$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: 2cq2P5xwB1YKpjijOAj49lht1SlAhqdkds19lOOE2hU= Subject key identifier: 1D:E2:25:9E:69:F5:3D:1B:2F:5D:F5:05:91:5B:38:1D:06:BB:16:BF Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 05C9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 05B6 Signing time: Mon 20 Oct 2025 20:16:21 +0000 Manifest this update: Mon 20 Oct 2025 20:16:20 +0000 Manifest next update: Mon 27 Oct 2025 20:16:20 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: sRHm3N0NjUOPRMx8YiZ8PlUXJnQ3PnjokJVM7zI9vHE=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1481 (0x5c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Oct 20 20:16:20 2025 GMT Not After : Oct 27 20:16:20 2025 GMT Subject: CN=68f69894-cd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:af:d1:b1:cc:fb:51:df:b4:2d:58:4e:3e: 83:9d:fd:30:7b:7c:c0:ab:a6:35:67:ee:18:9c:0d: ea:3d:4c:74:4b:09:77:f9:b9:c5:cc:7a:ca:d5:8f: 9e:96:ec:1f:72:8b:63:f2:a0:0e:11:bc:7c:70:ed: 6c:ba:a0:0e:33:a3:39:5f:de:a8:a8:f0:ca:b2:1a: 12:e7:84:38:e3:e7:62:dc:cb:69:75:45:6c:e6:86: 7a:85:7a:8c:04:17:27:ae:b9:7b:6a:05:e3:55:60: 2b:21:00:69:c0:8b:00:ed:f0:c8:6f:39:16:bb:0a: 8b:70:47:ba:ee:64:2f:1a:a7:1f:65:8d:a6:78:5b: 18:7f:c1:46:17:0e:e1:99:6a:59:1c:fd:1c:1a:59: 54:f8:ab:0c:98:d4:de:e4:8b:a3:f3:f9:21:50:67: 25:ef:db:2f:de:f1:97:08:28:e4:0a:72:66:c6:e0: 19:cf:58:60:ca:4b:8f:e1:0f:b1:4d:59:75:ba:0f: 0f:02:e5:2e:5c:0f:0f:8c:ec:11:4d:f9:2b:91:a1: ed:4b:91:69:98:c5:12:36:90:e0:f2:15:f6:71:58: da:cf:d7:2e:b9:1a:76:f8:2a:87:7c:62:98:a3:72: 99:50:cc:10:f0:24:69:39:88:26:db:48:75:80:91: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E2:25:9E:69:F5:3D:1B:2F:5D:F5:05:91:5B:38:1D:06:BB:16:BF X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:78:4d:9d:73:75:9e:ff:ea:61:ea:d2:d2:ba:b9:6e:a0:5d: 2c:4a:8e:2c:4b:cc:10:29:74:43:bc:f2:e4:17:fd:f5:0e:7d: 0b:35:9a:39:89:c1:c5:8b:b6:ad:de:41:bc:76:38:b5:68:65: 2a:67:e9:19:67:0b:a8:5f:b6:1f:10:e2:55:4e:dc:ff:e6:c2: 2e:29:54:af:02:e0:80:a6:01:45:8c:da:88:83:b0:27:3f:f2: 38:28:38:6a:cf:78:1a:b5:26:5f:81:db:c1:85:b8:58:c4:df: b9:06:82:72:93:1c:55:bc:48:84:ae:a8:3b:01:76:4f:51:c0: e8:9e:57:8c:3b:1c:29:d1:10:9f:98:d9:da:9c:d0:7f:d9:1d: 06:ca:94:27:67:26:88:05:6e:db:73:bc:f1:fb:63:53:a1:58: 4f:6c:75:b6:c5:b3:a9:9a:53:a2:96:e0:c6:7b:c5:81:6b:68: ce:5b:f9:1e:cd:eb:f1:13:de:6a:2b:ec:8a:5c:10:fe:2a:20: 48:5f:1b:35:ce:ea:45:7c:94:d2:9d:d4:ce:8a:2b:4b:df:b4: 18:6b:05:fe:1a:57:56:61:5b:bf:57:1e:bf:2f:1f:85:39:a2: 72:f3:69:15:58:a7:c3:d3:f4:19:5c:26:64:e1:a2:09:0a:7d: 92:75:a3:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUxMDIwMjAxNjIwWhcNMjUxMDI3MjAxNjIwWjAYMRYwFAYD VQQDEw02OGY2OTg5NC1jZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVKv0bHM+1HftC1YTj6Dnf0we3zAq6Y1Z+4YnA3qPUx0Swl3+bnFzHrK1Y+e luwfcotj8qAOEbx8cO1suqAOM6M5X96oqPDKshoS54Q44+di3MtpdUVs5oZ6hXqM BBcnrrl7agXjVWArIQBpwIsA7fDIbzkWuwqLcEe67mQvGqcfZY2meFsYf8FGFw7h mWpZHP0cGllU+KsMmNTe5Iuj8/khUGcl79sv3vGXCCjkCnJmxuAZz1hgykuP4Q+x TVl1ug8PAuUuXA8PjOwRTfkrkaHtS5FpmMUSNpDg8hX2cVjaz9cuuRp2+CqHfGKY o3KZUMwQ8CRpOYgm20h1gJEdzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3iJZ5p 9T0bL131BZFbOB0Guxa/MB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4eE2dc3We/+ph6tLSurluoF0sSo4sS8wQKXRDvPLkF/31Dn0LNZo5 icHFi7at3kG8dji1aGUqZ+kZZwuoX7YfEOJVTtz/5sIuKVSvAuCApgFFjNqIg7An P/I4KDhqz3gatSZfgdvBhbhYxN+5BoJykxxVvEiErqg7AXZPUcDonleMOxwp0RCf mNnanNB/2R0GypQnZyaIBW7bc7zx+2NToVhPbHW2xbOpmlOiluDGe8WBa2jOW/ke zevxE95qK+yKXBD+KiBIXxs1zupFfJTSndTOiitL37QYawX+GldWYVu/Vx6/Lx+F OaJy82kVWKfD0/QZXCZk4aIJCn2SdaOw -----END CERTIFICATE-----Generated at Tue Oct 21 03:04:04 2025 by rpki-client