$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: JPT8goTey3XU/zLenDlKaY3DAtJf1aRHoxKxeBQqzVk= Subject key identifier: EE:72:E5:EE:3A:87:8F:33:C3:4E:1A:E0:E5:5A:F0:F1:3C:82:83:58 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0498 Signing time: Wed 05 Nov 2025 00:05:43 +0000 Manifest this update: Wed 05 Nov 2025 00:05:42 +0000 Manifest next update: Wed 12 Nov 2025 00:05:42 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: py7fbZiQWP54sSxhJwn0z6A4N0q3m2z2/53w3AtOFh0=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Nov 5 00:05:42 2025 GMT Not After : Nov 12 00:05:42 2025 GMT Subject: CN=690a94d6-2a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:99:27:21:b4:59:f4:f7:2f:9b:c9:51:36: 07:d1:c1:4b:1e:20:71:46:2e:7f:82:4e:e9:c5:ce: 90:b7:3a:a1:cc:6d:e8:96:6c:0d:4c:7b:52:66:4d: 11:d0:cd:f8:08:c2:2d:ff:85:f4:d9:81:d6:a3:de: 0c:e4:68:a4:0a:fd:e5:e7:67:c9:2e:76:43:8d:6a: b2:55:78:70:33:24:be:0a:88:a1:2a:1c:45:9f:21: a6:b2:7e:44:c2:06:c7:00:ef:85:3c:82:eb:a1:b0: 63:d6:7b:e4:77:d7:78:67:01:c6:b7:e5:95:c1:d1: cb:3b:a6:d0:cc:c3:09:82:e1:4f:a6:38:9f:b5:46: 80:c8:b4:eb:f9:41:eb:a1:d8:23:41:34:b2:a0:21: 91:ae:13:29:78:45:d1:e8:84:b4:ad:ff:b4:55:ce: 26:c1:81:33:20:e0:d0:10:cf:50:4d:1c:73:e7:51: 12:71:af:b5:60:fb:56:ea:43:fb:b3:67:c0:3e:c2: 2c:12:f3:0d:14:0e:e6:fa:f9:ec:ec:c1:db:46:f5: 9a:57:95:48:29:2b:be:c4:ca:50:55:f8:87:6d:b3: 2f:e9:6b:66:61:82:25:35:8c:3a:c7:22:68:32:fe: ca:db:af:65:c6:8c:60:0d:ec:62:c6:fd:0c:ba:80: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:72:E5:EE:3A:87:8F:33:C3:4E:1A:E0:E5:5A:F0:F1:3C:82:83:58 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:67:43:dd:48:65:c9:e7:8c:7e:c4:60:a2:ce:1b:37:05:47: 7e:8b:b1:80:6d:16:9b:3e:eb:9f:62:ac:ad:9a:ad:f2:7d:ac: 0a:aa:89:02:38:44:b8:32:03:f4:a0:bb:8d:da:75:bb:d9:64: 63:a5:e1:6e:3f:07:8c:b0:23:43:e2:4a:53:d2:40:72:fd:0d: 33:64:c7:cf:d9:a6:03:0c:1a:4a:4b:ce:1d:f8:da:51:91:d1: ac:eb:9e:22:94:e5:9e:28:f3:8e:08:b1:de:76:46:3a:f2:7b: da:67:b4:f2:b9:cd:cd:2f:e7:0d:2e:e7:d7:00:22:4f:e9:a8: ff:8d:32:92:07:23:34:25:09:55:20:bb:a5:3e:10:17:4b:83: 3e:ed:f9:36:17:3d:bc:a9:bf:47:29:6a:3f:d5:4d:93:71:28: 6f:83:b2:87:fc:04:5c:16:0e:78:fe:9e:49:a5:43:df:8f:64: 19:d0:4f:61:1b:74:e4:8c:6b:55:5a:dd:60:52:fc:b5:38:e0: 85:db:88:71:e1:11:28:63:38:ea:de:d1:fe:ac:1f:a2:40:57: 09:10:2c:35:21:8e:a5:34:d2:26:25:08:34:9c:cb:c1:85:38: a1:c0:00:e2:0a:fd:ab:72:26:85:2a:b0:4f:67:cf:3b:94:0f: 90:bc:76:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUxMTA1MDAwNTQyWhcNMjUxMTEyMDAwNTQyWjAYMRYwFAYD VQQDEw02OTBhOTRkNi0yYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut+ZJyG0WfT3L5vJUTYH0cFLHiBxRi5/gk7pxc6QtzqhzG3olmwNTHtSZk0R 0M34CMIt/4X02YHWo94M5GikCv3l52fJLnZDjWqyVXhwMyS+CoihKhxFnyGmsn5E wgbHAO+FPILrobBj1nvkd9d4ZwHGt+WVwdHLO6bQzMMJguFPpjiftUaAyLTr+UHr odgjQTSyoCGRrhMpeEXR6IS0rf+0Vc4mwYEzIODQEM9QTRxz51ESca+1YPtW6kP7 s2fAPsIsEvMNFA7m+vns7MHbRvWaV5VIKSu+xMpQVfiHbbMv6WtmYYIlNYw6xyJo Mv7K269lxoxgDexixv0MuoDBHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5y5e46 h48zw04a4OVa8PE8goNYMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCZ0PdSGXJ54x+xGCizhs3BUd+i7GAbRabPuufYqytmq3yfawKqokC OES4MgP0oLuN2nW72WRjpeFuPweMsCND4kpT0kBy/Q0zZMfP2aYDDBpKS84d+NpR kdGs654ilOWeKPOOCLHedkY68nvaZ7Tyuc3NL+cNLufXACJP6aj/jTKSByM0JQlV ILulPhAXS4M+7fk2Fz28qb9HKWo/1U2TcShvg7KH/ARcFg54/p5JpUPfj2QZ0E9h G3TkjGtVWt1gUvy1OOCF24hx4REoYzjq3tH+rB+iQFcJECw1IY6lNNImJQg0nMvB hTihwADiCv2rciaFKrBPZ887lA+QvHYw -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:05 2025 by rpki-client