$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json) Hash identifier: W90ctj7Qqjo9gTppee1fCJgR1KEK18cMtDRa8vpigAw= Subject key identifier: 53:E7:7E:EE:0D:40:38:FE:B8:35:D4:4E:37:AF:CA:90:31:BE:67:14 Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft Manifest number: 0173 Signing time: Mon 03 Nov 2025 03:54:04 +0000 Manifest this update: Mon 03 Nov 2025 03:54:04 +0000 Manifest next update: Mon 10 Nov 2025 03:54:04 +0000 Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: pmJRm0xcnp+DHvcYRYd3R/WxgOuslxIYcrR2H9zqDiY=) 2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: 1nis0P6SfwA6Mcq8SFQmwhxCRMw2QytQSM1sy/jc0jU=) 3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: KgYF6AgzMh0SR6YaAVsJGBjcvKCcJWg6gXxqQiLpD64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Validity Not Before: Nov 3 03:54:04 2025 GMT Not After : Nov 10 03:54:04 2025 GMT Subject: CN=6908275c-64da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:ac:ba:2b:56:e0:20:f4:57:23:5a:9e:01: b6:47:d3:0a:91:ac:10:9a:5a:e6:63:95:3c:2c:b2: 9c:a5:36:ca:fc:69:f7:94:66:a4:cf:1c:e6:83:46: 08:93:a1:48:b7:ad:e3:ab:c8:b5:71:f5:2a:23:5f: c0:43:36:30:ca:2d:6b:4f:fa:8c:22:59:fd:b6:33: 80:41:f4:0d:45:b0:e6:09:d8:6f:0b:b3:74:67:b3: a0:04:4b:c0:06:96:f0:ca:fa:86:fd:2f:27:25:b3: 54:4b:89:45:36:7f:10:23:70:23:be:49:b1:bf:70: 05:1b:86:3d:6c:ed:24:d5:c5:23:d8:78:de:d4:8e: a2:44:aa:4d:d9:77:c3:e8:27:be:6d:64:91:a1:d0: 96:c5:e4:25:88:3b:bb:3d:b1:2b:97:b5:da:0c:eb: f1:cc:61:39:7b:8e:ad:76:64:22:30:6e:94:2c:28: b7:3b:e3:f0:69:5e:e1:fa:98:94:4b:af:98:94:5c: 45:11:f0:e5:80:e9:62:b8:fa:b4:8f:d4:ba:15:21: 7d:01:87:8c:45:31:e1:68:39:ad:07:14:67:2d:6f: 1c:6b:ce:5a:d7:79:a8:c6:43:11:e0:cc:b8:b0:4a: 66:26:2a:9a:b4:99:a6:09:05:d8:40:9a:03:4a:b5: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E7:7E:EE:0D:40:38:FE:B8:35:D4:4E:37:AF:CA:90:31:BE:67:14 X509v3 Authority Key Identifier: keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2b:cc:7c:1a:24:8d:44:38:c6:02:34:6a:13:10:6e:6b:09: 9e:61:e4:0b:09:1d:62:3a:e6:0e:6a:8b:8a:8f:33:aa:5c:0d: bc:69:c4:fc:7d:af:bd:11:47:5c:81:d1:f5:76:ec:2f:05:e2: cd:2a:03:7f:08:e3:26:94:2f:96:a9:4e:f8:f4:ad:56:75:95: e8:03:93:42:45:20:ec:a2:17:ae:ad:3e:1b:e7:cf:26:2d:b2: 38:11:49:2d:17:ba:cb:cb:a2:1f:33:c4:0c:a9:88:c7:cd:24: d4:58:56:a0:c3:9e:f0:e7:41:6b:4e:c8:6b:20:4e:d0:67:81: 39:74:ec:34:a8:03:be:bb:33:80:88:cb:60:07:f3:2d:c4:53: 66:75:75:b9:53:aa:ca:f3:ac:d1:47:50:aa:b6:e8:3d:8a:47: 96:c6:6c:6b:27:d4:34:c4:3b:f4:2a:45:2d:5d:32:ec:59:b7: 9c:73:38:3a:5f:a1:ec:25:05:03:c0:70:e5:d5:68:50:ba:41: e7:ad:40:ec:f5:a8:6d:fa:3c:bf:27:7a:7e:69:61:fd:86:8c: 64:7b:d0:83:73:fd:5a:4f:45:73:c5:2b:bd:97:e6:d7:c5:ce: 00:c9:f0:8e:39:05:0d:46:96:f7:98:0f:a0:41:c9:84:c1:d5: fb:54:9d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3 ODEzNTYzNjIwHhcNMjUxMTAzMDM1NDA0WhcNMjUxMTEwMDM1NDA0WjAYMRYwFAYD VQQDEw02OTA4Mjc1Yy02NGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweusuitW4CD0VyNangG2R9MKkawQmlrmY5U8LLKcpTbK/Gn3lGakzxzmg0YI k6FIt63jq8i1cfUqI1/AQzYwyi1rT/qMIln9tjOAQfQNRbDmCdhvC7N0Z7OgBEvA BpbwyvqG/S8nJbNUS4lFNn8QI3Ajvkmxv3AFG4Y9bO0k1cUj2Hje1I6iRKpN2XfD 6Ce+bWSRodCWxeQliDu7PbErl7XaDOvxzGE5e46tdmQiMG6ULCi3O+PwaV7h+piU S6+YlFxFEfDlgOliuPq0j9S6FSF9AYeMRTHhaDmtBxRnLW8ca85a13moxkMR4My4 sEpmJiqatJmmCQXYQJoDSrUiCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPnfu4N QDj+uDXUTjevypAxvmcUMB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i UFlDUDk2WUtDTGg0RTFZMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtK8x8GiSNRDjGAjRqExBuawmeYeQLCR1iOuYOaouKjzOqXA28acT8 fa+9EUdcgdH1duwvBeLNKgN/COMmlC+WqU749K1WdZXoA5NCRSDsoheurT4b588m LbI4EUktF7rLy6IfM8QMqYjHzSTUWFagw57w50FrTshrIE7QZ4E5dOw0qAO+uzOA iMtgB/MtxFNmdXW5U6rK86zRR1Cqtug9ikeWxmxrJ9Q0xDv0KkUtXTLsWbecczg6 X6HsJQUDwHDl1WhQukHnrUDs9aht+jy/J3p+aWH9hoxke9CDc/1aT0VzxSu9l+bX xc4AyfCOOQUNRpb3mA+gQcmEwdX7VJ0H -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:48 2025 by rpki-client