$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft File: BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json) Hash identifier: 4WZ4aU2QmO6DehAwk1xMQ107kfqvVn23A/r6UXkeWO0= Subject key identifier: D6:AA:71:06:7D:B6:A1:57:F7:92:99:48:52:F8:BE:11:60:8B:8C:BA Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 Certificate issuer: /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft Manifest number: 0217 Signing time: Sun 19 Oct 2025 04:30:30 +0000 Manifest this update: Sun 19 Oct 2025 04:30:30 +0000 Manifest next update: Sun 26 Oct 2025 04:30:30 +0000 Files and hashes: 1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: S49FVLQ3yk0pWNr01ACpzjtJRnh4K6kt2LvuRYkpi+U=) 2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: /AIOMPF379cdDnZ0oCHY5QGxjdpZh2kab3GCf0LfQ6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Validity Not Before: Oct 19 04:30:30 2025 GMT Not After : Oct 26 04:30:30 2025 GMT Subject: CN=68f46966-9625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:20:e0:4f:e6:73:40:fc:73:14:25:9b:40: 2d:73:c4:4b:bf:af:23:ec:12:73:0f:c8:30:8e:fe: 33:c4:89:13:3f:ca:96:7f:11:cf:66:31:93:b2:a7: a1:f3:dd:a7:dd:62:15:31:a7:07:bb:8d:cf:1e:4d: c0:65:9c:8c:c0:89:fc:30:94:f2:2b:cf:26:99:e0: 99:fc:56:3f:53:c8:e8:3d:07:68:aa:52:d2:37:29: c2:f0:04:5f:fb:de:54:ed:45:be:00:79:fa:90:1c: 31:8f:8e:a6:95:64:fd:9b:45:10:40:ed:6c:45:c3: bc:f4:63:12:e4:93:47:76:7b:54:ef:2a:bd:1d:42: 90:b4:83:53:8b:48:d7:35:fd:68:bb:0f:a9:78:51: 63:56:ee:d0:17:ef:ff:ba:0e:94:57:f6:2e:2c:de: 25:79:5f:ba:c5:86:b8:8a:54:e4:0f:53:f5:a5:a5: 6d:2f:dd:0a:54:f2:d4:34:95:38:fb:68:6a:b4:79: 3f:9d:b6:68:85:8c:24:50:a6:18:e6:ae:8b:40:bd: 99:31:d0:55:be:37:78:d0:49:22:32:a4:ca:88:d9: 01:ca:40:7c:97:6d:3b:9f:31:2f:ce:57:6b:2c:cf: bf:95:09:7b:3c:85:96:14:35:e3:7a:9d:52:2b:0f: 86:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:71:06:7D:B6:A1:57:F7:92:99:48:52:F8:BE:11:60:8B:8C:BA X509v3 Authority Key Identifier: keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6e:81:ef:75:a8:c8:7d:f9:35:e8:9a:bd:c2:f6:47:f8:08: 2b:02:0a:6c:69:aa:88:f6:36:e7:d9:f5:5e:1b:7f:54:61:fc: 7e:b5:0c:fb:86:15:8e:30:00:10:c9:76:3b:11:b1:73:9c:71: 5f:4c:c8:3f:d5:60:c5:ad:9c:a3:c5:cf:22:89:ce:60:ce:fe: e9:74:07:ef:b2:11:e6:a2:74:a4:e9:21:df:50:44:56:36:43: dd:0e:56:0b:21:36:68:45:4e:c7:f7:31:2e:94:31:4b:fb:ff: 0a:e7:42:97:b5:25:7b:62:ac:ec:e4:63:01:6c:1f:94:52:37: 98:17:b9:4f:58:90:d9:1a:b3:51:ec:41:df:88:d5:1b:2b:a1: 3a:4e:95:64:df:5a:6b:49:eb:fe:e3:76:2f:fb:d4:74:3d:ce: bb:7a:06:16:ff:45:e6:03:86:01:c6:1e:8b:90:1c:1b:d0:60: 36:1b:d2:71:19:a2:17:ed:21:7b:80:77:b6:bc:1c:91:44:ff: 38:44:67:a3:64:37:52:74:82:ee:62:49:f6:3c:13:a8:5b:bb: 22:02:d1:65:67:4b:27:43:a7:62:9e:3c:80:91:78:bd:a6:73: ec:e5:ed:f6:9a:18:b2:87:ab:53:e5:92:32:e2:60:db:a1:b5: 5a:63:3d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwQzkxMTAvBgNVBAUTKDA3MzgxN0RCNTI5Q0RCRUIzRkY5MzhBRTVFRTA4NDg4 RTE3RTRFOTAwHhcNMjUxMDE5MDQzMDMwWhcNMjUxMDI2MDQzMDMwWjAYMRYwFAYD VQQDEw02OGY0Njk2Ni05NjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoegg4E/mc0D8cxQlm0Atc8RLv68j7BJzD8gwjv4zxIkTP8qWfxHPZjGTsqeh 892n3WIVMacHu43PHk3AZZyMwIn8MJTyK88mmeCZ/FY/U8joPQdoqlLSNynC8ARf +95U7UW+AHn6kBwxj46mlWT9m0UQQO1sRcO89GMS5JNHdntU7yq9HUKQtINTi0jX Nf1ouw+peFFjVu7QF+//ug6UV/YuLN4leV+6xYa4ilTkD1P1paVtL90KVPLUNJU4 +2hqtHk/nbZohYwkUKYY5q6LQL2ZMdBVvjd40EkiMqTKiNkBykB8l207nzEvzldr LM+/lQl7PIWWFDXjep1SKw+GEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaqcQZ9 tqFX95KZSFL4vhFgi4y6MB8GA1UdIwQYMBaAFAc4F9tSnNvrP/k4rl7ghIjhfk6Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBDOS8wQzc3OENCNDdE MUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzItc18tVGl1WHVDRWlPRi1U cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6Z1gyMUtjMi1zXy1UaXVYdUNFaU9GLVRwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjBDOS8wQzc3OENCNDdEMUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzIt c18tVGl1WHVDRWlPRi1UcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbboHvdajIffk16Jq9wvZH+AgrAgpsaaqI9jbn2fVeG39UYfx+tQz7 hhWOMAAQyXY7EbFznHFfTMg/1WDFrZyjxc8iic5gzv7pdAfvshHmonSk6SHfUERW NkPdDlYLITZoRU7H9zEulDFL+/8K50KXtSV7Yqzs5GMBbB+UUjeYF7lPWJDZGrNR 7EHfiNUbK6E6TpVk31prSev+43Yv+9R0Pc67egYW/0XmA4YBxh6LkBwb0GA2G9Jx GaIX7SF7gHe2vByRRP84RGejZDdSdILuYkn2PBOoW7siAtFlZ0snQ6dinjyAkXi9 pnPs5e32mhiyh6tT5ZIy4mDbobVaYz3p -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:27 2025 by rpki-client