$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft File: BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json) Hash identifier: h0ingBvbR2MMX6U1FEjWMPKbj97mWDwKdims0Dr7b3k= Subject key identifier: 95:16:16:2B:D6:5A:6B:2D:83:D4:67:BB:3D:A6:37:EA:3F:4E:9C:78 Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1 Certificate issuer: /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft Manifest number: 34D3 Signing time: Tue 04 Nov 2025 15:17:26 +0000 Manifest this update: Tue 04 Nov 2025 15:17:25 +0000 Manifest next update: Tue 11 Nov 2025 15:17:25 +0000 Files and hashes: 1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: muWnKVZ0fAEQBrPzt0FZBLn0Au9IVhbUkLRh3gTytNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1 Validity Not Before: Nov 4 15:17:25 2025 GMT Not After : Nov 11 15:17:25 2025 GMT Subject: CN=690a1905-3e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5d:20:88:0c:67:a9:77:bd:9f:9b:cf:2a:02: 3f:a8:73:80:ab:b5:0e:72:0f:7f:bc:67:19:ec:7a: 79:78:d0:3c:b2:d2:5c:32:43:2c:13:a2:0d:b1:81: 1f:fc:8a:79:90:cc:fe:48:57:47:65:f6:1d:35:a4: af:b2:c8:41:02:20:e6:87:6a:25:7b:2d:68:49:c1: 41:39:3c:70:92:0e:23:95:5d:fc:b3:d2:4c:84:93: 7d:f2:99:f7:28:ac:65:4f:7d:a2:88:a9:d2:e9:16: ad:14:39:1f:14:4b:bd:28:91:ab:b2:30:19:b8:bd: 8a:87:43:95:9a:a3:9e:5d:c1:11:ff:de:fc:0a:8b: db:44:7c:71:3d:db:39:b0:cd:94:8d:c5:3e:e5:16: 3f:b8:b6:b6:30:93:63:70:f7:c2:56:10:41:64:72: a8:2b:0f:91:75:4e:24:8b:f5:2e:46:dc:c1:14:06: e6:05:96:d9:0d:10:71:ba:df:1b:2c:10:53:5b:19: 10:72:4f:cb:c0:a4:da:43:f6:49:37:90:9b:ed:cd: 47:0e:7a:2f:c6:9d:5d:58:88:2f:46:8c:86:2b:2a: ad:5d:c6:88:88:79:ea:3b:23:37:54:74:58:eb:76: 4b:b9:76:39:6a:b9:4a:e8:38:b6:8d:ce:e3:19:fb: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:16:16:2B:D6:5A:6B:2D:83:D4:67:BB:3D:A6:37:EA:3F:4E:9C:78 X509v3 Authority Key Identifier: keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a7:ec:30:4d:62:1c:43:74:01:63:d5:a1:09:e4:0b:4b:fb: ef:12:cc:d2:f0:75:65:00:e3:fc:98:25:06:ee:d3:a0:70:91: f4:21:da:c0:e0:8d:27:75:f6:29:fa:bd:8e:a9:29:37:a3:56: f2:08:ec:af:03:c2:a3:7d:2d:63:42:95:3a:74:6d:59:ef:18: 34:49:b0:43:0e:66:79:e8:40:f5:3b:76:d7:55:6d:fd:9a:a9: 73:fd:eb:ed:22:4a:e7:9e:f4:61:ea:19:90:21:67:d0:54:c7: e9:c6:13:7c:47:8a:68:cc:ca:39:51:41:06:46:d7:2d:64:c9: b2:73:96:a6:c0:fc:50:9d:fd:19:9d:7f:82:78:ba:5c:31:5e: d3:c9:23:06:52:97:33:c5:fb:a3:2d:8e:c9:1a:b9:81:93:70: 7e:58:5e:9d:a8:9d:98:d7:97:db:c0:8e:d8:c6:53:6f:29:9c: 0d:2a:dc:18:04:ac:ef:18:95:f2:2c:fa:9b:b0:c5:65:9d:d3: 12:f6:d0:15:aa:01:9a:a7:a1:1a:85:c8:b4:72:7d:49:c0:de: 1e:a8:19:2b:91:99:a8:66:9d:57:47:56:b8:4d:ba:84:75:f8: 09:8e:17:8e:16:06:17:ca:1c:05:b9:98:83:d4:6f:65:ea:5b: c2:5c:73:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY2ODIxMTAvBgNVBAUTKDA1MUM2NDdGRDlGQTkyMDE2MDY2ODY4Mzg2N0Q3RDNB OEJFNUQ5QzEwHhcNMjUxMTA0MTUxNzI1WhcNMjUxMTExMTUxNzI1WjAYMRYwFAYD VQQDEw02OTBhMTkwNS0zZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8V0giAxnqXe9n5vPKgI/qHOAq7UOcg9/vGcZ7Hp5eNA8stJcMkMsE6INsYEf /Ip5kMz+SFdHZfYdNaSvsshBAiDmh2oley1oScFBOTxwkg4jlV38s9JMhJN98pn3 KKxlT32iiKnS6RatFDkfFEu9KJGrsjAZuL2Kh0OVmqOeXcER/978CovbRHxxPds5 sM2UjcU+5RY/uLa2MJNjcPfCVhBBZHKoKw+RdU4ki/UuRtzBFAbmBZbZDRBxut8b LBBTWxkQck/LwKTaQ/ZJN5Cb7c1HDnovxp1dWIgvRoyGKyqtXcaIiHnqOyM3VHRY 63ZLuXY5arlK6Di2jc7jGftvpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUWFivW Wmstg9Rnuz2mN+o/Tpx4MB8GA1UdIwQYMBaAFAUcZH/Z+pIBYGaGg4Z9fTqL5dnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjY4Mi83NTg1RTAwQzFE QTgxMUUyOEQ4N0UzQTIwOEIwMkNEMi9CUnhrZjluNmtnRmdab2FEaG4xOU9vdmwy Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JSeGtmOW42a2dGZ1pvYURobjE5T292bDJjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjY4Mi83NTg1RTAwQzFEQTgxMUUyOEQ4N0UzQTIwOEIwMkNEMi9CUnhrZjluNmtn Rmdab2FEaG4xOU9vdmwyY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRp+wwTWIcQ3QBY9WhCeQLS/vvEszS8HVlAOP8mCUG7tOgcJH0IdrA 4I0ndfYp+r2OqSk3o1byCOyvA8KjfS1jQpU6dG1Z7xg0SbBDDmZ56ED1O3bXVW39 mqlz/evtIkrnnvRh6hmQIWfQVMfpxhN8R4pozMo5UUEGRtctZMmyc5amwPxQnf0Z nX+CeLpcMV7TySMGUpczxfujLY7JGrmBk3B+WF6dqJ2Y15fbwI7YxlNvKZwNKtwY BKzvGJXyLPqbsMVlndMS9tAVqgGap6Eahci0cn1JwN4eqBkrkZmoZp1XR1a4TbqE dfgJjheOFgYXyhwFuZiD1G9l6lvCXHMP -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:38 2025 by rpki-client