$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: ys9Lg8fxChtSfXZUN6QdPInGHPsleIbivTHyiyI4fr4= Subject key identifier: 8D:64:7C:2E:6F:55:72:79:49:2C:C5:C9:E1:17:46:C4:39:8D:D8:84 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 03FB Signing time: Mon 27 Oct 2025 01:41:28 +0000 Manifest this update: Mon 27 Oct 2025 01:41:27 +0000 Manifest next update: Mon 03 Nov 2025 01:41:27 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: lG1oIA57bp4euIMDvcb34NFy4H6eMTurDKrCBH6ZKBk=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: yEVRrXufQh+Qc/HqPk/jAvaqGmnT+PN1jZ/kXTfyo9A=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 01:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Oct 27 01:41:27 2025 GMT Not After : Nov 3 01:41:27 2025 GMT Subject: CN=68fecdc8-c637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:a2:ae:a6:93:e1:3b:70:50:89:b5:eb:e2: a7:32:a1:50:32:7f:3c:be:23:a4:e9:e8:90:a5:bd: 59:ba:ea:99:ec:65:6e:73:e1:88:85:25:0a:68:ce: d2:bc:15:11:eb:50:0e:10:3a:bb:27:3e:7a:f0:b8: 4f:91:53:5f:dd:5f:68:d8:ed:e0:b8:42:5e:54:01: 63:42:c2:3b:7e:69:20:54:fa:6a:37:df:c9:8f:2f: ca:be:3a:a8:2e:cd:10:ff:49:52:8c:94:f3:a3:24: a4:d5:46:9a:0d:0c:6a:cb:3c:38:b2:f7:fc:f7:a1: 83:ea:40:09:27:fc:c2:6b:61:55:26:cb:d9:70:4c: a4:00:7c:df:83:71:4f:27:b6:fd:6c:91:b8:9c:39: 80:13:74:f7:c5:67:4c:43:ce:d0:d3:ef:72:96:da: dc:3b:8c:db:21:76:7a:5a:08:3c:6b:d7:df:19:bc: ed:ef:0c:eb:40:b8:06:24:4e:bf:15:4d:f4:99:3b: 35:cf:47:f4:a1:ca:e7:ff:22:ea:ad:dc:3f:c8:71: 57:cd:c2:6a:b6:ec:64:92:99:f3:60:ec:6a:91:d9: 05:6c:1e:c3:db:fe:ef:79:d1:f0:c2:ab:6b:47:36: 03:b4:71:9c:07:c1:3b:e1:1f:d3:93:6b:c8:f3:70: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:64:7C:2E:6F:55:72:79:49:2C:C5:C9:E1:17:46:C4:39:8D:D8:84 X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d8:25:db:cc:ec:6d:a4:f8:88:3f:41:51:b6:5d:eb:df:5a: 39:d3:2d:82:ad:7a:cf:72:e6:e6:c0:5f:ac:a2:f9:28:bc:3f: 3a:2d:f4:24:c2:7c:0c:f1:fa:4f:28:44:a5:d3:8b:be:aa:38: ed:c7:23:bc:34:14:31:e6:e3:d6:c3:e6:f0:ac:e7:75:f7:35: 2d:da:7b:6f:fe:4e:4e:23:95:8a:9f:01:61:c7:89:a1:17:32: b3:5c:03:d6:78:6e:59:cd:8e:52:e1:66:e8:e1:11:9b:75:57: 6c:e8:11:64:ea:ab:b0:7e:b0:90:9d:cc:39:17:96:af:2e:c1: af:21:56:40:22:92:46:d9:44:b6:c7:93:17:70:41:a5:47:10: d7:54:f1:37:94:37:99:86:ca:23:f4:23:5a:97:40:0d:17:13: d3:6d:14:05:ae:30:e5:d1:a8:55:37:c1:a6:fe:16:a4:a3:aa: 21:89:45:18:df:f5:18:1e:19:bf:a8:fc:1d:53:f1:c5:6b:5d: 40:cd:db:f3:72:b1:c2:29:0b:a0:07:4e:10:96:20:8a:d4:b2: 7c:27:57:ef:e2:78:e1:6e:e6:92:4e:51:44:dc:bf:fd:0a:49: ab:47:5f:f8:fc:ef:1c:81:b7:d9:1c:08:ce:f2:5e:4f:f2:5a: b6:67:97:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUxMDI3MDE0MTI3WhcNMjUxMTAzMDE0MTI3WjAYMRYwFAYD VQQDEw02OGZlY2RjOC1jNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMeirqaT4TtwUIm16+KnMqFQMn88viOk6eiQpb1ZuuqZ7GVuc+GIhSUKaM7S vBUR61AOEDq7Jz568LhPkVNf3V9o2O3guEJeVAFjQsI7fmkgVPpqN9/Jjy/Kvjqo Ls0Q/0lSjJTzoySk1UaaDQxqyzw4svf896GD6kAJJ/zCa2FVJsvZcEykAHzfg3FP J7b9bJG4nDmAE3T3xWdMQ87Q0+9yltrcO4zbIXZ6Wgg8a9ffGbzt7wzrQLgGJE6/ FU30mTs1z0f0ocrn/yLqrdw/yHFXzcJqtuxkkpnzYOxqkdkFbB7D2/7vedHwwqtr RzYDtHGcB8E74R/Tk2vI83B/rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1kfC5v VXJ5SSzFyeEXRsQ5jdiEMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS2CXbzOxtpPiIP0FRtl3r31o50y2CrXrPcubmwF+sovkovD86LfQk wnwM8fpPKESl04u+qjjtxyO8NBQx5uPWw+bwrOd19zUt2ntv/k5OI5WKnwFhx4mh FzKzXAPWeG5ZzY5S4Wbo4RGbdVds6BFk6quwfrCQncw5F5avLsGvIVZAIpJG2US2 x5MXcEGlRxDXVPE3lDeZhsoj9CNal0ANFxPTbRQFrjDl0ahVN8Gm/hako6ohiUUY 3/UYHhm/qPwdU/HFa11AzdvzcrHCKQugB04QliCK1LJ8J1fv4njhbuaSTlFE3L/9 CkmrR1/4/O8cgbfZHAjO8l5P8lq2Z5fI -----END CERTIFICATE-----Generated at Tue Oct 28 05:38:43 2025 by rpki-client