$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json) Hash identifier: 6UibtThp3YHxjUDDHwiJAuYg6K4bhRG1HNR2NlcFLFg= Subject key identifier: C3:47:35:E5:89:B6:0F:E2:B1:4A:45:11:17:3F:D2:3F:31:FF:A0:97 Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft Manifest number: 052D Signing time: Thu 18 Sep 2025 23:52:37 +0000 Manifest this update: Thu 18 Sep 2025 23:52:36 +0000 Manifest next update: Thu 25 Sep 2025 23:52:36 +0000 Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: Mkv+oZ+HC+ErWnZdmIp5tAcsnUryO87uqohdHZvPVfM=) 2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: UibVZP54wNfnJM5fmfROJ4sssLQa2oOrL7RimgDBnPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: Sep 18 23:52:36 2025 GMT Not After : Sep 25 23:52:36 2025 GMT Subject: CN=68cc9b44-8adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:7b:08:a2:b4:23:45:e4:b5:82:ed:ee:3c: a2:92:d7:f4:4e:f7:74:b3:da:bb:a7:f1:00:80:d2: a3:a3:b8:de:20:9b:e7:6c:cc:e5:f5:18:4a:a3:b3: 1b:c8:e2:e6:6e:c1:72:10:07:93:ca:6e:71:b2:d0: 91:3f:5f:a8:c5:02:0b:03:8e:2c:84:51:c3:f0:9c: cf:5d:b8:a1:9e:3b:2f:36:4e:84:85:d3:05:81:ec: 88:85:3d:15:68:60:70:c2:0e:d1:d6:bc:b6:31:2c: 28:a5:bd:75:4c:b6:46:78:7c:d8:3d:f2:40:a1:7d: 85:65:82:bc:54:d6:33:33:d6:a2:76:cd:45:5c:95: ef:47:3d:99:63:87:1d:28:fd:45:64:3f:a7:2f:c4: df:de:4b:f0:b3:63:95:c5:b4:fd:60:8f:5e:7a:09: cd:f7:97:c6:8c:b4:8e:bd:52:82:62:36:c4:8d:33: 12:a2:e8:29:35:94:ca:16:f6:86:a2:87:82:b0:1e: 76:a1:66:0f:75:0e:ee:c5:8c:29:dc:b5:9b:78:b3: dc:13:5a:d1:a8:1a:62:e8:02:71:8d:aa:61:a1:21: b7:ef:95:a4:32:70:87:34:f9:a5:6b:c9:93:33:25: db:15:87:40:de:cf:3a:26:bb:9c:dd:30:be:0f:c4: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:47:35:E5:89:B6:0F:E2:B1:4A:45:11:17:3F:D2:3F:31:FF:A0:97 X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3b:c7:3a:dd:09:6d:a0:83:7b:91:bf:68:72:22:87:53:f0: c9:36:7d:d8:72:a3:2c:f6:30:af:4b:dd:fb:c8:f3:98:ce:5a: 8e:10:1c:31:75:eb:74:1d:3a:65:c0:10:93:8c:57:42:a5:6c: 17:9a:12:20:0c:ce:a9:74:1c:79:78:cc:47:3d:84:2c:14:47: 14:09:f8:7b:b0:48:c8:92:77:a4:d7:bf:23:ec:b2:61:34:35: be:30:c1:0a:9a:12:eb:04:a6:a4:04:b8:10:e3:8b:80:9e:8e: a8:93:ee:3c:92:06:c7:83:ef:3c:a4:fc:91:bd:b0:00:64:c8: 28:f4:dc:a6:c9:63:b1:a0:13:66:2e:68:34:b1:e4:01:dc:3b: c4:e7:0b:86:1f:cb:61:95:fd:4c:be:78:76:9a:06:44:ed:6c: 17:26:4a:75:c7:90:5a:48:1e:91:cc:28:00:e0:0d:74:0a:2f: bc:76:e6:8b:d4:b2:c8:b4:2b:6c:92:af:83:d3:ec:1f:88:cc: b1:b2:42:10:b0:3f:b7:4f:12:b4:b8:97:80:b1:89:5a:1a:60: 6b:1d:3e:5f:79:c7:2c:8f:05:73:f3:8a:8a:cc:2e:fc:db:a7: 0c:4f:8c:34:13:44:c6:7d:aa:57:c0:ee:b6:4f:e1:51:32:8a: 09:c2:71:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjUwOTE4MjM1MjM2WhcNMjUwOTI1MjM1MjM2WjAYMRYwFAYD VQQDEw02OGNjOWI0NC04YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzd7CKK0I0XktYLt7jyiktf0Tvd0s9q7p/EAgNKjo7jeIJvnbMzl9RhKo7Mb yOLmbsFyEAeTym5xstCRP1+oxQILA44shFHD8JzPXbihnjsvNk6EhdMFgeyIhT0V aGBwwg7R1ry2MSwopb11TLZGeHzYPfJAoX2FZYK8VNYzM9aids1FXJXvRz2ZY4cd KP1FZD+nL8Tf3kvws2OVxbT9YI9eegnN95fGjLSOvVKCYjbEjTMSougpNZTKFvaG ooeCsB52oWYPdQ7uxYwp3LWbeLPcE1rRqBpi6AJxjaphoSG375WkMnCHNPmla8mT MyXbFYdA3s86Jruc3TC+D8SRHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNHNeWJ tg/isUpFERc/0j8x/6CXMB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdBQi85MTZCMDY2NjE0NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5 bnl1RzRWbmQzMTBzbWExQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApO8c63QltoIN7kb9ociKHU/DJNn3YcqMs9jCvS937yPOYzlqOEBwx det0HTplwBCTjFdCpWwXmhIgDM6pdBx5eMxHPYQsFEcUCfh7sEjIknek178j7LJh NDW+MMEKmhLrBKakBLgQ44uAno6ok+48kgbHg+88pPyRvbAAZMgo9NymyWOxoBNm Lmg0seQB3DvE5wuGH8thlf1Mvnh2mgZE7WwXJkp1x5BaSB6RzCgA4A10Ci+8duaL 1LLItCtskq+D0+wfiMyxskIQsD+3TxK0uJeAsYlaGmBrHT5feccsjwVz84qKzC78 26cMT4w0E0TGfapXwO62T+FRMooJwnFQ -----END CERTIFICATE-----Generated at Fri Sep 19 18:14:23 2025 by rpki-client