$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json) Hash identifier: 47vEp6hFESd+2xU5tt1qs3yqen+UWvM9uOZvqKikSIw= Subject key identifier: 2E:5D:6D:0C:A9:60:90:28:18:D0:93:45:17:FB:5E:E3:33:80:DA:44 Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 0951 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft Manifest number: 0943 Signing time: Tue 04 Nov 2025 20:17:11 +0000 Manifest this update: Tue 04 Nov 2025 20:17:11 +0000 Manifest next update: Tue 11 Nov 2025 20:17:11 +0000 Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: 3lNP25hcSk5IssrY4g2l+l+wEe2zzU0/LExbLpDrvdE=) 2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: 9+lw98rdFugqdiBRyKbVp2oC9fkpMpQz4UV/k8IjCXg=) 3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: AF8iSINyYs/yviryAgwAaGDxt3e7QveTWxIVOikxElk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2385 (0x951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: Nov 4 20:17:11 2025 GMT Not After : Nov 11 20:17:11 2025 GMT Subject: CN=690a5f47-560f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:02:6a:f1:ed:93:62:b2:d3:20:3d:37:e2: ac:c8:2d:f4:fe:45:a4:c8:c7:fb:87:8b:71:5c:f1: d8:bc:e9:4b:d8:af:dd:72:59:59:7e:51:16:55:39: 08:87:aa:f6:45:b4:6c:9c:25:16:b9:bb:31:42:0d: 32:69:98:8c:68:e6:78:9e:b7:24:b1:af:aa:01:b6: 6b:d3:f3:5c:12:71:1e:bf:d4:38:0f:d6:5f:26:fc: b1:d0:e3:7f:34:ab:9a:a0:59:c1:59:2b:0d:4d:e5: ad:3f:5b:e5:44:b9:34:39:e4:0c:34:e7:0e:28:b9: 05:22:1a:46:55:3c:1e:2b:82:43:6f:20:07:fe:3b: b9:c4:32:c8:1b:74:10:88:26:c6:2e:c3:10:a3:47: c8:b9:c1:f1:7f:5b:36:04:f2:4a:80:aa:c6:25:81: 32:4e:a2:7f:b3:2c:7a:0d:17:33:6c:70:bc:77:f7: a2:1b:cd:20:d9:24:c1:7c:6a:9d:09:02:c1:e9:64: 3a:ec:10:04:2f:69:83:34:22:49:ab:1f:da:b4:e2: 73:ea:22:2a:12:72:f0:a0:bf:49:79:45:61:8d:7c: 2b:88:3e:46:db:fb:e2:ce:4b:73:d2:85:46:6b:1d: bd:9d:8f:e2:fe:e8:a4:1c:24:9f:75:4c:c7:f1:59: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5D:6D:0C:A9:60:90:28:18:D0:93:45:17:FB:5E:E3:33:80:DA:44 X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:08:da:62:d1:48:42:d2:59:be:25:f6:89:94:e3:75:9c:62: 5d:10:b2:28:b7:f7:31:56:f9:bf:63:56:c4:7a:56:93:da:25: 8c:6c:89:0b:58:19:a2:7f:8e:e5:66:63:cd:cb:87:bd:0a:a1: a4:1a:e3:f0:cf:35:72:44:f9:46:95:c1:38:32:89:04:f2:a9: 89:30:5b:9f:35:7c:9c:c2:5d:97:f1:d9:a0:33:a0:26:08:d0: 9e:ea:66:11:88:c1:d6:5b:35:44:5e:d4:4d:ad:70:94:b2:79: bc:6a:4b:a2:0a:80:5f:08:73:67:ba:af:de:21:a6:70:78:44: 91:f3:6e:38:45:64:86:8f:83:8c:c8:f5:20:ef:ef:ab:09:47: 00:cf:b8:45:bd:d9:d2:07:4c:de:45:d6:3d:0b:8a:ad:59:1c: c8:77:d7:78:85:84:30:c8:a7:40:3c:a5:61:6b:4d:eb:89:6e: 86:a5:27:1e:07:f3:00:7c:d6:be:d6:1f:40:18:a9:1f:0c:f6: 18:5e:80:35:ae:26:9a:7a:f0:6b:bf:de:09:27:75:55:e8:27: 75:98:b4:2c:1d:d5:36:01:6d:1e:b1:27:bb:18:84:c8:a5:43: b8:82:61:6e:64:fa:5a:d2:b3:95:9c:c1:45:45:8c:e5:ea:cc: 63:fe:47:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjUxMTA0MjAxNzExWhcNMjUxMTExMjAxNzExWjAYMRYwFAYD VQQDEw02OTBhNWY0Ny01NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1v4CavHtk2Ky0yA9N+KsyC30/kWkyMf7h4txXPHYvOlL2K/dcllZflEWVTkI h6r2RbRsnCUWubsxQg0yaZiMaOZ4nrcksa+qAbZr0/NcEnEev9Q4D9ZfJvyx0ON/ NKuaoFnBWSsNTeWtP1vlRLk0OeQMNOcOKLkFIhpGVTweK4JDbyAH/ju5xDLIG3QQ iCbGLsMQo0fIucHxf1s2BPJKgKrGJYEyTqJ/syx6DRczbHC8d/eiG80g2STBfGqd CQLB6WQ67BAEL2mDNCJJqx/atOJz6iIqEnLwoL9JeUVhjXwriD5G2/vizktz0oVG ax29nY/i/uikHCSfdUzH8VnPjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5dbQyp YJAoGNCTRRf7XuMzgNpEMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEE1My83MUI3RDQ3MEFCNEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2 Y0NkTURPZHpnNUlfRldKeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcCNpi0UhC0lm+JfaJlON1nGJdELIot/cxVvm/Y1bEelaT2iWMbIkL WBmif47lZmPNy4e9CqGkGuPwzzVyRPlGlcE4MokE8qmJMFufNXycwl2X8dmgM6Am CNCe6mYRiMHWWzVEXtRNrXCUsnm8akuiCoBfCHNnuq/eIaZweESR8244RWSGj4OM yPUg7++rCUcAz7hFvdnSB0zeRdY9C4qtWRzId9d4hYQwyKdAPKVha03riW6GpSce B/MAfNa+1h9AGKkfDPYYXoA1riaaevBrv94JJ3VV6Cd1mLQsHdU2AW0esSe7GITI pUO4gmFuZPpa0rOVnMFFRYzl6sxj/kdI -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:46 2025 by rpki-client