$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: IQNIIt3P2WGsadURTlv5o2o5Inhca1CUT69xgfIQklE= Subject key identifier: 93:D9:4A:3C:4A:B6:2B:D5:10:70:E0:73:C3:FE:E5:14:3B:56:BF:58 Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 7D Signing time: Mon 03 Nov 2025 06:44:52 +0000 Manifest this update: Mon 03 Nov 2025 06:44:52 +0000 Manifest next update: Mon 10 Nov 2025 06:44:52 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: xazm4q2uVKz+wXI2DEhbL1+18aZkxa83cyjb8kzr1Ko=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Nov 3 06:44:52 2025 GMT Not After : Nov 10 06:44:52 2025 GMT Subject: CN=69084f64-7d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:17:16:16:22:49:5d:94:79:92:59:f6:d2:d5: dc:03:1f:0d:0f:12:5a:86:1f:b1:27:ea:81:33:81: 67:59:05:95:1a:5b:8f:61:c1:1e:f3:57:75:0f:3f: f3:21:2d:a9:f5:05:cc:ef:f7:7f:66:7f:6b:87:b5: 25:46:c0:b3:d7:1c:52:68:cb:3c:02:3a:17:51:94: 4e:b9:d4:e2:6f:12:18:19:eb:a6:d1:d5:94:0a:bd: bb:6c:8d:9d:2c:4d:29:c5:bf:89:26:d6:f1:1b:51: fc:bd:1d:ce:6f:de:2f:72:cf:09:7a:70:50:91:34: 2f:b8:17:b6:ff:2c:d6:e6:88:50:61:25:5b:5e:61: 0d:16:35:f8:12:91:f6:04:fa:54:c6:6a:8a:ae:2d: 99:7b:6e:71:64:97:3d:fa:b4:44:02:c0:c9:ba:e5: a7:91:f8:41:6e:03:7a:c5:c2:d3:16:25:2e:c5:84: 97:e1:bd:f7:6e:c0:e4:2e:a6:fd:9d:c3:18:47:cc: 76:3b:54:f9:ac:6a:04:9b:cd:52:fa:b5:51:e4:2f: 94:77:ea:70:3e:9c:89:5a:3e:4b:3d:ca:c8:2a:95: 51:d3:9c:08:65:bd:40:e9:f8:bb:e7:bb:c4:d0:81: c8:ee:49:41:36:b3:6c:8d:3a:8d:31:4f:85:db:c8: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D9:4A:3C:4A:B6:2B:D5:10:70:E0:73:C3:FE:E5:14:3B:56:BF:58 X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fe:ff:d9:af:45:38:37:43:98:a2:d6:a8:9c:ab:91:03:04: 21:f5:4f:cf:34:1c:e5:a6:da:55:97:91:df:a0:5e:40:9f:3a: d7:e0:ee:6b:ec:a9:3a:39:00:6b:72:0a:01:f6:9a:02:dd:7e: c0:9a:67:65:07:88:88:b7:4f:bd:a6:86:46:74:a7:7c:64:bb: 92:58:4c:28:7f:c7:34:97:53:bf:62:b4:67:34:6a:4b:5c:4d: a4:f4:bc:94:09:4e:3c:fa:76:03:79:10:cc:b5:6e:3d:2f:24: e0:1c:68:03:49:cf:09:13:65:af:99:ca:a8:54:0c:b5:d2:02: e8:d4:ae:83:c7:fb:25:bb:e1:be:d4:90:94:2b:af:6d:0c:cd: 8c:fa:3b:51:4b:b5:97:72:a7:31:0a:83:fa:cb:93:8f:b5:00: 17:21:e0:b4:dd:87:21:50:72:69:39:38:8c:cc:c6:8e:f5:08: ae:fa:85:4f:e0:45:97:f7:07:92:d0:58:92:f0:00:22:47:e7: 71:71:63:e1:53:1f:56:c9:28:87:20:aa:68:42:90:ea:a2:43: 2a:35:32:17:26:b1:7f:5c:28:ce:88:98:c3:68:39:bd:61:38: 11:0d:6c:ec:2a:24:cb:05:d0:96:dd:ad:d3:8a:b8:8c:38:00: ed:1d:79:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTExMDMwNjQ0NTJaFw0yNTExMTAwNjQ0NTJaMBgxFjAUBgNV BAMTDTY5MDg0ZjY0LTdkOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdFxYWIkldlHmSWfbS1dwDHw0PElqGH7En6oEzgWdZBZUaW49hwR7zV3UPP/Mh Lan1Bczv939mf2uHtSVGwLPXHFJoyzwCOhdRlE651OJvEhgZ66bR1ZQKvbtsjZ0s TSnFv4km1vEbUfy9Hc5v3i9yzwl6cFCRNC+4F7b/LNbmiFBhJVteYQ0WNfgSkfYE +lTGaoquLZl7bnFklz36tEQCwMm65aeR+EFuA3rFwtMWJS7FhJfhvfduwOQupv2d wxhHzHY7VPmsagSbzVL6tVHkL5R36nA+nIlaPks9ysgqlVHTnAhlvUDp+Lvnu8TQ gcjuSUE2s2yNOo0xT4XbyPnlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk9lKPEq2 K9UQcOBzw/7lFDtWv1gwHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFT+/9mvRTg3Q5ii1qicq5EDBCH1T880HOWm2lWXkd+gXkCfOtfg7mvs qTo5AGtyCgH2mgLdfsCaZ2UHiIi3T72mhkZ0p3xku5JYTCh/xzSXU79itGc0aktc TaT0vJQJTjz6dgN5EMy1bj0vJOAcaANJzwkTZa+ZyqhUDLXSAujUroPH+yW74b7U kJQrr20MzYz6O1FLtZdypzEKg/rLk4+1ABch4LTdhyFQcmk5OIzMxo71CK76hU/g RZf3B5LQWJLwACJH53FxY+FTH1bJKIcgqmhCkOqiQyo1MhcmsX9cKM6ImMNoOb1h OBENbOwqJMsF0JbdrdOKuIw4AO0deSU= -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:13 2025 by rpki-client