$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft File: Bzzm268iYrP6YRXW_6ezNCFe-g0.mft (raw, json) Hash identifier: f7eoZQMIcOYI/6m660RG+Ix70UvtjvMTFbubr1Dt820= Subject key identifier: 99:6D:62:D0:69:58:46:D3:08:C8:3F:80:D2:46:58:4E:28:A7:65:15 Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D Certificate issuer: /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft Manifest number: 0663 Signing time: Sun 19 Oct 2025 00:09:09 +0000 Manifest this update: Sun 19 Oct 2025 00:09:08 +0000 Manifest next update: Sun 26 Oct 2025 00:09:08 +0000 Files and hashes: 1: Bzzm268iYrP6YRXW_6ezNCFe-g0.crl (hash: qZW4+uc0I5yfSgaljLFpHjwK45fwL1pLwGZQu81CL5k=) 2: A80223709F4411EB92132051C4F9AE02.roa (hash: x3MhCffNjPE2g6AmezXK16941rD0tDaIk9FU7i8nfrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859C2, serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Validity Not Before: Oct 19 00:09:08 2025 GMT Not After : Oct 26 00:09:08 2025 GMT Subject: CN=68f42c25-3bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:eb:19:4c:b8:2d:d9:bd:35:64:62:0a:04: 84:40:4c:8d:a8:3f:ac:54:2d:d5:c7:19:30:2a:1c: 23:4e:94:b8:9c:aa:d3:b8:4b:30:77:c4:0e:8c:ee: b3:e4:f2:6e:62:4a:4a:50:18:75:9e:5a:39:4b:e3: be:6c:52:94:07:3c:85:61:66:cf:51:1f:7e:8a:bd: a0:77:07:92:ab:b8:79:89:be:42:48:48:e6:63:f4: 98:7c:1d:ba:a3:ca:ae:ca:45:c0:8b:1a:2e:b4:37: fb:bc:aa:36:65:90:f5:cb:ff:30:d0:6e:9b:6a:59: 28:1b:32:62:b5:fc:33:7b:6e:24:66:a2:18:4d:10: 72:87:b5:42:72:70:83:32:50:34:94:b9:fd:10:e3: d9:21:5f:cc:c0:fb:51:fe:78:aa:40:d2:fb:58:8e: 97:9c:62:ff:51:d4:8e:25:2c:27:ed:86:82:33:9e: c2:8c:4d:fa:49:be:d6:82:2c:97:fd:30:02:a1:4f: 48:fa:40:e6:42:e8:8d:19:7a:f9:5d:22:8e:05:e7: c6:c1:a2:e8:dc:94:91:4f:83:a8:16:b8:ba:ff:a3: d7:b3:75:9c:6f:f7:e2:5c:66:6a:25:b7:45:89:46: 47:7c:09:14:bc:91:05:2a:66:5c:f6:6a:02:fb:a2: d0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6D:62:D0:69:58:46:D3:08:C8:3F:80:D2:46:58:4E:28:A7:65:15 X509v3 Authority Key Identifier: keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:90:da:1c:4a:8d:d2:dd:61:7c:f4:75:fd:e8:04:d0:23:9c: e0:d5:01:a9:ce:81:00:c8:13:85:36:72:9e:1b:fe:a3:9f:f9: e5:a0:7e:12:14:b0:4c:4c:a0:e7:56:d0:d9:e7:ac:61:31:d2: c8:1b:d9:13:d1:6b:ef:73:7d:98:2c:85:4d:b1:a2:da:a4:3e: 0a:dc:70:1f:f6:97:1e:d3:27:f8:9d:15:b4:1b:bc:f0:77:59: 6e:45:e3:7b:4f:d6:3f:77:d6:d2:8a:94:7a:5e:a1:8c:fe:c3: 43:45:cb:b6:d0:11:98:18:74:57:ef:e2:8b:26:1b:b9:8a:4b: dc:26:a7:c5:d2:bf:bd:3d:2e:41:6a:19:05:ca:5a:4d:03:c8: c4:66:5c:93:27:3c:45:6b:93:d2:c5:a4:7a:04:7d:98:88:91: d4:de:e9:54:b9:b5:94:5b:4a:32:d1:47:bf:6d:ff:13:be:24: 37:31:cd:d8:7c:1a:10:43:a0:c2:98:e2:6d:e2:79:9b:3f:83: 82:0c:03:17:5e:7b:a0:a5:db:27:23:f4:42:0f:e6:86:f2:ac: 42:4a:8a:40:02:65:2b:3a:26:01:69:75:35:2d:37:3b:9c:f8: 4c:c0:db:95:ac:db:9a:46:94:2e:b8:4f:cc:ad:db:4d:ea:bc: ac:2e:b0:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QzIxMTAvBgNVBAUTKDA3M0NFNkRCQUYyMjYyQjNGQTYxMTVENkZGQTdCMzM0 MjE1RUZBMEQwHhcNMjUxMDE5MDAwOTA4WhcNMjUxMDI2MDAwOTA4WjAYMRYwFAYD VQQDEw02OGY0MmMyNS0zYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRbrGUy4Ldm9NWRiCgSEQEyNqD+sVC3VxxkwKhwjTpS4nKrTuEswd8QOjO6z 5PJuYkpKUBh1nlo5S+O+bFKUBzyFYWbPUR9+ir2gdweSq7h5ib5CSEjmY/SYfB26 o8quykXAixoutDf7vKo2ZZD1y/8w0G6balkoGzJitfwze24kZqIYTRByh7VCcnCD MlA0lLn9EOPZIV/MwPtR/niqQNL7WI6XnGL/UdSOJSwn7YaCM57CjE36Sb7WgiyX /TACoU9I+kDmQuiNGXr5XSKOBefGwaLo3JSRT4OoFri6/6PXs3Wcb/fiXGZqJbdF iUZHfAkUvJEFKmZc9moC+6LQBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJltYtBp WEbTCMg/gNJGWE4op2UVMB8GA1UdIwQYMBaAFAc85tuvImKz+mEV1v+nszQhXvoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlDMi9FN0MwMjIzRTlG NDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVlyUDZZUlhXXzZlek5DRmUt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6em0yNjhpWXJQNllSWFdfNmV6TkNGZS1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlDMi9FN0MwMjIzRTlGNDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVly UDZZUlhXXzZlek5DRmUtZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALkNocSo3S3WF89HX96ATQI5zg1QGpzoEAyBOFNnKeG/6jn/nloH4S FLBMTKDnVtDZ56xhMdLIG9kT0Wvvc32YLIVNsaLapD4K3HAf9pce0yf4nRW0G7zw d1luReN7T9Y/d9bSipR6XqGM/sNDRcu20BGYGHRX7+KLJhu5ikvcJqfF0r+9PS5B ahkFylpNA8jEZlyTJzxFa5PSxaR6BH2YiJHU3ulUubWUW0oy0Ue/bf8TviQ3Mc3Y fBoQQ6DCmOJt4nmbP4OCDAMXXnugpdsnI/RCD+aG8qxCSopAAmUrOiYBaXU1LTc7 nPhMwNuVrNuaRpQuuE/MrdtN6rysLrAh -----END CERTIFICATE-----Generated at Mon Oct 20 04:19:34 2025 by rpki-client