$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: SreYY9UN+BNXP2gtTPZl3ZaEeoXtfTHjAF7K6QdAMx0= Subject key identifier: E1:39:34:1E:F2:D0:A9:CC:56:03:66:DF:55:68:16:AB:01:4A:5D:5A Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0B5D Signing time: Sun 02 Nov 2025 19:06:00 +0000 Manifest this update: Sun 02 Nov 2025 19:05:59 +0000 Manifest next update: Sun 09 Nov 2025 19:05:59 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: oAm7nl3kXQ23KdX5PraNB87wyWowYEkXrSr+seaXz+U=) 2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: Y3JTz6x7Gh76YU/+03lkuBO3MY94CeW1sP7iPG9gZfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2916 (0xb64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Nov 2 19:05:59 2025 GMT Not After : Nov 9 19:05:59 2025 GMT Subject: CN=6907ab98-7331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:a3:85:7f:48:a9:5e:a2:8a:e8:7a:bb:fa: 00:23:a3:22:53:d7:1e:59:a5:8d:cd:6e:9c:b0:19: 36:a4:e5:a9:14:0c:d2:31:c7:e3:9d:81:00:f7:e7: e1:31:4d:9a:38:0b:a2:92:88:91:d1:de:64:bc:b0: f4:ca:8a:47:fb:53:30:17:4a:f9:61:00:96:54:e5: 14:22:4e:4a:6b:c6:e7:3c:c1:61:6d:20:70:90:52: c8:0b:b9:f3:47:7e:7d:0d:f4:f5:a1:66:5d:8f:b6: 39:95:81:32:70:91:8e:f9:c6:d1:4e:25:5c:9a:61: 57:fe:d2:9c:f6:63:3d:da:16:2f:fd:fc:6f:31:8f: f9:03:e6:00:26:92:a1:cb:70:ec:b6:df:5e:c5:ea: 38:51:8f:a1:fc:4e:b0:bd:61:28:0a:c0:c2:5e:f0: 1c:6f:40:0c:8f:b7:cb:10:da:91:05:c5:d1:e4:76: ac:d6:c4:52:72:ad:66:e9:56:72:b0:31:5b:22:5a: 73:27:39:e5:4b:4d:a7:a9:48:ac:81:1d:69:f5:3f: eb:6e:bf:21:c4:6c:e7:22:78:61:56:0f:86:e7:1f: 11:ef:8d:c7:94:6f:5f:3e:25:a4:0d:be:1f:81:19: 4c:d1:d5:51:cc:2e:17:c4:25:6d:17:6e:9c:6c:0a: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:39:34:1E:F2:D0:A9:CC:56:03:66:DF:55:68:16:AB:01:4A:5D:5A X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d9:7f:d9:29:df:1e:7c:9e:3e:4e:d4:97:ca:9c:35:27:ce: 57:05:f5:24:19:20:97:0b:a8:84:1b:b7:81:64:ab:f9:de:66: 39:75:a2:0a:eb:4c:0a:2e:a6:70:05:cd:09:6d:f3:ef:46:5a: 0c:53:e8:ef:0d:5b:8e:d5:55:b5:ea:b8:bc:97:77:ee:10:ac: d7:6a:79:b4:c0:3c:ef:25:f9:78:84:ca:9c:28:24:ba:c1:c1: e4:04:8b:3b:e7:94:37:59:66:30:6b:e5:2c:c3:37:3d:cb:15: 7f:3b:60:ad:7e:be:0e:48:11:b3:fb:5f:9b:dc:35:38:26:62: ff:2a:45:45:78:12:61:d4:c3:11:4d:f8:91:99:55:9b:ec:ad: 1d:c7:ca:ea:fd:cb:2b:7a:53:41:12:06:e7:a9:be:6d:19:16: 53:1b:d9:c5:cd:74:75:35:53:77:c1:e3:a5:b5:6d:70:8c:fd: b1:f0:a1:84:f2:44:ce:a3:2a:fa:b1:36:37:29:08:19:85:e4: 18:cc:8f:74:df:fe:69:09:59:91:69:96:c7:78:33:e9:37:12: 12:f4:42:52:16:6d:97:74:e0:6c:aa:14:81:1a:58:a2:8f:02: 84:6c:49:13:d2:5f:8f:d1:b3:2e:0a:50:b3:7b:48:1a:ba:07: e7:93:5c:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjUxMTAyMTkwNTU5WhcNMjUxMTA5MTkwNTU5WjAYMRYwFAYD VQQDEw02OTA3YWI5OC03MzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyijhX9IqV6iiuh6u/oAI6MiU9ceWaWNzW6csBk2pOWpFAzSMcfjnYEA9+fh MU2aOAuikoiR0d5kvLD0yopH+1MwF0r5YQCWVOUUIk5Ka8bnPMFhbSBwkFLIC7nz R359DfT1oWZdj7Y5lYEycJGO+cbRTiVcmmFX/tKc9mM92hYv/fxvMY/5A+YAJpKh y3Dstt9exeo4UY+h/E6wvWEoCsDCXvAcb0AMj7fLENqRBcXR5Has1sRScq1m6VZy sDFbIlpzJznlS02nqUisgR1p9T/rbr8hxGznInhhVg+G5x8R743HlG9fPiWkDb4f gRlM0dVRzC4XxCVtF26cbApo4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOE5NB7y 0KnMVgNm31VoFqsBSl1aMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf2X/ZKd8efJ4+TtSXypw1J85XBfUkGSCXC6iEG7eBZKv53mY5daIK 60wKLqZwBc0JbfPvRloMU+jvDVuO1VW16ri8l3fuEKzXanm0wDzvJfl4hMqcKCS6 wcHkBIs755Q3WWYwa+Uswzc9yxV/O2Ctfr4OSBGz+1+b3DU4JmL/KkVFeBJh1MMR TfiRmVWb7K0dx8rq/csrelNBEgbnqb5tGRZTG9nFzXR1NVN3weOltW1wjP2x8KGE 8kTOoyr6sTY3KQgZheQYzI903/5pCVmRaZbHeDPpNxIS9EJSFm2XdOBsqhSBGlii jwKEbEkT0l+P0bMuClCze0gaugfnk1x4 -----END CERTIFICATE-----Generated at Mon Nov 3 10:33:44 2025 by rpki-client