$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft File: B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft (raw, json) Hash identifier: 6MeSvi2Zuv2hr0Gvf9huvb8QfqY2UEj6QWNLp4K82nk= Subject key identifier: 41:7D:72:61:A2:86:00:80:04:EA:8A:6F:4B:34:99:9B:FD:A0:86:3C Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft Manifest number: 04E7 Signing time: Sun 19 Oct 2025 01:39:51 +0000 Manifest this update: Sun 19 Oct 2025 01:39:50 +0000 Manifest next update: Sun 26 Oct 2025 01:39:50 +0000 Files and hashes: 1: B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl (hash: yL79FCQmmBChvdhmB172Soas1vQX6eDooHQ/9VElT5M=) 2: 6F155A6E144F11EE86CD7A23C4F9AE02.roa (hash: aI/sq9frDUa4oxfrwH2vEYRuVBCHaeAM/ywxuno+wUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B443, serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE Validity Not Before: Oct 19 01:39:50 2025 GMT Not After : Oct 26 01:39:50 2025 GMT Subject: CN=68f44166-8d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:40:f9:35:23:ab:6e:c2:7c:93:2d:8f:60: 6f:f9:48:0a:dc:ce:47:d3:46:75:45:2f:ac:09:85: bc:ed:4f:4f:86:a7:48:9a:63:8d:17:7f:f7:d8:4b: 4a:59:2d:e4:bb:e7:be:4a:0d:9e:ef:9d:b8:3a:9d: 7e:7b:10:80:b9:ff:16:b9:4b:1b:da:24:9d:c4:82: 86:ad:63:2d:2c:77:af:a7:c0:ae:11:65:e5:51:cb: 70:73:92:1e:bc:1e:e7:f5:68:0e:cb:92:20:52:e9: 92:a0:c8:a2:43:a0:35:46:11:93:b9:7a:5f:01:87: 1e:c3:e9:9d:c6:c7:19:cb:18:a7:e5:a9:1c:3c:bc: 85:ab:a3:b1:46:df:45:12:71:df:d9:c5:22:77:b6: ea:c3:1a:32:05:42:23:a8:9d:73:65:66:e9:45:03: 05:64:6b:36:ab:d1:37:cc:4f:c6:90:15:e2:b2:f7: 09:f6:70:c4:0e:35:bf:c4:23:0f:37:93:f3:f9:cc: 81:a4:ec:c6:4d:a3:2a:da:1b:10:55:b7:d2:34:78: 22:a8:6f:01:fa:dc:04:c5:27:fa:0a:a4:6f:65:7a: 16:9e:3a:fa:76:63:47:31:be:80:69:b7:2d:4d:70: ef:b1:13:19:1c:f5:23:f5:b3:b8:09:01:c5:23:28: 19:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:72:61:A2:86:00:80:04:EA:8A:6F:4B:34:99:9B:FD:A0:86:3C X509v3 Authority Key Identifier: keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c8:49:cd:2c:3b:74:ab:c4:df:cf:89:59:0e:88:7e:06:5b: 5a:cd:79:7a:57:6f:0d:bf:d3:81:02:90:08:81:58:ba:6a:3e: a1:24:aa:18:9d:6e:87:2e:46:d3:4a:a1:3e:1a:6f:db:dc:8b: 35:44:e1:ff:62:db:a3:23:f8:72:19:d4:14:8c:0c:e4:3a:fb: 47:3d:c6:82:39:4d:80:4c:9c:5d:06:93:17:1f:68:e4:d7:f2: cd:fd:89:ea:0b:30:0a:c5:35:08:2d:5f:7b:72:ff:2d:18:3f: 8c:c4:80:de:f7:4e:52:e1:63:73:cb:8b:03:3a:98:e5:f5:50: f3:c3:f9:f8:e4:d4:d8:1e:ed:3c:31:74:ca:ce:70:fa:51:e5: b0:5c:cb:44:fa:94:6c:03:3f:be:b9:4f:73:28:b2:a3:32:92: d3:d9:2a:de:01:29:69:ad:b5:50:d0:5c:c6:e9:99:b0:30:4c: be:eb:78:99:87:46:0a:c7:ad:9b:e2:5f:62:e1:9a:aa:cf:ad: ab:ee:76:a2:af:d0:96:bb:cd:b2:71:3c:15:c6:80:03:43:3d: 34:cd:82:03:44:b3:cc:95:d3:7e:b5:e8:6c:76:23:8a:74:fa: 24:99:97:ff:e0:d6:00:43:c4:9b:66:86:7d:ac:4a:15:c3:c9: da:6f:32:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI0NDMxMTAvBgNVBAUTKDA3QUE3M0E3RUQ2NzQxMTg5MUJEOEY3MjcyNjE5NTFD NDFDNzE2REUwHhcNMjUxMDE5MDEzOTUwWhcNMjUxMDI2MDEzOTUwWjAYMRYwFAYD VQQDEw02OGY0NDE2Ni04ZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK5A+TUjq27CfJMtj2Bv+UgK3M5H00Z1RS+sCYW87U9PhqdImmONF3/32EtK WS3ku+e+Sg2e7524Op1+exCAuf8WuUsb2iSdxIKGrWMtLHevp8CuEWXlUctwc5Ie vB7n9WgOy5IgUumSoMiiQ6A1RhGTuXpfAYcew+mdxscZyxin5akcPLyFq6OxRt9F EnHf2cUid7bqwxoyBUIjqJ1zZWbpRQMFZGs2q9E3zE/GkBXisvcJ9nDEDjW/xCMP N5Pz+cyBpOzGTaMq2hsQVbfSNHgiqG8B+twExSf6CqRvZXoWnjr6dmNHMb6Aabct TXDvsRMZHPUj9bO4CQHFIygZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF9cmGi hgCABOqKb0s0mZv9oIY8MB8GA1UdIwQYMBaAFAeqc6ftZ0EYkb2PcnJhlRxBxxbe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQ0My85MjQyNkY4NjQy MEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFSaVJ2WTl5Y21HVkhFSEhG dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2cHpwLTFuUVJpUnZZOXljbUdWSEVISEZ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjQ0My85MjQyNkY4NjQyMEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFS aVJ2WTl5Y21HVkhFSEhGdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEyEnNLDt0q8Tfz4lZDoh+BltazXl6V28Nv9OBApAIgVi6aj6hJKoY nW6HLkbTSqE+Gm/b3Is1ROH/YtujI/hyGdQUjAzkOvtHPcaCOU2ATJxdBpMXH2jk 1/LN/YnqCzAKxTUILV97cv8tGD+MxIDe905S4WNzy4sDOpjl9VDzw/n45NTYHu08 MXTKznD6UeWwXMtE+pRsAz++uU9zKLKjMpLT2SreASlprbVQ0FzG6ZmwMEy+63iZ h0YKx62b4l9i4Zqqz62r7nair9CWu82ycTwVxoADQz00zYIDRLPMldN+tehsdiOK dPokmZf/4NYAQ8SbZoZ9rEoVw8nabzIF -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:38 2025 by rpki-client