$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: fbNFIXrhRAIA1cO11iNTOiFplIz+hHlNx3PUEfTuXoA= Subject key identifier: BD:D7:DA:37:26:24:46:58:B2:53:90:88:DF:C0:6C:A4:32:14:EF:58 Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 1339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 1331 Signing time: Sat 18 Oct 2025 17:30:57 +0000 Manifest this update: Sat 18 Oct 2025 17:30:56 +0000 Manifest next update: Sat 25 Oct 2025 17:30:56 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: WHnKKS/RiCXlp/UFGZiDJ2JjI7akF7UqBLTvUbvwRXM=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: RbGdGirRSx8vE2XqFSZoMmFoNMFa3vRAZrBLRz09P8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4921 (0x1339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: Oct 18 17:30:56 2025 GMT Not After : Oct 25 17:30:56 2025 GMT Subject: CN=68f3ced0-8aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:da:a6:a7:1b:c8:e8:90:92:ae:40:d9:67: 84:17:9f:a6:08:2d:bd:e0:4b:ef:4e:3d:8c:66:63: 58:39:85:82:7a:5c:f0:75:5a:cb:68:96:cc:c7:4d: ca:b0:c1:44:8b:4a:e9:f2:b1:1d:44:7c:53:58:34: cb:8f:3c:8f:f0:e6:35:48:62:10:2c:90:d4:4c:88: 5e:05:56:e9:3b:fd:6d:61:e3:8e:2d:b8:9d:ff:d8: bb:b0:ce:a3:6a:48:e7:ae:32:f8:9c:87:ac:ec:8d: f6:6d:26:4e:9b:4a:8b:35:c7:64:91:85:0d:f8:27: 23:1f:50:32:c5:13:fe:04:3d:ae:fa:57:f2:dc:fb: 9e:be:c4:21:3a:87:ec:83:cb:ce:a9:53:be:51:ac: f8:17:09:cd:a9:a5:a8:3e:c6:45:59:38:72:db:d6: 5a:cf:67:cc:ce:a9:75:55:2a:ad:a6:8c:53:9b:f7: cf:02:ee:3a:70:10:7d:71:67:58:0b:09:77:90:fa: 7c:30:01:cc:74:50:9e:25:52:9f:a8:8a:58:df:05: 58:76:39:ef:e7:7d:f4:d0:c7:a2:ae:36:ce:29:ad: f5:81:77:00:e0:6e:0d:bf:e3:8f:24:ff:0b:e3:0f: 02:ba:cc:a9:28:62:1c:86:dd:96:15:4e:2f:ef:47: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D7:DA:37:26:24:46:58:B2:53:90:88:DF:C0:6C:A4:32:14:EF:58 X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f6:63:b0:26:55:f3:2d:9e:1b:1d:96:28:d7:3b:66:d7:50: 9c:05:23:fc:27:40:8f:9a:a3:b4:3a:23:68:b6:32:88:9d:44: 49:ee:8f:7f:78:d0:69:f5:1e:59:51:5b:94:7e:04:59:bc:4e: ca:24:0f:17:3f:2e:62:f6:4e:b9:7b:22:8f:cb:0b:31:57:59: e1:62:04:40:77:93:9a:20:c5:49:8e:28:5e:c0:f5:2f:42:8d: 3e:1d:1a:6b:2c:b1:07:d9:8e:00:cc:6d:20:be:f6:fb:f8:c8: b9:d7:92:ec:4c:e6:f4:f6:7e:3d:fd:29:20:89:9e:d0:d2:f5: e5:47:dc:3c:89:1c:f2:94:0f:20:4c:2f:38:7a:e3:d3:8b:4b: 12:c4:a7:7f:25:8f:ee:57:0b:0d:f9:3c:f9:43:ae:70:f3:1c: 26:39:19:43:22:0f:fa:5f:f5:cf:e6:51:31:60:81:83:f1:0e: 86:6f:43:00:a6:4a:87:87:2a:19:4e:10:3c:1f:15:9a:b9:3a: 9c:34:83:14:94:5d:71:58:42:5b:45:a5:4a:39:95:94:78:0e: e5:c8:0e:52:31:95:bf:da:9e:37:0d:ce:29:f2:3a:74:7c:e5: e2:4b:32:34:f1:12:80:47:9f:00:83:90:91:b2:40:ba:76:3e: 66:78:3c:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjUxMDE4MTczMDU2WhcNMjUxMDI1MTczMDU2WjAYMRYwFAYD VQQDEw02OGYzY2VkMC04YWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI/apqcbyOiQkq5A2WeEF5+mCC294EvvTj2MZmNYOYWCelzwdVrLaJbMx03K sMFEi0rp8rEdRHxTWDTLjzyP8OY1SGIQLJDUTIheBVbpO/1tYeOOLbid/9i7sM6j akjnrjL4nIes7I32bSZOm0qLNcdkkYUN+CcjH1AyxRP+BD2u+lfy3PuevsQhOofs g8vOqVO+Uaz4FwnNqaWoPsZFWThy29Zaz2fMzql1VSqtpoxTm/fPAu46cBB9cWdY Cwl3kPp8MAHMdFCeJVKfqIpY3wVYdjnv53300MeirjbOKa31gXcA4G4Nv+OPJP8L 4w8CusypKGIcht2WFU4v70cCzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3X2jcm JEZYslOQiN/AbKQyFO9YMB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM9mOwJlXzLZ4bHZYo1ztm11CcBSP8J0CPmqO0OiNotjKInURJ7o9/ eNBp9R5ZUVuUfgRZvE7KJA8XPy5i9k65eyKPywsxV1nhYgRAd5OaIMVJjihewPUv Qo0+HRprLLEH2Y4AzG0gvvb7+Mi515LsTOb09n49/SkgiZ7Q0vXlR9w8iRzylA8g TC84euPTi0sSxKd/JY/uVwsN+Tz5Q65w8xwmORlDIg/6X/XP5lExYIGD8Q6Gb0MA pkqHhyoZThA8HxWauTqcNIMUlF1xWEJbRaVKOZWUeA7lyA5SMZW/2p43Dc4p8jp0 fOXiSzI08RKAR58Ag5CRskC6dj5meDyy -----END CERTIFICATE-----Generated at Mon Oct 20 05:50:22 2025 by rpki-client