$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: 8QOoIW69ctK0I3N86+NDHaih9EktChtH+f8A495Ry28= Subject key identifier: CF:35:E7:80:6C:ED:9B:9B:E9:D6:23:FD:C8:32:EA:F7:6E:7C:AA:B1 Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 022C Signing time: Sun 19 Oct 2025 04:13:36 +0000 Manifest this update: Sun 19 Oct 2025 04:13:36 +0000 Manifest next update: Sun 26 Oct 2025 04:13:36 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: Nr2rcAv/qCuU0EF2ct6Fcv8ED+6k0FhB7JaNoddx0nY=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: giH1vIhIIPvv5hJDOK02Raj/lgCr3oz3hTTRlbexHIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Oct 19 04:13:36 2025 GMT Not After : Oct 26 04:13:36 2025 GMT Subject: CN=68f46570-5001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:f9:08:04:5b:66:65:a5:00:9d:30:ad:e4: d0:52:db:14:f6:2e:75:f2:01:b7:72:ac:0e:6b:81: 2f:2a:e0:06:fa:67:d7:04:95:08:d5:c6:ff:05:44: 0c:d9:ae:af:b9:f8:8f:b0:20:9a:61:a6:9e:a7:31: 89:61:1d:fa:a2:d4:05:35:8b:6f:75:82:44:33:cf: cd:71:d5:64:3f:11:d5:b6:15:d6:b2:4a:a4:86:70: 48:fb:4f:9b:2f:ca:72:81:b8:71:be:91:03:11:ff: 6a:af:27:d5:d7:64:50:8d:54:26:29:6e:03:56:8a: bf:5d:bc:d6:eb:a1:fa:6a:1d:ee:e0:63:db:68:88: 43:ce:5f:b6:f6:dd:8a:30:74:e7:b9:fa:cd:c3:b6: 88:a9:9e:a2:49:e8:76:57:2c:2b:b5:97:e9:83:9d: b9:ca:bb:a5:03:ff:a1:d1:a9:f3:54:b8:c4:b2:b3: a6:b6:c9:7e:7d:4e:85:2b:64:ec:2c:eb:d8:80:c3: ab:32:52:09:b3:cf:20:76:32:cd:49:39:1a:46:0e: 68:1b:1e:90:84:bf:e3:8e:6b:f3:49:54:78:4b:4b: b3:71:a2:ba:7c:d4:09:4e:8e:75:96:a0:22:79:c5: 8a:23:86:78:f0:09:ab:b0:ab:c3:bf:a2:10:e7:03: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:35:E7:80:6C:ED:9B:9B:E9:D6:23:FD:C8:32:EA:F7:6E:7C:AA:B1 X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:42:7e:5c:3b:47:a8:e8:a7:06:e5:35:c5:2c:f7:9f:c8:b3: a0:52:26:80:0e:52:59:f0:ad:a0:5d:3f:29:4e:8b:2f:55:ad: d4:d5:86:51:08:25:3d:7c:81:51:e6:d4:54:21:00:2b:1b:0d: aa:ca:5a:0b:a3:5b:f2:ef:49:50:c8:4c:93:8b:a1:80:2c:65: b9:ad:56:f8:e9:ef:00:9a:6e:06:11:25:d7:55:3a:fe:ad:3e: a3:e8:12:05:a3:0b:51:50:8b:33:d4:75:e4:a2:69:6e:e9:16: 42:08:52:08:1c:b6:cd:81:b0:92:17:c4:ec:a4:2e:cf:e0:dc: cb:9d:8e:b6:e3:e5:25:75:f3:31:9a:4e:69:ed:67:d1:55:b9: ba:05:b9:d8:d3:e8:fb:b5:9a:50:16:90:61:f4:b6:57:e8:f5: 11:a0:fd:e2:13:55:9a:11:ed:0f:80:93:05:da:24:1f:37:3f: a0:19:a6:7d:bf:93:be:e2:c1:32:a4:17:cf:74:54:4c:0f:54: 1b:e3:01:8e:3f:cc:3a:ab:2b:67:30:18:73:f9:8c:f9:5e:8d: 4d:c5:b9:30:2d:4e:d8:0b:eb:d6:83:04:ca:2e:67:07:d4:ae: 4f:57:67:45:f5:31:8d:96:ec:d8:72:4f:c5:02:45:88:0b:d7: 94:37:f6:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjUxMDE5MDQxMzM2WhcNMjUxMDI2MDQxMzM2WjAYMRYwFAYD VQQDEw02OGY0NjU3MC01MDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsP/5CARbZmWlAJ0wreTQUtsU9i518gG3cqwOa4EvKuAG+mfXBJUI1cb/BUQM 2a6vufiPsCCaYaaepzGJYR36otQFNYtvdYJEM8/NcdVkPxHVthXWskqkhnBI+0+b L8pygbhxvpEDEf9qryfV12RQjVQmKW4DVoq/XbzW66H6ah3u4GPbaIhDzl+29t2K MHTnufrNw7aIqZ6iSeh2VywrtZfpg525yrulA/+h0anzVLjEsrOmtsl+fU6FK2Ts LOvYgMOrMlIJs88gdjLNSTkaRg5oGx6QhL/jjmvzSVR4S0uzcaK6fNQJTo51lqAi ecWKI4Z48AmrsKvDv6IQ5wM+jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8154Bs 7Zub6dYj/cgy6vdufKqxMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACQn5cO0eo6KcG5TXFLPefyLOgUiaADlJZ8K2gXT8pTosvVa3U1YZR CCU9fIFR5tRUIQArGw2qyloLo1vy70lQyEyTi6GALGW5rVb46e8Amm4GESXXVTr+ rT6j6BIFowtRUIsz1HXkomlu6RZCCFIIHLbNgbCSF8TspC7P4NzLnY624+UldfMx mk5p7WfRVbm6BbnY0+j7tZpQFpBh9LZX6PURoP3iE1WaEe0PgJMF2iQfNz+gGaZ9 v5O+4sEypBfPdFRMD1Qb4wGOP8w6qytnMBhz+Yz5Xo1NxbkwLU7YC+vWgwTKLmcH 1K5PV2dF9TGNluzYck/FAkWIC9eUN/a/ -----END CERTIFICATE-----Generated at Mon Oct 20 21:43:50 2025 by rpki-client