG nxhWpOlaSqI4j+eFVgD8wsMqBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+zuMbP paEkYIR2jI1kVoTsl4icMB8GA1UdIwQYMBaAFGyzgg2lpKhLLZQJvfB/JUX+bQsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82QzBGOTYxMEQ2 RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FFc3RsQW05OEg4bFJmNXRD eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2My82QzBGOTYxMEQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FF c3RsQW05OEg4bFJmNXRDeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoZ+l6Z3MAAM6JKJG55PMrFrDKHqdQy+WB1AUdHXw1023wXctlxRU3 61JkdZnxIdwFpWkrEO5GRJTKp4MTC3eLVgcmTxmDhb7oQWKz5kq4Wfdqotx0MZAt cO3U8EHkYyCRapRMTG2hcDVF6jxBi11yuIAXlVs3NGzZxxXM6xBMx3jfeSpa2paS hm4oH/BP4sxQAxGo/KT/n75Rp9hcFWS9Lq/c46f1OQ5wQItIMr1b7HnCCNFUvKKv rgVrIXl4EScCDjOwlfs2KAuqyXnHBrGAn7k+ftNbYxysqLB1/roLpgPR7otqsyke CkP6FxbYGPLhR5UoBJJIqWqbV5qXP1NM -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:08 2025 by rpki-client