$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json) Hash identifier: Y8Kh8wOHFobNvzAtuqgUff1ozg/ifTcot2tiEn3kL4c= Subject key identifier: 6E:D0:3E:05:46:12:A0:AC:00:C8:61:F3:C4:72:11:13:57:AE:C7:E1 Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft Manifest number: 03EC Signing time: Mon 03 Nov 2025 00:28:16 +0000 Manifest this update: Mon 03 Nov 2025 00:28:15 +0000 Manifest next update: Mon 10 Nov 2025 00:28:15 +0000 Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: 5r+NlDny8+lxnCu6EKDVWcMheEjcrKqEOfwfdBNf0n0=) 2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Validity Not Before: Nov 3 00:28:15 2025 GMT Not After : Nov 10 00:28:15 2025 GMT Subject: CN=6907f720-09d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:42:6f:83:54:bb:c8:be:87:25:28:67:6d: 21:bc:ab:8d:df:62:10:d3:65:1d:d8:08:08:b2:70: 74:d2:13:3a:1d:7f:72:f0:c4:8b:05:a6:e3:01:20: 52:29:1d:d4:52:ce:d1:29:77:ce:f0:92:fb:20:30: fb:2a:a7:ad:04:f4:2f:4d:61:96:4b:84:98:da:f5: a4:dc:86:8d:d2:05:0c:62:56:19:37:02:9f:5a:f4: 10:fa:57:ac:54:97:38:d5:a9:bd:21:a6:0d:a0:27: c8:75:c0:96:64:49:34:50:fb:2f:6f:15:62:07:ff: 4e:92:2e:ab:b4:c0:55:04:e2:10:79:40:4f:e0:69: f5:8e:9f:dd:4b:00:a4:e7:b9:2b:72:8d:a2:b4:3e: 02:b4:e6:ca:93:68:b5:70:75:11:23:69:b3:29:cf: cf:ae:ca:cf:9a:1d:86:26:9c:13:78:c3:82:1a:19: 95:62:68:19:ae:24:c6:a0:cd:08:b9:b4:80:53:d2: 38:a0:f2:4c:3d:5c:0e:f9:6e:ed:e4:a8:65:c7:dd: c3:39:e5:04:e6:cf:44:87:a7:78:96:44:34:1b:38: b2:42:1a:8f:13:4e:20:3b:c9:2d:9f:aa:d4:d9:4e: ed:95:09:31:59:68:1e:51:c9:23:e7:ff:e0:d2:e5: 7b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D0:3E:05:46:12:A0:AC:00:C8:61:F3:C4:72:11:13:57:AE:C7:E1 X509v3 Authority Key Identifier: keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:5e:aa:a1:bc:6d:1c:c9:11:68:d9:7c:df:62:ac:68:99:66: 9b:f8:b0:23:2b:1e:54:8d:f2:b7:be:9b:fa:a5:bd:96:13:25: e7:e3:a4:f7:1c:3f:ac:8b:d0:5f:1c:fe:b5:8a:dc:38:95:f5: f9:83:d0:3a:06:28:ec:87:0a:0c:e4:f8:47:14:d1:98:fd:90: 86:9d:a0:c9:ab:4f:5f:10:7e:81:82:1d:83:f6:d3:34:e5:d8: ae:b1:c4:13:a7:31:45:0a:f4:3e:94:be:ab:a8:86:a4:8f:bf: c7:31:46:b1:32:41:10:4d:92:7d:31:f6:ef:75:ee:e4:75:15: dc:d9:f3:2a:42:97:8c:c1:9c:52:e6:02:2d:81:d2:2c:2e:c1: 77:16:66:0c:2a:c2:3b:0b:62:8a:da:79:f1:86:26:27:d5:79: f1:98:8e:df:34:3a:b9:98:44:26:0a:bd:2a:80:3e:bb:7d:18: 1a:18:25:82:cf:0a:75:2b:39:ff:5a:6e:ac:5f:69:0a:ab:80: 10:4d:c4:b7:40:d0:4c:d9:60:6f:da:c4:1b:0c:09:57:38:b0: 52:80:26:13:b5:ea:4b:22:dd:76:4f:3b:f7:37:47:5b:49:a1: 4a:25:0a:96:d1:b8:33:4a:5b:58:3c:fc:b1:74:7f:31:3a:b7: 00:51:15:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz RTM3RTFCQzEwHhcNMjUxMTAzMDAyODE1WhcNMjUxMTEwMDAyODE1WjAYMRYwFAYD VQQDEw02OTA3ZjcyMC0wOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsndCb4NUu8i+hyUoZ20hvKuN32IQ02Ud2AgIsnB00hM6HX9y8MSLBabjASBS KR3UUs7RKXfO8JL7IDD7KqetBPQvTWGWS4SY2vWk3IaN0gUMYlYZNwKfWvQQ+les VJc41am9IaYNoCfIdcCWZEk0UPsvbxViB/9Oki6rtMBVBOIQeUBP4Gn1jp/dSwCk 57krco2itD4CtObKk2i1cHURI2mzKc/PrsrPmh2GJpwTeMOCGhmVYmgZriTGoM0I ubSAU9I4oPJMPVwO+W7t5Khlx93DOeUE5s9Eh6d4lkQ0GziyQhqPE04gO8ktn6rU 2U7tlQkxWWgeUckj5//g0uV7pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7QPgVG EqCsAMhh88RyERNXrsfhMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCXqqhvG0cyRFo2XzfYqxomWab+LAjKx5UjfK3vpv6pb2WEyXn46T3 HD+si9BfHP61itw4lfX5g9A6BijshwoM5PhHFNGY/ZCGnaDJq09fEH6Bgh2D9tM0 5diuscQTpzFFCvQ+lL6rqIakj7/HMUaxMkEQTZJ9Mfbvde7kdRXc2fMqQpeMwZxS 5gItgdIsLsF3FmYMKsI7C2KK2nnxhiYn1XnxmI7fNDq5mEQmCr0qgD67fRgaGCWC zwp1Kzn/Wm6sX2kKq4AQTcS3QNBM2WBv2sQbDAlXOLBSgCYTtepLIt12Tzv3N0db SaFKJQqW0bgzSltYPPyxdH8xOrcAURWs -----END CERTIFICATE-----Generated at Tue Nov 4 08:33:08 2025 by rpki-client