$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json) Hash identifier: lTPsL27D5RO0D4pvuWGE5tOTdwlu1R8MX5VYoP8LBnk= Subject key identifier: 59:C8:2B:AD:79:4F:FF:20:8F:E4:FF:01:C2:12:E3:D8:7A:66:26:F3 Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft Manifest number: 1F Signing time: Mon 03 Nov 2025 07:46:46 +0000 Manifest this update: Mon 03 Nov 2025 07:46:46 +0000 Manifest next update: Mon 10 Nov 2025 07:46:46 +0000 Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: vl0re/NJxKD1Gqc0wmuRroTGZRb5JbQVMRTg+9FNU+c=) 2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: xvOCoFGuwQpaZXzaiPWTPYcNvcs6Rl0rLNu2ZBBzhNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Validity Not Before: Nov 3 07:46:46 2025 GMT Not After : Nov 10 07:46:46 2025 GMT Subject: CN=69085de6-5181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:33:97:f4:a2:85:a7:d5:c3:68:03:cc:dc: 66:69:30:d1:30:f5:c0:45:74:a4:a3:27:0a:52:69: c3:ad:c1:d2:32:14:5d:fe:f0:83:ef:9a:00:5c:74: 8b:9b:db:27:1f:f8:ea:2f:40:12:8e:84:e0:a5:d1: 68:8c:20:65:1d:14:c2:a5:a1:c6:5d:9e:44:ee:e9: 3a:bb:48:8a:75:fd:77:3d:ce:f1:00:44:9a:94:78: 13:84:59:f4:7d:99:2f:bc:be:54:38:32:6a:76:1b: 90:2b:2d:62:78:40:f3:a4:33:54:b8:0d:69:35:cb: 6b:1c:25:00:89:ec:0e:9f:4f:58:f4:b2:d1:70:10: 07:3b:e5:85:07:f4:5f:4e:2a:b1:7f:b1:52:3f:d1: 13:a8:e4:7e:e0:24:6f:18:00:50:eb:ff:d0:b3:9b: fc:ca:67:dc:54:c2:37:a6:5c:c0:2c:db:38:7b:82: 58:d5:09:d9:11:cf:e2:8e:e9:6f:9b:37:78:05:46: e0:1e:d8:47:85:38:9f:58:14:f2:9f:5a:73:01:6d: 51:6f:08:f0:52:6f:b1:07:b8:30:88:be:14:76:49: 4f:ca:e0:5b:bd:d6:47:35:bf:61:0e:ad:5d:39:a2: 55:b0:42:3a:8f:7c:64:64:76:c0:72:b3:57:fe:5e: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C8:2B:AD:79:4F:FF:20:8F:E4:FF:01:C2:12:E3:D8:7A:66:26:F3 X509v3 Authority Key Identifier: keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:be:4d:5a:3b:b5:4a:04:42:2f:15:f8:81:33:e1:05:99:74: 91:5a:b2:36:c9:29:87:39:d1:49:1c:91:02:ae:88:66:5c:e4: 7c:5e:e9:b6:b0:30:39:ed:80:7f:38:ee:d2:2d:00:d4:9b:44: 61:93:60:a5:d5:30:bf:ae:ce:cf:e9:98:c9:5a:09:b7:f4:8e: b7:b5:1d:8e:de:92:57:83:07:26:56:be:83:9b:fc:45:e6:a3: 6d:c2:4b:43:dd:d1:d3:3c:5f:a9:2a:42:81:6b:b6:58:ad:fe: 05:54:6c:26:4c:2f:b8:9c:f8:31:4d:9c:7c:08:05:78:ff:6c: 73:60:86:67:76:90:42:12:84:bc:95:d4:9e:c1:0b:42:b1:4e: d5:c4:52:10:64:09:7a:96:dd:4a:73:d6:16:24:e5:ea:71:39: 36:4a:28:6d:ad:b6:ba:13:86:c2:10:d5:f8:73:03:cc:1a:ec: 2f:64:ed:2b:ea:1e:b1:5d:53:76:6c:e7:c5:07:e2:14:0b:8c: 20:df:40:ba:88:3a:6b:57:a1:b6:c5:f6:79:7a:61:6d:63:67: 43:9c:e4:63:cd:d1:78:d0:ad:42:31:28:c3:e2:a0:b5:9c:79: 8f:bc:2e:f5:df:4e:d9:dc:19:bd:5d:4d:5f:a1:5c:e0:39:bf: 6c:b0:56:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MEJDMTExMC8GA1UEBRMoMDRBOEYyOEY1MjdFMTg5MTY3QUNDOTAzMENCRURBRDhB OUM0MTdCOTAeFw0yNTExMDMwNzQ2NDZaFw0yNTExMTAwNzQ2NDZaMBgxFjAUBgNV BAMTDTY5MDg1ZGU2LTUxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ujOX9KKFp9XDaAPM3GZpMNEw9cBFdKSjJwpSacOtwdIyFF3+8IPvmgBcdIub 2ycf+OovQBKOhOCl0WiMIGUdFMKlocZdnkTu6Tq7SIp1/Xc9zvEARJqUeBOEWfR9 mS+8vlQ4Mmp2G5ArLWJ4QPOkM1S4DWk1y2scJQCJ7A6fT1j0stFwEAc75YUH9F9O KrF/sVI/0ROo5H7gJG8YAFDr/9Czm/zKZ9xUwjemXMAs2zh7gljVCdkRz+KO6W+b N3gFRuAe2EeFOJ9YFPKfWnMBbVFvCPBSb7EHuDCIvhR2SU/K4Fu91kc1v2EOrV05 olWwQjqPfGRkdsBys1f+XioLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWcgrrXlP /yCP5P8BwhLj2HpmJvMwHwYDVR0jBBgwFoAUBKjyj1J+GJFnrMkDDL7a2KnEF7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwQkMxL0RBQzYwMzg4OEM3 MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQktqeWoxSi1HSkZuck1rRERMN2EyS25FRjdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw QkMxL0RBQzYwMzg4OEM3MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pG bnJNa0RETDdhMktuRUY3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFG+TVo7tUoEQi8V+IEz4QWZdJFasjbJKYc50UkckQKuiGZc5Hxe6baw MDntgH847tItANSbRGGTYKXVML+uzs/pmMlaCbf0jre1HY7ekleDByZWvoOb/EXm o23CS0Pd0dM8X6kqQoFrtlit/gVUbCZML7ic+DFNnHwIBXj/bHNghmd2kEIShLyV 1J7BC0KxTtXEUhBkCXqW3Upz1hYk5epxOTZKKG2ttroThsIQ1fhzA8wa7C9k7Svq HrFdU3Zs58UH4hQLjCDfQLqIOmtXobbF9nl6YW1jZ0Oc5GPN0XjQrUIxKMPioLWc eY+8LvXfTtncGb1dTV+hXOA5v2ywVuY= -----END CERTIFICATE-----Generated at Tue Nov 4 07:21:45 2025 by rpki-client