$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json) Hash identifier: dAaZcWG4jh+PCG1Wu5l8W4hJ7CONidpeZjCFtGkwmno= Subject key identifier: 2A:B6:0D:A7:0A:61:D0:37:52:47:AB:A2:13:21:2E:2A:ED:57:2E:E4 Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Certificate serial: 0935 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft Manifest number: 0928 Signing time: Sat 18 Oct 2025 21:20:51 +0000 Manifest this update: Sat 18 Oct 2025 21:20:51 +0000 Manifest next update: Sat 25 Oct 2025 21:20:51 +0000 Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: db96T0/XrFQU0k8ATPBzYNcAVnQ7EM4AXxRf6GNwN0A=) 2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: bj4egIAAlTEUd+3GyfnPFN1nOaWoeA00wwzQy3Jloew=) 3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: j+7FuDdUw+7PzuykOYS3riW81hh3FFiLyNobRrPETRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2357 (0x935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Validity Not Before: Oct 18 21:20:51 2025 GMT Not After : Oct 25 21:20:51 2025 GMT Subject: CN=68f404b3-d43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:89:34:65:78:ea:c2:75:83:1c:a8:59:5b: 0c:80:88:4e:ea:17:c9:3f:66:f8:16:76:7d:74:ee: 7f:40:f4:44:c9:e0:70:ec:fd:b8:cd:c8:32:ae:a2: 9f:83:3d:1a:a8:fa:2d:ff:7e:ec:53:7c:77:b5:a2: 54:d6:37:c9:7a:19:77:7c:ec:49:db:cc:0c:d0:04: f1:87:d6:44:5a:c5:ef:fc:fb:53:90:8e:d7:0d:b7: af:e5:31:7b:a5:03:d0:0a:a4:97:d9:97:f1:68:2f: 3a:52:c7:15:b7:77:a8:2f:b3:c3:6f:19:db:36:ff: c6:47:fa:28:eb:47:8d:00:e1:e0:6a:27:c5:45:33: 67:23:9f:d6:42:10:83:7f:ad:b1:ba:8e:d2:7a:60: 81:13:c2:02:f1:64:59:c2:b4:60:f7:2f:c5:e8:ba: be:df:eb:b6:fb:4e:1a:a3:74:00:19:b1:6b:9f:c9: 67:b3:de:d0:6b:cf:ad:bb:a5:29:0e:ed:9e:af:b5: 1b:77:89:4d:3f:17:eb:a5:c4:7c:b1:48:f0:f0:a0: aa:be:3d:3f:6b:dd:d9:26:cb:85:6e:2f:92:96:c8: fd:fa:d1:92:b1:72:7d:4c:5a:d0:99:d9:b7:5c:72: 32:df:db:ea:9c:3d:d8:de:dd:bd:fb:5c:9c:c8:95: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B6:0D:A7:0A:61:D0:37:52:47:AB:A2:13:21:2E:2A:ED:57:2E:E4 X509v3 Authority Key Identifier: keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cd:58:c1:fd:59:3e:c0:e7:b9:c8:3a:52:b5:2c:29:9c:94: c6:01:80:1c:5c:af:b8:09:29:7b:64:98:5a:6b:e2:eb:5b:c4: 13:e7:b6:3a:6d:ee:48:84:f7:19:b1:58:1f:5f:f3:c6:d0:0b: 83:b3:a6:85:80:09:24:45:72:4e:11:3c:7b:2a:74:42:f9:f2: 56:cd:0f:f6:06:ff:23:1a:fb:0e:a1:f3:83:f7:91:b2:91:98: 30:1c:de:41:4b:4a:fd:44:20:e6:a5:99:c9:f6:3a:28:9b:94: b4:2c:63:e7:b6:90:62:9d:19:e3:81:e4:17:6d:87:bf:d8:8c: cc:e4:f3:72:d1:da:61:ea:85:66:70:71:ba:64:97:bf:69:ac: 8d:24:17:75:cc:c6:d7:7a:4b:1b:9a:17:59:1f:cf:66:49:52: 34:14:1d:6f:cb:7c:de:c7:77:55:9d:dc:bd:42:20:7c:b0:26: df:a4:43:88:ac:eb:33:5e:cb:04:b3:01:ff:72:1c:ab:a7:a6: 8a:12:84:a4:e7:c9:76:de:df:64:17:de:f7:de:bf:82:28:b9: 0b:6e:5b:cd:5c:8e:91:4e:91:6d:0e:37:8a:a2:f3:2c:4a:3e: cc:85:33:5b:03:a4:27:fd:84:d2:de:c0:02:38:c9:33:71:25: ec:b2:6e:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQxOEYxMTAvBgNVBAUTKEQxQjZCRTdDRDUxNTQ1ODEzRUMzMTc2NjgwN0FDREQ5 ODdBOTBGREYwHhcNMjUxMDE4MjEyMDUxWhcNMjUxMDI1MjEyMDUxWjAYMRYwFAYD VQQDEw02OGY0MDRiMy1kNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/KJNGV46sJ1gxyoWVsMgIhO6hfJP2b4FnZ9dO5/QPREyeBw7P24zcgyrqKf gz0aqPot/37sU3x3taJU1jfJehl3fOxJ28wM0ATxh9ZEWsXv/PtTkI7XDbev5TF7 pQPQCqSX2ZfxaC86UscVt3eoL7PDbxnbNv/GR/oo60eNAOHgaifFRTNnI5/WQhCD f62xuo7SemCBE8IC8WRZwrRg9y/F6Lq+3+u2+04ao3QAGbFrn8lns97Qa8+tu6Up Du2er7Ubd4lNPxfrpcR8sUjw8KCqvj0/a93ZJsuFbi+Slsj9+tGSsXJ9TFrQmdm3 XHIy39vqnD3Y3t29+1ycyJXnUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCq2DacK YdA3UkerohMhLirtVy7kMB8GA1UdIwQYMBaAFNG2vnzVFUWBPsMXZoB6zdmHqQ/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDE4Ri83NUI5MEQyNEFG QjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZRS13eGRtZ0hyTjJZZXBE OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBiYS1mTlVWUllFLXd4ZG1nSHJOMlllcEQ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDE4Ri83NUI5MEQyNEFGQjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZ RS13eGRtZ0hyTjJZZXBEOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPzVjB/Vk+wOe5yDpStSwpnJTGAYAcXK+4CSl7ZJhaa+LrW8QT57Y6 be5IhPcZsVgfX/PG0AuDs6aFgAkkRXJOETx7KnRC+fJWzQ/2Bv8jGvsOofOD95Gy kZgwHN5BS0r9RCDmpZnJ9joom5S0LGPntpBinRnjgeQXbYe/2IzM5PNy0dph6oVm cHG6ZJe/aayNJBd1zMbXeksbmhdZH89mSVI0FB1vy3zex3dVndy9QiB8sCbfpEOI rOszXssEswH/chyrp6aKEoSk58l23t9kF9733r+CKLkLblvNXI6RTpFtDjeKovMs Sj7MhTNbA6Qn/YTS3sACOMkzcSXssm5r -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:38 2025 by rpki-client