$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft File: bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json) Hash identifier: Srhsi8q2H/MfwJrXvng7/SyGmzs79budqjduZrj/gZ8= Subject key identifier: A9:A1:B7:AD:66:81:DD:7C:73:93:DA:1D:DD:B8:BD:C5:51:61:64:27 Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B Certificate issuer: /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft Manifest number: 0126 Signing time: Wed 05 Nov 2025 04:53:31 +0000 Manifest this update: Wed 05 Nov 2025 04:53:30 +0000 Manifest next update: Wed 12 Nov 2025 04:53:30 +0000 Files and hashes: 1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: qse+iqEvTGapR7R0HKTQcqKfS0dMxILYajtcU6uHoHo=) 2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: EKbBGVNf6UZGjGH5PT+x5TqElAgqJbm8pSoP/IIyglU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B Validity Not Before: Nov 5 04:53:30 2025 GMT Not After : Nov 12 04:53:30 2025 GMT Subject: CN=690ad84b-dd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:59:8b:a6:e5:58:88:66:6b:1b:32:29:9e: 30:f7:76:bd:29:10:e8:3a:71:e4:17:b8:c2:29:3b: 70:53:c2:d1:84:d9:08:4b:d1:20:db:0f:b6:bb:fa: ca:83:11:95:87:f8:16:cc:44:68:b2:0d:26:af:00: 13:09:9d:b8:a9:ad:b9:b1:4e:35:a9:8c:87:f0:9f: 34:74:14:3f:e8:2b:ba:44:b5:df:37:0a:ae:60:ff: b5:19:16:6d:55:2f:99:bb:1f:cf:ad:85:95:34:b6: 78:6d:5a:ce:6e:a8:06:21:2a:5f:9b:9b:8a:70:aa: 34:15:dc:54:05:c2:73:6d:c9:a4:16:83:dc:b4:fd: 11:16:b0:7e:0e:86:c7:f9:39:41:e8:eb:8f:27:11: e7:ad:cd:70:4f:c0:b7:0b:27:9f:97:98:43:4f:16: 2f:df:5c:6a:00:eb:5e:fe:7b:e0:01:95:31:3b:14: 55:ea:e5:fb:c6:c3:25:27:1a:3d:1e:3d:fb:d1:c3: fa:ad:cc:c9:3a:02:9a:e9:5f:73:36:e4:78:51:98: 1e:82:d7:e8:68:d4:9b:56:ac:89:f0:fe:9d:4b:26: 26:84:80:88:df:c0:bb:01:15:da:78:5d:4e:14:ff: 4c:a6:ec:c8:36:a1:77:3a:6d:20:b5:9f:39:4c:d7: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A1:B7:AD:66:81:DD:7C:73:93:DA:1D:DD:B8:BD:C5:51:61:64:27 X509v3 Authority Key Identifier: keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:03:80:1d:80:9f:51:7b:e6:fe:c1:52:d8:00:c9:d4:cf:79: a5:9f:ae:be:5c:2d:95:79:7e:14:79:7a:2c:14:0f:30:4d:16: 07:1b:07:75:af:cc:82:3a:4c:e4:68:83:48:7e:d7:38:3b:eb: 79:63:b9:ea:d8:39:c1:f6:f1:93:4e:f5:b9:76:26:e1:6f:56: 22:18:cc:5d:86:a4:f9:dc:f5:54:95:6c:5f:8f:6a:e1:d3:12: 30:1b:b2:40:64:d1:29:8d:cd:2e:63:20:91:80:53:04:a0:8b: a1:3a:72:2d:11:f2:ec:9a:8d:3e:e2:d2:3d:86:9d:df:b1:b5: 8d:02:1b:6d:9f:51:f4:f2:6d:cf:88:20:98:20:b6:0b:af:8c: ef:36:8a:14:6f:61:0a:f7:a1:6f:bc:87:8a:ec:af:fa:fc:ac: df:b3:21:25:65:90:04:4b:08:21:7c:a6:09:7a:aa:61:62:70: cf:25:fa:8f:00:10:69:9e:6a:f7:f6:be:7e:76:55:74:66:59: bb:3a:8f:1b:0b:45:ad:d1:79:87:2e:53:31:14:55:3a:f6:89: 16:c6:a9:e8:d2:5d:ce:81:4e:af:74:e4:bc:1b:14:ec:b1:e8: eb:aa:8d:af:57:ce:94:a2:2d:07:55:34:1b:bb:55:ff:a3:cf: 4b:b2:6a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDZFNDU3MzM0ODY4MDMyNkQzREFERTk4NTIxNUQyMjY2 MjhCOUYxNkIwHhcNMjUxMTA1MDQ1MzMwWhcNMjUxMTEyMDQ1MzMwWjAYMRYwFAYD VQQDEw02OTBhZDg0Yi1kZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgpZi6blWIhmaxsyKZ4w93a9KRDoOnHkF7jCKTtwU8LRhNkIS9Eg2w+2u/rK gxGVh/gWzERosg0mrwATCZ24qa25sU41qYyH8J80dBQ/6Cu6RLXfNwquYP+1GRZt VS+Zux/PrYWVNLZ4bVrObqgGISpfm5uKcKo0FdxUBcJzbcmkFoPctP0RFrB+DobH +TlB6OuPJxHnrc1wT8C3Cyefl5hDTxYv31xqAOte/nvgAZUxOxRV6uX7xsMlJxo9 Hj370cP6rczJOgKa6V9zNuR4UZgegtfoaNSbVqyJ8P6dSyYmhICI38C7ARXaeF1O FP9MpuzINqF3Om0gtZ85TNcQTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmht61m gd18c5PaHd24vcVRYWQnMB8GA1UdIwQYMBaAFG5FczSGgDJtPa3phSFdImYoufFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi81MDU2QzhCMjAw NTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1tMDlyZW1GSVYwaVppaTU4 V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi81MDU2QzhCMjAwNTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1t MDlyZW1GSVYwaVppaTU4V3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsA4AdgJ9Re+b+wVLYAMnUz3mln66+XC2VeX4UeXosFA8wTRYHGwd1 r8yCOkzkaINIftc4O+t5Y7nq2DnB9vGTTvW5dibhb1YiGMxdhqT53PVUlWxfj2rh 0xIwG7JAZNEpjc0uYyCRgFMEoIuhOnItEfLsmo0+4tI9hp3fsbWNAhttn1H08m3P iCCYILYLr4zvNooUb2EK96FvvIeK7K/6/KzfsyElZZAESwghfKYJeqphYnDPJfqP ABBpnmr39r5+dlV0Zlm7Oo8bC0Wt0XmHLlMxFFU69okWxqno0l3OgU6vdOS8GxTs sejrqo2vV86Uoi0HVTQbu1X/o89Lsmrw -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:18 2025 by rpki-client