$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json) Hash identifier: uz8Ve8yu6KlYKjTwTdmwVyrGNnZtwiraOOsV+zvrr3E= Subject key identifier: 59:12:2F:29:DD:17:72:2A:F1:7A:48:E7:87:BF:08:ED:88:5D:AE:09 Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Certificate serial: 0265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft Manifest number: 0261 Signing time: Sun 19 Oct 2025 03:55:51 +0000 Manifest this update: Sun 19 Oct 2025 03:55:51 +0000 Manifest next update: Sun 26 Oct 2025 03:55:51 +0000 Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: DA8vk6Cj/w6QpHXNr0bYz/a1vbO6Z73/OCwwR37aaR0=) 2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: 8x2SsfQuIT881cDaqWjgKUso9bJl3sYc8ulFMGO/wmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 613 (0x265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Validity Not Before: Oct 19 03:55:51 2025 GMT Not After : Oct 26 03:55:51 2025 GMT Subject: CN=68f46147-6ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:09:85:43:98:f9:c5:4f:56:8f:c9:8b:49: b7:40:21:aa:07:a4:12:de:c3:89:87:6e:63:cf:72: 44:ad:ca:1f:fb:29:8e:1c:51:b3:de:58:cb:3c:26: 8e:a8:03:46:d5:31:58:9d:54:e4:00:6a:3c:b3:ac: ef:d7:e2:7d:15:94:88:fa:e3:07:67:cc:e5:5a:47: 67:d5:25:7b:34:e5:5a:ec:64:9b:37:44:47:ad:43: 47:af:e9:74:fd:24:3a:8d:71:e4:4a:53:48:90:3d: 8d:38:89:9f:83:e6:ff:e2:30:4e:1e:57:18:19:57: e7:1f:5a:7d:67:99:f2:2a:c6:98:ad:53:84:9c:6b: a7:ae:97:a7:93:1b:c4:b1:df:d7:3b:99:e6:43:0c: 28:1b:93:44:a0:16:a4:53:94:e7:53:bc:23:91:d9: ed:6d:8e:98:ab:67:85:5e:83:bc:2a:f4:4a:38:d4: b9:33:44:54:6c:82:bf:ce:fe:af:a3:e0:69:aa:d5: 51:47:e5:c1:7d:bb:00:34:25:95:2a:b6:45:8a:ec: 30:43:dc:e7:65:4b:81:21:af:cd:f8:f6:4a:b5:67: b9:e2:8e:22:5a:95:33:27:9a:9d:14:bc:72:29:ad: 8a:81:23:be:17:b3:3e:74:bd:b5:fa:d4:92:29:de: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:12:2F:29:DD:17:72:2A:F1:7A:48:E7:87:BF:08:ED:88:5D:AE:09 X509v3 Authority Key Identifier: keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:82:97:1e:2a:2c:d8:1d:8e:9d:8e:56:63:fb:35:40:93:2c: 0b:18:4c:b8:b3:b6:5f:ba:4c:70:73:b2:f1:d7:3d:9d:1f:87: 89:7d:6a:ee:e1:58:27:dd:b1:99:52:3d:46:e0:ec:d6:aa:2a: 09:62:5a:8a:ba:b5:1c:4e:41:8c:78:32:1e:0a:72:a7:28:06: ad:75:12:39:28:34:1f:4f:a5:25:3e:5e:f9:7b:f3:30:27:63: 58:e7:7a:43:f0:3d:4a:f9:41:1d:4e:19:7e:7d:1f:de:9a:45: d5:41:94:df:e3:1f:a6:90:48:9d:2a:f5:74:72:4b:ff:49:62: da:1f:60:e8:a2:31:2d:c0:20:7f:8c:cf:2e:f9:2c:8f:a8:38: 38:63:00:d1:82:fe:3b:83:b0:74:8b:67:4a:53:bf:fd:85:80: 12:59:86:0e:12:aa:b8:5b:6e:00:53:68:00:69:83:c6:a2:86: f2:c9:57:2e:5e:94:ea:13:4b:8b:d7:52:88:2c:3f:21:cf:1c: 86:09:f6:08:bd:73:0b:db:24:3f:15:db:8e:8a:65:6c:5b:de: 37:4b:35:f3:8c:3c:29:e6:e4:26:3b:7c:cd:c2:c5:a6:53:98: 41:f0:cf:f7:86:ca:47:f1:6e:cc:b1:b4:8c:64:82:c1:25:90: a7:4c:88:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5MDUxMTAvBgNVBAUTKDA2NDZDNTIyOTFENUNENERGNEEwRkY3ODY3ODRGQ0Y1 MjgzNDYzMjQwHhcNMjUxMDE5MDM1NTUxWhcNMjUxMDI2MDM1NTUxWjAYMRYwFAYD VQQDEw02OGY0NjE0Ny02ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1AJhUOY+cVPVo/Ji0m3QCGqB6QS3sOJh25jz3JErcof+ymOHFGz3ljLPCaO qANG1TFYnVTkAGo8s6zv1+J9FZSI+uMHZ8zlWkdn1SV7NOVa7GSbN0RHrUNHr+l0 /SQ6jXHkSlNIkD2NOImfg+b/4jBOHlcYGVfnH1p9Z5nyKsaYrVOEnGunrpenkxvE sd/XO5nmQwwoG5NEoBakU5TnU7wjkdntbY6Yq2eFXoO8KvRKONS5M0RUbIK/zv6v o+BpqtVRR+XBfbsANCWVKrZFiuwwQ9znZUuBIa/N+PZKtWe54o4iWpUzJ5qdFLxy Ka2KgSO+F7M+dL21+tSSKd6lBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkSLynd F3Iq8XpI54e/CO2IXa4JMB8GA1UdIwQYMBaAFAZGxSKR1c1N9KD/eGeE/PUoNGMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjkwNS8xMUVCMDg2QTMz NTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpVMzBvUDk0WjRUODlTZzBZ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JrYkZJcEhWelUzMG9QOTRaNFQ4OVNnMFl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjkwNS8xMUVCMDg2QTMzNTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpV MzBvUDk0WjRUODlTZzBZeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNgpceKizYHY6djlZj+zVAkywLGEy4s7Zfukxwc7Lx1z2dH4eJfWru 4Vgn3bGZUj1G4OzWqioJYlqKurUcTkGMeDIeCnKnKAatdRI5KDQfT6UlPl75e/Mw J2NY53pD8D1K+UEdThl+fR/emkXVQZTf4x+mkEidKvV0ckv/SWLaH2DoojEtwCB/ jM8u+SyPqDg4YwDRgv47g7B0i2dKU7/9hYASWYYOEqq4W24AU2gAaYPGoobyyVcu XpTqE0uL11KILD8hzxyGCfYIvXML2yQ/FduOimVsW943SzXzjDwp5uQmO3zNwsWm U5hB8M/3hspH8W7MsbSMZILBJZCnTIjC -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:31 2025 by rpki-client