$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft File: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json) Hash identifier: 2qcfeuyY6rJiAqBZFd8FoTi/KuWrn7QZfU1JVDzpH0I= Subject key identifier: 53:B8:D3:CE:FA:A6:0F:64:26:72:6E:B0:52:18:BA:22:06:07:66:9C Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Certificate serial: 2508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft Manifest number: 24F9 Signing time: Sat 18 Oct 2025 16:00:09 +0000 Manifest this update: Sat 18 Oct 2025 16:00:09 +0000 Manifest next update: Sat 25 Oct 2025 16:00:09 +0000 Files and hashes: 1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: C2nHmMOiQ3X6HVhS9azhUjct8QSoVKrEuzDeofeSnoE=) 2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: FvWwS3Spm+rRrjY0/JRXkfVlZov8/+1jHfihNOtR95E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9480 (0x2508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Validity Not Before: Oct 18 16:00:09 2025 GMT Not After : Oct 25 16:00:09 2025 GMT Subject: CN=68f3b989-cf15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:83:c5:e0:76:75:78:05:70:2b:66:2d:8f: 59:5d:71:4f:9a:ff:7b:5c:04:45:96:74:d1:51:b8: 54:42:10:36:d7:d7:63:94:fe:f3:8c:44:13:d8:61: 8e:de:2e:7d:4a:94:b4:5e:4a:d5:f3:67:e9:13:e9: fe:d1:28:a0:43:9c:e0:13:18:25:4b:ca:ae:6b:c1: 6c:e3:6d:dd:5b:40:23:9e:cc:5b:6c:e9:d0:74:8f: a7:ac:b3:f3:d5:46:3b:3d:e4:c5:67:9c:a2:12:33: 75:f3:f5:a6:14:d4:85:04:b8:5b:f6:c5:b6:10:03: b9:08:f2:f1:90:b2:0a:21:37:c5:13:c0:92:b9:91: fc:83:9f:6d:ba:5c:16:5c:41:4f:9a:73:a3:8f:24: bd:2b:98:6f:a6:ba:1e:1e:33:8d:7e:40:01:84:ba: 50:b9:b0:f7:0c:e0:57:ba:a6:40:02:5b:d7:c5:71: 71:b4:24:b2:20:77:1c:04:69:98:3c:78:c0:14:b1: 93:03:34:3b:29:aa:6c:f5:cc:0f:1f:38:e3:23:e0: ae:f1:f2:cf:99:fa:c9:ab:07:58:48:cc:e9:cb:1d: 1e:f6:87:c3:a7:34:54:44:98:1c:fb:02:8c:d9:1f: ba:27:e8:26:4f:a2:67:08:43:05:5e:09:78:31:25: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B8:D3:CE:FA:A6:0F:64:26:72:6E:B0:52:18:BA:22:06:07:66:9C X509v3 Authority Key Identifier: keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:44:45:cb:14:43:37:31:43:af:69:f2:0a:31:ea:7b:61:44: 69:c2:be:fe:cd:59:58:5e:5f:f4:6f:16:26:e4:12:fe:04:ee: 86:f1:41:1d:ee:a8:1b:cf:fb:5e:ca:ae:f5:9d:b0:29:80:df: 28:ee:11:e5:20:e8:57:59:a1:01:2e:f3:e3:57:84:8a:b9:cc: 70:0f:ed:ba:bb:73:95:b2:a3:0c:38:cf:7d:f7:c1:1b:68:13: 2b:00:77:a1:df:d9:60:d1:b0:09:07:61:4f:ee:a8:87:85:40: 75:ed:48:d9:d3:8f:d4:58:61:d1:e9:5a:49:18:ea:79:3d:3e: 69:9e:ee:2b:db:8a:4e:71:3a:ab:e7:35:f5:2b:0f:1e:9d:69: 91:9e:d6:7f:08:6a:f1:51:0d:c8:c1:13:d9:5e:f3:64:1e:7f: a5:0e:06:95:1a:21:a2:32:42:83:9d:e7:b8:cf:ce:71:8e:01: a9:a9:e7:d6:a0:b0:d3:3e:b9:b5:61:d7:3a:67:19:02:f6:65: 26:b7:0f:2b:0c:c7:19:34:91:92:17:0e:b9:05:5c:10:b1:59: 6f:7e:be:5f:c4:fc:c0:d8:94:7a:d5:5b:cc:4c:03:af:b7:e0: cb:fe:28:36:8a:f7:a7:03:8d:17:00:06:ce:9f:a9:89:47:22: f2:6d:7a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyNDQxMTAvBgNVBAUTKDA0MzQwMTcxODZEQjg0Q0E4OTQ3NzU3MEREQTEwQUQ3 MzE1OTdGRjEwHhcNMjUxMDE4MTYwMDA5WhcNMjUxMDI1MTYwMDA5WjAYMRYwFAYD VQQDEw02OGYzYjk4OS1jZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx2DxeB2dXgFcCtmLY9ZXXFPmv97XARFlnTRUbhUQhA219djlP7zjEQT2GGO 3i59SpS0XkrV82fpE+n+0SigQ5zgExglS8qua8Fs423dW0AjnsxbbOnQdI+nrLPz 1UY7PeTFZ5yiEjN18/WmFNSFBLhb9sW2EAO5CPLxkLIKITfFE8CSuZH8g59tulwW XEFPmnOjjyS9K5hvproeHjONfkABhLpQubD3DOBXuqZAAlvXxXFxtCSyIHccBGmY PHjAFLGTAzQ7Kaps9cwPHzjjI+Cu8fLPmfrJqwdYSMzpyx0e9ofDpzRURJgc+wKM 2R+6J+gmT6JnCEMFXgl4MSW6KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFO40876 pg9kJnJusFIYuiIGB2acMB8GA1UdIwQYMBaAFAQ0AXGG24TKiUd1cN2hCtcxWX/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDI0NC83RUFGRUNCMDND MDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhNcUpSM1Z3M2FFSzF6Rlpm X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JEUUJjWWJiaE1xSlIzVnczYUVLMXpGWmZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDI0NC83RUFGRUNCMDNDMDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhN cUpSM1Z3M2FFSzF6RlpmX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJREXLFEM3MUOvafIKMep7YURpwr7+zVlYXl/0bxYm5BL+BO6G8UEd 7qgbz/teyq71nbApgN8o7hHlIOhXWaEBLvPjV4SKucxwD+26u3OVsqMMOM9998Eb aBMrAHeh39lg0bAJB2FP7qiHhUB17UjZ04/UWGHR6VpJGOp5PT5pnu4r24pOcTqr 5zX1Kw8enWmRntZ/CGrxUQ3IwRPZXvNkHn+lDgaVGiGiMkKDnee4z85xjgGpqefW oLDTPrm1Ydc6ZxkC9mUmtw8rDMcZNJGSFw65BVwQsVlvfr5fxPzA2JR61VvMTAOv t+DL/ig2ivenA40XAAbOn6mJRyLybXqu -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:52 2025 by rpki-client