$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: hy3rJrqqWIgNl8o44LX6bm2uzUT3tKgMw3M94jx02i0= Subject key identifier: 42:4F:8C:46:6E:84:1E:7F:3F:7F:4B:5D:79:1D:15:08:72:BC:15:CB Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: FA Signing time: Sun 19 Oct 2025 08:04:53 +0000 Manifest this update: Sun 19 Oct 2025 08:04:52 +0000 Manifest next update: Sun 26 Oct 2025 08:04:52 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: Z/s1O5jNlyuXYyB/+zcdGVVmxZTKN1zBzvXInL6DDtE=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: /1PjZ5NNRMUhyhR9YlRWIkmEIJE+BmHYk2vv+gNzyk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Oct 19 08:04:52 2025 GMT Not After : Oct 26 08:04:52 2025 GMT Subject: CN=68f49ba5-9058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:81:f3:ae:e7:78:48:c7:36:6d:d8:bf:9d:32: e8:eb:17:11:27:fa:80:c9:d3:66:d9:a8:ef:bf:0b: fb:c7:53:6d:ba:a3:a7:b5:25:0a:da:47:13:86:fc: 02:35:01:e1:9a:6c:ef:5f:d3:09:f2:a6:88:8b:e7: 01:8c:70:49:ba:19:e2:30:76:17:2f:3a:3f:6f:9e: c1:59:3d:e0:f7:6a:17:bd:d4:d4:ef:98:35:eb:2d: 85:96:ce:c2:a0:94:43:4c:1c:ee:99:44:40:67:34: c5:03:0e:96:9f:5e:72:0e:fc:e7:ea:e3:af:2f:05: 8e:78:6e:41:6a:bb:f5:d5:8a:3c:38:c9:96:b6:97: e2:4d:e0:f1:e1:46:e7:24:be:01:e9:5a:1e:a4:70: 4f:3d:73:87:63:ca:24:99:22:39:fe:d3:39:37:2c: c2:0f:b3:63:fe:f7:ad:0b:e0:31:ba:23:f6:e4:71: 26:c1:3b:31:d0:50:69:e7:15:4c:20:34:56:82:fb: a6:d4:03:ec:55:12:f7:3d:37:ac:41:25:49:e3:64: d9:cf:2b:c6:3b:be:64:c9:b5:33:1c:02:2d:93:89: 18:ab:7b:69:da:89:33:76:b9:af:7d:c4:76:a5:a3: 22:73:7e:8a:c4:9a:df:d4:fe:0e:03:9b:6e:6e:ce: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4F:8C:46:6E:84:1E:7F:3F:7F:4B:5D:79:1D:15:08:72:BC:15:CB X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:cb:7e:99:be:30:31:9a:44:b1:4e:9e:c1:5a:df:7e:70:25: 5e:b7:f9:6d:3a:72:b0:3c:9e:68:ea:8a:29:72:5d:ef:36:74: f2:80:c6:05:cc:9b:ff:b6:ff:e6:1e:24:77:3f:9f:b2:74:4a: 97:88:81:49:65:bb:19:2b:57:d6:80:9e:e1:e3:c6:54:8c:6e: 9d:dd:83:9d:8b:c4:84:70:01:5c:18:24:cd:b7:a1:3f:1d:8d: a1:a0:89:ce:f9:d1:db:c0:2e:be:12:30:b0:15:d3:56:62:2f: bf:17:c5:ae:58:0a:e2:04:9b:e2:c4:cf:79:d9:c6:d2:b2:a3: a4:2b:fb:da:ff:6b:df:3c:f9:4d:49:93:85:3b:69:10:bc:1b: 9b:0d:44:62:c1:1d:74:46:38:11:89:3f:9a:05:17:00:38:18: b6:4e:64:52:db:40:33:93:eb:c1:7b:b8:0d:62:91:89:f9:c1: 42:8d:96:b2:e4:62:cc:bf:54:cb:66:6d:77:52:37:e3:2c:23: 5f:59:e4:26:a3:44:a6:2f:52:1c:18:56:16:e6:9f:33:49:b6: 2c:2c:a7:f3:38:e1:5b:68:80:97:3f:d6:c6:b5:37:a5:31:57: 7c:e9:a2:c5:ca:f2:ff:d1:6f:1a:05:1d:ac:e5:9f:ff:69:f1: 70:95:49:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjUxMDE5MDgwNDUyWhcNMjUxMDI2MDgwNDUyWjAYMRYwFAYD VQQDEw02OGY0OWJhNS05MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IHzrud4SMc2bdi/nTLo6xcRJ/qAydNm2ajvvwv7x1NtuqOntSUK2kcThvwC NQHhmmzvX9MJ8qaIi+cBjHBJuhniMHYXLzo/b57BWT3g92oXvdTU75g16y2Fls7C oJRDTBzumURAZzTFAw6Wn15yDvzn6uOvLwWOeG5Barv11Yo8OMmWtpfiTeDx4Ubn JL4B6VoepHBPPXOHY8okmSI5/tM5NyzCD7Nj/vetC+AxuiP25HEmwTsx0FBp5xVM IDRWgvum1APsVRL3PTesQSVJ42TZzyvGO75kybUzHAItk4kYq3tp2okzdrmvfcR2 paMic36KxJrf1P4OA5tubs6iiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJPjEZu hB5/P39LXXkdFQhyvBXLMB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQy36ZvjAxmkSxTp7BWt9+cCVet/ltOnKwPJ5o6oopcl3vNnTygMYF zJv/tv/mHiR3P5+ydEqXiIFJZbsZK1fWgJ7h48ZUjG6d3YOdi8SEcAFcGCTNt6E/ HY2hoInO+dHbwC6+EjCwFdNWYi+/F8WuWAriBJvixM952cbSsqOkK/va/2vfPPlN SZOFO2kQvBubDURiwR10RjgRiT+aBRcAOBi2TmRS20Azk+vBe7gNYpGJ+cFCjZay 5GLMv1TLZm13UjfjLCNfWeQmo0SmL1IcGFYW5p8zSbYsLKfzOOFbaICXP9bGtTel MVd86aLFyvL/0W8aBR2s5Z//afFwlUlI -----END CERTIFICATE-----Generated at Tue Oct 21 15:12:57 2025 by rpki-client