$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: /a+g8IVIYynV+pQAltlFzdfxSzZsn4un2XXKRdPhwBM= Subject key identifier: E0:2F:43:AB:EE:37:08:76:CA:50:8B:3E:18:0D:AB:14:8B:84:93:40 Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 05BE Signing time: Tue 04 Nov 2025 19:35:45 +0000 Manifest this update: Tue 04 Nov 2025 19:35:44 +0000 Manifest next update: Tue 11 Nov 2025 19:35:44 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: xmtchbedqIRT9nnIXA+Ju3aTd0Fy1kbf2wMYOnIDG7I=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Nov 4 19:35:44 2025 GMT Not After : Nov 11 19:35:44 2025 GMT Subject: CN=690a5590-6e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:80:c6:62:4c:38:de:d8:42:24:04:e8:8b: dc:91:98:71:c1:19:fa:6d:ff:4a:44:75:59:53:ec: e1:62:a0:22:13:c8:35:4c:bf:b1:62:c7:97:25:18: b8:0f:9b:93:e5:10:a9:86:d3:34:72:bb:4c:76:65: cd:17:da:15:9d:07:eb:89:c5:ba:fd:f7:00:f9:4a: f8:4f:69:7a:c1:d6:25:e8:74:11:f0:fd:bb:ba:8a: d1:a5:f9:1e:14:5a:0d:eb:11:8d:87:fe:bc:46:11: 45:53:fb:62:83:3d:25:4d:8b:4d:c7:4c:3c:c6:81: 18:56:51:05:5c:52:2c:60:e0:b3:48:ea:1f:b0:fb: 36:7a:81:3a:90:41:8c:48:a2:57:ad:6e:df:0e:cc: 3b:3c:7b:e4:17:9b:a6:c1:57:24:13:33:ef:83:39: 49:5c:5c:80:fd:b1:cd:37:4a:d6:b0:79:df:30:cb: 2d:04:95:d6:0c:4e:44:4c:1e:ae:c3:03:a1:f3:ae: 17:10:2b:46:15:32:32:60:0b:72:2c:b4:a9:16:5c: 18:c2:21:97:bd:20:1f:47:31:31:80:c2:08:0f:37: 9a:92:51:4f:a4:fd:67:83:2b:66:74:a9:1a:82:f0: f3:a7:56:ae:d8:76:fb:dd:f0:9f:15:7e:cb:fc:72: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2F:43:AB:EE:37:08:76:CA:50:8B:3E:18:0D:AB:14:8B:84:93:40 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:79:00:03:32:eb:10:95:32:6e:fa:d0:22:ef:a5:ba:69:3c: fd:40:05:45:70:d1:2f:e2:26:09:69:8b:09:0e:0a:e1:d6:50: d9:35:43:ee:46:a1:0d:08:5f:c6:aa:09:a8:23:fa:d7:c4:f3: e7:c3:bb:8d:0f:9d:da:03:7a:52:ee:b6:81:e0:0a:df:34:87: b2:0a:fb:21:e3:40:fc:c2:e8:88:61:3f:53:92:50:6d:57:95: 93:fc:d4:90:7a:9e:0b:ea:02:5e:84:5e:93:12:14:eb:89:8d: c2:2e:8f:9c:ee:53:8c:49:0b:0c:f4:7d:e8:31:be:b0:d0:88: 16:fc:37:3f:54:cc:f0:e3:c4:83:ff:85:32:0e:99:a5:a3:bc: c7:1a:f5:a4:35:42:e5:62:4d:b1:3c:a8:cb:74:30:37:54:72: bc:bd:3a:83:da:00:6f:ed:a4:eb:b1:c1:60:e3:1c:95:a6:36: 88:df:1f:db:2d:3e:81:48:5f:73:87:41:d5:0d:7e:99:2d:84: 89:59:9c:f3:8f:24:08:e4:45:92:e2:7e:7b:89:a9:31:f4:2a: 97:e0:34:c6:d0:7a:ec:66:9d:84:67:b0:1e:34:50:9e:66:cd: d9:08:3b:97:20:4b:1b:3a:d2:d7:73:34:fb:5b:0a:c9:aa:0e: d3:62:1f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUxMTA0MTkzNTQ0WhcNMjUxMTExMTkzNTQ0WjAYMRYwFAYD VQQDEw02OTBhNTU5MC02ZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoeAxmJMON7YQiQE6IvckZhxwRn6bf9KRHVZU+zhYqAiE8g1TL+xYseXJRi4 D5uT5RCphtM0crtMdmXNF9oVnQfricW6/fcA+Ur4T2l6wdYl6HQR8P27uorRpfke FFoN6xGNh/68RhFFU/tigz0lTYtNx0w8xoEYVlEFXFIsYOCzSOofsPs2eoE6kEGM SKJXrW7fDsw7PHvkF5umwVckEzPvgzlJXFyA/bHNN0rWsHnfMMstBJXWDE5ETB6u wwOh864XECtGFTIyYAtyLLSpFlwYwiGXvSAfRzExgMIIDzeaklFPpP1ngytmdKka gvDzp1au2Hb73fCfFX7L/HJ3TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAvQ6vu Nwh2ylCLPhgNqxSLhJNAMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAceQADMusQlTJu+tAi76W6aTz9QAVFcNEv4iYJaYsJDgrh1lDZNUPu RqENCF/GqgmoI/rXxPPnw7uND53aA3pS7raB4ArfNIeyCvsh40D8wuiIYT9TklBt V5WT/NSQep4L6gJehF6TEhTriY3CLo+c7lOMSQsM9H3oMb6w0IgW/Dc/VMzw48SD /4UyDpmlo7zHGvWkNULlYk2xPKjLdDA3VHK8vTqD2gBv7aTrscFg4xyVpjaI3x/b LT6BSF9zh0HVDX6ZLYSJWZzzjyQI5EWS4n57iakx9CqX4DTG0HrsZp2EZ7AeNFCe Zs3ZCDuXIEsbOtLXczT7WwrJqg7TYh8X -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:47 2025 by rpki-client