$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: MbS8uXp4iQJ7zU5POii6g1jfa+kLiUFnZkveCSMdes8= Subject key identifier: 48:A4:2C:81:38:92:AD:CF:89:FC:4E:CC:08:D6:32:E1:9B:60:A8:BC Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 0851 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 084B Signing time: Sun 02 Nov 2025 20:41:23 +0000 Manifest this update: Sun 02 Nov 2025 20:41:22 +0000 Manifest next update: Sun 09 Nov 2025 20:41:22 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: iLjSNsDAv2YtYUCQNhd1HG8P67dv696fI7OAZO42juc=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: 2kaLA3OXyUts1hifmBFAJDN2z6cyzPCnOT2p5MOkteQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Nov 2 20:41:22 2025 GMT Not After : Nov 9 20:41:22 2025 GMT Subject: CN=6907c1f2-bb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:0a:1a:86:24:6d:14:a7:14:2b:f2:d6:ba: 1d:d6:79:01:ce:27:05:d7:6b:5e:77:db:9c:2d:47: 6f:07:87:e8:c6:ff:e5:8f:82:83:06:4d:54:ba:37: de:85:ae:fb:f0:eb:1c:b9:af:e1:ca:a7:59:3b:f0: 34:ce:2a:de:2d:d1:e5:38:99:eb:a5:b1:dc:85:98: cf:cd:d6:6f:7d:a7:59:ba:00:a7:0e:e5:89:4b:db: 73:b2:c9:14:7a:1b:b5:82:d2:1a:67:11:f4:18:b1: a4:c7:dc:2e:2b:ce:79:dc:59:47:a1:32:0d:54:35: 17:47:16:bb:c9:ef:46:f8:cd:3e:cb:01:0f:63:cf: 20:52:c0:00:fe:e9:42:a1:86:64:de:8d:cf:00:df: 09:38:7d:88:3e:79:2e:89:76:c4:11:b9:cf:9a:7a: 4e:a0:e4:cd:c5:9a:d3:00:9e:38:df:87:75:74:45: 20:21:e4:b3:df:e6:97:a6:1f:51:87:0a:06:06:3a: 35:a3:ef:11:70:08:e1:4c:99:12:8f:79:d0:2d:a7: ce:b6:ee:2e:07:21:00:3b:b1:a1:96:8f:eb:89:4a: 54:7b:30:19:4b:15:68:af:af:71:2f:a0:2f:4e:ba: 00:04:ea:d1:6d:89:4e:4c:51:5f:1e:ee:ed:f7:b3: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A4:2C:81:38:92:AD:CF:89:FC:4E:CC:08:D6:32:E1:9B:60:A8:BC X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7a:58:74:cf:3b:c5:8c:aa:b6:c7:ee:10:75:0f:a7:26:f1: 88:8f:4c:21:18:49:ee:5a:35:4a:1c:5b:85:cd:91:8c:c3:75: 67:b0:32:2e:73:9a:e1:f9:23:c3:15:1b:84:34:1f:f5:c5:24: da:94:73:cb:dd:91:65:4c:cb:e8:c8:57:58:67:a4:37:d7:45: 89:97:04:bd:53:fa:c2:0d:eb:83:d3:c6:8a:82:f9:5e:ca:94: 92:a2:a2:a1:ca:6b:ba:78:af:ec:82:0b:59:fd:67:85:be:13: da:94:49:59:84:69:ad:59:ab:17:ae:4e:67:d8:65:95:06:06: 61:31:97:27:83:57:1a:27:f9:30:2a:aa:87:b7:e2:57:e5:2d: 5b:7a:c9:7a:4b:00:9c:71:c3:f7:55:a9:76:18:fd:f0:3b:6b: 50:4a:11:e6:09:17:65:3b:9f:5f:6f:43:86:dd:34:47:69:1e: 88:8a:52:b6:26:e2:9b:12:05:18:ae:6d:ec:97:ca:bc:ea:3a: a9:5f:91:94:4a:bf:a0:27:1f:fb:80:3b:68:8d:21:d8:59:75: 4c:02:22:2c:41:ff:62:ea:4a:f0:9c:84:a0:6d:07:36:79:c5: 0a:94:42:24:93:92:e1:fe:09:78:5d:0e:1f:96:9c:79:fa:e1: a0:11:20:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUxMTAyMjA0MTIyWhcNMjUxMTA5MjA0MTIyWjAYMRYwFAYD VQQDEw02OTA3YzFmMi1iYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8MoKGoYkbRSnFCvy1rod1nkBzicF12ted9ucLUdvB4foxv/lj4KDBk1Uujfe ha778Oscua/hyqdZO/A0zireLdHlOJnrpbHchZjPzdZvfadZugCnDuWJS9tzsskU ehu1gtIaZxH0GLGkx9wuK8553FlHoTINVDUXRxa7ye9G+M0+ywEPY88gUsAA/ulC oYZk3o3PAN8JOH2IPnkuiXbEEbnPmnpOoOTNxZrTAJ4434d1dEUgIeSz3+aXph9R hwoGBjo1o+8RcAjhTJkSj3nQLafOtu4uByEAO7Ghlo/riUpUezAZSxVor69xL6Av TroABOrRbYlOTFFfHu7t97PQvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEikLIE4 kq3PifxOzAjWMuGbYKi8MB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJelh0zzvFjKq2x+4QdQ+nJvGIj0whGEnuWjVKHFuFzZGMw3VnsDIu c5rh+SPDFRuENB/1xSTalHPL3ZFlTMvoyFdYZ6Q310WJlwS9U/rCDeuD08aKgvle ypSSoqKhymu6eK/sggtZ/WeFvhPalElZhGmtWasXrk5n2GWVBgZhMZcng1caJ/kw KqqHt+JX5S1besl6SwCcccP3Val2GP3wO2tQShHmCRdlO59fb0OG3TRHaR6IilK2 JuKbEgUYrm3sl8q86jqpX5GUSr+gJx/7gDtojSHYWXVMAiIsQf9i6krwnISgbQc2 ecUKlEIkk5Lh/gl4XQ4flpx5+uGgESD/ -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:40 2025 by rpki-client