$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json) Hash identifier: /cqCclWLimmtvY11P/Tsbir3qjuQqeW2/DZSVgInxGE= Subject key identifier: 54:0C:69:FD:85:B2:67:62:61:30:C2:A7:2B:35:45:19:3B:35:87:F5 Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft Manifest number: 01A3 Signing time: Tue 04 Nov 2025 15:51:30 +0000 Manifest this update: Tue 04 Nov 2025 15:51:29 +0000 Manifest next update: Tue 11 Nov 2025 15:51:29 +0000 Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: IrcscfIFnKZeDsvoWx8H9F5xvlg9ZvaJkvbTbvU3WHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Validity Not Before: Nov 4 15:51:29 2025 GMT Not After : Nov 11 15:51:29 2025 GMT Subject: CN=690a2101-cdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:9a:5e:0b:37:64:f8:a9:24:b7:94:ee:d6: 5e:cb:de:55:51:56:f6:3f:82:37:4b:d7:37:b4:f9: 8a:0e:93:f1:99:2f:70:bb:51:2f:6b:1f:83:bf:c1: ba:3c:21:e2:bb:5a:31:e2:ab:fe:f0:d0:01:6f:a4: 47:af:b0:19:fb:f5:f6:84:1b:83:09:6f:0d:69:43: 04:8a:26:10:e7:16:df:14:d5:e6:49:3e:1c:a1:f6: 24:10:6e:09:2d:14:ab:6b:ee:f2:a0:8a:70:91:69: 54:ca:ab:e6:31:e0:76:4f:d7:ac:a8:ea:7f:85:8d: 18:e9:0a:b4:30:e5:9e:1e:2e:40:63:29:fe:40:68: b0:fc:1b:f9:eb:ee:7d:59:7b:e9:29:ae:62:bd:18: 39:c8:fa:7d:9e:31:8e:d0:2e:24:96:b8:9d:79:fc: cf:a0:56:4b:b7:5a:e0:1d:98:ff:c9:8c:76:ac:e0: a5:45:3d:27:f9:63:94:59:55:38:ce:14:a6:5e:38: 96:70:d3:6f:b2:b6:66:c9:eb:12:10:5e:6e:45:9f: 1c:c5:2e:9e:fe:6c:87:55:2f:b2:9e:5e:7c:6c:b4: 02:fc:35:cb:a7:34:6e:46:42:9e:39:21:3e:55:22: 92:6d:4f:75:d4:2d:2f:6c:f6:e8:01:b4:8f:f1:a9: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0C:69:FD:85:B2:67:62:61:30:C2:A7:2B:35:45:19:3B:35:87:F5 X509v3 Authority Key Identifier: keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b1:84:db:4f:b3:dd:b6:31:48:28:f4:3a:fb:90:f0:e1:81: a9:5d:b5:49:bf:3a:3b:86:80:7c:ea:d0:83:e6:2d:12:28:7a: 73:92:4e:1e:16:1e:67:50:c4:ca:8f:cd:04:b2:b8:49:58:4f: 08:d5:79:27:1b:36:14:6c:e3:c4:b4:f5:6c:b3:a1:18:c9:34: 83:0e:7f:e9:e9:a5:cf:1f:0d:af:2f:13:5b:0b:96:dd:80:47: 9a:eb:98:7b:e2:f7:d6:b0:5e:78:03:4c:49:c7:52:c5:b2:f4: c3:21:80:e6:b7:80:ba:ad:82:ff:fb:3f:5b:63:01:53:88:59: 42:a0:a5:ed:41:28:5c:46:5e:cb:05:39:81:21:6e:75:01:0a: d5:0a:04:ff:96:8d:2b:8e:74:0a:85:fe:88:eb:d4:74:fb:d5: ba:cb:1a:a9:1b:0b:49:57:75:e4:08:8e:6a:72:e2:93:07:ae: 72:68:42:0d:ef:38:e5:cd:55:e7:5c:80:f8:10:14:b9:ca:b4: df:e6:a9:e4:a2:87:7d:c3:11:c6:59:b8:63:c5:05:99:e9:4c: 6c:26:07:b9:e1:80:1f:4a:17:3e:29:62:a8:a6:47:ea:06:f1: db:42:8f:33:8e:2e:e2:2b:d5:7e:94:91:50:7a:05:93:fc:d9: 2e:23:aa:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF QzMyMEJDRTIwHhcNMjUxMTA0MTU1MTI5WhcNMjUxMTExMTU1MTI5WjAYMRYwFAYD VQQDEw02OTBhMjEwMS1jZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7uaXgs3ZPipJLeU7tZey95VUVb2P4I3S9c3tPmKDpPxmS9wu1Evax+Dv8G6 PCHiu1ox4qv+8NABb6RHr7AZ+/X2hBuDCW8NaUMEiiYQ5xbfFNXmST4cofYkEG4J LRSra+7yoIpwkWlUyqvmMeB2T9esqOp/hY0Y6Qq0MOWeHi5AYyn+QGiw/Bv56+59 WXvpKa5ivRg5yPp9njGO0C4klridefzPoFZLt1rgHZj/yYx2rOClRT0n+WOUWVU4 zhSmXjiWcNNvsrZmyesSEF5uRZ8cxS6e/myHVS+ynl58bLQC/DXLpzRuRkKeOSE+ VSKSbU911C0vbPboAbSP8anBZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQMaf2F smdiYTDCpys1RRk7NYf1MB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvsYTbT7PdtjFIKPQ6+5Dw4YGpXbVJvzo7hoB86tCD5i0SKHpzkk4e Fh5nUMTKj80EsrhJWE8I1XknGzYUbOPEtPVss6EYyTSDDn/p6aXPHw2vLxNbC5bd gEea65h74vfWsF54A0xJx1LFsvTDIYDmt4C6rYL/+z9bYwFTiFlCoKXtQShcRl7L BTmBIW51AQrVCgT/lo0rjnQKhf6I69R0+9W6yxqpGwtJV3XkCI5qcuKTB65yaEIN 7zjlzVXnXID4EBS5yrTf5qnkood9wxHGWbhjxQWZ6UxsJge54YAfShc+KWKopkfq BvHbQo8zji7iK9V+lJFQegWT/NkuI6rz -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:01 2025 by rpki-client