$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json) Hash identifier: fzTOx3IbaPRFsSPKFJxICaFBuqJk7uIEPWVVIVjlzV0= Subject key identifier: 0E:C6:F0:57:1C:25:C6:59:00:F8:0C:00:4B:27:28:68:0B:F3:ED:CA Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft Manifest number: 0195 Signing time: Mon 03 Nov 2025 03:28:52 +0000 Manifest this update: Mon 03 Nov 2025 03:28:51 +0000 Manifest next update: Mon 10 Nov 2025 03:28:51 +0000 Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: bGUCrDRqiIMR8cUL7zr3t+6tVVFXi7VZCY+uQFiq/Vc=) 2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: eNZ801LzfUJJfFcQXfd+LEPeNYyxq0IQnV6OW/T3oK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Validity Not Before: Nov 3 03:28:51 2025 GMT Not After : Nov 10 03:28:51 2025 GMT Subject: CN=69082173-1c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b5:1e:89:7c:23:aa:00:0b:b1:ab:2f:ab:3f: 92:41:50:5d:f3:88:8e:71:f4:a4:63:ed:d1:31:9d: 5d:d3:1b:c7:16:a3:df:5b:19:97:eb:b2:74:05:61: d6:d8:6d:82:3e:f3:10:fc:ac:f4:3d:a2:b6:cd:1f: d7:5a:4e:0f:43:73:44:b2:6e:53:9f:7e:1e:5d:44: 06:68:8c:6f:36:32:83:54:fa:d5:5c:b8:cd:ec:f7: 52:31:ba:f9:ee:d1:8e:39:72:ec:3c:e4:e2:37:3d: 90:63:cf:14:31:05:5a:12:e9:77:97:83:35:ee:8b: 7e:d6:9f:50:56:57:c5:7d:0a:9b:19:41:f0:c6:a3: 50:f1:76:e3:7b:f9:18:a4:46:18:8e:d2:6b:bc:ee: 1f:17:67:5b:d0:41:79:02:92:4c:4f:54:be:39:0c: 69:63:ad:7d:c4:a6:17:2f:5e:54:3e:ad:08:3d:b6: b7:47:9b:d4:10:69:84:0f:d9:e1:c8:91:90:b3:2c: e0:54:1d:a2:96:9d:8b:89:3b:d0:e6:98:9c:f2:62: 74:d7:4f:a9:5a:66:52:98:e7:93:dd:37:8d:06:2a: df:a0:07:bf:67:ba:c3:ad:dc:9e:c3:a4:58:f3:e5: f5:9c:83:67:61:35:e6:2c:b6:89:fd:6f:ff:0f:65: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C6:F0:57:1C:25:C6:59:00:F8:0C:00:4B:27:28:68:0B:F3:ED:CA X509v3 Authority Key Identifier: keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:fb:f2:14:f8:c9:43:98:0e:8c:6d:f8:d7:71:0c:be:32:d1: f1:05:47:c8:b7:a9:05:29:20:35:23:04:3c:c9:ff:10:34:20: 38:d8:03:c3:74:0f:47:67:67:20:cf:74:b4:4f:33:45:d4:31: 83:b3:af:f9:c1:14:47:d1:b6:42:50:bf:7e:93:c3:a3:1b:22: c4:b4:6c:13:b1:a2:ad:cf:49:88:f2:28:77:84:0b:76:60:d5: d2:f1:ed:6b:ac:38:46:f3:ec:29:b0:82:9d:be:af:b6:ef:a3: 2d:df:8e:ab:a0:a3:ca:77:c8:a1:0f:c2:6b:95:fd:24:7c:23: a5:4b:e5:a5:34:5c:1a:69:8d:40:8b:32:54:30:12:12:37:74: 09:ac:e9:9b:1e:2e:a3:a7:82:20:16:6c:43:f9:63:63:6d:54: 06:c8:6a:da:a4:fa:f1:3e:be:c2:60:19:c7:a1:7b:4c:2c:ea: 5a:e5:69:22:9b:5e:fb:85:5d:a8:06:c0:bd:56:75:f4:45:62: b2:0e:dc:6d:a6:7a:db:2d:a6:80:fa:39:ab:bc:31:8f:e2:de: 74:00:6a:c9:7a:da:68:74:45:bb:38:20:8e:bf:2c:c7:60:bc: c8:13:c9:ec:ec:40:63:b1:91:dd:91:6e:49:5a:6f:02:5e:61: 35:c6:e1:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OEUxMTAvBgNVBAUTKDZERjA5MzU2NjBCNTI0RDJBODA4MDY0MzY4QjBBRkM1 NjUzOEE2OUEwHhcNMjUxMTAzMDMyODUxWhcNMjUxMTEwMDMyODUxWjAYMRYwFAYD VQQDEw02OTA4MjE3My0xYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bUeiXwjqgALsasvqz+SQVBd84iOcfSkY+3RMZ1d0xvHFqPfWxmX67J0BWHW 2G2CPvMQ/Kz0PaK2zR/XWk4PQ3NEsm5Tn34eXUQGaIxvNjKDVPrVXLjN7PdSMbr5 7tGOOXLsPOTiNz2QY88UMQVaEul3l4M17ot+1p9QVlfFfQqbGUHwxqNQ8Xbje/kY pEYYjtJrvO4fF2db0EF5ApJMT1S+OQxpY619xKYXL15UPq0IPba3R5vUEGmED9nh yJGQsyzgVB2ilp2LiTvQ5pic8mJ010+pWmZSmOeT3TeNBirfoAe/Z7rDrdyew6RY 8+X1nINnYTXmLLaJ/W//D2Wf3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7G8Fcc JcZZAPgMAEsnKGgL8+3KMB8GA1UdIwQYMBaAFG3wk1ZgtSTSqAgGQ2iwr8VlOKaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc4RS9ENUFFN0ZBQzUz Q0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpOS29DQVpEYUxDdnhXVTRw cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JmQ1RWbUMxSk5Lb0NBWkRhTEN2eFdVNHBwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc4RS9ENUFFN0ZBQzUzQ0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpO S29DQVpEYUxDdnhXVTRwcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ+/IU+MlDmA6MbfjXcQy+MtHxBUfIt6kFKSA1IwQ8yf8QNCA42APD dA9HZ2cgz3S0TzNF1DGDs6/5wRRH0bZCUL9+k8OjGyLEtGwTsaKtz0mI8ih3hAt2 YNXS8e1rrDhG8+wpsIKdvq+276Mt346roKPKd8ihD8Jrlf0kfCOlS+WlNFwaaY1A izJUMBISN3QJrOmbHi6jp4IgFmxD+WNjbVQGyGrapPrxPr7CYBnHoXtMLOpa5Wki m177hV2oBsC9VnX0RWKyDtxtpnrbLaaA+jmrvDGP4t50AGrJetpodEW7OCCOvyzH YLzIE8ns7EBjsZHdkW5JWm8CXmE1xuHo -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:17 2025 by rpki-client