$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: 90pnRhXmO9lNbrY5S1D3s/gejY2F+aKn1IDz758pRoU= Subject key identifier: 6D:A4:4A:6F:FC:FA:BD:BC:A7:7B:36:4D:05:26:CD:3A:88:CA:56:A9 Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 01D2 Signing time: Mon 03 Nov 2025 02:51:22 +0000 Manifest this update: Mon 03 Nov 2025 02:51:22 +0000 Manifest next update: Mon 10 Nov 2025 02:51:22 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: 1WrbWJbXGDLj0LBsxQuT832GLipJ/0V8ZIavjLtrgPk=) 2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: Q3/I4xZV8CvWyhr+A+P9zzW5K8pcc6S3V6pLPjC2BoQ=) 3: EA22589E373C11F0909EF25DC4F9AE02.roa (hash: pK7K0oDGB09OEHam5uLFYf312YyVDqFKY5nBRiwk3eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Nov 3 02:51:22 2025 GMT Not After : Nov 10 02:51:22 2025 GMT Subject: CN=690818aa-5509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:e8:f5:59:46:57:ac:fb:4a:a0:ec:a9:75: f4:6e:ce:03:c1:d5:27:34:41:74:9d:96:77:88:2c: 9c:66:ed:3e:82:77:61:8e:f2:55:f2:42:18:b0:b1: 79:b9:cd:73:7a:f7:02:49:36:ce:5a:e7:6c:2d:95: 26:88:f3:f2:7d:c0:94:0f:ab:fc:de:44:3d:2b:d2: 86:00:c0:02:9c:fd:0c:97:d8:b4:1e:8d:1a:dc:ff: da:23:bf:ba:ee:2a:50:51:9b:93:b1:a5:16:8c:1d: 3c:5f:e8:75:76:a0:3c:6b:14:f9:d3:59:75:18:e1: 55:35:0f:98:ce:9f:44:bc:81:9f:ba:5c:c9:b2:af: 03:5f:27:ad:a6:ea:ce:dd:49:8a:f7:3b:b0:61:3b: 02:73:4b:f3:a8:a5:05:7b:fd:6d:89:b7:10:ff:23: f4:98:6e:d2:32:27:fd:97:1e:cf:dd:bb:a8:17:21: 23:19:36:45:05:aa:4c:47:59:0a:b1:d9:89:d8:4d: 90:44:80:86:37:45:1b:c8:66:f4:7b:95:98:19:fd: 93:a7:b7:f4:29:58:3a:36:cd:6b:82:33:0c:6b:11: 0a:31:51:25:a0:94:4f:ca:61:30:87:e8:31:00:90: ee:b1:8d:89:e5:cd:0d:f3:23:3c:36:88:a1:f5:b0: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A4:4A:6F:FC:FA:BD:BC:A7:7B:36:4D:05:26:CD:3A:88:CA:56:A9 X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7e:39:13:6b:4e:51:e8:c4:cf:cd:80:82:e9:ed:e5:f3:9b: 3b:63:ed:65:91:6d:84:fb:09:af:a9:f8:71:e4:0d:f6:a0:09: b5:dc:21:3a:1c:bc:62:12:58:ae:47:2a:70:3c:7e:61:f0:67: 93:32:4e:3b:12:ba:04:1e:8c:56:38:99:60:72:17:c2:5e:cb: 7d:0c:dd:33:4d:b2:2b:8b:67:59:2d:be:de:ad:57:55:22:7b: 47:2d:94:c3:7b:46:28:19:1e:69:28:98:27:db:ad:10:5f:d8: 0b:2d:ca:88:b2:d6:3d:df:10:52:08:e1:c4:54:54:c6:2b:25: b2:b7:95:03:65:54:fa:f1:3a:f2:ca:bb:14:2c:62:34:f6:42: 95:7a:c8:82:6f:61:f8:af:94:08:f1:24:78:fb:d5:cb:14:a7: 62:e2:8b:88:f8:46:36:81:b5:83:d7:46:89:6a:3c:32:2c:e6: 1f:22:97:21:5b:95:a7:f1:b8:6b:2d:69:85:fa:72:42:b9:62: 7f:4b:0d:34:a2:55:59:4f:78:88:26:1b:06:4a:b0:14:75:4a: 54:e1:13:55:3b:83:82:54:bb:c7:0a:fc:0c:02:5d:2f:a0:6a: 97:d6:d6:d4:93:bf:30:5d:65:2f:75:1f:2e:1d:69:1b:7d:60: 3e:c4:e4:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjUxMTAzMDI1MTIyWhcNMjUxMTEwMDI1MTIyWjAYMRYwFAYD VQQDEw02OTA4MThhYS01NTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhDo9VlGV6z7SqDsqXX0bs4DwdUnNEF0nZZ3iCycZu0+gndhjvJV8kIYsLF5 uc1zevcCSTbOWudsLZUmiPPyfcCUD6v83kQ9K9KGAMACnP0Ml9i0Ho0a3P/aI7+6 7ipQUZuTsaUWjB08X+h1dqA8axT501l1GOFVNQ+Yzp9EvIGfulzJsq8DXyetpurO 3UmK9zuwYTsCc0vzqKUFe/1tibcQ/yP0mG7SMif9lx7P3buoFyEjGTZFBapMR1kK sdmJ2E2QRICGN0UbyGb0e5WYGf2Tp7f0KVg6Ns1rgjMMaxEKMVEloJRPymEwh+gx AJDusY2J5c0N8yM8Noih9bDxvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2kSm/8 +r28p3s2TQUmzTqIylapMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACfjkTa05R6MTPzYCC6e3l85s7Y+1lkW2E+wmvqfhx5A32oAm13CE6 HLxiEliuRypwPH5h8GeTMk47EroEHoxWOJlgchfCXst9DN0zTbIri2dZLb7erVdV IntHLZTDe0YoGR5pKJgn260QX9gLLcqIstY93xBSCOHEVFTGKyWyt5UDZVT68Try yrsULGI09kKVesiCb2H4r5QI8SR4+9XLFKdi4ouI+EY2gbWD10aJajwyLOYfIpch W5Wn8bhrLWmF+nJCuWJ/Sw00olVZT3iIJhsGSrAUdUpU4RNVO4OCVLvHCvwMAl0v oGqX1tbUk78wXWUvdR8uHWkbfWA+xOQG -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:19 2025 by rpki-client