$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft File: bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json) Hash identifier: A0dOoDDsySeXlgnUGexyMU5aqiOfD7wMgA+DCUMOqo8= Subject key identifier: B7:15:74:AB:2F:A1:F1:C5:4A:E7:8D:A0:9A:36:20:CB:84:1B:C4:17 Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B Certificate issuer: /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft Manifest number: 011C Signing time: Sun 19 Oct 2025 07:42:14 +0000 Manifest this update: Sun 19 Oct 2025 07:42:13 +0000 Manifest next update: Sun 26 Oct 2025 07:42:13 +0000 Files and hashes: 1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: Ius7/9azF/teaR+VnFmZyVQhU+zhivyto3arrFobvT0=) 2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: GoylksPgamABprAXemlh5qC8IA2EnKvQRHTbupKYReA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B Validity Not Before: Oct 19 07:42:13 2025 GMT Not After : Oct 26 07:42:13 2025 GMT Subject: CN=68f49655-7f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:dc:86:4e:a3:d1:fe:5e:4d:ad:08:a6:57: bd:16:ca:34:d4:78:be:28:fb:e5:d7:f3:62:96:f3: 8c:77:c9:7d:50:33:a6:9d:f2:62:c8:17:b0:56:bd: d0:65:a3:76:c1:06:3e:fc:5f:6f:04:9b:d7:4c:22: 6f:69:4e:4e:1d:cd:3b:f6:4e:d0:dc:f1:a5:a8:ba: 6b:15:66:f4:2e:4e:4a:af:21:62:8f:94:93:a4:3e: 61:0a:41:04:67:25:d0:84:f0:03:f2:62:a8:67:6a: 50:ae:e8:cd:3d:04:0f:b0:03:a8:be:a7:93:3e:15: d4:fc:f1:0c:b7:70:03:3e:f6:4e:96:18:86:42:50: e2:d8:f1:88:b3:13:a7:31:65:9d:c9:7d:ea:3d:3e: e1:72:54:a2:d9:66:1f:b7:44:14:4d:c0:91:cb:df: 58:6a:69:7f:71:54:93:fb:2e:d2:f7:8f:cc:75:bc: eb:02:f3:97:71:5e:34:d5:24:8f:45:5f:06:bc:a9: 4f:b3:e1:c3:7c:70:04:93:42:7b:fa:80:c1:c0:f0: 30:36:9c:6e:6b:24:7b:a6:46:09:91:02:85:51:84: 87:01:64:30:6b:79:8c:83:21:77:24:be:4d:a8:c5: de:74:68:42:6f:aa:a7:2e:ba:51:c3:91:bd:2c:de: 2d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:15:74:AB:2F:A1:F1:C5:4A:E7:8D:A0:9A:36:20:CB:84:1B:C4:17 X509v3 Authority Key Identifier: keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:8e:21:e4:dc:85:c3:21:41:e1:da:de:c9:99:fd:ef:8e:e2: 0b:a7:9c:6b:89:42:a7:12:4e:9e:bc:0e:df:de:c5:c5:b4:1a: aa:14:c5:08:b5:47:e9:f9:a0:03:ec:67:f7:3c:42:ba:14:c4: f8:0a:27:5c:36:1c:c9:2e:22:bb:20:6d:ed:e0:6a:4a:88:8b: 23:3b:7f:4b:1e:0d:38:85:1c:e9:87:33:0b:83:9f:3b:da:40: 12:8d:de:bf:fb:e0:4e:d4:ef:cb:de:e7:ef:ea:a3:b4:14:66: 56:a3:2d:da:8e:4f:ba:d2:b0:89:5e:b7:c2:90:43:6a:c1:95: a4:94:fa:4a:63:f3:85:c8:14:d7:34:31:54:d0:69:20:2e:31: 8c:35:69:a5:85:26:c2:40:7f:d1:5a:36:b4:d6:08:b5:21:9f: 4a:9b:5e:76:33:cb:fa:8c:74:b7:b0:be:11:f0:b4:ef:5c:7e: d4:e2:a9:50:94:ac:22:2e:fa:d0:17:10:8f:a4:8d:8b:04:a4: 87:6e:69:4e:de:4c:f1:b4:1b:00:e8:af:41:b9:da:f8:6a:db: dd:8f:e2:41:0f:c5:ad:d9:e7:36:15:12:63:cd:80:00:f2:2f: 08:1a:ed:1f:59:a8:68:8e:bd:8a:86:e0:fc:1d:c3:e4:89:87: de:0f:95:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDZFNDU3MzM0ODY4MDMyNkQzREFERTk4NTIxNUQyMjY2 MjhCOUYxNkIwHhcNMjUxMDE5MDc0MjEzWhcNMjUxMDI2MDc0MjEzWjAYMRYwFAYD VQQDEw02OGY0OTY1NS03ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01fchk6j0f5eTa0Iple9Fso01Hi+KPvl1/NilvOMd8l9UDOmnfJiyBewVr3Q ZaN2wQY+/F9vBJvXTCJvaU5OHc079k7Q3PGlqLprFWb0Lk5KryFij5STpD5hCkEE ZyXQhPAD8mKoZ2pQrujNPQQPsAOovqeTPhXU/PEMt3ADPvZOlhiGQlDi2PGIsxOn MWWdyX3qPT7hclSi2WYft0QUTcCRy99Yaml/cVST+y7S94/MdbzrAvOXcV401SSP RV8GvKlPs+HDfHAEk0J7+oDBwPAwNpxuayR7pkYJkQKFUYSHAWQwa3mMgyF3JL5N qMXedGhCb6qnLrpRw5G9LN4trQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcVdKsv ofHFSueNoJo2IMuEG8QXMB8GA1UdIwQYMBaAFG5FczSGgDJtPa3phSFdImYoufFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi81MDU2QzhCMjAw NTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1tMDlyZW1GSVYwaVppaTU4 V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi81MDU2QzhCMjAwNTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1t MDlyZW1GSVYwaVppaTU4V3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYjiHk3IXDIUHh2t7Jmf3vjuILp5xriUKnEk6evA7f3sXFtBqqFMUI tUfp+aAD7Gf3PEK6FMT4CidcNhzJLiK7IG3t4GpKiIsjO39LHg04hRzphzMLg587 2kASjd6/++BO1O/L3ufv6qO0FGZWoy3ajk+60rCJXrfCkENqwZWklPpKY/OFyBTX NDFU0GkgLjGMNWmlhSbCQH/RWja01gi1IZ9Km152M8v6jHS3sL4R8LTvXH7U4qlQ lKwiLvrQFxCPpI2LBKSHbmlO3kzxtBsA6K9Budr4atvdj+JBD8Wt2ec2FRJjzYAA 8i8IGu0fWahojr2KhuD8HcPkiYfeD5Wz -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:03 2025 by rpki-client