$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json) Hash identifier: 8l4pXZmDgH5Ecl88RrDFPAAPgggkzKnhku8v/xbmtDs= Subject key identifier: 1B:FE:56:C0:5F:7B:D5:D7:FF:4F:5F:B2:21:7F:74:92:65:85:1B:83 Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C Certificate serial: 06CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft Manifest number: 06C6 Signing time: Sat 18 Oct 2025 23:36:27 +0000 Manifest this update: Sat 18 Oct 2025 23:36:27 +0000 Manifest next update: Sat 25 Oct 2025 23:36:27 +0000 Files and hashes: 1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: mYYPMBHSqq6R92pKPDaMwgL+dramxkwgEZZ9rpZ/o3U=) 2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: vUduh0w3eSZesFepaO929FwqL1Ap+OkfqL7IQgJ/yu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C Validity Not Before: Oct 18 23:36:27 2025 GMT Not After : Oct 25 23:36:27 2025 GMT Subject: CN=68f4247b-a4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:51:60:08:d7:e9:c6:d4:dd:e6:71:1e:b6:01: 75:c2:88:a2:ad:75:87:58:bd:9e:6f:35:d8:bb:6e: 95:7b:a8:2a:0c:29:eb:76:35:93:69:28:37:59:21: 63:df:e2:29:da:62:ad:c8:62:43:17:ff:9e:a8:49: 88:3d:67:43:e2:a9:f2:8f:e7:ec:08:44:58:2a:b8: 9b:da:06:11:7a:33:62:9a:b7:b2:f5:a2:f7:77:b0: 2b:66:b3:12:6a:ea:15:a5:96:c4:35:54:af:49:9f: cc:91:9f:3a:4c:f9:79:0c:21:ba:7b:b7:d6:7c:c2: a3:14:27:33:5a:4f:28:3d:a4:05:bb:27:bb:52:b0: 8a:48:d9:32:0d:33:35:4c:d1:f3:94:a5:9e:00:74: 14:33:24:df:60:a4:d0:6e:40:d9:61:a3:3a:4b:9e: e5:e4:e2:75:71:d5:0f:a5:ad:8f:c9:c2:21:21:98: d9:dc:a1:34:a4:da:82:95:0f:17:f4:fe:b9:5e:d1: 44:84:5f:a8:2c:ef:2d:c3:4d:16:48:02:e9:85:b5: fa:7d:15:93:96:09:1f:bb:e7:9d:3e:e1:2d:b9:b8: 7c:50:94:13:8a:98:c5:18:1d:78:1c:2f:6c:b8:7b: 45:ab:9e:99:f4:d8:d5:57:c4:8b:c9:70:d2:f6:5a: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FE:56:C0:5F:7B:D5:D7:FF:4F:5F:B2:21:7F:74:92:65:85:1B:83 X509v3 Authority Key Identifier: keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:5e:a3:89:75:e2:d3:ab:88:c1:38:39:d3:d0:04:d6:23:95: 8e:61:92:fd:49:e3:d8:0a:bd:8c:4e:c1:16:9d:2f:af:05:68: a0:d2:eb:8f:3d:11:01:26:7c:da:f3:78:df:a9:bb:91:38:66: 84:b1:d3:88:d3:eb:d2:93:af:c5:61:55:7a:b7:bf:2b:d8:2a: 5b:ee:f1:b4:80:23:34:c0:98:b7:3b:3d:9b:5e:c1:1d:ea:fd: c2:87:30:43:19:8f:10:b0:82:79:3b:5c:97:f1:a7:d3:8c:f2: 46:45:d5:d2:a0:99:39:4b:35:5c:a8:fc:78:e2:20:5c:93:90: 0f:23:3c:99:d2:63:57:99:a2:88:ea:cc:c2:b1:52:ab:13:de: dd:74:cd:0f:09:7f:43:87:27:3e:03:1f:e4:74:7b:0c:2a:16: db:03:4d:7e:bf:5e:08:0e:2e:38:63:85:46:63:47:fa:45:a0: 03:06:ea:06:bd:be:1d:cf:8b:9d:fb:7a:d9:83:be:c3:1f:b5: 10:a1:c3:17:d5:a6:67:8b:8d:eb:1f:78:7f:da:ae:36:57:b1: b2:cb:09:42:e0:ea:c8:32:b2:95:4a:48:e9:89:78:50:93:06: 1a:f2:82:d6:6a:0f:5c:66:87:65:3b:a5:61:91:c4:2b:95:ea: 69:9d:0f:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGODAxMTAvBgNVBAUTKDZDQTJDRkE2ODhCREY5RTJENjU2MTYwODY3N0EzMEM5 MTUyNDNEMEMwHhcNMjUxMDE4MjMzNjI3WhcNMjUxMDI1MjMzNjI3WjAYMRYwFAYD VQQDEw02OGY0MjQ3Yi1hNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1FgCNfpxtTd5nEetgF1woiirXWHWL2ebzXYu26Ve6gqDCnrdjWTaSg3WSFj 3+Ip2mKtyGJDF/+eqEmIPWdD4qnyj+fsCERYKrib2gYRejNimrey9aL3d7ArZrMS auoVpZbENVSvSZ/MkZ86TPl5DCG6e7fWfMKjFCczWk8oPaQFuye7UrCKSNkyDTM1 TNHzlKWeAHQUMyTfYKTQbkDZYaM6S57l5OJ1cdUPpa2PycIhIZjZ3KE0pNqClQ8X 9P65XtFEhF+oLO8tw00WSALphbX6fRWTlgkfu+edPuEtubh8UJQTipjFGB14HC9s uHtFq56Z9NjVV8SLyXDS9loVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBv+VsBf e9XX/09fsiF/dJJlhRuDMB8GA1UdIwQYMBaAFGyiz6aIvfni1lYWCGd6MMkVJD0M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY4MC8wNzFERUE0MDdD Q0UxMUVCQkI4ODI5NzZDNEY5QUUwMi9iS0xQcG9pOS1lTFdWaFlJWjNvd3lSVWtQ UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLTFBwb2k5LWVMV1ZoWUlaM293eVJVa1BRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY4MC8wNzFERUE0MDdDQ0UxMUVCQkI4ODI5NzZDNEY5QUUwMi9iS0xQcG9pOS1l TFdWaFlJWjNvd3lSVWtQUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3XqOJdeLTq4jBODnT0ATWI5WOYZL9SePYCr2MTsEWnS+vBWig0uuP PREBJnza83jfqbuROGaEsdOI0+vSk6/FYVV6t78r2Cpb7vG0gCM0wJi3Oz2bXsEd 6v3ChzBDGY8QsIJ5O1yX8afTjPJGRdXSoJk5SzVcqPx44iBck5APIzyZ0mNXmaKI 6szCsVKrE97ddM0PCX9Dhyc+Ax/kdHsMKhbbA01+v14IDi44Y4VGY0f6RaADBuoG vb4dz4ud+3rZg77DH7UQocMX1aZni43rH3h/2q42V7GyywlC4OrIMrKVSkjpiXhQ kwYa8oLWag9cZodlO6VhkcQrleppnQ/p -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:51 2025 by rpki-client