$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: 6hi0MshhEDPeFLyNhfrP/LJAOjvN51Y8WjNIvVJ8jhk= Subject key identifier: E5:0F:EC:5E:E5:6E:6B:E4:CF:DF:B0:F3:8F:C2:91:62:7F:49:F2:C8 Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 83 Signing time: Wed 05 Nov 2025 06:51:33 +0000 Manifest this update: Wed 05 Nov 2025 06:51:33 +0000 Manifest next update: Wed 12 Nov 2025 06:51:33 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: lKizDP6yc2WDYNO4tEFD2P0Awk9PCGr2+Exrwy8lGUQ=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Nov 5 06:51:33 2025 GMT Not After : Nov 12 06:51:33 2025 GMT Subject: CN=690af3f5-f22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:3b:7a:42:09:ed:62:02:eb:18:d4:16:44: dc:52:55:b3:d4:b7:d8:6e:39:a5:fd:1b:48:0c:2d: d0:b7:0b:58:7f:68:a4:eb:63:cc:dc:03:30:4f:ac: e2:56:c5:6b:f5:a5:26:58:c4:6f:9c:4e:53:b9:85: 38:ef:dc:74:36:6d:29:32:43:93:b4:1e:fd:e9:0b: 06:04:5a:1f:0f:9c:e2:bc:b8:9e:93:76:2a:4e:d7: 7c:2b:c5:1b:6e:c3:60:8b:7e:13:fa:0f:25:c6:98: e9:d3:77:af:c1:97:da:1a:51:be:fc:0a:38:45:41: da:47:fa:3a:e1:85:c7:12:09:0e:be:1b:52:1d:91: c1:8a:4f:13:14:1b:b6:88:48:b6:ea:9a:4a:88:17: ee:58:4a:eb:bb:a1:60:1b:0c:f0:09:f0:b8:c3:26: a3:4d:55:f9:41:61:7e:b4:d6:b3:a5:f7:8f:67:be: 30:99:df:1e:ff:60:aa:93:7b:05:55:c7:1e:17:c1: 52:fb:5c:af:28:da:7a:82:73:05:4f:ec:08:d5:1f: 89:cf:21:cb:68:9e:a8:3b:ef:32:1e:16:b5:a8:77: 6b:d9:ed:b3:2d:ca:d4:a4:b1:83:c3:0a:5e:57:54: e7:2f:69:6b:18:8d:7a:7f:8b:85:68:40:f2:1c:44: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0F:EC:5E:E5:6E:6B:E4:CF:DF:B0:F3:8F:C2:91:62:7F:49:F2:C8 X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c1:70:9f:4e:cd:48:a8:18:dd:e4:3c:54:b3:a7:c3:c2:81: f5:8c:ca:df:57:d6:9d:2b:9a:35:65:cd:31:b0:07:2e:71:73: 21:2a:ba:f3:ca:70:70:bf:d2:81:b7:cf:39:52:48:3f:03:7d: b9:e1:c3:31:86:3f:7e:2a:43:c5:d1:72:13:0f:78:1d:50:cf: de:cb:b0:1a:82:eb:09:5e:f1:3f:86:5e:c6:76:40:28:9a:68: 0a:eb:6d:1f:85:b3:89:31:69:d9:04:60:50:a5:c7:37:71:65: 8a:93:fd:55:4f:65:4b:87:68:5a:6a:dc:c6:a6:ca:70:45:89: 89:40:96:35:b3:5f:09:da:f0:3d:dd:e8:a7:9c:2f:88:41:41: 2c:68:67:4d:dd:6f:93:e0:64:43:dd:25:17:f2:0e:14:df:6e: 40:ff:69:8f:c6:dc:b8:53:9e:76:0d:38:99:b0:a3:3f:95:d2: b2:b1:d6:3a:9b:b2:1c:58:43:e0:64:3d:5c:86:d0:57:bd:7a: a7:08:f6:31:d2:9d:68:2a:af:bf:9d:57:02:4a:36:9f:20:72: 1a:2b:b3:55:3b:49:c6:2a:1c:97:d5:f7:45:1f:70:26:c0:e2: b0:08:cf:9f:64:2d:bd:44:3c:da:44:20:65:ea:31:e3:ff:14: c3:0a:54:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNUQxMTAvBgNVBAUTKDBGRTA2MzI0RjE3ODdDOEYyMTRGQkVBRTY3RDg4NkQy MkY4MTY3MDIwHhcNMjUxMTA1MDY1MTMzWhcNMjUxMTEyMDY1MTMzWjAYMRYwFAYD VQQDEw02OTBhZjNmNS1mMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rM7ekIJ7WIC6xjUFkTcUlWz1LfYbjml/RtIDC3QtwtYf2ik62PM3AMwT6zi VsVr9aUmWMRvnE5TuYU479x0Nm0pMkOTtB796QsGBFofD5zivLiek3YqTtd8K8Ub bsNgi34T+g8lxpjp03evwZfaGlG+/Ao4RUHaR/o64YXHEgkOvhtSHZHBik8TFBu2 iEi26ppKiBfuWErru6FgGwzwCfC4wyajTVX5QWF+tNazpfePZ74wmd8e/2Cqk3sF VcceF8FS+1yvKNp6gnMFT+wI1R+JzyHLaJ6oO+8yHha1qHdr2e2zLcrUpLGDwwpe V1TnL2lrGI16f4uFaEDyHERiHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUP7F7l bmvkz9+w84/CkWJ/SfLIMB8GA1UdIwQYMBaAFA/gYyTxeHyPIU++rmfYhtIvgWcC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI1RC85OEZEMUE0MkYx QzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJOGhUNzZ1WjlpRzBpLUJa d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI1RC85OEZEMUE0MkYxQzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJ OGhUNzZ1WjlpRzBpLUJad0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGwXCfTs1IqBjd5DxUs6fDwoH1jMrfV9adK5o1Zc0xsAcucXMhKrrz ynBwv9KBt885Ukg/A3254cMxhj9+KkPF0XITD3gdUM/ey7AagusJXvE/hl7GdkAo mmgK620fhbOJMWnZBGBQpcc3cWWKk/1VT2VLh2haatzGpspwRYmJQJY1s18J2vA9 3einnC+IQUEsaGdN3W+T4GRD3SUX8g4U325A/2mPxty4U552DTiZsKM/ldKysdY6 m7IcWEPgZD1chtBXvXqnCPYx0p1oKq+/nVcCSjafIHIaK7NVO0nGKhyX1fdFH3Am wOKwCM+fZC29RDzaRCBl6jHj/xTDClSo -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:07 2025 by rpki-client