$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft File: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json) Hash identifier: 8eBEaoyKCV6BRbb9nSHvGFQtjxxaUXIhcTiqT81cgt0= Subject key identifier: C3:03:09:A0:2B:E0:4B:83:A3:35:45:E2:0E:CE:CF:4A:B3:7D:1A:43 Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 Certificate issuer: /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft Manifest number: 02CC Signing time: Sun 19 Oct 2025 03:29:55 +0000 Manifest this update: Sun 19 Oct 2025 03:29:54 +0000 Manifest next update: Sun 26 Oct 2025 03:29:54 +0000 Files and hashes: 1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: He4w94I0GODnz5iWdAFc6G1cFRO7LAFe+ECPCj45Q3M=) 2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: m5tkDr99ueIyPYAtBqolFfiSgG7uue2Tp2ShsOm2nZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A44, serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Validity Not Before: Oct 19 03:29:54 2025 GMT Not After : Oct 26 03:29:54 2025 GMT Subject: CN=68f45b32-c3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:52:13:5f:18:33:8d:93:51:f0:d5:33:ec: 73:87:0a:01:1b:d9:8b:a3:05:8a:13:0c:fa:86:7e: 79:bc:32:89:b3:08:16:e8:62:0d:4a:8f:2b:a0:9f: 1c:0f:81:13:fc:da:ed:33:5b:7b:64:f8:d8:6c:bb: 30:5b:ca:9f:34:2e:d0:43:b9:64:3c:84:c0:2a:2f: b6:15:3a:93:6a:55:8c:a2:d5:9a:b4:9e:23:74:f7: de:06:3d:5d:4e:16:3c:c0:80:a2:9d:9b:35:62:f2: cb:4b:9b:e6:36:93:80:5f:9f:f2:aa:5e:68:a4:f7: 36:6c:c4:f0:95:b2:b2:7c:45:5e:55:fc:f2:02:b6: 0e:97:c7:80:bd:17:df:6e:8e:63:01:4b:80:69:1d: 74:9d:fd:b6:84:93:2e:a2:0e:ad:cd:89:f0:09:24: 21:e3:a2:88:b7:b5:90:94:a3:08:c5:64:41:3f:8b: c9:af:2c:96:b9:af:b8:d0:8d:5e:65:53:80:29:32: cc:01:1d:3c:9d:8a:28:8c:f9:2f:b6:20:e4:41:7f: f1:72:a2:ef:bb:b8:42:90:41:62:44:df:4f:5a:de: 83:cd:e1:36:50:bf:04:d6:e0:02:36:8f:7a:08:98: e0:68:8c:ba:a1:79:4a:b2:4f:da:fe:c9:f8:84:d5: cb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:03:09:A0:2B:E0:4B:83:A3:35:45:E2:0E:CE:CF:4A:B3:7D:1A:43 X509v3 Authority Key Identifier: keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:48:4b:32:82:d3:36:b2:bf:08:c9:13:c9:da:e5:57:45:03: bb:dc:1b:c5:78:73:23:9e:4b:eb:f4:fd:a5:5d:3c:03:84:17: f4:44:d7:44:55:0a:14:b6:53:61:23:21:8c:4c:be:da:0d:21: 86:92:24:08:5a:f7:96:67:bd:fd:14:5e:c6:b9:8c:f6:4d:39: f4:93:5e:79:7a:93:01:ed:13:6b:81:1e:92:6c:12:42:cc:63: 40:79:dd:69:2f:63:78:91:2a:1a:c0:2d:ca:75:dc:1e:72:00: 0d:c5:b8:27:30:b6:34:7a:b9:8c:b6:1e:58:2c:54:b6:87:45: 11:70:de:36:5b:69:83:81:45:e0:da:b2:86:f6:0d:cd:1d:02: 0b:c7:cc:79:28:56:e9:50:76:7c:d5:76:f6:a2:9e:0f:2d:a0: 55:34:07:f7:c3:36:7f:6d:ba:6d:b2:76:e5:d2:b1:53:9e:30: 52:a6:d2:71:11:3e:95:30:7e:af:7d:86:33:94:83:d0:6d:90: 7c:c1:22:f8:f3:9d:fd:39:2e:9c:d1:f1:30:d6:4c:59:d2:2b: f9:c0:e8:fe:2c:ac:f5:31:33:0c:1a:80:e6:0b:9e:d0:67:18: 67:70:18:e9:3f:13:64:13:51:d3:19:3c:86:c8:d5:6f:79:1c: d1:96:70:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNDQxMTAvBgNVBAUTKDZDOUUwQzJCRkU5RjdEMUIxREUxRDZFRjYyODI1M0FB NzA4OTJBMjUwHhcNMjUxMDE5MDMyOTU0WhcNMjUxMDI2MDMyOTU0WjAYMRYwFAYD VQQDEw02OGY0NWIzMi1jM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi1SE18YM42TUfDVM+xzhwoBG9mLowWKEwz6hn55vDKJswgW6GINSo8roJ8c D4ET/NrtM1t7ZPjYbLswW8qfNC7QQ7lkPITAKi+2FTqTalWMotWatJ4jdPfeBj1d ThY8wICinZs1YvLLS5vmNpOAX5/yql5opPc2bMTwlbKyfEVeVfzyArYOl8eAvRff bo5jAUuAaR10nf22hJMuog6tzYnwCSQh46KIt7WQlKMIxWRBP4vJryyWua+40I1e ZVOAKTLMAR08nYoojPkvtiDkQX/xcqLvu7hCkEFiRN9PWt6DzeE2UL8E1uACNo96 CJjgaIy6oXlKsk/a/sn4hNXLBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMDCaAr 4EuDozVF4g7Oz0qzfRpDMB8GA1UdIwQYMBaAFGyeDCv+n30bHeHW72KCU6pwiSol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE0NC8wRUM4RTQyQTA4 ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZSc2Q0ZGJ2WW9KVHFuQ0pL aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JKNE1LXzZmZlJzZDRkYnZZb0pUcW5DSktpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE0NC8wRUM4RTQyQTA4ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZS c2Q0ZGJ2WW9KVHFuQ0pLaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaSEsygtM2sr8IyRPJ2uVXRQO73BvFeHMjnkvr9P2lXTwDhBf0RNdE VQoUtlNhIyGMTL7aDSGGkiQIWveWZ739FF7GuYz2TTn0k155epMB7RNrgR6SbBJC zGNAed1pL2N4kSoawC3KddwecgANxbgnMLY0ermMth5YLFS2h0URcN42W2mDgUXg 2rKG9g3NHQILx8x5KFbpUHZ81Xb2op4PLaBVNAf3wzZ/bbptsnbl0rFTnjBSptJx ET6VMH6vfYYzlIPQbZB8wSL48539OS6c0fEw1kxZ0iv5wOj+LKz1MTMMGoDmC57Q ZxhncBjpPxNkE1HTGTyGyNVveRzRlnCz -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:24 2025 by rpki-client