$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: fuJfiXrgPAwzqw/8vmgPreflUJlJWgAfeGWp8P6JuEA= Subject key identifier: 5F:53:34:AB:41:00:DB:4A:4B:F3:F6:00:29:59:E0:CB:4D:7A:BF:3B Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 048F Signing time: Sun 19 Oct 2025 01:52:28 +0000 Manifest this update: Sun 19 Oct 2025 01:52:27 +0000 Manifest next update: Sun 26 Oct 2025 01:52:27 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: qybdJEzZAJef8cxf2oPQ8QMthAJfz7xfV1+EdWM8ldY=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Oct 19 01:52:27 2025 GMT Not After : Oct 26 01:52:27 2025 GMT Subject: CN=68f4445c-d879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:bc:3f:f6:84:73:eb:49:1f:36:f0:08:3e: 0e:22:6b:5f:ff:84:63:b8:4c:39:e8:1f:8d:55:4a: 41:be:15:0a:9a:42:1e:94:a7:ff:67:dd:85:26:58: 3a:1d:34:cb:e5:dd:8b:5c:65:e1:fc:61:13:54:3d: 14:04:db:aa:fa:05:b8:a6:55:32:b7:35:97:39:72: 01:d1:d5:78:b9:8b:26:bd:c6:32:3c:c9:68:d5:7d: b6:e3:ef:6e:a2:a9:5a:9c:c2:4e:4f:e6:6d:87:7d: 13:81:55:38:6b:55:43:f7:82:40:d0:28:cb:f8:a9: fe:40:e5:ee:20:59:f3:3f:76:ca:95:80:28:a7:0c: 0b:d6:5a:85:da:10:e4:aa:ba:cb:86:2e:4e:28:3f: 86:ce:2e:f2:03:67:b4:fd:43:14:62:c4:c6:ab:bb: 10:ed:73:91:78:18:9e:a9:29:95:68:fe:85:ef:60: 25:8e:1d:d9:7d:92:4f:f4:c1:c2:eb:e4:15:28:a8: d1:8a:78:15:3f:f0:29:a1:77:fe:44:5e:6d:e9:2c: 40:c7:c5:91:25:6c:b8:0a:fd:b8:ed:82:76:ca:4c: 21:58:da:30:a3:64:bd:fb:6c:b8:b8:7a:b5:c4:50: 39:72:3f:78:fa:74:b5:83:fe:2b:b1:2e:87:c0:c6: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:53:34:AB:41:00:DB:4A:4B:F3:F6:00:29:59:E0:CB:4D:7A:BF:3B X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:96:aa:47:ef:99:3c:85:fd:5b:0a:7c:75:ba:19:41:4d:aa: 7d:bd:9b:a2:df:d7:57:86:e6:6a:51:9f:95:95:44:73:da:50: cc:fc:5c:c4:37:6e:4a:fa:e1:ed:f4:47:0c:6b:a3:97:49:ae: 59:41:05:a0:fc:e0:8f:aa:f7:47:6a:a7:00:bb:75:7f:ac:9f: 8e:a2:6d:19:74:7c:89:2c:f0:b0:de:96:ce:94:e9:53:49:41: 3f:52:57:53:2e:a4:7a:9f:e6:f0:c1:95:9a:0b:5c:de:9a:43: fa:14:31:46:67:f3:8f:67:d2:50:93:98:a6:d3:ce:a5:d6:08: 6f:cc:10:df:80:b7:4f:9a:d6:f0:7a:d3:32:46:2f:dc:14:2d: dd:fb:81:fe:2c:10:ac:f6:8c:b2:31:75:de:5c:ab:96:66:c3: 19:8c:8f:d8:d6:a1:ee:9c:d6:0f:3d:da:cc:23:3c:9c:ec:31: e3:41:d2:b3:ce:3f:e7:9a:60:3b:ee:3d:58:8b:31:59:a4:ae: e4:4f:b1:30:b1:43:d0:87:50:df:9c:80:2e:6e:62:29:b0:af: fb:b0:72:57:b2:d7:aa:b4:53:b4:ba:55:80:82:c6:2e:14:12: 65:0f:9f:98:53:d1:99:d5:6a:2c:f1:3f:9a:c7:59:9f:c3:0f: 3f:8d:48:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUxMDE5MDE1MjI3WhcNMjUxMDI2MDE1MjI3WjAYMRYwFAYD VQQDEw02OGY0NDQ1Yy1kODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/W8P/aEc+tJHzbwCD4OImtf/4RjuEw56B+NVUpBvhUKmkIelKf/Z92FJlg6 HTTL5d2LXGXh/GETVD0UBNuq+gW4plUytzWXOXIB0dV4uYsmvcYyPMlo1X224+9u oqlanMJOT+Zth30TgVU4a1VD94JA0CjL+Kn+QOXuIFnzP3bKlYAopwwL1lqF2hDk qrrLhi5OKD+Gzi7yA2e0/UMUYsTGq7sQ7XOReBieqSmVaP6F72Aljh3ZfZJP9MHC 6+QVKKjRingVP/ApoXf+RF5t6SxAx8WRJWy4Cv247YJ2ykwhWNowo2S9+2y4uHq1 xFA5cj94+nS1g/4rsS6HwMbqZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9TNKtB ANtKS/P2AClZ4MtNer87MB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAulqpH75k8hf1bCnx1uhlBTap9vZui39dXhuZqUZ+VlURz2lDM/FzE N25K+uHt9EcMa6OXSa5ZQQWg/OCPqvdHaqcAu3V/rJ+Oom0ZdHyJLPCw3pbOlOlT SUE/UldTLqR6n+bwwZWaC1zemkP6FDFGZ/OPZ9JQk5im086l1ghvzBDfgLdPmtbw etMyRi/cFC3d+4H+LBCs9oyyMXXeXKuWZsMZjI/Y1qHunNYPPdrMIzyc7DHjQdKz zj/nmmA77j1YizFZpK7kT7EwsUPQh1DfnIAubmIpsK/7sHJXsteqtFO0ulWAgsYu FBJlD5+YU9GZ1Wos8T+ax1mfww8/jUjg -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:51 2025 by rpki-client