$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: qOMIm1irJEnFXOXlcZZUCZRERXqLzu4J2+1oRuVWjYM= Subject key identifier: 7A:5C:33:8F:54:BB:98:B5:AE:2F:20:4B:F2:EA:CB:7C:BB:A9:86:5D Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: D7 Signing time: Wed 05 Nov 2025 05:57:10 +0000 Manifest this update: Wed 05 Nov 2025 05:57:09 +0000 Manifest next update: Wed 12 Nov 2025 05:57:09 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: e+bUuYLEYlJiMgmXXvXlUUB7o6g0tQDSIE/uhPh3NFg=) 2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=) 3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: Nov 5 05:57:09 2025 GMT Not After : Nov 12 05:57:09 2025 GMT Subject: CN=690ae736-a730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:43:f8:9a:19:88:44:e8:62:f9:99:fe:12:cc: 8c:73:71:b8:73:75:0d:5a:1f:15:1a:ed:f1:d6:84: 35:93:85:ce:05:45:68:61:03:0f:9d:1c:39:9a:d0: 1a:76:99:24:48:75:a2:e4:d6:48:f2:d6:05:a7:07: ff:cc:3a:eb:9f:3d:d5:a7:8e:e1:22:94:1f:6c:9b: b9:59:a8:22:20:49:23:b3:b4:0d:37:21:62:af:70: e0:08:ec:46:90:54:13:80:f1:67:40:10:a4:ef:94: c5:be:40:09:4b:1b:4c:ca:7a:a7:fc:ea:1a:ae:ea: 60:e9:c5:1b:bb:1b:e1:f9:7a:1c:ab:9d:3a:9e:7d: b5:25:92:2e:17:16:29:66:f3:a5:cd:54:9b:fb:87: df:ca:44:71:f2:59:32:ac:29:12:3d:6e:47:d0:0c: f7:d1:0f:fc:15:5e:80:11:e2:6f:1d:1b:33:70:cd: e9:e7:da:28:18:72:3e:5d:8d:e8:d1:e5:d9:8c:53: 3a:f0:76:11:a3:6f:af:f2:8c:63:1b:c3:a5:0e:df: 97:06:78:8c:d5:74:af:a0:41:8f:6f:16:56:47:d2: 26:7f:79:92:80:d6:7e:86:ee:a9:ff:73:5f:a4:f0: 8e:84:1d:1c:b7:a2:2e:52:a7:53:67:98:ca:ab:2c: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5C:33:8F:54:BB:98:B5:AE:2F:20:4B:F2:EA:CB:7C:BB:A9:86:5D X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:07:e5:bd:21:f4:94:72:de:e4:e5:96:58:5b:50:5f:38:33: e7:1b:24:71:b2:be:f2:cb:85:db:2f:a7:47:8e:c4:51:db:d5: 49:e3:f5:c8:a1:b3:69:bb:9d:86:87:23:8c:1f:aa:20:1f:83: 4c:44:40:ec:db:13:1d:59:b0:76:6b:7b:d8:c2:af:70:47:e0: 60:c6:c4:ba:ef:6b:31:eb:83:f3:46:0d:55:1f:89:fd:96:7e: 64:8e:e6:7c:02:ab:1f:a9:1e:71:2e:df:eb:44:29:b8:72:5b: ed:df:04:63:04:27:9d:db:f9:85:d6:70:b4:ed:49:c7:9d:78: cf:f8:20:32:56:b4:7c:82:26:ae:99:48:71:10:50:d2:2f:39: 86:25:38:09:57:41:9f:e1:74:d2:f6:11:2c:2e:99:a8:c3:4f: 2a:18:47:67:7b:e8:3d:66:9e:74:c4:01:4d:9a:d8:38:80:c7: aa:71:39:81:db:e2:a9:c2:36:9c:b8:47:1a:a9:b9:3f:d5:87: cd:f3:c7:99:63:f1:54:5d:40:0b:b5:28:4b:36:c7:eb:d4:15: 74:a2:3a:f3:d1:da:f9:48:ec:ab:c5:1d:23:e0:5e:5a:9c:b6: f4:16:f0:ac:2a:03:39:2a:2f:e1:86:a8:91:9b:bf:ea:f9:b1: f8:ae:c3:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjUxMTA1MDU1NzA5WhcNMjUxMTEyMDU1NzA5WjAYMRYwFAYD VQQDEw02OTBhZTczNi1hNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10P4mhmIROhi+Zn+EsyMc3G4c3UNWh8VGu3x1oQ1k4XOBUVoYQMPnRw5mtAa dpkkSHWi5NZI8tYFpwf/zDrrnz3Vp47hIpQfbJu5WagiIEkjs7QNNyFir3DgCOxG kFQTgPFnQBCk75TFvkAJSxtMynqn/Ooarupg6cUbuxvh+Xocq506nn21JZIuFxYp ZvOlzVSb+4ffykRx8lkyrCkSPW5H0Az30Q/8FV6AEeJvHRszcM3p59ooGHI+XY3o 0eXZjFM68HYRo2+v8oxjG8OlDt+XBniM1XSvoEGPbxZWR9Imf3mSgNZ+hu6p/3Nf pPCOhB0ct6IuUqdTZ5jKqywDCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpcM49U u5i1ri8gS/Lqy3y7qYZdMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWB+W9IfSUct7k5ZZYW1BfODPnGyRxsr7yy4XbL6dHjsRR29VJ4/XI obNpu52GhyOMH6ogH4NMREDs2xMdWbB2a3vYwq9wR+BgxsS672sx64PzRg1VH4n9 ln5kjuZ8AqsfqR5xLt/rRCm4clvt3wRjBCed2/mF1nC07UnHnXjP+CAyVrR8giau mUhxEFDSLzmGJTgJV0Gf4XTS9hEsLpmow08qGEdne+g9Zp50xAFNmtg4gMeqcTmB 2+KpwjacuEcaqbk/1YfN88eZY/FUXUALtShLNsfr1BV0ojrz0dr5SOyrxR0j4F5a nLb0FvCsKgM5Ki/hhqiRm7/q+bH4rsPV -----END CERTIFICATE-----Generated at Wed Nov 5 22:04:11 2025 by rpki-client