$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: 7HGGZuy77SmDqQiQ1seFnWnEJZatpkilEUf+O0SphxQ= Subject key identifier: 19:37:26:C3:78:D1:C9:9F:39:0D:48:1E:93:BB:51:EB:F3:2E:AC:09 Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 01CB Signing time: Sun 19 Oct 2025 05:25:09 +0000 Manifest this update: Sun 19 Oct 2025 05:25:09 +0000 Manifest next update: Sun 26 Oct 2025 05:25:09 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: 7hHOS0DsitXwaXpmKsuOl/OwJX4mc7nH5h5UzrpiDvw=) 2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: Q3/I4xZV8CvWyhr+A+P9zzW5K8pcc6S3V6pLPjC2BoQ=) 3: EA22589E373C11F0909EF25DC4F9AE02.roa (hash: pK7K0oDGB09OEHam5uLFYf312YyVDqFKY5nBRiwk3eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Oct 19 05:25:09 2025 GMT Not After : Oct 26 05:25:09 2025 GMT Subject: CN=68f47635-b5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:fc:01:d3:4b:28:00:65:29:56:24:25:8e: ed:71:0c:87:e7:a0:88:db:f2:af:db:c6:02:55:a2: 30:4a:c2:75:64:8e:1a:32:0b:a1:28:46:9c:f1:33: 95:45:b4:e8:70:2f:96:55:3f:1c:1a:da:75:e9:ca: 30:4b:ae:5d:cc:99:34:b1:25:d4:e0:b1:88:48:15: ff:91:1f:8d:a6:b4:29:fd:08:88:bf:19:0c:d8:7c: 68:12:19:80:e2:65:4a:b7:b4:f3:78:50:d8:f2:a8: d8:03:47:ca:95:60:f3:ea:35:87:91:ec:90:8f:df: 74:38:d1:8c:bf:3b:a6:d4:80:25:22:ca:aa:50:2e: c3:22:07:62:04:df:6e:be:1a:95:95:bc:31:ee:42: 40:86:54:f7:df:25:ef:d4:19:8e:ad:41:11:58:09: 44:89:85:05:ae:68:35:86:c0:7e:86:2f:d1:28:05: aa:cf:3e:c8:fe:92:68:63:09:06:85:ba:5e:15:4d: db:4d:7d:4a:7c:78:c7:72:0d:51:0b:54:97:9e:61: 9d:73:d4:cb:f5:e8:00:6d:75:7a:ad:a3:65:78:c8: ef:76:56:0a:43:3c:84:e7:d3:6a:b4:a1:08:5d:8c: e4:18:fa:65:1e:5b:97:50:3d:27:8d:e6:91:06:5f: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:37:26:C3:78:D1:C9:9F:39:0D:48:1E:93:BB:51:EB:F3:2E:AC:09 X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:63:eb:da:b2:da:3b:0b:33:7b:ff:91:29:d1:25:9c:69:b5: ab:84:10:f5:0d:8a:86:b6:d1:b3:bb:47:f1:f4:eb:08:6b:62: b5:8c:27:e1:a8:aa:66:59:8a:95:a9:3d:ca:fa:23:da:e4:51: d4:ae:15:25:68:95:7f:b2:17:a7:56:ea:db:dd:09:da:81:fc: 12:14:12:d3:a2:a1:47:2e:a8:e2:cb:3d:86:3f:31:20:54:51: 40:87:c5:4f:ee:fe:df:3c:d4:9a:8d:41:fb:b6:73:34:43:ae: b7:5d:56:ea:d4:7a:69:68:52:d7:9b:a4:cf:f7:f2:82:73:7c: a9:58:23:00:5d:b7:02:1e:01:ac:bc:ee:01:9b:44:01:ad:97: 9a:ed:5b:a3:33:aa:ac:4c:a5:fd:9a:53:ee:ad:c1:42:24:08: af:f9:be:92:5a:f5:07:34:90:7a:b5:b0:72:b5:71:7b:46:20: 90:04:86:98:87:41:b0:08:aa:ec:64:9d:2e:52:dc:8a:02:7d: b2:56:64:6b:96:7c:db:67:8e:a4:8e:5f:67:b5:d5:ac:26:de: f8:5a:71:e5:8e:07:93:3b:bc:7d:9d:24:e4:d4:88:3f:bc:a5: 43:8f:db:da:0c:37:06:32:f6:b1:5d:98:d7:85:0e:8d:1b:ba: 7e:d2:cf:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjUxMDE5MDUyNTA5WhcNMjUxMDI2MDUyNTA5WjAYMRYwFAYD VQQDEw02OGY0NzYzNS1iNWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00/8AdNLKABlKVYkJY7tcQyH56CI2/Kv28YCVaIwSsJ1ZI4aMguhKEac8TOV RbTocC+WVT8cGtp16cowS65dzJk0sSXU4LGISBX/kR+NprQp/QiIvxkM2HxoEhmA 4mVKt7TzeFDY8qjYA0fKlWDz6jWHkeyQj990ONGMvzum1IAlIsqqUC7DIgdiBN9u vhqVlbwx7kJAhlT33yXv1BmOrUERWAlEiYUFrmg1hsB+hi/RKAWqzz7I/pJoYwkG hbpeFU3bTX1KfHjHcg1RC1SXnmGdc9TL9egAbXV6raNleMjvdlYKQzyE59NqtKEI XYzkGPplHluXUD0njeaRBl+ILwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk3JsN4 0cmfOQ1IHpO7UevzLqwJMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoY+vasto7CzN7/5Ep0SWcabWrhBD1DYqGttGzu0fx9OsIa2K1jCfh qKpmWYqVqT3K+iPa5FHUrhUlaJV/shenVurb3QnagfwSFBLToqFHLqjiyz2GPzEg VFFAh8VP7v7fPNSajUH7tnM0Q663XVbq1HppaFLXm6TP9/KCc3ypWCMAXbcCHgGs vO4Bm0QBrZea7VujM6qsTKX9mlPurcFCJAiv+b6SWvUHNJB6tbBytXF7RiCQBIaY h0GwCKrsZJ0uUtyKAn2yVmRrlnzbZ46kjl9ntdWsJt74WnHljgeTO7x9nSTk1Ig/ vKVDj9vaDDcGMvaxXZjXhQ6NG7p+0s+e -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:57 2025 by rpki-client