$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: mr+r9kUaVzZkoMgGxCcf0Sb7WBWWIbDpQfRnpBxzFRQ= Subject key identifier: D9:6B:C5:94:BF:5B:5B:82:DC:B2:A1:FC:BC:8B:F8:30:38:63:DA:68 Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 0823 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 0813 Signing time: Sat 18 Oct 2025 22:08:25 +0000 Manifest this update: Sat 18 Oct 2025 22:08:25 +0000 Manifest next update: Sat 25 Oct 2025 22:08:25 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: vMYmE70FOfe9mZmOD7NrG7i6Mwkc2SF07h2Hi5s0yXE=) 2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: M4ZsvutOyCk2s1KYcKAwaMHyjjGJAz91GGFqruJgJoU=) 3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: HmCUmLVw28r2IcR7zzOMBoMlcQpH+3WxtRZQvA+31cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2083 (0x823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Oct 18 22:08:25 2025 GMT Not After : Oct 25 22:08:25 2025 GMT Subject: CN=68f40fd9-596b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:7d:b6:32:56:03:2d:0f:34:a3:f9:57:84: 7c:04:a8:23:64:3e:f2:85:e8:87:53:7b:50:f9:49: 4a:30:e7:e8:6e:13:2f:23:5f:79:db:64:b8:4e:ad: a4:b7:f3:40:0d:c6:d4:8c:87:a3:16:c8:47:55:b9: 58:3c:16:68:98:27:12:10:ff:cf:25:38:a6:ed:2a: eb:f2:dd:7a:78:fa:99:e5:65:f4:b7:7f:a4:63:be: 89:74:7b:e6:04:d3:05:c9:0a:44:dd:8c:2f:dd:24: c3:34:80:cb:27:d4:4f:f7:ca:01:11:c6:e0:14:b0: 00:b6:3a:5c:c3:02:f7:17:09:86:24:84:3d:9c:e5: 59:81:f4:8c:b7:a2:23:c0:57:ff:5f:ce:bf:82:e4: c6:47:96:9c:e8:48:8f:2e:89:20:d2:58:62:9d:98: 0e:03:e3:72:a3:73:32:1e:ec:f9:ed:82:be:75:12: f5:8b:cb:ba:d0:6b:49:a0:90:29:07:23:72:6a:50: 11:b1:f5:c6:dc:69:28:6e:75:1b:22:89:a4:2c:1b: 41:4c:b5:c5:1f:bf:44:3a:a9:2b:eb:6c:8e:da:c0: 58:93:d3:36:6e:e5:8a:2d:5a:01:6d:96:79:86:5f: 0f:9c:bc:60:eb:87:3d:13:aa:72:6c:e4:4f:d8:20: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6B:C5:94:BF:5B:5B:82:DC:B2:A1:FC:BC:8B:F8:30:38:63:DA:68 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:53:62:ee:7f:c6:d3:13:b9:e3:96:8b:54:1b:72:8a:16:bd: 37:89:a1:bf:31:df:9a:7d:ed:48:bc:d9:12:ae:4b:bb:60:d2: d5:44:1b:a2:2b:cd:c2:f5:15:05:85:bb:ea:85:94:95:56:3f: d8:d2:71:51:29:a7:94:f7:c3:02:b1:63:8c:e7:1c:02:2a:55: 62:79:14:a0:35:75:f3:7d:0e:ce:a4:33:d6:4b:b1:03:98:7b: 65:1b:93:a5:fb:05:44:26:51:2d:5d:be:d7:d1:c0:eb:6d:32: 28:0a:a2:20:e1:a5:f3:df:b5:2a:0a:3c:36:fe:9b:ac:34:2b: d6:3e:0a:53:8a:57:ce:c7:16:3f:94:4c:a4:e7:42:a5:15:c0: 3a:6d:c1:f9:92:3e:11:7f:e5:ef:97:66:fa:f1:19:1d:0c:7a: 14:4d:83:bd:ff:0b:e8:4c:be:40:fc:13:e9:15:5d:91:7b:2d: b1:aa:a4:93:b7:07:f0:ec:c5:73:93:a3:78:fc:3f:fc:75:7b: 09:6e:eb:2d:5c:2f:19:0b:da:bc:06:e7:78:9b:31:33:05:20: 1d:67:c6:6e:c9:81:ea:1b:99:02:b5:50:75:80:58:6c:99:17: f1:61:f5:ff:3c:da:f4:b3:a6:7e:12:e8:6e:fc:b3:bb:d8:df: 34:b3:a4:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjUxMDE4MjIwODI1WhcNMjUxMDI1MjIwODI1WjAYMRYwFAYD VQQDEw02OGY0MGZkOS01OTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYt9tjJWAy0PNKP5V4R8BKgjZD7yheiHU3tQ+UlKMOfobhMvI19522S4Tq2k t/NADcbUjIejFshHVblYPBZomCcSEP/PJTim7Srr8t16ePqZ5WX0t3+kY76JdHvm BNMFyQpE3Ywv3STDNIDLJ9RP98oBEcbgFLAAtjpcwwL3FwmGJIQ9nOVZgfSMt6Ij wFf/X86/guTGR5ac6EiPLokg0lhinZgOA+Nyo3MyHuz57YK+dRL1i8u60GtJoJAp ByNyalARsfXG3GkobnUbIomkLBtBTLXFH79EOqkr62yO2sBYk9M2buWKLVoBbZZ5 hl8PnLxg64c9E6pybORP2CB1uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlrxZS/ W1uC3LKh/LyL+DA4Y9poMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+U2Luf8bTE7njlotUG3KKFr03iaG/Md+afe1IvNkSrku7YNLVRBui K83C9RUFhbvqhZSVVj/Y0nFRKaeU98MCsWOM5xwCKlVieRSgNXXzfQ7OpDPWS7ED mHtlG5Ol+wVEJlEtXb7X0cDrbTIoCqIg4aXz37UqCjw2/pusNCvWPgpTilfOxxY/ lEyk50KlFcA6bcH5kj4Rf+Xvl2b68RkdDHoUTYO9/wvoTL5A/BPpFV2Rey2xqqST twfw7MVzk6N4/D/8dXsJbustXC8ZC9q8Bud4mzEzBSAdZ8ZuyYHqG5kCtVB1gFhs mRfxYfX/PNr0s6Z+Euhu/LO72N80s6Ss -----END CERTIFICATE-----Generated at Mon Oct 20 14:14:17 2025 by rpki-client