$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json) Hash identifier: xaeUmKQHVebDV0T5x1mnbiC9x96UbCWD4JhJT8DDEFg= Subject key identifier: 16:8C:34:95:DF:F7:74:52:17:8D:FB:C5:74:16:47:B2:7F:B1:E2:A6 Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft Manifest number: 0792 Signing time: Tue 04 Nov 2025 21:36:51 +0000 Manifest this update: Tue 04 Nov 2025 21:36:51 +0000 Manifest next update: Tue 11 Nov 2025 21:36:51 +0000 Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: j/PBNpJGF/GbBipaWPP6bi2fQjd2uhm1l7gfSPUOMZw=) 2: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: D1qcgVGZql5RrIKafCkI4bM9fu5CZK6G546UdqksHKg=) 3: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: 9PkY3r845C6Gg3gR8AKgajQ8wsvmdGvtBQ6YZXFN9yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Validity Not Before: Nov 4 21:36:51 2025 GMT Not After : Nov 11 21:36:51 2025 GMT Subject: CN=690a71f3-1ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:5f:d5:02:da:b8:fe:b0:78:47:d3:35:0d: ef:b9:54:8b:89:8f:0f:1f:e1:61:fa:ec:d7:db:80: b3:d3:77:06:83:1a:ea:94:f3:44:19:7f:27:e0:29: c3:eb:ac:d8:e9:4a:7d:af:74:a8:42:db:ec:27:a5: d2:30:e5:86:c7:20:51:22:5a:b7:83:61:a8:f5:61: f7:5c:e6:11:b5:bc:4a:3f:b1:ac:93:3f:a1:4b:aa: cb:a9:3d:86:87:28:3d:fa:35:47:14:e2:d1:5a:a1: 86:3c:21:3d:44:cc:a2:94:bc:5d:a2:c8:97:04:1d: 9e:37:07:ce:ae:74:bd:8d:45:eb:8b:4d:07:84:66: 18:73:d3:32:a6:1b:54:e5:98:c4:59:f5:a1:55:8a: 1e:37:66:1f:d2:8d:a9:a9:20:b1:0e:85:04:95:e8: 14:a4:f7:27:d0:2f:47:ee:2e:5c:bd:32:cd:59:4f: 61:cd:70:4b:df:85:a7:59:8e:12:0a:1b:7d:15:af: cb:f1:4e:88:c2:bd:fa:9b:02:e0:ac:8e:bc:c9:21: 98:15:2d:b1:52:a3:58:d6:f7:a9:ce:10:c6:ef:36: f6:39:a9:e4:9d:64:6d:ea:a0:b8:0d:bb:41:bc:a9: db:9b:c1:77:b8:69:9d:4b:5c:cf:7d:f2:77:a2:7e: a4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:34:95:DF:F7:74:52:17:8D:FB:C5:74:16:47:B2:7F:B1:E2:A6 X509v3 Authority Key Identifier: keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:05:9c:d2:e6:71:cd:ec:c2:e7:01:42:5b:99:39:30:50:ed: 68:ec:cd:d3:90:98:9f:00:a2:ff:ba:93:f3:6b:0a:36:a7:3d: 20:b5:66:11:27:e6:a7:3d:31:2e:8a:94:88:98:df:a5:2c:cc: 29:45:9b:76:75:c5:e8:46:0a:40:e2:0a:f9:32:7d:30:78:46: 16:07:30:ea:1e:02:4c:d8:7b:e9:7d:3a:f2:a0:a7:7e:14:04: 78:94:53:59:ee:32:b7:6a:1d:45:5c:bc:fc:a9:df:e4:86:49: 8f:38:fe:81:f9:69:70:6f:95:a8:c6:5c:9a:5b:fc:1e:b0:62: c2:5b:0f:09:03:b5:32:6e:41:01:aa:af:bc:1c:bb:f3:0a:51: d1:0c:7b:d3:32:ec:47:c3:eb:61:99:b5:4a:2f:7a:a1:69:c8: 4c:89:48:42:c1:fd:26:23:1a:0b:6c:28:f3:72:09:1b:25:8f: ea:04:2b:da:a3:48:a6:4e:c4:ca:bc:d7:f0:ff:8c:9f:23:0b: 8c:0b:fe:ce:32:c2:26:a0:2d:86:1e:3f:a6:90:10:c3:9d:30: 26:10:b8:5f:89:f0:28:76:07:0d:f6:f6:6f:db:99:1f:bd:67: 7c:0a:25:17:9d:33:b7:8d:91:92:57:ff:e5:0d:de:c6:c2:2b: f8:3d:2c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz Q0U5MzQyMDYwHhcNMjUxMTA0MjEzNjUxWhcNMjUxMTExMjEzNjUxWjAYMRYwFAYD VQQDEw02OTBhNzFmMy0xYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuy9f1QLauP6weEfTNQ3vuVSLiY8PH+Fh+uzX24Cz03cGgxrqlPNEGX8n4CnD 66zY6Up9r3SoQtvsJ6XSMOWGxyBRIlq3g2Go9WH3XOYRtbxKP7Gskz+hS6rLqT2G hyg9+jVHFOLRWqGGPCE9RMyilLxdosiXBB2eNwfOrnS9jUXri00HhGYYc9MyphtU 5ZjEWfWhVYoeN2Yf0o2pqSCxDoUElegUpPcn0C9H7i5cvTLNWU9hzXBL34WnWY4S Cht9Fa/L8U6Iwr36mwLgrI68ySGYFS2xUqNY1vepzhDG7zb2OanknWRt6qC4DbtB vKnbm8F3uGmdS1zPffJ3on6k1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaMNJXf 93RSF437xXQWR7J/seKmMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUI3MS85RkQ1RjgwRTJFQTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjcz YVBrQ0U3WnRqTHc4NlRRZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiBZzS5nHN7MLnAUJbmTkwUO1o7M3TkJifAKL/upPzawo2pz0gtWYR J+anPTEuipSImN+lLMwpRZt2dcXoRgpA4gr5Mn0weEYWBzDqHgJM2HvpfTryoKd+ FAR4lFNZ7jK3ah1FXLz8qd/khkmPOP6B+Wlwb5WoxlyaW/wesGLCWw8JA7UybkEB qq+8HLvzClHRDHvTMuxHw+thmbVKL3qhachMiUhCwf0mIxoLbCjzcgkbJY/qBCva o0imTsTKvNfw/4yfIwuMC/7OMsImoC2GHj+mkBDDnTAmELhfifAodgcN9vZv25kf vWd8CiUXnTO3jZGSV//lDd7Gwiv4PSwl -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:38 2025 by rpki-client