$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: pf/KWlc2ewTYM6u9MYPOjbzBZIzUc3R4I7TPfCU4wbI= Subject key identifier: FF:7F:F1:93:A0:99:48:EF:3F:ED:A0:DF:11:8F:96:80:FC:00:87:96 Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 1342 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 133A Signing time: Tue 04 Nov 2025 17:06:37 +0000 Manifest this update: Tue 04 Nov 2025 17:06:36 +0000 Manifest next update: Tue 11 Nov 2025 17:06:36 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: 5DUq47HYH4+o2sMk2L8FZz9eQDxO6zXut+S7XripjdY=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: RbGdGirRSx8vE2XqFSZoMmFoNMFa3vRAZrBLRz09P8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4930 (0x1342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: Nov 4 17:06:36 2025 GMT Not After : Nov 11 17:06:36 2025 GMT Subject: CN=690a329d-a3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:3d:31:98:22:9d:6e:3a:50:76:b4:ab:18: aa:37:4b:71:f7:2f:61:ba:cc:41:8e:c9:e0:f8:02: 70:29:ad:92:00:b5:20:b9:09:f2:83:26:f9:dc:21: 9f:ee:e4:16:65:60:eb:31:6b:20:75:55:30:d6:06: 44:e9:54:a2:19:38:c3:15:0b:18:a2:2c:ba:f1:5d: e0:65:09:d1:fc:a5:24:7e:09:a1:08:6c:d9:fc:3e: 0d:49:7e:29:7d:bc:e1:71:8a:fc:b4:70:3c:f6:16: e9:67:3a:c3:08:09:fb:be:bd:26:cb:7c:63:84:77: 20:64:0a:38:aa:79:c9:4a:32:9f:0a:33:80:83:91: e6:23:88:93:b4:c3:e4:47:04:86:10:32:76:30:40: dc:c5:8f:87:a2:3b:b9:90:da:b1:fd:2d:4b:aa:26: 97:01:cd:ee:9c:14:e0:11:78:6a:6d:ec:e4:6f:03: 32:61:db:d5:de:db:ca:94:90:ee:33:bd:4b:45:cf: d2:8c:8e:d2:fe:c3:39:58:d3:aa:d1:f7:a3:f6:aa: 48:66:8b:6c:75:71:e9:41:ac:1e:69:31:1c:41:b6: 2b:35:84:96:60:e6:15:10:38:0c:e6:02:42:68:b2: f2:0a:3b:b0:f7:9f:5e:b5:27:d2:71:e7:ca:70:e4: b7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7F:F1:93:A0:99:48:EF:3F:ED:A0:DF:11:8F:96:80:FC:00:87:96 X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ae:b0:60:cb:9f:0f:c5:ec:37:e8:99:c8:38:cf:fa:49:20: a3:17:f3:8c:00:4a:60:77:ba:0a:02:49:a5:79:86:93:c6:ec: 3f:c3:9e:d1:79:26:51:7b:e4:b6:11:30:7f:3b:3d:08:e1:d0: 36:87:07:8b:34:49:47:6d:90:86:94:46:40:dc:97:41:95:39: 66:4a:52:7c:bb:cb:69:77:b8:9c:e1:a8:db:5d:04:a9:0d:1f: 7c:65:17:59:74:6d:27:82:5d:0c:46:f8:da:fd:e2:81:63:4d: 98:d9:2a:9b:78:62:f9:4e:cc:8f:06:9c:12:55:1e:de:15:09: 2e:19:53:b3:e5:52:a6:bc:3f:63:b2:82:3e:4e:18:8c:0a:9e: 00:2f:f6:9c:a6:66:e3:3a:cf:56:08:5b:f8:fb:91:f8:27:14: af:97:d1:9e:d6:c2:bc:81:30:f3:f8:73:71:ff:ca:e9:91:36: 32:0b:40:bf:e0:91:69:30:1d:4e:48:45:4f:ca:4c:c3:7f:58: f8:bc:48:dd:ce:cd:1d:7a:6f:5a:3e:97:3a:52:cd:1e:c3:1d: c7:1f:51:c9:87:17:82:44:80:e4:d8:b1:44:03:0c:e7:ce:f6: c6:86:0f:fc:fb:b2:b1:fc:c9:45:5b:d8:6f:00:1f:c2:01:02: a4:a9:5d:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjUxMTA0MTcwNjM2WhcNMjUxMTExMTcwNjM2WjAYMRYwFAYD VQQDEw02OTBhMzI5ZC1hM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyE9MZginW46UHa0qxiqN0tx9y9husxBjsng+AJwKa2SALUguQnygyb53CGf 7uQWZWDrMWsgdVUw1gZE6VSiGTjDFQsYoiy68V3gZQnR/KUkfgmhCGzZ/D4NSX4p fbzhcYr8tHA89hbpZzrDCAn7vr0my3xjhHcgZAo4qnnJSjKfCjOAg5HmI4iTtMPk RwSGEDJ2MEDcxY+Hoju5kNqx/S1LqiaXAc3unBTgEXhqbezkbwMyYdvV3tvKlJDu M71LRc/SjI7S/sM5WNOq0fej9qpIZotsdXHpQaweaTEcQbYrNYSWYOYVEDgM5gJC aLLyCjuw959etSfScefKcOS3ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9/8ZOg mUjvP+2g3xGPloD8AIeWMB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+rrBgy58Pxew36JnIOM/6SSCjF/OMAEpgd7oKAkmleYaTxuw/w57R eSZRe+S2ETB/Oz0I4dA2hweLNElHbZCGlEZA3JdBlTlmSlJ8u8tpd7ic4ajbXQSp DR98ZRdZdG0ngl0MRvja/eKBY02Y2SqbeGL5TsyPBpwSVR7eFQkuGVOz5VKmvD9j soI+ThiMCp4AL/acpmbjOs9WCFv4+5H4JxSvl9Ge1sK8gTDz+HNx/8rpkTYyC0C/ 4JFpMB1OSEVPykzDf1j4vEjdzs0dem9aPpc6Us0ewx3HH1HJhxeCRIDk2LFEAwzn zvbGhg/8+7Kx/MlFW9hvAB/CAQKkqV2g -----END CERTIFICATE-----Generated at Wed Nov 5 21:44:02 2025 by rpki-client