$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: yWI+X+VKXO8Cy+EsEh2v9iz2982zjeit3QZTN6spONI= Subject key identifier: 90:A5:3D:D0:BF:22:23:F7:5D:95:B2:01:C5:95:16:BB:46:BD:C4:54 Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0CDF Signing time: Sat 18 Oct 2025 19:18:31 +0000 Manifest this update: Sat 18 Oct 2025 19:18:31 +0000 Manifest next update: Sat 25 Oct 2025 19:18:31 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: NZBVxhZ2JCWHNIUn4nhA7WxhvwXreJwOF96Blhyk6pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: Oct 18 19:18:31 2025 GMT Not After : Oct 25 19:18:31 2025 GMT Subject: CN=68f3e807-6764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:66:59:0e:25:18:54:59:a0:36:5f:f3:be: b0:f6:57:af:7d:d3:f5:fc:0f:c5:2b:10:df:8f:f7: 1a:6f:46:50:66:fe:45:8f:63:69:94:cb:90:a4:d7: 34:bc:28:5f:d3:6a:56:5a:27:68:42:b1:22:10:33: 4d:e0:97:60:b4:e2:4b:16:dd:ab:c1:c4:a0:08:04: 6f:d4:13:b6:4c:30:b0:46:53:7f:6b:af:af:9c:e5: 08:25:50:6b:45:ff:2d:7a:05:d7:1a:d7:17:8b:b7: 71:b4:1d:81:4a:a9:93:6d:8f:ec:92:d9:55:d5:7d: 81:ca:ae:55:15:1e:19:f2:c4:7c:01:70:95:da:e8: 63:9a:25:50:ee:71:e4:9b:c1:cd:80:8d:3e:b6:0b: 23:12:2f:8a:b6:32:92:7c:28:bf:9f:64:02:89:b9: 9a:c8:c7:9c:7f:22:9e:9e:98:27:6d:bc:ec:2c:63: 7d:3d:07:3b:eb:f2:11:d7:91:7e:2e:33:cf:53:6f: 17:d4:74:9f:74:03:b8:16:be:ad:3d:ea:46:12:8a: 2a:08:45:0e:b5:91:de:5c:62:1f:5f:3c:ae:e3:50: a7:bc:29:4b:30:ff:fb:3a:3d:ce:43:ae:44:4b:57: 9b:e4:15:14:7b:6d:09:41:20:4c:00:5a:f8:28:cc: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A5:3D:D0:BF:22:23:F7:5D:95:B2:01:C5:95:16:BB:46:BD:C4:54 X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:91:07:fa:70:d7:34:8a:9c:e2:9b:3a:d5:f2:46:c3:b9:37: cc:8b:b7:75:0a:28:b1:69:dd:33:6a:84:6f:27:2b:a7:b6:57: 7d:33:87:5b:5b:8e:a9:2b:54:07:4a:1f:99:d2:8d:c6:59:25: aa:0c:05:8e:0f:7e:86:c7:17:41:4c:93:e3:67:81:dd:cc:50: 5f:cd:28:07:e7:af:7c:eb:88:be:82:fa:00:e7:d9:2e:00:de: 1f:4d:fb:7c:0d:0e:07:47:1e:18:76:91:c4:8b:41:51:bd:8a: da:be:29:d8:e6:69:77:f4:62:f3:1a:fb:7d:d5:3d:f8:75:42: 6c:61:4e:15:ef:d0:93:eb:b4:02:71:0a:f5:d7:4b:61:80:31: bf:27:bc:05:a1:92:2a:40:8a:51:20:13:db:85:2c:9d:54:23: 6c:17:44:d8:b0:32:7a:0d:22:b9:43:5c:f9:ac:f4:47:c5:00: 0c:53:a8:a2:3b:00:19:a9:aa:2f:c4:ee:f1:05:3e:24:cd:d7: 59:47:e0:88:e3:0c:2d:b5:78:7d:0e:66:de:21:3e:a8:0c:cc: ca:2c:9c:57:ce:bd:d2:a4:c5:1b:5a:b7:dd:57:61:5a:67:62: 22:32:1a:59:a6:4b:de:52:68:e2:43:04:b0:34:f1:df:3a:17: 67:5d:a1:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjUxMDE4MTkxODMxWhcNMjUxMDI1MTkxODMxWjAYMRYwFAYD VQQDEw02OGYzZTgwNy02NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArihmWQ4lGFRZoDZf876w9levfdP1/A/FKxDfj/cab0ZQZv5Fj2NplMuQpNc0 vChf02pWWidoQrEiEDNN4JdgtOJLFt2rwcSgCARv1BO2TDCwRlN/a6+vnOUIJVBr Rf8tegXXGtcXi7dxtB2BSqmTbY/sktlV1X2Byq5VFR4Z8sR8AXCV2uhjmiVQ7nHk m8HNgI0+tgsjEi+KtjKSfCi/n2QCibmayMecfyKenpgnbbzsLGN9PQc76/IR15F+ LjPPU28X1HSfdAO4Fr6tPepGEooqCEUOtZHeXGIfXzyu41CnvClLMP/7Oj3OQ65E S1eb5BUUe20JQSBMAFr4KMzARwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJClPdC/ IiP3XZWyAcWVFrtGvcRUMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4kQf6cNc0ipzimzrV8kbDuTfMi7d1Ciixad0zaoRvJyuntld9M4db W46pK1QHSh+Z0o3GWSWqDAWOD36GxxdBTJPjZ4HdzFBfzSgH569864i+gvoA59ku AN4fTft8DQ4HRx4YdpHEi0FRvYravinY5ml39GLzGvt91T34dUJsYU4V79CT67QC cQr110thgDG/J7wFoZIqQIpRIBPbhSydVCNsF0TYsDJ6DSK5Q1z5rPRHxQAMU6ii OwAZqaovxO7xBT4kzddZR+CI4wwttXh9DmbeIT6oDMzKLJxXzr3SpMUbWrfdV2Fa Z2IiMhpZpkveUmjiQwSwNPHfOhdnXaGE -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:48 2025 by rpki-client