$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: fGyPHseQJCz3dBlZs+cPW0D53cQEe101sRYcnSWDqyE= Subject key identifier: 87:BB:A2:30:66:0D:3E:DC:B8:16:3C:63:B8:FE:04:F5:4B:AE:7A:7A Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0BA4 Signing time: Sat 18 Oct 2025 19:49:13 +0000 Manifest this update: Sat 18 Oct 2025 19:49:12 +0000 Manifest next update: Sat 25 Oct 2025 19:49:12 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: 9fNYAtZ7FvPmyQ7PAjNI/z2d/XBI4T0JlQg71eAd4fQ=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: 2QDvhbtMSuUMKkHjiP/BzPb8Yd8fGPxfNmWlpQE2e54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Oct 18 19:49:12 2025 GMT Not After : Oct 25 19:49:12 2025 GMT Subject: CN=68f3ef38-89b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:a3:cf:fe:4d:ed:0f:7a:31:1a:22:e0:e9: 51:a0:e9:53:4e:30:c3:6f:2e:05:0e:2b:32:87:ad: 81:7a:fc:6a:f4:a2:fb:67:23:fe:99:fc:62:a0:66: 07:14:7b:a1:ed:a9:b1:10:ba:56:ff:3d:a7:25:f1: 0a:04:40:81:9f:ad:4f:83:79:22:cf:93:3c:82:da: 83:f2:ca:dd:33:16:e6:50:2c:44:04:55:34:5b:ba: 6a:2a:15:60:f5:87:c0:c3:5e:40:00:55:ea:f2:95: ff:c9:ce:a7:a4:a8:67:0c:f1:89:d9:17:35:9a:37: f1:97:ab:2e:1b:74:8b:a4:c1:0e:3d:95:a9:e2:a4: 5a:f8:06:6d:fc:45:ec:28:96:6d:b4:25:f4:14:a8: bc:52:ab:22:bd:28:db:e7:9f:91:fc:71:d9:86:d4: e0:19:af:b0:f8:bb:68:40:b2:29:49:0e:a8:f3:b9: c3:0a:2b:25:43:62:d0:5d:da:8f:c0:1d:55:3b:27: 28:6c:06:97:35:5b:db:31:31:67:ef:22:05:af:22: 46:71:40:f9:69:fa:1b:1f:4e:ba:33:ea:db:85:23: 01:6e:c9:39:5b:4a:49:d0:2a:27:d5:80:05:c9:31: be:f9:40:a7:c1:80:47:da:ee:d6:13:db:31:ca:d2: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:A2:30:66:0D:3E:DC:B8:16:3C:63:B8:FE:04:F5:4B:AE:7A:7A X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:dd:4b:da:5c:8f:e7:a3:8c:6b:5b:fa:03:b7:db:a2:cd:67: 75:87:7c:77:98:fe:92:41:e7:17:27:aa:22:35:a2:c9:dd:fa: fa:5a:c2:4d:16:83:c8:fa:92:b3:33:90:ef:43:65:46:1e:82: 32:80:c5:9b:5f:2e:7c:6d:c0:37:7c:d0:0e:29:af:98:9b:e3: 30:8c:c3:5e:20:8e:49:12:38:2f:b5:22:9a:d9:dd:e6:0f:a9: 21:11:97:4f:76:9d:ac:38:15:c7:79:9e:7f:c7:57:a9:0c:dd: d9:29:1f:91:40:d0:e5:64:02:72:b2:d8:4f:fd:94:e5:a5:9d: be:41:c2:4e:3c:0f:21:83:20:06:0f:4e:e6:56:ff:a7:32:af: fd:72:63:3d:56:aa:fa:89:af:45:a1:cc:6b:b6:da:32:dd:08: d6:b2:43:35:7e:eb:0c:f4:da:b5:8b:29:7d:ef:d7:bc:c5:d7: 33:83:b1:f9:12:27:7f:b4:76:84:75:00:33:07:bf:7f:41:b7: e7:ee:66:f4:e6:6b:aa:6b:e1:64:1e:3d:ec:e6:bd:cc:b4:41: 5a:a2:ff:d4:e4:5b:c9:3e:f6:47:45:76:91:bf:02:f0:fe:0d: 34:ea:3f:12:60:fe:1e:b9:a0:df:3f:7f:af:50:fe:cb:67:fd: 9d:c8:de:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjUxMDE4MTk0OTEyWhcNMjUxMDI1MTk0OTEyWjAYMRYwFAYD VQQDEw02OGYzZWYzOC04OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhyjz/5N7Q96MRoi4OlRoOlTTjDDby4FDisyh62Bevxq9KL7ZyP+mfxioGYH FHuh7amxELpW/z2nJfEKBECBn61Pg3kiz5M8gtqD8srdMxbmUCxEBFU0W7pqKhVg 9YfAw15AAFXq8pX/yc6npKhnDPGJ2Rc1mjfxl6suG3SLpMEOPZWp4qRa+AZt/EXs KJZttCX0FKi8UqsivSjb55+R/HHZhtTgGa+w+LtoQLIpSQ6o87nDCislQ2LQXdqP wB1VOycobAaXNVvbMTFn7yIFryJGcUD5afobH066M+rbhSMBbsk5W0pJ0Con1YAF yTG++UCnwYBH2u7WE9sxytI5IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe7ojBm DT7cuBY8Y7j+BPVLrnp6MB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG3UvaXI/no4xrW/oDt9uizWd1h3x3mP6SQecXJ6oiNaLJ3fr6WsJN FoPI+pKzM5DvQ2VGHoIygMWbXy58bcA3fNAOKa+Ym+MwjMNeII5JEjgvtSKa2d3m D6khEZdPdp2sOBXHeZ5/x1epDN3ZKR+RQNDlZAJysthP/ZTlpZ2+QcJOPA8hgyAG D07mVv+nMq/9cmM9Vqr6ia9Focxrttoy3QjWskM1fusM9Nq1iyl979e8xdczg7H5 Eid/tHaEdQAzB79/Qbfn7mb05muqa+FkHj3s5r3MtEFaov/U5FvJPvZHRXaRvwLw /g006j8SYP4euaDfP3+vUP7LZ/2dyN6u -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:51 2025 by rpki-client