$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft File: bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json) Hash identifier: 41+1LQ3j/Q01epjn1pG09+SXqXcU74/z5AwfdEY/tBA= Subject key identifier: 2E:37:6D:6D:4E:38:27:00:46:B0:2C:7D:81:36:19:7B:80:AF:BE:A8 Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft Manifest number: 018F Signing time: Wed 05 Nov 2025 03:40:09 +0000 Manifest this update: Wed 05 Nov 2025 03:40:08 +0000 Manifest next update: Wed 12 Nov 2025 03:40:08 +0000 Files and hashes: 1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: UX79J4ntFawu4RT036tDl1p3VGLbuu17NMlMErR1mDc=) 2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: X/pG7qc3+7qr+qWCl38L4oCPzOU3+0jR+niOHWQizTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Validity Not Before: Nov 5 03:40:08 2025 GMT Not After : Nov 12 03:40:08 2025 GMT Subject: CN=690ac719-2db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:62:35:25:01:fd:9d:fd:7d:1d:1d:7d:d9: 9f:a3:08:e8:72:ae:22:d0:f0:31:81:52:a2:a6:82: e0:79:ec:86:a2:97:21:24:d9:fb:b5:c1:5d:fb:72: 0c:05:a9:3e:ec:9f:e9:b4:9b:f1:dc:ef:8b:97:6e: 0e:41:08:91:c8:d8:db:8b:2e:24:f5:1d:04:f3:cf: 46:47:47:0d:fc:b1:b5:f1:d0:28:8d:5e:a7:a6:ad: a3:ca:08:ff:e4:d4:a8:6e:58:8e:18:b3:1d:ea:e6: 7d:e3:6b:f7:02:7d:5b:35:e2:9c:ae:f3:7a:c8:33: 6f:83:ed:83:a5:14:20:49:5d:16:14:bb:f4:da:87: de:b2:24:89:96:26:6d:9f:31:e6:f6:33:0d:cd:49: ad:d2:75:a3:82:2d:7f:40:05:b9:52:65:05:e9:ac: a4:cc:6a:46:8b:40:5a:c4:03:99:66:64:86:87:8c: ef:48:d1:bb:7a:5e:4d:c6:39:8e:c6:21:3a:b9:f6: 75:d8:2a:c5:5e:1d:53:9d:41:54:06:71:73:75:60: 60:5f:35:19:ba:09:12:11:1b:97:73:16:b1:ea:4a: 82:51:a6:24:4d:b5:16:8e:62:34:de:4d:52:be:3c: 21:d3:64:47:56:f6:c9:44:1c:77:84:fc:d0:18:5f: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:37:6D:6D:4E:38:27:00:46:B0:2C:7D:81:36:19:7B:80:AF:BE:A8 X509v3 Authority Key Identifier: keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:78:69:21:77:5b:f0:3c:6e:24:22:69:16:d4:0b:0e:8d:ca: 01:ce:e0:f4:7f:05:41:6c:f7:d8:b5:f1:80:7f:32:d4:38:76: 02:17:e3:77:f7:c2:51:24:75:3c:f0:26:17:bd:6a:16:aa:03: c8:59:9b:9f:9f:71:8c:f6:8e:cb:b1:e4:1d:53:ad:1d:c8:c9: e1:48:c4:78:a8:eb:36:72:10:4c:68:e4:5d:26:f3:d3:b4:4a: ab:62:96:5a:90:34:58:42:22:9f:67:99:c1:42:9d:92:f6:3b: 2d:47:81:1e:d5:13:2e:f0:92:ff:da:c2:e5:f0:81:73:b0:c2: 70:22:d2:82:a6:c2:65:84:b8:f5:fd:56:78:58:5f:55:39:51: 32:05:79:ef:22:b4:c9:21:f4:8e:3f:d6:8b:b2:35:e3:7e:c9: a7:47:5a:62:8c:de:0b:9e:30:cd:5f:42:0b:d9:11:f5:0c:6d: d7:e1:ba:0f:42:e6:56:c9:6c:09:ec:5c:1a:5d:3c:88:72:8e: 7f:9e:68:d6:d7:8c:84:0c:af:c7:ab:38:37:64:e3:53:cb:23: 88:05:a6:89:6e:60:c0:74:d8:c1:3a:56:6f:39:ae:ee:8b:ba: 27:20:03:2a:c8:64:48:b0:8a:af:eb:06:93:d8:f9:b4:d7:7f: b9:c3:6b:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBOEYxMTAvBgNVBAUTKDZEOTYwNjg4QjZERTcxNDFBNzIxODk4RTlFMDczRTE2 Nzc4RkVGMzUwHhcNMjUxMTA1MDM0MDA4WhcNMjUxMTEyMDM0MDA4WjAYMRYwFAYD VQQDEw02OTBhYzcxOS0yZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6NiNSUB/Z39fR0dfdmfowjocq4i0PAxgVKipoLgeeyGopchJNn7tcFd+3IM Bak+7J/ptJvx3O+Ll24OQQiRyNjbiy4k9R0E889GR0cN/LG18dAojV6npq2jygj/ 5NSobliOGLMd6uZ942v3An1bNeKcrvN6yDNvg+2DpRQgSV0WFLv02ofesiSJliZt nzHm9jMNzUmt0nWjgi1/QAW5UmUF6aykzGpGi0BaxAOZZmSGh4zvSNG7el5NxjmO xiE6ufZ12CrFXh1TnUFUBnFzdWBgXzUZugkSERuXcxax6kqCUaYkTbUWjmI03k1S vjwh02RHVvbJRBx3hPzQGF/vFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC43bW1O OCcARrAsfYE2GXuAr76oMB8GA1UdIwQYMBaAFG2WBoi23nFBpyGJjp4HPhZ3j+81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E4Ri82M0FDRDVGNDU5 REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNVR25JWW1PbmdjLUZuZVA3 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JaWUdpTGJlY1VHbklZbU9uZ2MtRm5lUDd6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0E4Ri82M0FDRDVGNDU5REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNV R25JWW1PbmdjLUZuZVA3elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBueGkhd1vwPG4kImkW1AsOjcoBzuD0fwVBbPfYtfGAfzLUOHYCF+N3 98JRJHU88CYXvWoWqgPIWZufn3GM9o7LseQdU60dyMnhSMR4qOs2chBMaORdJvPT tEqrYpZakDRYQiKfZ5nBQp2S9jstR4Ee1RMu8JL/2sLl8IFzsMJwItKCpsJlhLj1 /VZ4WF9VOVEyBXnvIrTJIfSOP9aLsjXjfsmnR1pijN4LnjDNX0IL2RH1DG3X4boP QuZWyWwJ7FwaXTyIco5/nmjW14yEDK/Hqzg3ZONTyyOIBaaJbmDAdNjBOlZvOa7u i7onIAMqyGRIsIqv6waT2Pm013+5w2ue -----END CERTIFICATE-----Generated at Wed Nov 5 20:46:29 2025 by rpki-client