$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: cI6T5QIvEsJoT30UycmTAxTQunsN0Qx1jYIimFd0mb4= Subject key identifier: EA:2B:4B:76:B6:FB:EA:E0:14:39:E8:8B:DA:18:51:09:26:FE:64:3A Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: 013E Signing time: Sun 19 Oct 2025 03:19:53 +0000 Manifest this update: Sun 19 Oct 2025 03:19:52 +0000 Manifest next update: Sun 26 Oct 2025 03:19:52 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: WtuMQuCcnov2MUP9tgkPK2lgPKEB04ImV9CLn5K7TTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: Oct 19 03:19:52 2025 GMT Not After : Oct 26 03:19:52 2025 GMT Subject: CN=68f458d8-35f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5b:54:e5:e4:38:d5:3e:b1:81:40:d8:49:49: 7f:c0:c8:83:18:6b:f8:6d:db:f7:1b:96:1a:73:25: 9e:27:7d:41:42:70:96:c1:90:df:ea:81:13:40:47: a1:9a:bc:62:91:52:a7:04:6d:a7:ab:7a:4b:cd:c5: c2:1f:10:95:0e:a0:eb:88:2e:0a:ce:bc:ce:b3:70: f0:bf:49:9e:87:6e:85:b6:7b:cb:df:c7:cd:b3:39: f8:30:71:cc:15:a6:6c:12:3f:8f:a2:76:1c:4d:3f: 0a:f0:b0:c6:f9:c0:f9:64:62:5c:4a:a0:23:fc:67: 2f:9b:4d:81:6e:54:aa:12:6f:c3:f0:6e:2f:90:68: 36:0e:84:37:4b:07:87:64:f5:ee:54:ac:15:7e:df: ff:3b:5a:51:e8:5e:e1:e3:2d:76:6a:ec:ba:08:0c: fc:de:54:fa:2d:06:69:ab:18:8e:32:51:1c:ea:a1: 4f:ef:d2:5f:35:f1:46:9a:e9:f0:f0:ef:c3:e9:81: bb:0b:11:8a:ca:be:85:93:95:47:3d:fa:e7:4d:40: e8:8e:5a:46:ef:2f:e4:ee:06:8e:bb:25:28:7a:1a: d8:2b:f7:5c:a7:40:58:59:30:7f:ee:d0:06:61:ac: 5f:87:fd:9a:db:96:4c:50:3f:7a:ae:aa:9a:80:10: 5a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2B:4B:76:B6:FB:EA:E0:14:39:E8:8B:DA:18:51:09:26:FE:64:3A X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:58:69:71:f1:cb:b4:37:fc:d0:bf:1f:2d:e5:de:ea:49:65: c3:a3:cb:94:1e:79:51:ea:af:4e:5f:da:ad:ba:cf:24:ca:2f: a1:3e:30:eb:ba:01:40:73:64:7e:84:0e:9d:7e:2a:81:ef:3b: 54:a1:08:27:b9:e8:d3:69:4d:7c:4b:da:0d:3f:cd:e3:75:de: 91:ff:7d:47:db:62:8d:db:65:b2:97:cb:f1:3d:12:4e:9b:b3: 67:d0:46:ea:4f:af:ff:c7:38:f3:9b:df:05:7b:36:e6:e4:7f: a7:e5:4f:e2:0d:9d:78:32:32:68:aa:d1:9e:00:13:12:09:1d: 9f:d5:7a:20:fe:78:18:3f:93:04:eb:bc:8b:94:7e:f9:82:68: 46:82:76:7d:51:b2:1b:ae:5f:3f:45:07:24:72:4c:47:50:3c: b0:19:1f:23:3b:16:8b:72:6d:78:0a:49:a2:cd:69:7f:24:61: ad:65:b7:53:3f:ff:5c:8e:71:04:a5:72:86:99:ec:eb:54:42: 65:12:d6:69:e3:32:bb:da:aa:19:64:2f:71:f5:c8:a6:c6:3f: ad:76:55:5f:32:2d:e1:a4:cd:84:b5:21:c3:fb:18:54:61:6a: f6:a8:8f:82:d3:91:73:97:6d:49:99:39:a3:8d:e4:0a:27:4a: e8:b6:58:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjUxMDE5MDMxOTUyWhcNMjUxMDI2MDMxOTUyWjAYMRYwFAYD VQQDEw02OGY0NThkOC0zNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VtU5eQ41T6xgUDYSUl/wMiDGGv4bdv3G5YacyWeJ31BQnCWwZDf6oETQEeh mrxikVKnBG2nq3pLzcXCHxCVDqDriC4KzrzOs3Dwv0meh26FtnvL38fNszn4MHHM FaZsEj+PonYcTT8K8LDG+cD5ZGJcSqAj/Gcvm02BblSqEm/D8G4vkGg2DoQ3SweH ZPXuVKwVft//O1pR6F7h4y12auy6CAz83lT6LQZpqxiOMlEc6qFP79JfNfFGmunw 8O/D6YG7CxGKyr6Fk5VHPfrnTUDojlpG7y/k7gaOuyUoehrYK/dcp0BYWTB/7tAG Yaxfh/2a25ZMUD96rqqagBBamwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOorS3a2 ++rgFDnoi9oYUQkm/mQ6MB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtWGlx8cu0N/zQvx8t5d7qSWXDo8uUHnlR6q9OX9qtus8kyi+hPjDr ugFAc2R+hA6dfiqB7ztUoQgnuejTaU18S9oNP83jdd6R/31H22KN22Wyl8vxPRJO m7Nn0EbqT6//xzjzm98Fezbm5H+n5U/iDZ14MjJoqtGeABMSCR2f1Xog/ngYP5ME 67yLlH75gmhGgnZ9UbIbrl8/RQckckxHUDywGR8jOxaLcm14CkmizWl/JGGtZbdT P/9cjnEEpXKGmezrVEJlEtZp4zK72qoZZC9x9cimxj+tdlVfMi3hpM2EtSHD+xhU YWr2qI+C05Fzl21JmTmjjeQKJ0rotljF -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:34 2025 by rpki-client