$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: SRjB6aWZpH1aa4fsyRprpyUP87aGDFRuKQDaSh2ogAY= Subject key identifier: 4A:26:5B:53:76:59:2A:90:0F:28:D1:85:15:3E:E0:B0:CD:B6:6A:85 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 0849 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 0843 Signing time: Sat 18 Oct 2025 21:55:02 +0000 Manifest this update: Sat 18 Oct 2025 21:55:01 +0000 Manifest next update: Sat 25 Oct 2025 21:55:01 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: 572jU4ENfM4av37vtcQjlwHvW/UOBMnqN+1ZsHnE1R8=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: 2kaLA3OXyUts1hifmBFAJDN2z6cyzPCnOT2p5MOkteQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Oct 18 21:55:01 2025 GMT Not After : Oct 25 21:55:01 2025 GMT Subject: CN=68f40cb5-7baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:23:ad:5c:19:81:8a:4e:14:bc:2f:51:06: 47:a1:bf:42:0d:c8:f5:72:cd:26:b2:20:9f:60:08: 68:af:d1:85:eb:15:33:ca:c9:73:a5:2a:0e:d0:aa: d4:30:3c:7e:c3:a3:7d:c9:56:05:20:e5:ff:4b:85: ed:3d:ce:b8:93:04:e6:18:50:45:81:91:56:e5:60: d6:75:20:8f:91:c2:ed:ba:e3:bf:41:0f:de:ef:3c: d7:5b:2a:23:b2:8b:21:84:8b:b3:b1:f8:ca:73:98: bc:56:43:69:a2:0d:a1:83:96:ea:d0:25:9f:b4:54: 91:34:40:69:ea:1c:17:08:a8:d8:78:32:03:2f:bc: b9:5f:bc:2e:fa:4c:e5:77:e8:e5:43:af:1d:77:e7: f3:a1:cc:a4:48:44:e4:9e:04:f7:42:d6:77:be:15: 39:f1:5c:18:ed:26:54:92:6d:32:ec:43:f4:56:30: 94:5e:f4:24:dc:b6:ea:bf:13:35:8c:ca:21:fe:b3: 86:d2:02:93:84:5c:20:a2:4c:db:03:57:06:69:b9: 80:d6:87:12:31:30:a0:d1:0b:ff:1f:bf:d6:7b:b4: b1:61:c8:69:10:ec:48:03:9c:6f:e8:d9:61:4d:ec: 8f:d0:e7:b5:65:c2:65:e2:69:77:1b:32:86:33:3a: e8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:26:5B:53:76:59:2A:90:0F:28:D1:85:15:3E:E0:B0:CD:B6:6A:85 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:13:aa:32:12:87:2f:4a:27:fc:b3:ad:57:03:c9:25:0b:0f: d1:f1:bf:9e:ad:43:f9:f6:f3:e7:f0:0b:bb:7d:cb:ed:b7:d9: 07:87:cb:e5:12:72:8c:97:dd:25:e5:17:1a:4c:ba:3a:e2:74: 03:6e:4a:4b:eb:5c:e7:0b:fc:23:25:06:67:75:1d:b7:27:08: b9:78:e0:f9:8d:4a:97:e7:29:7d:bc:57:fa:0a:56:c1:d2:c6: 27:76:af:06:fa:cb:9e:b2:35:88:09:11:db:9c:43:e4:b1:ad: 37:08:91:a7:ec:9f:6a:5e:ab:1e:8b:51:5e:78:2c:50:c9:82: ac:19:68:d3:12:3c:60:a9:1a:f2:51:64:b8:12:57:b8:21:84: 70:f5:f4:d0:f3:8e:ba:49:0e:b6:54:85:26:42:a7:b1:73:62: e1:02:da:37:ed:1e:77:ec:da:25:a6:b5:b5:10:df:65:09:81: 16:1c:f3:ae:df:c7:10:cb:0d:b6:24:78:49:dc:20:36:5a:e2: d5:d9:06:07:07:03:22:3e:13:e9:2a:62:01:ef:85:71:1f:a6: b4:29:9a:20:7e:b2:0b:68:11:4b:20:95:e0:d2:d0:d3:d3:6d: 79:4c:24:75:c6:a2:c3:d8:02:c1:ea:49:7a:25:8c:fa:25:91: 8e:23:03:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUxMDE4MjE1NTAxWhcNMjUxMDI1MjE1NTAxWjAYMRYwFAYD VQQDEw02OGY0MGNiNS03YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1ojrVwZgYpOFLwvUQZHob9CDcj1cs0msiCfYAhor9GF6xUzyslzpSoO0KrU MDx+w6N9yVYFIOX/S4XtPc64kwTmGFBFgZFW5WDWdSCPkcLtuuO/QQ/e7zzXWyoj soshhIuzsfjKc5i8VkNpog2hg5bq0CWftFSRNEBp6hwXCKjYeDIDL7y5X7wu+kzl d+jlQ68dd+fzocykSETkngT3QtZ3vhU58VwY7SZUkm0y7EP0VjCUXvQk3LbqvxM1 jMoh/rOG0gKThFwgokzbA1cGabmA1ocSMTCg0Qv/H7/We7SxYchpEOxIA5xv6Nlh TeyP0Oe1ZcJl4ml3GzKGMzrolQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEomW1N2 WSqQDyjRhRU+4LDNtmqFMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1E6oyEocvSif8s61XA8klCw/R8b+erUP59vPn8Au7fcvtt9kHh8vl EnKMl90l5RcaTLo64nQDbkpL61znC/wjJQZndR23Jwi5eOD5jUqX5yl9vFf6ClbB 0sYndq8G+suesjWICRHbnEPksa03CJGn7J9qXqsei1FeeCxQyYKsGWjTEjxgqRry UWS4Ele4IYRw9fTQ8466SQ62VIUmQqexc2LhAto37R537NolprW1EN9lCYEWHPOu 38cQyw22JHhJ3CA2WuLV2QYHBwMiPhPpKmIB74VxH6a0KZogfrILaBFLIJXg0tDT 0215TCR1xqLD2ALB6kl6JYz6JZGOIwNl -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:15 2025 by rpki-client