$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft File: BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json) Hash identifier: 1NUugdGevNN7GtvikJSyDKrVBORCjzFfvI5rJw6V3+A= Subject key identifier: E5:08:FB:F0:D5:6E:46:F9:BA:8C:27:53:0D:2A:85:50:54:5F:31:35 Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 Certificate issuer: /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft Manifest number: 02C4 Signing time: Wed 05 Nov 2025 01:30:23 +0000 Manifest this update: Wed 05 Nov 2025 01:30:23 +0000 Manifest next update: Wed 12 Nov 2025 01:30:22 +0000 Files and hashes: 1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: nLpoVQeFmoYZME5pkg7uWtXv8hMGMh6ppnbyf1tQzi4=) 2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: 6uwFx8/ukSzKKH+6QOFIRRiywJ0AdBaXItyBqWPv0ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912391D, serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Validity Not Before: Nov 5 01:30:23 2025 GMT Not After : Nov 12 01:30:22 2025 GMT Subject: CN=690aa8af-9d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:90:4c:1c:71:98:d9:8b:bf:28:eb:22:17: 54:2b:2c:f7:19:99:b1:e1:1f:5b:fe:81:98:f1:db: b7:4f:f7:a9:d5:d8:a8:11:91:15:a4:43:2d:e8:60: 33:b1:6e:c1:e4:2b:5f:0c:3b:60:dd:f0:67:d6:24: 19:df:24:6b:26:a8:20:73:f7:70:b9:de:69:6e:2e: e2:b6:19:a1:ac:e7:7e:35:47:4e:1a:8e:d0:48:da: 97:e4:58:b2:9e:fa:e5:fc:e9:9a:a5:fb:76:03:3a: a5:71:bd:75:70:82:59:f3:1d:2e:80:76:9c:e9:8f: ec:20:1d:ee:2e:73:bb:99:fb:2d:40:c6:10:72:c9: 9f:e1:ab:a5:f1:3c:e9:a9:d4:1f:3e:c5:9b:f4:c4: ab:da:a6:6b:a8:c9:b4:51:73:46:17:ec:79:b6:19: 55:65:10:cb:66:84:62:5c:e9:9b:66:f3:dc:ce:60: d3:23:1d:24:b4:86:d2:85:74:98:90:0f:e7:38:e3: cd:5b:4c:fb:e0:a4:9a:8a:21:d7:6e:11:86:9b:42: e8:c1:f5:19:67:a2:22:4b:fc:d9:4b:6e:11:7e:7e: 08:ec:a0:83:b2:a0:27:79:ea:23:71:4d:04:0d:19: 4c:94:cd:f5:b6:4e:0d:f6:4e:01:8c:07:d4:82:fa: f1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:08:FB:F0:D5:6E:46:F9:BA:8C:27:53:0D:2A:85:50:54:5F:31:35 X509v3 Authority Key Identifier: keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5c:7d:6c:68:5c:c2:88:80:71:97:2b:75:1d:44:45:b7:6c: be:63:2d:de:87:4a:ac:bc:32:57:ca:7f:e5:31:f3:60:26:f3: 5f:5d:64:b6:ab:74:37:37:c0:ef:d4:ab:d9:7e:10:05:0e:09: 35:12:76:6a:03:1d:e2:4a:04:44:f3:7c:ed:93:cd:a5:76:79: f1:09:b9:7e:3e:45:4c:8c:fb:d3:6d:7c:fe:bd:9a:cd:30:81: 69:8f:f2:6e:dd:31:9d:a9:29:e8:e8:96:dc:ba:43:3c:c4:95: 84:45:d4:d2:2c:04:22:01:27:2d:4a:81:57:6c:d2:8c:46:85: 9a:ef:98:3e:d8:13:c0:59:de:4a:bf:3d:1a:12:36:59:b1:2e: ad:97:3a:fe:4f:b0:d1:4f:20:58:3d:ae:40:ce:32:e4:df:7d: 67:0f:ac:df:d6:5e:26:45:98:fa:ba:5e:b5:3e:42:32:b0:8d: 75:9d:82:79:51:88:08:2b:69:c6:7f:ae:9b:67:2d:cb:a0:05: ba:86:29:49:2f:02:ff:a2:7d:b4:b7:12:6f:e4:bd:86:3e:5e: 5a:cb:fa:3a:22:32:cf:82:76:7c:59:05:97:dc:f3:88:ce:e6: df:d0:13:4b:d6:2a:a4:2a:94:13:cd:9a:3f:26:9a:78:27:61: 3e:db:de:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MUQxMTAvBgNVBAUTKDA1NkJFRjQ2QzczMTU4MzdFQkFERUE0MTc4MEI5RTQx QTNGQjdFQTAwHhcNMjUxMTA1MDEzMDIzWhcNMjUxMTEyMDEzMDIyWjAYMRYwFAYD VQQDEw02OTBhYThhZi05ZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIyQTBxxmNmLvyjrIhdUKyz3GZmx4R9b/oGY8du3T/ep1dioEZEVpEMt6GAz sW7B5CtfDDtg3fBn1iQZ3yRrJqggc/dwud5pbi7ithmhrOd+NUdOGo7QSNqX5Fiy nvrl/Omapft2Azqlcb11cIJZ8x0ugHac6Y/sIB3uLnO7mfstQMYQcsmf4aul8Tzp qdQfPsWb9MSr2qZrqMm0UXNGF+x5thlVZRDLZoRiXOmbZvPczmDTIx0ktIbShXSY kA/nOOPNW0z74KSaiiHXbhGGm0LowfUZZ6IiS/zZS24Rfn4I7KCDsqAneeojcU0E DRlMlM31tk4N9k4BjAfUgvrxuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUI+/DV bkb5uownUw0qhVBUXzE1MB8GA1UdIwQYMBaAFAVr70bHMVg3663qQXgLnkGj+36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxRC9CNTcxQ0NCRTBF RTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdEZnJyZXBCZUF1ZVFhUDdm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JXdnZSc2N4V0RmcnJlcEJlQXVlUWFQN2ZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxRC9CNTcxQ0NCRTBFRTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdE ZnJyZXBCZUF1ZVFhUDdmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLXH1saFzCiIBxlyt1HURFt2y+Yy3eh0qsvDJXyn/lMfNgJvNfXWS2 q3Q3N8Dv1KvZfhAFDgk1EnZqAx3iSgRE83ztk82ldnnxCbl+PkVMjPvTbXz+vZrN MIFpj/Ju3TGdqSno6JbcukM8xJWERdTSLAQiASctSoFXbNKMRoWa75g+2BPAWd5K vz0aEjZZsS6tlzr+T7DRTyBYPa5AzjLk331nD6zf1l4mRZj6ul61PkIysI11nYJ5 UYgIK2nGf66bZy3LoAW6hilJLwL/on20txJv5L2GPl5ay/o6IjLPgnZ8WQWX3POI zubf0BNL1iqkKpQTzZo/Jpp4J2E+297S -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:53 2025 by rpki-client