$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: Oy1SPqDyzksWQwx/LFFX8S+nJih2X9kq6gP4D59i9hc= Subject key identifier: 47:94:44:91:6F:FE:38:37:3D:94:0A:A2:7D:F2:FB:72:7C:5F:78:05 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 0535 Signing time: Sun 19 Oct 2025 01:20:19 +0000 Manifest this update: Sun 19 Oct 2025 01:20:18 +0000 Manifest next update: Sun 26 Oct 2025 01:20:18 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: e56Mw+O51GJhm5V8eolCEZJA8C48cFB4s8CTdj9Er34=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: dmJCq+TfcdKcTzpkdOc2Oy+/xUlQZgSzYrK0BxujDDA=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: klkni3QfAoaIepGFi9OaOnNpBqMIdWLlo8tnHjdjSxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Oct 19 01:20:18 2025 GMT Not After : Oct 26 01:20:18 2025 GMT Subject: CN=68f43cd2-d9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:3a:9b:2b:78:e7:6d:74:7e:91:37:a2:74: 48:b2:2a:c6:35:18:5a:f1:35:5d:fd:ba:d5:1c:63: 38:b1:27:15:65:df:39:26:75:b5:39:28:51:ff:69: e0:f3:9c:a6:e6:82:9f:fc:9b:8e:e2:52:1b:93:16: 59:3b:a4:4e:e5:36:85:16:8e:bd:cd:61:a2:55:f6: f5:32:7e:60:a9:07:ff:85:93:e8:76:05:d9:2d:41: 4b:12:56:34:df:85:46:3f:f0:e7:64:cc:61:a4:d5: 5e:4c:5e:f9:ac:15:96:dd:f1:b4:1d:78:21:6f:ba: d5:23:b3:2f:76:6e:84:50:8b:f6:3c:f8:e0:67:f1: e5:58:67:54:ab:bf:2b:87:22:44:c4:2b:14:0f:42: cb:7b:6a:25:ff:bf:8e:f5:f3:2d:11:e1:28:d7:f4: d4:68:42:db:12:7f:e3:72:04:75:dc:89:74:e2:4f: 20:2d:0e:1e:b2:b1:09:c0:ab:fd:51:7d:03:ae:26: c8:fd:8e:34:1d:ce:eb:88:8d:8c:c2:fc:5a:29:3a: e9:0c:d2:cc:3b:df:91:46:f8:74:2b:ea:c7:f7:0b: cb:13:67:36:fe:7c:72:74:8a:5c:f5:9e:db:f2:ba: ff:2c:cc:1c:ca:25:be:7e:1c:af:8b:0f:e6:95:d4: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:94:44:91:6F:FE:38:37:3D:94:0A:A2:7D:F2:FB:72:7C:5F:78:05 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:5a:5d:cc:21:d8:a9:59:24:31:24:99:99:6f:cd:f1:40:41: 68:12:79:60:99:97:af:8c:b1:b0:2f:fb:a3:6b:a3:c6:03:31: 15:f4:a8:c1:ba:92:39:d2:e6:52:4b:4a:55:5c:4b:d9:3c:d7: bd:1c:08:63:be:c3:f0:58:40:61:25:64:00:56:a1:f6:9c:99: 69:0b:bf:1c:77:27:b0:10:c1:bc:7c:0b:12:89:f5:15:62:70: f9:a6:29:c7:b1:14:ab:88:ec:a0:99:d5:b3:84:8f:9b:06:92: c8:0e:57:b8:d6:f9:80:46:d8:11:9e:f8:9c:b6:98:f6:eb:52: 3b:32:90:22:e9:d5:b5:38:3d:a4:b1:ac:be:ae:92:9e:d9:9f: 31:1c:87:7c:e8:dc:e8:c3:29:78:a8:67:a3:ae:45:d7:ca:e6: 8b:89:58:b5:83:4e:09:8b:33:23:d2:0f:d8:ee:82:ba:98:12: 7a:5e:72:8e:f4:76:58:4a:67:ac:49:1f:8e:2f:ff:f3:a2:13: 76:b3:f4:ab:c0:a5:90:da:c1:25:d0:c2:3b:76:41:78:6e:3e: 05:a8:26:9b:2a:32:b6:21:1a:cc:4a:e5:0a:e4:30:dc:8a:c4: fc:92:c6:70:c3:46:93:19:09:4b:67:58:91:dd:d9:10:31:c0: 99:98:95:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUxMDE5MDEyMDE4WhcNMjUxMDI2MDEyMDE4WjAYMRYwFAYD VQQDEw02OGY0M2NkMi1kOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0Y6myt45210fpE3onRIsirGNRha8TVd/brVHGM4sScVZd85JnW1OShR/2ng 85ym5oKf/JuO4lIbkxZZO6RO5TaFFo69zWGiVfb1Mn5gqQf/hZPodgXZLUFLElY0 34VGP/DnZMxhpNVeTF75rBWW3fG0HXghb7rVI7Mvdm6EUIv2PPjgZ/HlWGdUq78r hyJExCsUD0LLe2ol/7+O9fMtEeEo1/TUaELbEn/jcgR13Il04k8gLQ4esrEJwKv9 UX0DribI/Y40Hc7riI2MwvxaKTrpDNLMO9+RRvh0K+rH9wvLE2c2/nxydIpc9Z7b 8rr/LMwcyiW+fhyviw/mldQuMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeURJFv /jg3PZQKon3y+3J8X3gFMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Wl3MIdipWSQxJJmZb83xQEFoEnlgmZevjLGwL/uja6PGAzEV9KjB upI50uZSS0pVXEvZPNe9HAhjvsPwWEBhJWQAVqH2nJlpC78cdyewEMG8fAsSifUV YnD5pinHsRSriOygmdWzhI+bBpLIDle41vmARtgRnvictpj261I7MpAi6dW1OD2k say+rpKe2Z8xHId86Nzowyl4qGejrkXXyuaLiVi1g04JizMj0g/Y7oK6mBJ6XnKO 9HZYSmesSR+OL//zohN2s/SrwKWQ2sEl0MI7dkF4bj4FqCabKjK2IRrMSuUK5DDc isT8ksZww0aTGQlLZ1iR3dkQMcCZmJUv -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:28 2025 by rpki-client