$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json) Hash identifier: k38gktEpm0hzx2UFll8xqvM4q6uL4WqgSqpJlzoWQ1s= Subject key identifier: DA:CB:F9:AA:1C:E6:C3:D0:49:47:69:36:3E:8E:6A:09:FB:E5:40:F6 Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft Manifest number: 019B Signing time: Mon 20 Oct 2025 15:59:24 +0000 Manifest this update: Mon 20 Oct 2025 15:59:23 +0000 Manifest next update: Mon 27 Oct 2025 15:59:23 +0000 Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: 8mXNK2H18Wbt2EsCLz0eFaivKWkA3zC7ioTHVKH3/UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Validity Not Before: Oct 20 15:59:23 2025 GMT Not After : Oct 27 15:59:23 2025 GMT Subject: CN=68f65c5c-e553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:d7:d9:2d:fe:bb:0b:b5:f2:5e:26:03:85: 37:9a:20:b0:19:9f:ea:13:9f:9b:56:94:f6:ec:4b: 6e:1c:8d:5d:b7:ff:c3:56:62:d9:e5:0b:df:e9:c2: 12:49:e8:24:de:04:e2:c6:74:06:71:d7:b2:6d:28: ce:4d:94:ae:c1:85:be:0f:dd:37:a4:72:6d:64:5e: 1d:0e:e0:a1:3b:2c:20:eb:01:c3:5d:10:f0:05:41: 39:86:07:80:3d:e7:2c:7b:4c:b7:9a:50:13:9f:75: 21:a5:0c:f2:84:dd:48:6f:4c:e4:6b:bd:4b:53:c7: 07:9a:0b:74:93:96:02:9e:e9:92:3c:5f:c5:cf:7e: 07:53:88:2b:dd:b8:ce:bd:07:0f:b2:a8:36:b5:d1: 00:4e:8d:6e:61:5b:62:1c:5e:50:84:41:72:34:c9: 0c:df:06:ad:1b:b1:20:b4:86:b1:5a:75:23:40:60: 32:c1:e0:22:9e:df:f3:a1:bc:59:21:3d:c7:03:20: cf:df:6f:ff:b7:ba:17:de:e5:9d:52:ea:65:b8:4b: 2f:bf:7b:b9:da:7e:33:75:8f:ae:70:60:da:6d:0f: b2:ec:7a:a0:9f:95:4d:62:4a:48:f8:90:33:37:4b: 6e:3c:c2:86:28:3b:96:53:51:3d:0a:f9:be:92:e3: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CB:F9:AA:1C:E6:C3:D0:49:47:69:36:3E:8E:6A:09:FB:E5:40:F6 X509v3 Authority Key Identifier: keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:86:13:3d:17:df:de:43:1e:0e:c0:08:67:8b:32:e2:f4:94: e0:b6:ee:81:ba:29:d2:d5:50:8c:ca:b7:0b:06:62:c5:33:b3: b8:3e:88:8e:f1:12:a4:73:a0:49:04:9f:f7:08:f0:26:1d:b1: ec:6f:84:4b:fe:f5:a8:ad:85:a6:d3:2d:68:d7:6b:dc:9a:f6: 85:ff:4a:71:83:c0:f1:48:df:da:b3:c0:90:25:e0:16:1c:02: 15:0b:27:e4:88:80:c2:a9:34:88:13:db:87:92:83:88:18:5f: b0:fc:31:49:97:16:5f:eb:9c:de:22:84:37:24:8f:cd:4e:c5: 0e:6f:a0:0d:35:eb:34:67:84:6a:bb:fd:57:88:4a:76:c1:c1: bf:c9:ef:8e:02:19:dc:e7:74:e5:09:bf:ed:10:49:52:f7:b8: 65:7b:7b:15:af:3d:28:74:de:fa:47:5c:90:9b:02:30:87:87: bb:7a:ca:e2:2c:31:7e:9b:79:33:3d:d0:36:96:1d:d0:6c:e7: 60:8e:05:80:17:cb:bb:06:f1:7a:62:b0:6c:4b:5e:11:51:e0: 62:b3:9b:e2:19:8b:79:05:ae:6e:ed:8e:f2:31:42:b6:be:63: 7c:ad:75:cf:97:0b:db:0b:f9:c8:03:ed:ad:1a:31:e4:e6:d5: 58:db:2b:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF QzMyMEJDRTIwHhcNMjUxMDIwMTU1OTIzWhcNMjUxMDI3MTU1OTIzWjAYMRYwFAYD VQQDEw02OGY2NWM1Yy1lNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjbX2S3+uwu18l4mA4U3miCwGZ/qE5+bVpT27EtuHI1dt//DVmLZ5Qvf6cIS Segk3gTixnQGcdeybSjOTZSuwYW+D903pHJtZF4dDuChOywg6wHDXRDwBUE5hgeA Pecse0y3mlATn3UhpQzyhN1Ib0zka71LU8cHmgt0k5YCnumSPF/Fz34HU4gr3bjO vQcPsqg2tdEATo1uYVtiHF5QhEFyNMkM3watG7EgtIaxWnUjQGAyweAint/zobxZ IT3HAyDP32//t7oX3uWdUupluEsvv3u52n4zdY+ucGDabQ+y7Hqgn5VNYkpI+JAz N0tuPMKGKDuWU1E9Cvm+kuNmdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrL+aoc 5sPQSUdpNj6Oagn75UD2MB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbhhM9F9/eQx4OwAhnizLi9JTgtu6BuinS1VCMyrcLBmLFM7O4PoiO 8RKkc6BJBJ/3CPAmHbHsb4RL/vWorYWm0y1o12vcmvaF/0pxg8DxSN/as8CQJeAW HAIVCyfkiIDCqTSIE9uHkoOIGF+w/DFJlxZf65zeIoQ3JI/NTsUOb6ANNes0Z4Rq u/1XiEp2wcG/ye+OAhnc53TlCb/tEElS97hle3sVrz0odN76R1yQmwIwh4e7esri LDF+m3kzPdA2lh3QbOdgjgWAF8u7BvF6YrBsS14RUeBis5viGYt5Ba5u7Y7yMUK2 vmN8rXXPlwvbC/nIA+2tGjHk5tVY2yvm -----END CERTIFICATE-----Generated at Tue Oct 21 08:08:57 2025 by rpki-client