$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json) Hash identifier: +93jbcBsq/tvaP6oEKzfU2hBwlfEpSgoxKcgAYYIcrg= Subject key identifier: EB:E1:22:68:ED:02:03:D4:80:B4:54:41:61:4E:D1:7F:51:97:6D:1B Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Certificate serial: 104D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft Manifest number: 1035 Signing time: Tue 04 Nov 2025 17:31:56 +0000 Manifest this update: Tue 04 Nov 2025 17:31:56 +0000 Manifest next update: Tue 11 Nov 2025 17:31:56 +0000 Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: n0PZpqs5Wsc3HGTpnNPoCIIJ8Ym/GTRrzSnsaMPRjaI=) 2: F7F18D8C2BA711F09514D439C4F9AE02.roa (hash: RQ31QQqNnbR7hUGab4NBe2n82ZvCRfsZ20QWiB5eLdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4173 (0x104d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Validity Not Before: Nov 4 17:31:56 2025 GMT Not After : Nov 11 17:31:56 2025 GMT Subject: CN=690a388c-3f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:58:b7:1b:a9:c5:ee:12:00:21:0e:4a:bf: 47:2b:ee:27:b0:39:5e:5d:f3:cc:7b:a8:e5:09:91: ca:5d:6c:b8:fd:7f:af:2c:74:08:78:5f:4f:00:13: f7:b0:0c:09:3f:45:48:de:e4:00:b3:19:b8:3e:ba: 90:6e:27:bc:58:dd:14:b0:0c:9c:36:5f:20:a6:aa: 34:3c:72:10:00:9e:c6:14:6e:7a:07:03:c6:04:29: 9b:7f:1f:66:e2:d0:0e:73:00:75:f3:80:d0:68:0e: 47:de:03:a4:d9:4a:9c:4a:8e:d5:79:2f:a8:57:cb: a6:77:e3:3f:5b:be:61:9d:75:6d:17:18:cb:84:f2: cf:d7:48:fb:ad:83:5d:26:be:a3:75:b4:43:21:41: 62:a0:33:85:79:1f:22:60:a4:da:ce:29:70:05:74: 90:bf:3f:bc:74:66:49:5d:ca:5f:1e:1f:85:8a:21: 19:90:ff:a9:8d:2b:7d:8c:bc:46:e5:96:76:ad:51: d0:00:4e:ef:ac:b5:51:f4:1e:a2:39:e0:06:36:de: ad:d3:81:1d:2b:63:d4:49:e3:5e:2d:c0:bb:5b:5d: d1:81:c4:07:72:68:97:66:27:c0:a2:bd:ad:6c:ae: a4:c6:bb:16:d4:a7:ea:bf:05:10:05:cf:e7:dd:49: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E1:22:68:ED:02:03:D4:80:B4:54:41:61:4E:D1:7F:51:97:6D:1B X509v3 Authority Key Identifier: keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:08:ae:20:d2:27:6a:06:30:b2:90:79:a7:1c:f0:32:76:b3: 4b:03:52:61:34:84:99:fe:ce:55:ae:d8:26:ee:aa:03:ee:36: 8e:f1:a8:90:b1:89:58:37:49:8c:eb:85:0d:48:97:25:25:f2: cc:81:be:32:90:fc:3c:65:b5:32:e1:dd:93:91:44:75:d1:21: 6a:8a:05:4d:0e:66:ef:c9:ab:74:b0:db:b6:2a:24:26:ab:ee: 13:71:d5:6b:11:38:51:43:97:b8:b1:a3:63:4e:70:9e:8f:cd: 00:f0:44:5f:06:28:63:a9:7b:34:53:cd:c0:bc:93:72:c5:34: 30:44:30:34:61:0f:da:50:1e:69:ff:2c:4a:4e:6b:b2:09:d6: 0f:93:94:38:be:41:f5:4b:ff:f8:1a:2d:c7:ae:26:5f:72:36: c8:32:dd:10:42:d2:79:e3:05:04:2e:4c:27:95:85:f3:48:7d: 37:e5:df:db:de:b2:ee:69:44:07:74:14:28:c6:7a:97:2a:67: e7:0f:57:c7:6f:91:77:d6:94:7a:12:37:39:d3:9e:fe:90:30: d9:df:1d:e1:61:06:06:ff:e5:84:65:da:ef:ec:48:ae:77:08: 5e:78:a8:62:b2:3b:4a:95:ec:a3:39:f9:05:bf:15:1d:46:ae: 70:30:6f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY5QkIyOUIwQUJFODQ5RTdGRTE4MEUzMzlFNEIxQzI4 MjM2OEM1MjEwHhcNMjUxMTA0MTczMTU2WhcNMjUxMTExMTczMTU2WjAYMRYwFAYD VQQDEw02OTBhMzg4Yy0zZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhRYtxupxe4SACEOSr9HK+4nsDleXfPMe6jlCZHKXWy4/X+vLHQIeF9PABP3 sAwJP0VI3uQAsxm4PrqQbie8WN0UsAycNl8gpqo0PHIQAJ7GFG56BwPGBCmbfx9m 4tAOcwB184DQaA5H3gOk2UqcSo7VeS+oV8umd+M/W75hnXVtFxjLhPLP10j7rYNd Jr6jdbRDIUFioDOFeR8iYKTazilwBXSQvz+8dGZJXcpfHh+FiiEZkP+pjSt9jLxG 5ZZ2rVHQAE7vrLVR9B6iOeAGNt6t04EdK2PUSeNeLcC7W13RgcQHcmiXZifAor2t bK6kxrsW1KfqvwUQBc/n3UkzbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvhImjt AgPUgLRUQWFO0X9Rl20bMB8GA1UdIwQYMBaAFPm7KbCr6Enn/hgOM55LHCgjaMUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8wQTA0RjRFMjU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1NlZi1HQTR6bmtzY0tDTm94 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ic3BzS3ZvU2VmLUdBNHpua3NjS0NOb3hTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8wQTA0RjRFMjU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1Nl Zi1HQTR6bmtzY0tDTm94U0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBCK4g0idqBjCykHmnHPAydrNLA1JhNISZ/s5Vrtgm7qoD7jaO8aiQ sYlYN0mM64UNSJclJfLMgb4ykPw8ZbUy4d2TkUR10SFqigVNDmbvyat0sNu2KiQm q+4TcdVrEThRQ5e4saNjTnCej80A8ERfBihjqXs0U83AvJNyxTQwRDA0YQ/aUB5p /yxKTmuyCdYPk5Q4vkH1S//4Gi3HriZfcjbIMt0QQtJ54wUELkwnlYXzSH035d/b 3rLuaUQHdBQoxnqXKmfnD1fHb5F31pR6Ejc5057+kDDZ3x3hYQYG/+WEZdrv7Eiu dwheeKhisjtKleyjOfkFvxUdRq5wMG8U -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:25 2025 by rpki-client