$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json) Hash identifier: pKN1H9KkBFnwVfBzmpmNCFlj04R+bCsssZ3GZYKvqDU= Subject key identifier: 4D:F0:96:48:35:46:9D:1D:9F:DF:C7:8E:84:9E:6D:29:57:CC:B7:FF Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft Manifest number: 01D3 Signing time: Sun 19 Oct 2025 05:14:21 +0000 Manifest this update: Sun 19 Oct 2025 05:14:21 +0000 Manifest next update: Sun 26 Oct 2025 05:14:21 +0000 Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: ahpyUFcljwUPQ41AHsl7r6kkpsnhYqFEt0jkhgJ+7/I=) 2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=) 3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Validity Not Before: Oct 19 05:14:21 2025 GMT Not After : Oct 26 05:14:21 2025 GMT Subject: CN=68f473ad-df46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:74:f9:b1:0c:22:ff:61:e9:68:07:46:54:53: 4d:9e:52:0c:d8:d7:19:3d:ec:13:bd:ee:4a:a7:db: 97:7f:a3:ec:f7:7d:ae:02:09:0b:eb:09:ef:c6:c3: 5c:bf:20:3a:2f:aa:a0:3d:be:6c:36:f8:f7:3b:65: 78:47:c6:11:47:bf:bf:4f:e8:87:5c:ba:f0:98:cf: fc:d2:53:2a:24:e6:dc:1c:1a:8c:a9:88:29:22:c3: d6:cf:ec:b3:1e:5f:9d:74:2a:bc:b5:af:84:b0:7e: 3e:1b:ce:de:c7:a4:45:b4:56:0a:44:ed:e7:c0:33: 11:1f:ea:01:f9:97:e8:c3:a6:d5:d1:87:52:23:b1: 2c:29:e6:0d:15:b6:dc:55:cc:0f:08:5a:47:64:44: ba:a2:88:1d:05:99:24:d7:cc:54:bd:52:e4:9c:2e: 14:7d:77:98:d3:c5:e7:d8:c4:b9:36:fd:31:4e:2b: d9:10:6e:c3:8e:42:a7:dc:e4:5f:05:8e:37:36:e0: a2:3c:fd:49:52:9b:18:f1:00:ad:ce:30:1d:6c:4f: 47:f2:24:da:51:bc:cd:fa:44:80:2c:6e:ed:10:9d: 9e:08:3e:a2:1b:c3:2d:1b:fb:5c:e3:98:37:59:b6: f7:29:8a:ae:74:2c:9b:a6:d0:1c:a5:55:2f:f1:0b: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:96:48:35:46:9D:1D:9F:DF:C7:8E:84:9E:6D:29:57:CC:B7:FF X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:35:91:3a:57:19:9f:95:44:03:43:62:0a:85:71:f6:e7:a3: 28:b2:30:34:a5:4c:7f:65:d9:c2:c7:7e:10:e9:5c:1f:c4:90: c5:9d:45:ac:8e:24:b7:35:35:76:ca:95:33:c6:47:23:71:de: 68:49:f1:b7:05:32:b9:76:22:8d:b3:d2:26:69:89:91:a1:d3: 0b:c1:a0:60:8e:5e:4f:a5:82:af:2f:85:ad:a9:03:6a:ef:af: 90:03:94:ea:fa:54:6f:df:1c:3a:e9:ca:d7:b4:41:a0:55:4e: 43:7a:19:2b:14:c7:ea:e9:7c:68:ca:98:2a:65:93:ae:a0:66: 9b:fb:44:74:2c:c1:b4:d7:78:d1:d2:de:4c:95:41:a3:80:cb: fc:76:41:ce:65:df:6d:60:22:eb:e0:2f:d0:7b:0b:61:1d:86: 7e:f0:32:14:96:c3:c2:3e:df:dc:e9:8e:0d:4d:cd:1b:de:d8: 34:8d:db:e6:ea:8f:7b:58:ea:fe:f4:65:49:43:a8:e8:95:43: 1e:b2:41:ed:39:c0:70:84:5c:ef:5a:28:07:8f:22:3e:c4:f7: 29:84:41:bd:17:cf:4c:52:43:2f:62:59:fd:29:0f:a4:5f:da: 20:49:97:f9:de:8e:59:7d:ef:6f:0c:3b:b3:66:79:4a:74:b2: 2c:69:41:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjUxMDE5MDUxNDIxWhcNMjUxMDI2MDUxNDIxWjAYMRYwFAYD VQQDEw02OGY0NzNhZC1kZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznT5sQwi/2HpaAdGVFNNnlIM2NcZPewTve5Kp9uXf6Ps932uAgkL6wnvxsNc vyA6L6qgPb5sNvj3O2V4R8YRR7+/T+iHXLrwmM/80lMqJObcHBqMqYgpIsPWz+yz Hl+ddCq8ta+EsH4+G87ex6RFtFYKRO3nwDMRH+oB+Zfow6bV0YdSI7EsKeYNFbbc VcwPCFpHZES6oogdBZkk18xUvVLknC4UfXeY08Xn2MS5Nv0xTivZEG7DjkKn3ORf BY43NuCiPP1JUpsY8QCtzjAdbE9H8iTaUbzN+kSALG7tEJ2eCD6iG8MtG/tc45g3 Wbb3KYqudCybptAcpVUv8QuQvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3wlkg1 Rp0dn9/HjoSebSlXzLf/MB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkI3Qy81MUE5NDQ1QURGODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdG eFFfSG1UMUFRUXVFb1IwdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATNZE6VxmflUQDQ2IKhXH256MosjA0pUx/ZdnCx34Q6VwfxJDFnUWs jiS3NTV2ypUzxkcjcd5oSfG3BTK5diKNs9ImaYmRodMLwaBgjl5PpYKvL4WtqQNq 76+QA5Tq+lRv3xw66crXtEGgVU5DehkrFMfq6XxoypgqZZOuoGab+0R0LMG013jR 0t5MlUGjgMv8dkHOZd9tYCLr4C/QewthHYZ+8DIUlsPCPt/c6Y4NTc0b3tg0jdvm 6o97WOr+9GVJQ6jolUMeskHtOcBwhFzvWigHjyI+xPcphEG9F89MUkMvYln9KQ+k X9ogSZf53o5Zfe9vDDuzZnlKdLIsaUHx -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:51 2025 by rpki-client