$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json) Hash identifier: RfVNpH+premvhSFobUbvaXby32MA9ipBmZPP9zezRMI= Subject key identifier: 5B:7E:22:28:08:4C:CC:F9:9A:F7:46:6D:DA:06:4B:E7:C8:90:78:60 Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft Manifest number: 0268 Signing time: Mon 03 Nov 2025 01:37:32 +0000 Manifest this update: Mon 03 Nov 2025 01:37:31 +0000 Manifest next update: Mon 10 Nov 2025 01:37:31 +0000 Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: ml9dfRXPFLQ5+p1GcaNIKO2wE87Yg41SigfndJO+zmg=) 2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: 8x2SsfQuIT881cDaqWjgKUso9bJl3sYc8ulFMGO/wmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Validity Not Before: Nov 3 01:37:31 2025 GMT Not After : Nov 10 01:37:31 2025 GMT Subject: CN=6908075b-eef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:fd:14:f3:06:55:d1:d9:e9:bf:73:0e:e3: 48:3c:3f:b2:c8:eb:9b:a6:5e:4e:25:a1:22:e0:e9: 3c:b0:56:24:6b:7d:f1:63:8e:4b:1f:09:4d:7f:24: f1:7a:99:1f:16:8f:de:45:af:46:43:ee:f0:bf:e8: cd:76:00:5e:60:b9:9f:8f:89:d7:8e:4c:d7:d0:32: 5e:4c:7f:09:77:0d:65:33:30:15:9e:4c:25:2c:1c: 9a:f0:73:99:3c:38:56:2b:3d:72:5e:8c:e6:96:a3: bb:a7:5a:f9:9a:f7:25:d9:7d:51:a0:dd:28:94:02: 40:ba:47:2c:cb:be:13:f0:67:5c:f7:e2:55:23:c2: 72:29:0e:21:8a:cd:52:fb:b3:c4:43:48:be:77:3c: f6:32:24:60:49:12:aa:71:d0:82:da:ba:d6:6e:80: 87:68:89:90:24:50:43:74:fd:a4:05:e3:53:70:de: b2:5c:d5:19:4e:f0:da:ea:09:3f:b0:53:81:97:e3: 7a:17:e2:2f:99:56:2f:f8:c2:66:27:34:b3:74:64: d6:c9:59:cf:b2:26:18:0c:d2:56:0e:1b:59:41:47: fd:fa:4f:82:ff:c9:79:2b:2c:e1:53:5e:c5:32:59: 53:bb:ef:56:67:0f:e7:d2:45:61:27:a7:d5:26:52: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7E:22:28:08:4C:CC:F9:9A:F7:46:6D:DA:06:4B:E7:C8:90:78:60 X509v3 Authority Key Identifier: keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:67:8c:98:5f:03:ef:ee:a3:d0:7c:f4:12:9e:e3:a9:97:47: b9:a0:67:20:c6:2c:27:0f:2b:ca:23:18:9c:69:28:f8:4b:40: 21:e4:31:95:92:23:e8:9e:92:be:45:87:b3:e1:bc:53:99:26: c8:50:34:64:45:51:e5:62:e1:d3:26:d0:cd:9b:36:b1:95:a5: 35:be:2a:66:16:89:39:30:91:de:0c:7e:8d:65:80:88:a7:2e: 3f:69:db:ad:b3:25:39:cd:b7:b3:28:d2:cf:8c:29:83:2b:41: df:8c:69:b0:11:6d:36:ae:ea:e5:bf:d5:12:7a:8b:c4:6c:2c: f5:21:33:89:04:c6:fc:28:57:7d:13:a6:77:79:2e:04:c9:f1: fe:1a:1d:18:cd:69:5c:71:36:e2:98:3c:8c:60:a9:8e:0f:63: 73:76:da:fd:24:b9:0d:ca:32:88:d5:2b:8a:ae:6b:a7:89:b2: 76:72:34:52:c7:8a:ce:4e:15:33:26:c0:b5:1c:19:6b:07:da: b2:ab:92:f8:ff:14:1b:5b:52:c4:24:42:d0:cb:b4:f2:e4:43: 95:15:25:32:5a:0a:08:81:85:60:de:92:87:85:24:7f:ff:94: 81:7d:0b:0f:b0:a8:8a:aa:5f:04:d7:88:0b:cb:b7:87:ff:73: 2e:48:3e:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5MDUxMTAvBgNVBAUTKDA2NDZDNTIyOTFENUNENERGNEEwRkY3ODY3ODRGQ0Y1 MjgzNDYzMjQwHhcNMjUxMTAzMDEzNzMxWhcNMjUxMTEwMDEzNzMxWjAYMRYwFAYD VQQDEw02OTA4MDc1Yi1lZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3G/9FPMGVdHZ6b9zDuNIPD+yyOubpl5OJaEi4Ok8sFYka33xY45LHwlNfyTx epkfFo/eRa9GQ+7wv+jNdgBeYLmfj4nXjkzX0DJeTH8Jdw1lMzAVnkwlLBya8HOZ PDhWKz1yXozmlqO7p1r5mvcl2X1RoN0olAJAukcsy74T8Gdc9+JVI8JyKQ4his1S +7PEQ0i+dzz2MiRgSRKqcdCC2rrWboCHaImQJFBDdP2kBeNTcN6yXNUZTvDa6gk/ sFOBl+N6F+IvmVYv+MJmJzSzdGTWyVnPsiYYDNJWDhtZQUf9+k+C/8l5KyzhU17F MllTu+9WZw/n0kVhJ6fVJlIOVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt+IigI TMz5mvdGbdoGS+fIkHhgMB8GA1UdIwQYMBaAFAZGxSKR1c1N9KD/eGeE/PUoNGMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjkwNS8xMUVCMDg2QTMz NTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpVMzBvUDk0WjRUODlTZzBZ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JrYkZJcEhWelUzMG9QOTRaNFQ4OVNnMFl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjkwNS8xMUVCMDg2QTMzNTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpV MzBvUDk0WjRUODlTZzBZeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1Z4yYXwPv7qPQfPQSnuOpl0e5oGcgxiwnDyvKIxicaSj4S0Ah5DGV kiPonpK+RYez4bxTmSbIUDRkRVHlYuHTJtDNmzaxlaU1vipmFok5MJHeDH6NZYCI py4/adutsyU5zbezKNLPjCmDK0HfjGmwEW02rurlv9USeovEbCz1ITOJBMb8KFd9 E6Z3eS4EyfH+Gh0YzWlccTbimDyMYKmOD2Nzdtr9JLkNyjKI1SuKrmunibJ2cjRS x4rOThUzJsC1HBlrB9qyq5L4/xQbW1LEJELQy7Ty5EOVFSUyWgoIgYVg3pKHhSR/ /5SBfQsPsKiKql8E14gLy7eH/3MuSD62 -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:06 2025 by rpki-client