$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft File: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft (raw, json) Hash identifier: AX3opZCcSTOv0rVZ18+fcOwk0ExFKVZdC7rCyfG+o4k= Subject key identifier: 88:3E:3E:BF:4C:E6:9C:E5:42:4E:3A:FB:8F:0B:F4:B5:0E:44:26:31 Authority key identifier: 06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF Certificate issuer: /CN=A9179F22/serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft Manifest number: 0170 Signing time: Mon 03 Nov 2025 03:55:36 +0000 Manifest this update: Mon 03 Nov 2025 03:55:36 +0000 Manifest next update: Mon 10 Nov 2025 03:55:36 +0000 Files and hashes: 1: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl (hash: PzHyMMrsdqnP4lC15kQCVBkEYCadzIkTRqSGe/QTGY8=) 2: 2CDC448608D811EF8DFDE781C4F9AE02.roa (hash: eek0QODlRhbdv/MSirxCHdu3bMd0C4B0uUYmDtuZmC8=) 3: 2D7A0C2A08D811EF8DFDE781C4F9AE02.roa (hash: RbuUwT6s59ftT2m1syFLwpZ78+B6i6ZcO0YDrGRtGpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F22, serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF Validity Not Before: Nov 3 03:55:36 2025 GMT Not After : Nov 10 03:55:36 2025 GMT Subject: CN=690827b8-c928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:5d:bf:e4:2c:29:a0:25:15:52:3d:6f:51: 0c:ec:f5:73:b3:b4:4d:6a:4c:74:b8:ed:c6:b4:f1: 05:fe:58:98:ba:93:87:1e:d9:c1:64:94:7b:2c:4e: 53:71:a2:dd:ec:35:eb:35:06:e8:20:a8:b1:e3:b2: df:ca:49:5e:58:29:41:76:37:8f:5d:70:ea:af:7b: e6:6f:ea:e9:b9:74:fa:fc:22:98:74:4a:69:01:92: f6:c8:80:85:a2:0a:f7:e1:45:0e:f2:f4:8b:93:ab: b1:55:e1:d3:4d:a2:71:35:24:b6:26:87:dd:84:9e: 2f:57:e1:a9:82:62:16:e6:50:e7:dd:4f:14:3d:2d: 55:16:06:37:33:cf:62:54:e6:6a:ab:6d:d1:3c:e2: fd:eb:77:26:d4:ad:dd:8a:92:f4:c8:52:77:d1:c8: a4:de:ab:e4:49:c5:d6:a0:7a:40:9c:3f:5b:72:8c: 61:7c:d9:42:90:7c:55:a6:8b:c6:1e:5f:a3:e6:bf: be:17:e0:97:53:00:d9:de:eb:5d:f7:f0:f5:fb:de: c4:22:cb:7e:4b:77:1a:b1:3f:41:28:81:6c:e9:84: 3b:66:eb:1d:cc:ac:67:51:34:db:da:19:55:b3:2a: a7:43:9b:90:de:ea:3f:d6:0c:8f:7a:c4:60:e4:00: 8a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3E:3E:BF:4C:E6:9C:E5:42:4E:3A:FB:8F:0B:F4:B5:0E:44:26:31 X509v3 Authority Key Identifier: keyid:06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:06:32:f9:27:ce:2e:04:52:c0:09:9e:a6:cb:fc:3b:9c:80: 37:f1:e5:0e:34:45:ff:73:4e:7b:ba:3b:63:86:3c:f5:45:c9: 29:13:29:c7:09:4c:d0:5a:2b:43:12:11:f8:b8:3b:15:a4:71: e7:cd:4b:47:0d:b6:c9:10:6b:58:3b:1a:8e:11:56:66:5b:c4: 1e:b6:ea:71:d7:2b:1b:2b:1c:d7:00:92:a1:8e:24:91:63:32: 87:7d:91:ce:8b:1a:ee:3e:b4:8d:e8:b5:6f:38:ee:b6:89:61: 2f:a4:54:d2:3f:88:3a:25:fe:7c:79:51:9e:76:65:ae:0e:b8: f5:d0:7e:84:ff:af:19:3e:bd:eb:b0:f7:d3:83:62:85:05:51: 99:d2:96:b1:58:64:d3:95:48:1e:f2:b5:84:26:76:ef:f7:a1: 5c:70:7d:59:16:db:7f:2c:51:03:80:7c:de:62:19:86:ff:b4: 41:5b:12:a7:47:9e:46:62:5d:18:ba:a4:5d:4f:74:9a:d9:9f: e7:ce:cd:b6:55:79:57:04:78:70:ed:52:95:76:8a:58:9c:88: c5:7c:4a:37:fb:b1:dd:c5:92:51:6d:03:e1:76:bb:1f:4b:57: 2c:e9:7b:b4:7e:c0:7c:0b:61:1e:ce:c5:3f:1c:11:0f:04:bc: 58:c1:a6:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGMjIxMTAvBgNVBAUTKDA2M0JBRjNFRDdCNDEwNzFBOTBEOUZBRTQxMEZGNDc4 ODhGMEJFREYwHhcNMjUxMTAzMDM1NTM2WhcNMjUxMTEwMDM1NTM2WjAYMRYwFAYD VQQDEw02OTA4MjdiOC1jOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0pdv+QsKaAlFVI9b1EM7PVzs7RNakx0uO3GtPEF/liYupOHHtnBZJR7LE5T caLd7DXrNQboIKix47LfykleWClBdjePXXDqr3vmb+rpuXT6/CKYdEppAZL2yICF ogr34UUO8vSLk6uxVeHTTaJxNSS2JofdhJ4vV+GpgmIW5lDn3U8UPS1VFgY3M89i VOZqq23RPOL963cm1K3dipL0yFJ30cik3qvkScXWoHpAnD9bcoxhfNlCkHxVpovG Hl+j5r++F+CXUwDZ3utd9/D1+97EIst+S3casT9BKIFs6YQ7ZusdzKxnUTTb2hlV syqnQ5uQ3uo/1gyPesRg5ACKIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIg+Pr9M 5pzlQk46+48L9LUORCYxMB8GA1UdIwQYMBaAFAY7rz7XtBBxqQ2frkEP9HiI8L7f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DNkY1NUZBODhG MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVIR3BEWi11UVFfMGVJand2 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JqdXZQdGUwRUhHcERaLXVRUV8wZUlqd3Z0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUYyMi9DNkY1NUZBODhGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVI R3BEWi11UVFfMGVJand2dDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8BjL5J84uBFLACZ6my/w7nIA38eUONEX/c057ujtjhjz1RckpEynH CUzQWitDEhH4uDsVpHHnzUtHDbbJEGtYOxqOEVZmW8Qetupx1ysbKxzXAJKhjiSR YzKHfZHOixruPrSN6LVvOO62iWEvpFTSP4g6Jf58eVGedmWuDrj10H6E/68ZPr3r sPfTg2KFBVGZ0paxWGTTlUge8rWEJnbv96FccH1ZFtt/LFEDgHzeYhmG/7RBWxKn R55GYl0YuqRdT3Sa2Z/nzs22VXlXBHhw7VKVdopYnIjFfEo3+7HdxZJRbQPhdrsf S1cs6Xu0fsB8C2EezsU/HBEPBLxYwaYW -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:11 2025 by rpki-client