$ rpki-client -vvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft File: bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json) Hash identifier: CJn+vkbqpWV7iIFsyvIBjV1haoZ7Wib8QSOhwKMy6xw= Subject key identifier: 04:BE:CA:E2:30:B3:E4:22:F4:EA:6E:47:27:C0:0B:EF:A5:DD:24:70 Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2 Certificate issuer: /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft Manifest number: 10 Signing time: Mon 03 Nov 2025 07:56:40 +0000 Manifest this update: Mon 03 Nov 2025 07:56:39 +0000 Manifest next update: Mon 10 Nov 2025 07:56:39 +0000 Files and hashes: 1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: KlIqN8/tWJQgL+ZEG09ZSS4HxnCBPtZOshZtfPIFxMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2 Validity Not Before: Nov 3 07:56:39 2025 GMT Not After : Nov 10 07:56:39 2025 GMT Subject: CN=69086038-3db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:7e:7d:3a:5c:ad:fa:d8:d8:13:b4:b1:bc: 20:5f:be:ab:8f:5f:b0:cc:e0:5d:d8:70:f9:e3:de: 49:d3:58:d3:a0:97:8b:15:78:ff:c9:bd:39:51:87: 69:f6:32:1b:da:32:87:a8:36:da:1e:a4:46:a5:19: e6:60:0e:02:2d:0b:e7:c0:64:01:0a:b4:c2:d0:d7: 33:1a:8e:c0:22:34:88:d9:18:25:6d:ac:3c:d7:6f: 39:dd:92:f9:99:f4:75:61:35:51:00:de:a4:3a:96: f7:5d:87:38:5e:ac:b9:d5:1b:36:ef:02:e9:74:6c: 62:84:f4:6c:06:6a:77:d7:94:80:aa:37:d4:9b:4d: 27:68:55:69:8a:f7:76:ea:d3:f9:fb:48:cb:5d:53: c1:e7:3a:be:06:33:85:32:dc:06:73:88:23:9d:36: e3:6f:c0:66:25:24:53:1b:e4:9e:2e:99:a2:7d:69: 1a:23:c2:ea:68:28:23:2c:09:f6:69:07:18:7b:27: 0c:67:ea:7d:df:e4:70:70:a3:ef:98:63:45:b1:5f: 8c:4f:cc:7a:94:23:34:33:83:fc:10:98:0c:6a:ab: 76:84:34:3d:ef:4c:80:fd:d9:ab:25:74:77:09:02: 92:87:c8:a4:26:af:2a:ec:5f:6a:e9:f4:96:f6:0f: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BE:CA:E2:30:B3:E4:22:F4:EA:6E:47:27:C0:0B:EF:A5:DD:24:70 X509v3 Authority Key Identifier: keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:25:47:4b:24:b8:e2:08:39:2e:2d:10:59:18:6d:29:c4:7b: 01:35:dd:89:db:6a:5d:81:63:5a:20:67:de:b7:c1:e6:b1:14: db:42:fc:fb:88:01:c8:de:f1:4a:5e:13:fa:55:ae:74:a5:fa: c2:44:fc:84:8a:ca:5b:6d:04:7c:a0:da:2f:72:3a:95:13:08: e6:7b:6f:1d:e3:65:c7:11:19:46:d0:4f:ee:fa:3b:30:99:29: e4:68:c1:57:1f:d8:98:99:d3:fc:54:56:dc:a2:d6:11:00:65: 95:04:5a:dc:b5:42:8c:b9:0b:42:3e:29:01:ab:d7:00:f7:de: 2f:c0:36:7c:1e:2f:b4:e4:fe:51:7e:1a:95:4d:90:fc:23:31: 0b:72:fb:c2:88:f2:54:cc:7f:34:e3:51:d4:5d:4d:da:24:4d: dc:69:d9:2b:ce:65:b1:78:eb:96:53:8e:89:b6:f4:e6:03:6b: bf:41:57:7d:ab:9e:b0:9a:61:53:a7:b5:26:aa:9b:38:1d:8d: e3:59:c2:da:73:14:e0:1f:d2:94:91:1e:4a:aa:55:7c:eb:0a: 6b:83:cc:c9:11:9b:1d:fa:06:ff:7a:ec:81:a7:2c:ef:02:43: 3f:1a:f0:00:4d:5d:4a:8c:7f:9e:33:b2:c6:0d:8e:01:d4:18: b7:38:64:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzgxRDExMC8GA1UEBRMoNkMyMjk3RjgyRTIxODM3NDk0MTM5MjY1MkM5QzhCMzA1 NUM4NjNBMjAeFw0yNTExMDMwNzU2MzlaFw0yNTExMTAwNzU2MzlaMBgxFjAUBgNV BAMTDTY5MDg2MDM4LTNkYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9e359Olyt+tjYE7SxvCBfvquPX7DM4F3YcPnj3knTWNOgl4sVeP/JvTlRh2n2 MhvaMoeoNtoepEalGeZgDgItC+fAZAEKtMLQ1zMajsAiNIjZGCVtrDzXbzndkvmZ 9HVhNVEA3qQ6lvddhzherLnVGzbvAul0bGKE9GwGanfXlICqN9SbTSdoVWmK93bq 0/n7SMtdU8HnOr4GM4Uy3AZziCOdNuNvwGYlJFMb5J4umaJ9aRojwupoKCMsCfZp Bxh7Jwxn6n3f5HBwo++YY0WxX4xPzHqUIzQzg/wQmAxqq3aEND3vTID92asldHcJ ApKHyKQmryrsX2rp9Jb2D8d/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBL7K4jCz 5CL06m5HJ8AL76XdJHAwHwYDVR0jBBgwFoAUbCKX+C4hg3SUE5JlLJyLMFXIY6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3ODFELzI3NjY3NjNFQTM2 NDExRjBCRDEzNjczQ0M0RjlBRTAyL2JDS1gtQzRoZzNTVUU1SmxMSnlMTUZYSVk2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkNLWC1DNGhnM1NVRTVKbExKeUxNRlhJWTZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 ODFELzI3NjY3NjNFQTM2NDExRjBCRDEzNjczQ0M0RjlBRTAyL2JDS1gtQzRoZzNT VUU1SmxMSnlMTUZYSVk2SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMclR0skuOIIOS4tEFkYbSnEewE13Ynbal2BY1ogZ963weaxFNtC/PuI Acje8UpeE/pVrnSl+sJE/ISKylttBHyg2i9yOpUTCOZ7bx3jZccRGUbQT+76OzCZ KeRowVcf2JiZ0/xUVtyi1hEAZZUEWty1Qoy5C0I+KQGr1wD33i/ANnweL7Tk/lF+ GpVNkPwjMQty+8KI8lTMfzTjUdRdTdokTdxp2SvOZbF465ZTjom29OYDa79BV32r nrCaYVOntSaqmzgdjeNZwtpzFOAf0pSRHkqqVXzrCmuDzMkRmx36Bv967IGnLO8C Qz8a8ABNXUqMf54zssYNjgHUGLc4ZFs= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:47 2025 by rpki-client