$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: oLs/zYFFaG5TX9/eBSnnbKfVcoa7P3FkDvzQpWXHDZE= Subject key identifier: 47:76:BF:10:8F:C0:87:44:9A:31:2A:12:82:86:FB:19:5E:4C:CF:D6 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: B5 Signing time: Wed 05 Nov 2025 06:20:17 +0000 Manifest this update: Wed 05 Nov 2025 06:20:17 +0000 Manifest next update: Wed 12 Nov 2025 06:20:17 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: +6NkD6vidu3qRnZ1mCfqYxAHXHLGMFXm10mYn80O+Tg=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162, serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Validity Not Before: Nov 5 06:20:17 2025 GMT Not After : Nov 12 06:20:17 2025 GMT Subject: CN=690aeca1-2754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:65:b3:b6:16:a4:2d:be:a3:ab:e7:ff:1e: 26:e8:30:3a:0a:86:fa:f7:ef:08:dc:9e:f2:a2:c2: 34:0e:99:ae:9f:da:a5:fa:55:f8:4b:92:5d:dd:6c: 94:d8:b6:2c:d0:e7:0f:e8:55:a2:4d:1d:78:e2:d6: 41:0a:30:1b:2e:82:bf:a8:74:ff:86:50:1a:b6:fd: 6e:0a:8d:15:5a:ae:72:1d:cf:23:93:9e:79:41:cc: d2:f8:ba:d4:81:92:95:e2:b9:d9:d9:1a:a4:c8:61: c3:1a:15:0a:07:29:3f:76:ad:3a:53:0f:7b:49:35: 56:26:fd:b2:17:2d:e0:b4:bb:02:66:b8:4c:91:03: cf:e2:16:25:92:7c:b7:0a:7f:c9:54:9d:0f:3d:de: 04:92:51:4f:50:ad:14:45:99:13:ed:41:e4:c6:83: 07:9e:e2:2e:fe:9e:a5:bc:aa:3e:96:06:09:4b:75: f8:e8:13:41:f2:89:a3:13:b4:14:0e:db:5c:e5:00: 43:de:dc:0b:c5:25:c4:ad:eb:62:ae:3d:69:c0:f3: bd:90:2c:71:0b:ad:a4:28:1d:94:eb:23:62:82:cf: d4:fd:6c:7f:8f:ea:2f:c9:dc:59:43:ae:bd:96:00: 33:3b:bb:2a:1a:45:7c:f8:b9:ba:b6:e7:10:f1:96: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:76:BF:10:8F:C0:87:44:9A:31:2A:12:82:86:FB:19:5E:4C:CF:D6 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0f:62:91:55:6d:30:9c:a7:fa:0b:17:d9:bb:4b:48:c4:a5: 93:ed:7d:48:0c:f9:b1:5b:a4:fd:a3:cf:64:3c:a2:2c:04:50: fe:54:03:ad:81:6d:07:c7:db:c2:5f:c2:60:2f:f1:f7:26:f8: 8b:36:39:b9:7b:87:09:95:e3:76:b7:52:0d:88:d4:0c:00:e6: 8c:d0:60:43:9f:2a:64:1f:04:19:b6:24:14:16:96:4b:75:68: c4:8b:cd:42:ef:ed:17:85:8e:30:db:b0:6b:73:bd:f5:86:b9: d2:43:f2:f0:26:52:1d:b5:3e:05:0b:07:c2:2e:87:6c:3e:71: 7c:a3:d8:10:10:52:a1:f7:cd:01:02:da:d3:3d:8e:bd:7c:00: 10:92:f9:86:44:72:af:be:e8:ff:08:c9:31:28:d4:3a:e5:62: 84:f9:a7:ed:bf:34:33:48:7e:a9:da:3e:ef:d5:4a:a8:a2:85: c2:ce:9b:fb:46:9d:fe:66:f1:67:06:6d:23:ec:85:fc:cd:e8: 62:24:91:9a:d6:4f:80:3f:19:a5:5e:fd:92:fe:de:34:11:ac: 8d:4e:d4:34:1f:de:1b:4b:55:ab:0d:41:bb:a3:3e:80:f5:8a: ea:eb:05:f6:94:fa:a5:68:34:b4:b8:cb:22:bc:26:cb:6e:25: fc:b5:a2:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxNjIxMTAvBgNVBAUTKDA3QTY4MUM5MUMzRTA1MTJEMzY4OUU5OUJDRTVCQzY2 NDA5MTY3MzQwHhcNMjUxMTA1MDYyMDE3WhcNMjUxMTEyMDYyMDE3WjAYMRYwFAYD VQQDEw02OTBhZWNhMS0yNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9dls7YWpC2+o6vn/x4m6DA6Cob69+8I3J7yosI0Dpmun9ql+lX4S5Jd3WyU 2LYs0OcP6FWiTR144tZBCjAbLoK/qHT/hlAatv1uCo0VWq5yHc8jk555QczS+LrU gZKV4rnZ2RqkyGHDGhUKByk/dq06Uw97STVWJv2yFy3gtLsCZrhMkQPP4hYlkny3 Cn/JVJ0PPd4EklFPUK0URZkT7UHkxoMHnuIu/p6lvKo+lgYJS3X46BNB8omjE7QU Dttc5QBD3twLxSXEretirj1pwPO9kCxxC62kKB2U6yNigs/U/Wx/j+ovydxZQ669 lgAzO7sqGkV8+Lm6tucQ8ZZ8dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd2vxCP wIdEmjEqEoKG+xleTM/WMB8GA1UdIwQYMBaAFAemgckcPgUS02iembzlvGZAkWc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE2Mi81QTM4MEQ2QUFE NDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJSTFRhSjZadk9XOFprQ1Ja elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE2Mi81QTM4MEQ2QUFENDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJS TFRhSjZadk9XOFprQ1JaelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOD2KRVW0wnKf6CxfZu0tIxKWT7X1IDPmxW6T9o89kPKIsBFD+VAOt gW0Hx9vCX8JgL/H3JviLNjm5e4cJleN2t1INiNQMAOaM0GBDnypkHwQZtiQUFpZL dWjEi81C7+0XhY4w27Brc731hrnSQ/LwJlIdtT4FCwfCLodsPnF8o9gQEFKh980B AtrTPY69fAAQkvmGRHKvvuj/CMkxKNQ65WKE+aftvzQzSH6p2j7v1UqoooXCzpv7 Rp3+ZvFnBm0j7IX8zehiJJGa1k+APxmlXv2S/t40EayNTtQ0H94bS1WrDUG7oz6A 9Yrq6wX2lPqlaDS0uMsivCbLbiX8taIi -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:48 2025 by rpki-client