$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json) Hash identifier: lnsdySpPJ4WdnqGDQB0cM1XiuSbd3VEyxcU99nOwi2I= Subject key identifier: 3C:71:CF:FE:91:23:EC:DA:48:47:ED:D0:E7:00:A1:E9:E1:51:C7:22 Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft Manifest number: 01DD Signing time: Wed 05 Nov 2025 02:50:46 +0000 Manifest this update: Wed 05 Nov 2025 02:50:45 +0000 Manifest next update: Wed 12 Nov 2025 02:50:45 +0000 Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: T4biOmLw4yqxCV+6teqW8jNNpXdhZhzRZ+fFyPW8vjU=) 2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: JW1dKstiHv1728tfD/7nx2W9fc+YXOuPr0l8dOY2HWI=) 3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: 0kmwTMLlfi4JUkvLZl5hjiEibE5pPoiG3TS5y+XQg4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Validity Not Before: Nov 5 02:50:45 2025 GMT Not After : Nov 12 02:50:45 2025 GMT Subject: CN=690abb86-a6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4e:5e:80:c0:fb:09:75:a6:82:a2:a7:c9:72: 15:ad:d9:6a:96:53:69:d0:d5:83:f4:1c:8b:21:64: 17:ec:ec:4e:3f:ab:c8:02:bb:ed:d3:c5:3c:0a:d6: 2f:22:05:24:9b:85:bd:d1:54:65:12:cf:00:48:60: 20:42:e2:17:5a:62:05:8e:18:29:ca:fe:81:a7:a1: 55:5f:57:02:39:43:ff:2b:88:4d:1d:af:40:2b:d4: e3:c2:03:cb:86:72:f4:91:b0:76:f4:29:88:15:a1: bb:ce:ad:5a:6e:aa:c8:aa:58:e8:06:c4:fb:81:78: 34:89:b0:02:13:a5:1a:18:f0:81:4f:fc:f0:80:8e: 65:4c:da:81:0f:c3:01:38:ed:b3:f6:ff:63:19:57: 93:ea:85:f7:26:07:07:0f:b9:68:24:bf:47:5a:20: 86:92:bb:72:34:1a:96:7b:26:c8:2e:99:b3:7e:de: 2c:92:ae:cf:55:71:c7:c0:67:c9:0b:07:02:8b:5d: f3:65:59:4f:dc:ae:6b:78:02:02:1c:03:b2:d7:50: 4c:0f:28:40:c2:aa:e2:83:0a:23:86:b9:5b:b5:e7: 49:3e:29:de:a2:11:d0:b3:c8:81:d6:51:1d:61:32: 2d:2f:6e:1d:68:4c:65:34:95:bd:d3:91:89:09:38: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:71:CF:FE:91:23:EC:DA:48:47:ED:D0:E7:00:A1:E9:E1:51:C7:22 X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:98:be:f2:31:3e:d7:b2:0c:4c:84:9e:1e:53:c5:3c:96:bf: 6a:c1:7b:a3:b8:d8:78:79:89:f0:6c:a1:ff:e3:c8:ed:ee:59: f5:13:fe:ff:72:04:3f:c8:0d:0e:29:46:37:d3:9c:f0:ec:3d: 84:5c:71:88:22:0c:54:6f:e9:d5:7b:07:22:af:d1:bb:76:28: a0:7e:09:bb:b5:e5:e3:2d:58:25:0e:35:ce:67:8c:9a:0b:cc: 73:34:64:61:ee:37:47:a4:c2:06:a8:9e:45:89:89:e2:a9:8c: 5d:34:11:1a:26:76:8e:d5:ac:cb:e5:21:47:03:fb:b9:0d:f8: 08:3e:7a:e8:40:70:6c:ba:cc:dd:75:b4:ca:f0:e8:3c:5d:41: c0:d6:e6:54:fc:37:89:95:f2:a1:1b:ed:e9:61:0c:25:37:26: 93:ad:a9:3e:bd:a0:5a:ce:54:26:15:e8:15:12:e8:c9:a9:6c: 71:bb:b2:f3:04:d0:75:fa:60:08:db:1e:f7:64:18:3a:92:13: d9:f9:62:a8:44:58:51:95:36:28:cb:54:2f:65:ae:0a:53:43: d5:2d:bf:11:57:3d:95:52:7d:32:c8:41:24:e6:16:53:a5:4f: da:5f:36:7f:8b:b8:28:92:e1:80:f1:6d:65:91:8e:d3:73:37: 31:51:96:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjUxMTA1MDI1MDQ1WhcNMjUxMTEyMDI1MDQ1WjAYMRYwFAYD VQQDEw02OTBhYmI4Ni1hNmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E5egMD7CXWmgqKnyXIVrdlqllNp0NWD9ByLIWQX7OxOP6vIArvt08U8CtYv IgUkm4W90VRlEs8ASGAgQuIXWmIFjhgpyv6Bp6FVX1cCOUP/K4hNHa9AK9TjwgPL hnL0kbB29CmIFaG7zq1abqrIqljoBsT7gXg0ibACE6UaGPCBT/zwgI5lTNqBD8MB OO2z9v9jGVeT6oX3JgcHD7loJL9HWiCGkrtyNBqWeybILpmzft4skq7PVXHHwGfJ CwcCi13zZVlP3K5reAICHAOy11BMDyhAwqrigwojhrlbtedJPineohHQs8iB1lEd YTItL24daExlNJW905GJCTiFxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxxz/6R I+zaSEft0OcAoenhUcciMB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkI3Qy81MUE5NDQ1QURGODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdG eFFfSG1UMUFRUXVFb1IwdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcmL7yMT7XsgxMhJ4eU8U8lr9qwXujuNh4eYnwbKH/48jt7ln1E/7/ cgQ/yA0OKUY305zw7D2EXHGIIgxUb+nVewcir9G7diigfgm7teXjLVglDjXOZ4ya C8xzNGRh7jdHpMIGqJ5FiYniqYxdNBEaJnaO1azL5SFHA/u5DfgIPnroQHBsuszd dbTK8Og8XUHA1uZU/DeJlfKhG+3pYQwlNyaTrak+vaBazlQmFegVEujJqWxxu7Lz BNB1+mAI2x73ZBg6khPZ+WKoRFhRlTYoy1QvZa4KU0PVLb8RVz2VUn0yyEEk5hZT pU/aXzZ/i7gokuGA8W1lkY7TczcxUZZH -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:42 2025 by rpki-client