$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft File: bjdXKUWj6XupZFmfpVXE20JjwOQ.mft (raw, json) Hash identifier: jEtSkHtiC/bdZIBzhpdFD+Jyiec0rVOCNXrK7rTZJ8Q= Subject key identifier: 67:4D:C5:23:C0:12:36:55:F4:61:99:36:21:D6:9B:85:9E:2D:D6:9E Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 Certificate issuer: /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft Manifest number: 5C Signing time: Wed 05 Nov 2025 05:17:13 +0000 Manifest this update: Wed 05 Nov 2025 05:17:12 +0000 Manifest next update: Wed 12 Nov 2025 05:17:12 +0000 Files and hashes: 1: bjdXKUWj6XupZFmfpVXE20JjwOQ.crl (hash: Csm9FMXKpX9N6oiaK65ds+k2Sn83eSUASIq6i7uDE0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Validity Not Before: Nov 5 05:17:12 2025 GMT Not After : Nov 12 05:17:12 2025 GMT Subject: CN=690addd8-e759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:d3:19:d6:14:9b:85:73:60:b8:aa:30:66: ce:68:bc:1f:74:8f:71:a7:34:dd:7e:57:f9:21:43: 9d:ff:3d:54:59:51:7b:54:95:0f:a2:24:2c:fa:c0: 7f:96:98:80:0b:ea:42:e6:c1:36:93:09:20:64:08: a5:ce:4b:50:28:8b:a7:ab:07:21:6c:53:b2:d7:dd: 98:4d:06:43:50:1e:e8:21:02:ca:c0:1d:3e:5c:64: 25:a4:66:61:2e:5b:03:60:5a:6b:a7:6e:b2:29:4e: d4:bb:e0:45:61:b1:fb:b8:22:fd:a3:7f:e9:98:3a: b5:7a:7e:e9:bc:c6:ad:4e:96:0c:1f:04:35:f4:f4: c5:16:f0:fb:51:d2:1a:23:d0:4b:0e:68:d1:1b:af: 2d:49:a8:53:fa:d1:b8:50:6a:a7:c5:4d:0e:68:e8: 41:64:60:7f:9b:12:a4:98:98:09:03:f0:d2:69:db: 1b:63:6f:31:2b:7b:8d:70:51:1e:43:65:de:a4:d1: d0:27:84:16:0f:aa:7f:07:2c:4e:16:47:66:9a:0c: 18:44:ca:e5:f7:26:12:98:5e:53:4a:e2:9e:91:b8: d8:05:63:cf:62:78:2c:99:cf:3a:d3:56:a6:3d:5b: c9:d0:f7:73:a7:1e:1c:75:2e:09:98:8e:cb:da:1d: 80:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4D:C5:23:C0:12:36:55:F4:61:99:36:21:D6:9B:85:9E:2D:D6:9E X509v3 Authority Key Identifier: keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:38:bb:99:a8:cb:9c:37:e7:93:9f:82:4e:62:84:69:c0:59: 01:f8:44:82:43:28:40:b4:6c:0f:6a:50:76:c6:14:4e:68:8d: ac:b4:01:16:82:55:1c:39:7f:71:6b:c9:9d:7e:1f:55:f1:2d: c7:b0:cc:0b:58:cd:38:1b:b3:fe:c8:14:1f:e8:7d:13:0a:2e: 74:c2:6a:55:83:f2:29:a6:e7:2f:d0:69:2a:2c:98:79:10:d3: 24:78:d1:09:7e:66:8c:a8:2c:13:09:e2:3a:2e:ca:aa:be:2e: 3c:05:24:13:56:37:1a:c3:4f:f9:84:9f:06:4b:e8:e6:c4:02: 88:bd:3e:b7:a7:3c:fa:f2:2a:9b:b4:ec:08:90:e8:e0:9d:2d: b7:a2:dc:eb:2d:ef:b1:4d:db:42:38:0a:c5:fc:1b:2d:f2:4e: 9c:0b:60:3a:1d:3e:92:61:5e:c0:e7:84:b7:1d:c3:5e:ab:5e: 46:dd:44:6c:2d:21:48:19:65:49:cc:1d:8b:69:4c:d1:24:f4: 99:69:02:e8:86:41:59:ae:77:12:95:06:a2:fd:80:bb:a5:67: 70:0a:ea:2e:be:82:fe:31:5a:9d:6e:c1:eb:99:4d:55:6f:d1: 58:04:59:8d:1c:00:ff:5c:da:58:4a:ae:7f:22:07:83:aa:b8: 7f:3a:5b:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjMwMjExMC8GA1UEBRMoNkUzNzU3Mjk0NUEzRTk3QkE5NjQ1OTlGQTU1NUM0REI0 MjYzQzBFNDAeFw0yNTExMDUwNTE3MTJaFw0yNTExMTIwNTE3MTJaMBgxFjAUBgNV BAMTDTY5MGFkZGQ4LWU3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu9dMZ1hSbhXNguKowZs5ovB90j3GnNN1+V/khQ53/PVRZUXtUlQ+iJCz6wH+W mIAL6kLmwTaTCSBkCKXOS1Aoi6erByFsU7LX3ZhNBkNQHughAsrAHT5cZCWkZmEu WwNgWmunbrIpTtS74EVhsfu4Iv2jf+mYOrV6fum8xq1OlgwfBDX09MUW8PtR0hoj 0EsOaNEbry1JqFP60bhQaqfFTQ5o6EFkYH+bEqSYmAkD8NJp2xtjbzEre41wUR5D Zd6k0dAnhBYPqn8HLE4WR2aaDBhEyuX3JhKYXlNK4p6RuNgFY89ieCyZzzrTVqY9 W8nQ93OnHhx1LgmYjsvaHYBhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ03FI8AS NlX0YZk2IdabhZ4t1p4wHwYDVR0jBBgwFoAUbjdXKUWj6XupZFmfpVXE20JjwOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MzAyLzM2MjcyREU4MzA2 NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1cFpGbWZwVlhFMjBKandP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYmpkWEtVV2o2WHVwWkZtZnBWWEUyMEpqd09RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MzAyLzM2MjcyREU4MzA2NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1 cFpGbWZwVlhFMjBKandPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAo4u5moy5w355Ofgk5ihGnAWQH4RIJDKEC0bA9qUHbGFE5ojay0ARaC VRw5f3FryZ1+H1XxLcewzAtYzTgbs/7IFB/ofRMKLnTCalWD8imm5y/QaSosmHkQ 0yR40Ql+ZoyoLBMJ4jouyqq+LjwFJBNWNxrDT/mEnwZL6ObEAoi9PrenPPryKpu0 7AiQ6OCdLbei3Ost77FN20I4CsX8Gy3yTpwLYDodPpJhXsDnhLcdw16rXkbdRGwt IUgZZUnMHYtpTNEk9JlpAuiGQVmudxKVBqL9gLulZ3AK6i6+gv4xWp1uweuZTVVv 0VgEWY0cAP9c2lhKrn8iB4OquH86W28= -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:20 2025 by rpki-client