$ rpki-client -vvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft File: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json) Hash identifier: IkUW69PK3oCWDip/OfLahw9FwssbFf3VSWzzqMMqT2U= Subject key identifier: C5:B6:BA:81:F6:FC:4F:55:D0:EC:91:95:5A:69:FC:DC:AE:7B:E9:C7 Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86 Certificate issuer: /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft Manifest number: 17 Signing time: Mon 03 Nov 2025 07:53:21 +0000 Manifest this update: Mon 03 Nov 2025 07:53:21 +0000 Manifest next update: Mon 10 Nov 2025 07:53:21 +0000 Files and hashes: 1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: 6kbcKZM6UqJlK9pCwQX6BSsfx9jWoIRiAxANZKQvTgQ=) 2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: lUWsYl532wJJWUk+oUDmB7VdeqxtkYdMM4ni2vAOoF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686 Validity Not Before: Nov 3 07:53:21 2025 GMT Not After : Nov 10 07:53:21 2025 GMT Subject: CN=69085f71-cf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:5e:d6:c3:a9:a7:d3:f9:d2:40:0e:86:a0: f4:aa:5f:6a:bb:7e:0a:20:a1:50:29:6b:38:d1:3c: 6c:5f:a5:69:df:23:1c:b1:f1:e2:3f:dc:af:f7:40: 72:05:13:e6:54:c8:d1:81:f5:7d:dc:24:b7:c7:d8: 6f:82:da:4b:42:3a:c6:4b:c0:ff:2e:b9:bf:d7:c8: 56:c9:57:75:33:f6:41:45:9f:41:67:ff:8c:13:6b: e3:8a:34:31:fa:d4:62:e3:45:09:36:a2:8d:ea:df: b0:f0:79:3e:be:5b:78:40:00:0c:cb:8e:48:ce:5f: bf:ee:3c:9b:0a:1b:d0:ac:bd:21:d2:6e:46:f4:9c: c9:f9:59:21:96:c6:ec:b2:08:e6:9e:1a:5f:dd:89: fc:1e:67:c1:99:3d:78:a3:de:24:87:b8:62:8d:6c: b6:d4:61:15:9d:7e:55:69:8f:ce:d4:10:53:6f:5e: 2d:bf:7a:3f:c8:85:3c:e8:11:24:a0:6b:82:c4:66: e9:01:a4:a6:8f:2a:e7:58:bd:5b:78:1a:41:24:02: b5:e3:49:93:70:7e:87:bc:9b:a1:92:3e:41:0e:92: f2:68:b0:ec:e8:f6:5f:3a:fb:0f:03:83:6b:ad:bb: 46:74:d0:b1:89:2d:b7:11:b8:b5:7c:30:02:74:8f: 6c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B6:BA:81:F6:FC:4F:55:D0:EC:91:95:5A:69:FC:DC:AE:7B:E9:C7 X509v3 Authority Key Identifier: keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:3c:1a:33:ee:d3:cb:b9:e6:49:44:cf:3b:21:8d:94:05:59: 5a:46:19:31:44:ab:23:a1:39:ea:e1:fb:70:9b:41:4e:6b:ad: 05:ed:d3:c4:b4:28:fb:60:71:1b:2c:79:50:0a:55:b6:da:f2: 6c:3e:cb:e3:5f:19:67:a0:d4:6a:84:5b:3e:17:96:fa:bb:63: 91:a8:f5:50:ba:32:4c:b0:16:9e:2c:fc:f5:2e:0f:89:1b:80: 64:33:eb:80:c7:1a:04:85:b8:d3:62:cb:58:cd:72:70:0b:28: b9:c1:ab:8b:f5:04:e2:eb:ea:89:ff:e6:80:df:26:42:03:0d: 4b:c5:f5:fb:d7:c3:05:32:b4:a9:94:54:24:a4:34:13:26:e7: 54:b3:c3:4c:10:9b:25:3f:10:57:3f:c1:46:5c:e2:2a:59:3c: 05:be:c6:af:ed:aa:30:f9:28:7b:80:f9:0d:e3:68:9c:15:92: 09:88:1c:d3:34:d4:c4:cc:34:d1:29:ed:fc:65:80:21:96:f6: bf:b6:7c:e4:9f:cb:34:9e:14:aa:07:11:ef:39:08:28:d5:ce: 88:08:a1:35:eb:c5:61:f3:f7:a8:17:ba:d3:cb:f4:37:e9:27: d3:91:71:5b:ba:83:6c:f8:7b:c2:2d:e5:c2:5b:9e:f9:c2:93: b7:e6:2e:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTAzQzExMC8GA1UEBRMoNkU5QTk4RDlCRDY2Mzg3RjQ4M0QwNkI2ODMzREEyREM0 QTdGMzY4NjAeFw0yNTExMDMwNzUzMjFaFw0yNTExMTAwNzUzMjFaMBgxFjAUBgNV BAMTDTY5MDg1ZjcxLWNmOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUcV7Ww6mn0/nSQA6GoPSqX2q7fgogoVApazjRPGxfpWnfIxyx8eI/3K/3QHIF E+ZUyNGB9X3cJLfH2G+C2ktCOsZLwP8uub/XyFbJV3Uz9kFFn0Fn/4wTa+OKNDH6 1GLjRQk2oo3q37DweT6+W3hAAAzLjkjOX7/uPJsKG9CsvSHSbkb0nMn5WSGWxuyy COaeGl/difweZ8GZPXij3iSHuGKNbLbUYRWdflVpj87UEFNvXi2/ej/IhTzoESSg a4LEZukBpKaPKudYvVt4GkEkArXjSZNwfoe8m6GSPkEOkvJosOzo9l86+w8Dg2ut u0Z00LGJLbcRuLV8MAJ0j2xdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxba6gfb8 T1XQ7JGVWmn83K576ccwHwYDVR0jBBgwFoAUbpqY2b1mOH9IPQa2gz2i3Ep/NoYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMDNDL0ZBNDI4RjU0OUEw NzExRjA4MTAxN0U4NkM0RjlBRTAyL2JwcVkyYjFtT0g5SVBRYTJnejJpM0VwX05v WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYnBxWTJiMW1PSDlJUFFhMmd6MmkzRXBfTm9ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx MDNDL0ZBNDI4RjU0OUEwNzExRjA4MTAxN0U4NkM0RjlBRTAyL2JwcVkyYjFtT0g5 SVBRYTJnejJpM0VwX05vWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADg8GjPu08u55klEzzshjZQFWVpGGTFEqyOhOerh+3CbQU5rrQXt08S0 KPtgcRsseVAKVbba8mw+y+NfGWeg1GqEWz4Xlvq7Y5Go9VC6MkywFp4s/PUuD4kb gGQz64DHGgSFuNNiy1jNcnALKLnBq4v1BOLr6on/5oDfJkIDDUvF9fvXwwUytKmU VCSkNBMm51Szw0wQmyU/EFc/wUZc4ipZPAW+xq/tqjD5KHuA+Q3jaJwVkgmIHNM0 1MTMNNEp7fxlgCGW9r+2fOSfyzSeFKoHEe85CCjVzogIoTXrxWHz96gXutPL9Dfp J9ORcVu6g2z4e8It5cJbnvnCk7fmLto= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:38 2025 by rpki-client