$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft File: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json) Hash identifier: U0HGVpcIHYXEJb0AUK2BHhlXDV6sFmqeN9bFMEsHOpk= Subject key identifier: 71:86:5B:DF:22:90:1E:08:C4:30:5A:AA:0B:9A:2A:A4:70:B8:17:29 Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB Certificate issuer: /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft Manifest number: 0685 Signing time: Sat 18 Oct 2025 23:55:18 +0000 Manifest this update: Sat 18 Oct 2025 23:55:18 +0000 Manifest next update: Sat 25 Oct 2025 23:55:18 +0000 Files and hashes: 1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: gjUe9205pW70/dYZyv51eTTlcTbSPHy0CW2AfPpAK4U=) 2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: aGdwS0nqIDPQmrDed9aL2d/6MVOmtEOC5VWnxIsYspE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Validity Not Before: Oct 18 23:55:18 2025 GMT Not After : Oct 25 23:55:18 2025 GMT Subject: CN=68f428e6-e2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:93:11:07:34:7c:9e:a6:b9:f3:c7:da:4e: 85:4f:43:ba:d9:1c:54:9e:bf:7b:72:f0:1e:e0:6a: c4:8d:02:b3:38:fa:03:8b:3c:be:df:fb:31:e9:09: 65:d5:58:e2:25:0a:23:2c:8a:4a:52:10:3d:69:08: 9a:55:4c:c7:97:f4:de:df:d8:4d:48:30:fc:82:f4: 9f:ae:5c:3b:c9:02:87:e4:18:a2:01:d1:5b:ac:ee: 2a:00:78:e9:49:a9:d7:50:5a:48:16:0d:66:af:f8: 5d:97:5b:61:c0:97:5a:d1:d1:00:47:26:f9:bc:38: 16:a0:dd:2b:2d:6a:c4:2a:fe:54:cf:b5:b0:06:32: 91:1a:6c:5b:7a:56:5f:d0:37:bf:e9:c7:df:76:29: 19:8a:be:18:3b:e0:96:13:c0:8b:74:9a:b8:ff:e0: 14:9c:f2:97:25:61:f9:43:ac:2e:bd:c8:ab:28:ee: 5e:9b:a2:86:2d:a2:1d:16:6a:78:09:1b:27:57:01: 38:cc:a8:2f:cf:c3:6c:ac:c0:f0:fb:94:ad:90:23: 43:a8:a6:28:13:10:91:a3:03:b5:d2:b0:b0:ea:16: 74:37:81:ef:f1:4d:be:4d:ee:0a:b3:24:16:1c:fd: 56:ca:21:f4:71:8e:ae:19:81:c8:77:a3:2b:2f:7d: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:86:5B:DF:22:90:1E:08:C4:30:5A:AA:0B:9A:2A:A4:70:B8:17:29 X509v3 Authority Key Identifier: keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e4:4d:27:0e:13:0b:c5:a1:a0:5b:50:99:1a:8e:ee:6d:17: 47:00:20:76:c1:ff:32:71:48:5f:b9:f5:e3:13:41:fd:62:8f: ac:11:b5:65:4b:fd:01:87:92:e0:a9:8d:d2:9d:b9:67:30:c9: bc:e3:30:e6:cd:b4:38:3b:3a:da:a4:8a:76:c4:1c:c9:c5:98: 06:00:5f:ea:21:16:b6:cd:6b:3c:34:67:1a:72:f5:fc:8f:0c: 73:66:d2:bc:a6:12:70:e8:41:9b:b0:a1:df:85:78:fd:5d:f5: bb:91:ae:c0:ef:56:67:1d:3d:9a:b8:c2:32:5c:06:1a:42:4d: 50:23:67:30:5f:eb:e1:29:74:99:f2:12:ca:f1:c6:4f:99:3e: 5a:ea:54:18:c2:52:25:60:6d:f7:51:6a:a2:71:37:95:2c:42: af:0c:65:64:cc:74:5b:bc:68:0e:6c:9a:7f:b0:f9:e5:95:d7: 84:fc:84:43:81:3e:56:95:4f:63:69:7a:83:ba:41:4e:86:9d: bd:81:84:fa:49:da:83:02:0b:31:c8:ed:19:91:4a:d0:d7:1c: 89:a5:86:bc:b2:29:e2:fb:c6:61:15:5a:71:ce:eb:b2:69:50: e4:f3:cb:aa:1c:6b:c2:d7:d5:06:5d:f8:a3:57:4f:50:e3:a2: f9:e4:81:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDOTYxMTAvBgNVBAUTKDA0NjI3RENDOUI4MDg0MkQ0MzYzNzFDNENEQzczRDE5 QUI3RTVEQkIwHhcNMjUxMDE4MjM1NTE4WhcNMjUxMDI1MjM1NTE4WjAYMRYwFAYD VQQDEw02OGY0MjhlNi1lMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEuTEQc0fJ6mufPH2k6FT0O62RxUnr97cvAe4GrEjQKzOPoDizy+3/sx6Qll 1VjiJQojLIpKUhA9aQiaVUzHl/Te39hNSDD8gvSfrlw7yQKH5BiiAdFbrO4qAHjp SanXUFpIFg1mr/hdl1thwJda0dEARyb5vDgWoN0rLWrEKv5Uz7WwBjKRGmxbelZf 0De/6cffdikZir4YO+CWE8CLdJq4/+AUnPKXJWH5Q6wuvcirKO5em6KGLaIdFmp4 CRsnVwE4zKgvz8NsrMDw+5StkCNDqKYoExCRowO10rCw6hZ0N4Hv8U2+Te4KsyQW HP1WyiH0cY6uGYHId6MrL31XlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGGW98i kB4IxDBaqguaKqRwuBcpMB8GA1UdIwQYMBaAFARifcybgIQtQ2NxxM3HPRmrfl27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkM5Ni9BOEFFMEY5NDkw NDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhDMURZM0hFemNjOUdhdC1Y YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JHSjl6SnVBaEMxRFkzSEV6Y2M5R2F0LVhicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkM5Ni9BOEFFMEY5NDkwNDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhD MURZM0hFemNjOUdhdC1YYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ5E0nDhMLxaGgW1CZGo7ubRdHACB2wf8ycUhfufXjE0H9Yo+sEbVl S/0Bh5LgqY3SnblnMMm84zDmzbQ4OzrapIp2xBzJxZgGAF/qIRa2zWs8NGcacvX8 jwxzZtK8phJw6EGbsKHfhXj9XfW7ka7A71ZnHT2auMIyXAYaQk1QI2cwX+vhKXSZ 8hLK8cZPmT5a6lQYwlIlYG33UWqicTeVLEKvDGVkzHRbvGgObJp/sPnlldeE/IRD gT5WlU9jaXqDukFOhp29gYT6SdqDAgsxyO0ZkUrQ1xyJpYa8sini+8ZhFVpxzuuy aVDk88uqHGvC19UGXfijV09Q46L55IGy -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:44 2025 by rpki-client