$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft File: BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json) Hash identifier: YIVEOVQVWm7O20xOWm8f8aEC5R+20G3aTfbfg7G9tQU= Subject key identifier: 3D:9E:F9:71:55:93:00:A6:32:FF:96:C8:9C:7B:92:F5:A1:9C:99:B5 Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft Manifest number: C2 Signing time: Wed 05 Nov 2025 06:13:11 +0000 Manifest this update: Wed 05 Nov 2025 06:13:10 +0000 Manifest next update: Wed 12 Nov 2025 06:13:10 +0000 Files and hashes: 1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: tTYpXkNQNFaIXYKYGztlQzeNz9znUYaBiotRKtKyB5M=) 2: 0576696C889311F0B21CA526C4F9AE02.roa (hash: 5eG8sDChja1gXmJsueTdz5dQwV5fJE7Ln4KJ9zejKk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Validity Not Before: Nov 5 06:13:10 2025 GMT Not After : Nov 12 06:13:10 2025 GMT Subject: CN=690aeaf6-4b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:32:b7:21:01:16:c9:5f:1d:f0:87:14:b4: 7e:53:18:80:c8:34:24:d8:44:d7:8c:d7:36:54:8b: 3f:40:03:c3:1f:c5:84:1a:7b:51:21:d5:7e:30:93: a3:bc:c3:7b:04:fa:1d:f5:9c:8e:56:c9:2a:3e:2d: 0a:c1:dc:f5:14:10:f2:e3:d6:03:c5:e4:e2:df:c5: 91:da:70:bf:9a:af:1a:22:2b:f1:54:1e:c7:3c:11: cc:e9:2e:75:28:81:c8:59:78:ec:66:16:f6:c2:4f: 37:a5:ce:cc:c5:84:d3:12:80:15:93:5e:90:e9:b2: 5d:a3:22:ae:09:2f:72:eb:65:2d:c0:19:28:42:dd: 79:5f:15:db:cb:30:99:54:79:ca:00:e2:9c:f9:26: bb:47:bc:c7:d7:f0:52:ef:79:53:a7:07:58:d3:e2: 26:a5:ef:93:30:18:c1:c6:e1:41:02:96:cd:9c:be: dd:e6:b8:05:b4:5e:ba:6c:db:bc:2e:4a:88:4b:7d: f8:b4:09:db:08:f0:63:cb:69:e7:02:a3:5c:c5:da: f1:75:18:c0:c2:d6:19:8e:df:f2:e8:d5:e5:fc:df: 41:81:79:30:75:22:c9:e5:61:5f:8b:e0:7a:a0:3b: 07:5b:ff:8c:bd:ee:08:f8:00:e1:01:87:42:d8:9b: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9E:F9:71:55:93:00:A6:32:FF:96:C8:9C:7B:92:F5:A1:9C:99:B5 X509v3 Authority Key Identifier: keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:15:cb:06:da:f5:37:40:eb:99:71:1f:67:10:ea:37:9f:e7: b0:de:e6:86:4e:18:c1:f9:90:9d:d3:e5:c0:f5:b1:e8:f6:67: 9a:48:8b:87:d1:b5:a8:c6:e8:db:80:66:aa:57:08:9e:bb:89: f0:29:bc:64:8b:93:74:6d:c3:50:f5:2a:eb:57:43:d8:85:50: b4:e0:d7:69:51:66:5f:76:14:32:db:a6:f7:1b:93:6f:38:92: 4b:be:b8:73:0d:16:8a:54:a3:69:72:43:33:f3:e5:2f:f5:0a: 40:7d:7e:0e:8b:5e:50:99:36:6a:4f:ec:3d:4a:3b:ef:d6:1c: 65:11:ae:10:0c:ac:b5:ac:24:b2:8c:05:13:73:8e:7b:cb:b6: f1:7c:03:98:45:c3:a0:9c:d2:c8:c7:96:d4:ac:a2:f5:be:b1: 4e:c3:55:f4:1b:70:b7:1a:92:c6:af:94:2d:8a:f7:ed:27:ca: 87:0d:5b:3f:f5:84:6f:8f:b3:26:77:65:83:90:ef:c0:b2:44: f4:fd:41:d1:e2:f5:87:a0:67:15:3f:6d:bd:3c:d4:1c:6d:4a: 7e:93:53:af:b9:be:8a:84:9a:fe:b2:6b:b1:18:ea:29:cc:2c: 3d:0d:4d:91:72:ee:30:8c:8b:bf:f4:16:d3:bf:af:4d:30:27: 57:9e:e2:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKDA0Qzc5QTRERDI0RkZBMDNGQThGOTI5Njc2NkY4MkEw Mzg1Q0UyOTMwHhcNMjUxMTA1MDYxMzEwWhcNMjUxMTEyMDYxMzEwWjAYMRYwFAYD VQQDEw02OTBhZWFmNi00YjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX0ytyEBFslfHfCHFLR+UxiAyDQk2ETXjNc2VIs/QAPDH8WEGntRIdV+MJOj vMN7BPod9ZyOVskqPi0Kwdz1FBDy49YDxeTi38WR2nC/mq8aIivxVB7HPBHM6S51 KIHIWXjsZhb2wk83pc7MxYTTEoAVk16Q6bJdoyKuCS9y62UtwBkoQt15XxXbyzCZ VHnKAOKc+Sa7R7zH1/BS73lTpwdY0+Impe+TMBjBxuFBApbNnL7d5rgFtF66bNu8 LkqIS334tAnbCPBjy2nnAqNcxdrxdRjAwtYZjt/y6NXl/N9BgXkwdSLJ5WFfi+B6 oDsHW/+Mve4I+ADhAYdC2Ju2WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2e+XFV kwCmMv+WyJx7kvWhnJm1MB8GA1UdIwQYMBaAFATHmk3ST/oD+o+SlnZvgqA4XOKT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS83QzZFREE4Q0Ex Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1nUDZqNUtXZG0tQ29EaGM0 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JNZWFUZEpQLWdQNmo1S1dkbS1Db0RoYzRwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS83QzZFREE4Q0ExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1n UDZqNUtXZG0tQ29EaGM0cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6FcsG2vU3QOuZcR9nEOo3n+ew3uaGThjB+ZCd0+XA9bHo9meaSIuH 0bWoxujbgGaqVwieu4nwKbxki5N0bcNQ9SrrV0PYhVC04NdpUWZfdhQy26b3G5Nv OJJLvrhzDRaKVKNpckMz8+Uv9QpAfX4Oi15QmTZqT+w9Sjvv1hxlEa4QDKy1rCSy jAUTc457y7bxfAOYRcOgnNLIx5bUrKL1vrFOw1X0G3C3GpLGr5QtivftJ8qHDVs/ 9YRvj7Mmd2WDkO/AskT0/UHR4vWHoGcVP229PNQcbUp+k1Ovub6KhJr+smuxGOop zCw9DU2Rcu4wjIu/9BbTv69NMCdXnuJV -----END CERTIFICATE-----Generated at Wed Nov 5 20:56:53 2025 by rpki-client