$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: GSbDTaConQzMAH8qBNFV/4Ul30rABmXQNHqqU7klWV8= Subject key identifier: C5:F3:55:E1:92:86:E2:A1:99:2D:50:76:75:94:24:AD:01:A7:EE:4C Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 0799 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 0793 Signing time: Tue 04 Nov 2025 21:34:43 +0000 Manifest this update: Tue 04 Nov 2025 21:34:43 +0000 Manifest next update: Tue 11 Nov 2025 21:34:43 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: WkoQqU4QwGR4vyqifG1BoTP7ISzj8nnUB//kcBaNKTA=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: sxwsat/jz73BmJhm+NJpdHINgb9WZYUhdohcJK8DuQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: Nov 4 21:34:43 2025 GMT Not After : Nov 11 21:34:43 2025 GMT Subject: CN=690a7173-a88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:af:ec:b2:0f:d8:a6:86:0c:71:38:39:c7: 52:69:82:6b:f2:23:1b:11:44:59:24:17:00:b8:66: 18:ea:32:9f:d3:03:88:2f:35:38:05:2c:2e:b1:a7: a4:7d:cd:14:42:d3:9d:0e:69:1f:a8:d0:d6:2c:2b: c7:d8:e0:ed:85:58:32:96:34:26:45:2b:73:8a:0a: 37:dc:c0:07:3d:25:09:55:91:95:62:08:34:dd:fa: d9:73:f0:2a:4e:6b:83:3e:87:9a:e1:fa:a0:d9:a1: d1:00:84:5d:92:6f:b4:8b:f6:57:79:65:34:b9:ed: 90:fd:56:35:5b:aa:da:f3:2c:69:37:60:a2:a2:4e: e1:cd:3c:ab:b8:fc:53:8a:65:70:ff:9f:67:b8:cd: f1:ba:09:8c:81:e5:ce:6e:99:af:c7:56:8a:6a:fe: fe:11:e9:e5:b9:58:72:71:2b:6e:17:ad:1d:26:9d: 26:92:a7:26:61:1e:8c:f1:5c:cf:8a:bd:11:0e:c5: 98:cc:63:17:90:dc:91:b0:b1:b9:5b:f5:03:66:40: 8d:56:8d:4e:4c:dc:72:9f:89:38:b7:6e:ce:8d:f0: 6d:fe:e5:22:59:0d:64:29:1d:fd:65:b4:7e:52:7f: 4b:cc:2b:ee:a7:5c:39:28:fd:1a:5a:c6:04:69:34: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F3:55:E1:92:86:E2:A1:99:2D:50:76:75:94:24:AD:01:A7:EE:4C X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5f:a6:96:12:b8:67:74:82:bf:e8:3a:85:02:72:2d:2d:5d: 38:e7:e8:61:38:2e:71:0e:64:fe:6a:a0:87:04:0c:53:d1:cd: 5a:63:76:d7:24:da:95:5d:59:60:ed:3e:6b:89:80:65:d0:3e: d1:6d:f1:26:0a:bb:c9:f2:75:0f:7d:a2:d3:cb:be:31:93:94: 41:37:d4:42:73:52:f7:8c:bc:a8:86:da:9f:2e:eb:81:ef:0b: 38:8a:8b:db:d9:15:95:74:3c:72:a6:ee:76:10:62:a9:b4:02: 65:09:68:e7:3d:85:ac:a3:44:e4:b1:61:a4:c6:54:ed:ee:1a: 16:3d:45:58:56:23:b4:f7:79:8e:42:6c:d1:9c:05:e7:a5:63: b4:05:13:4c:f0:e8:4a:01:85:2f:b2:02:8b:66:01:c1:f3:ee: b5:b5:07:6c:95:0d:e3:51:c1:39:c1:65:e0:00:70:9a:75:39: e8:a1:50:b4:ef:32:45:70:f0:0f:76:1f:3a:60:92:a6:09:34: 4a:5f:6e:1c:56:0e:dd:de:3a:4a:2b:c7:7e:13:70:73:95:d9: d1:f7:67:5e:a2:7c:d5:26:9c:05:bb:59:17:e0:b8:3a:aa:ab: 82:48:03:f9:85:c6:6b:c3:9c:80:34:4a:bf:24:82:ba:e4:bd: 38:88:94:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjUxMTA0MjEzNDQzWhcNMjUxMTExMjEzNDQzWjAYMRYwFAYD VQQDEw02OTBhNzE3My1hODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42iv7LIP2KaGDHE4OcdSaYJr8iMbEURZJBcAuGYY6jKf0wOILzU4BSwusaek fc0UQtOdDmkfqNDWLCvH2ODthVgyljQmRStzigo33MAHPSUJVZGVYgg03frZc/Aq TmuDPoea4fqg2aHRAIRdkm+0i/ZXeWU0ue2Q/VY1W6ra8yxpN2Ciok7hzTyruPxT imVw/59nuM3xugmMgeXObpmvx1aKav7+EenluVhycStuF60dJp0mkqcmYR6M8VzP ir0RDsWYzGMXkNyRsLG5W/UDZkCNVo1OTNxyn4k4t27OjfBt/uUiWQ1kKR39ZbR+ Un9LzCvup1w5KP0aWsYEaTQgwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXzVeGS huKhmS1QdnWUJK0Bp+5MMB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfX6aWErhndIK/6DqFAnItLV045+hhOC5xDmT+aqCHBAxT0c1aY3bX JNqVXVlg7T5riYBl0D7RbfEmCrvJ8nUPfaLTy74xk5RBN9RCc1L3jLyohtqfLuuB 7ws4iovb2RWVdDxypu52EGKptAJlCWjnPYWso0TksWGkxlTt7hoWPUVYViO093mO QmzRnAXnpWO0BRNM8OhKAYUvsgKLZgHB8+61tQdslQ3jUcE5wWXgAHCadTnooVC0 7zJFcPAPdh86YJKmCTRKX24cVg7d3jpKK8d+E3BzldnR92deonzVJpwFu1kX4Lg6 qquCSAP5hcZrw5yANEq/JIK65L04iJQ8 -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:05 2025 by rpki-client