$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json) Hash identifier: qXszcwD50ViEDujvWWWJ896KKd268Mft/4CsiofvkLs= Subject key identifier: 11:01:B2:E5:73:88:D3:98:53:68:CF:28:BE:A1:6E:7F:5B:E5:F3:4F Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Certificate serial: 093D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft Manifest number: 0930 Signing time: Sun 02 Nov 2025 20:11:35 +0000 Manifest this update: Sun 02 Nov 2025 20:11:35 +0000 Manifest next update: Sun 09 Nov 2025 20:11:35 +0000 Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: Az0WgFeitkbyJTCJr7D89GDOAMA9v5t5xIaAIm5YRo4=) 2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: bj4egIAAlTEUd+3GyfnPFN1nOaWoeA00wwzQy3Jloew=) 3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: j+7FuDdUw+7PzuykOYS3riW81hh3FFiLyNobRrPETRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2365 (0x93d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Validity Not Before: Nov 2 20:11:35 2025 GMT Not After : Nov 9 20:11:35 2025 GMT Subject: CN=6907baf7-ec19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:43:e3:37:9d:20:eb:62:1d:cc:7c:b1:32: 2b:65:71:be:0f:fc:83:36:cb:b7:ab:b3:58:52:4d: 85:56:8b:74:20:2b:3e:3c:44:09:48:41:98:1a:af: d2:af:83:d9:75:58:a2:67:64:35:7d:5e:47:89:5d: 13:b2:14:fd:3b:11:0b:10:d2:3a:a5:e0:f9:7e:ac: 50:ee:1b:c4:5d:1a:9f:4b:ec:bd:52:44:43:d5:2d: f2:9d:33:78:26:8e:25:08:0a:71:a3:a5:e6:bb:59: 65:41:06:ef:9b:61:4f:65:23:7c:27:ec:28:a9:e4: 55:ac:b6:f6:a4:83:a3:0c:b1:97:a9:99:5f:7e:52: 65:88:34:39:6f:68:b2:56:a2:50:d8:c2:d0:df:a4: 1d:26:31:a4:6b:f4:57:85:60:60:8f:88:70:f7:36: 39:6d:f8:c1:55:8e:f9:94:fe:26:e2:15:84:f5:3b: 14:85:c9:39:72:e2:52:9a:6d:b1:38:70:21:73:a5: b0:35:2f:0a:68:bd:c7:34:70:bd:bd:df:9a:05:aa: a0:25:db:74:07:47:c0:29:cc:0c:fe:a7:5c:b4:d1: d9:27:bd:c9:c5:91:c0:a8:0e:51:a0:c5:d8:f6:65: dd:71:6f:ad:2b:71:31:b8:60:06:9d:20:4f:8c:45: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:01:B2:E5:73:88:D3:98:53:68:CF:28:BE:A1:6E:7F:5B:E5:F3:4F X509v3 Authority Key Identifier: keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:40:c9:03:b0:9c:05:e8:8d:28:38:68:55:ec:53:51:e5:bb: b8:bb:02:9b:90:56:94:e8:23:a4:2f:14:65:92:aa:2c:dc:e7: 90:f9:a7:7f:9a:0d:77:76:b6:4a:05:b1:48:10:e9:cb:2c:21: df:49:7c:64:d0:25:55:8c:eb:64:27:08:9e:46:ca:6e:e7:77: b8:4f:bb:63:7c:8b:90:71:6e:f7:f9:4e:c2:b2:e9:3c:69:e5: 19:4c:1a:80:12:5b:7c:aa:bc:cc:98:37:ef:fe:65:14:37:22: 29:6b:fe:17:77:5a:f8:a3:7e:4a:db:5a:34:57:87:ea:72:f2: cd:72:a9:04:9a:a8:3c:8b:79:c3:0f:a6:03:44:24:27:88:47: fa:9d:4b:1d:53:93:9b:06:85:f9:1d:46:56:b6:a5:9d:0c:68: c8:28:60:35:1f:7c:ea:25:67:ab:a4:54:ab:71:bb:f9:a5:a4: 86:74:c0:d3:11:f4:2f:b7:f6:a2:d3:ca:db:1b:07:b8:43:04: 59:e6:1c:f3:43:cd:11:d0:1f:fa:24:04:56:56:1b:c1:e1:46: 5d:fc:ff:2e:b3:23:d9:96:66:c6:cc:79:05:3f:22:66:e7:0f: d3:be:6e:bd:e2:4e:be:bf:75:01:4e:0b:5e:05:9d:a3:a3:3b: 3f:9e:17:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQxOEYxMTAvBgNVBAUTKEQxQjZCRTdDRDUxNTQ1ODEzRUMzMTc2NjgwN0FDREQ5 ODdBOTBGREYwHhcNMjUxMTAyMjAxMTM1WhcNMjUxMTA5MjAxMTM1WjAYMRYwFAYD VQQDEw02OTA3YmFmNy1lYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaZD4zedIOtiHcx8sTIrZXG+D/yDNsu3q7NYUk2FVot0ICs+PEQJSEGYGq/S r4PZdViiZ2Q1fV5HiV0TshT9OxELENI6peD5fqxQ7hvEXRqfS+y9UkRD1S3ynTN4 Jo4lCApxo6Xmu1llQQbvm2FPZSN8J+woqeRVrLb2pIOjDLGXqZlfflJliDQ5b2iy VqJQ2MLQ36QdJjGka/RXhWBgj4hw9zY5bfjBVY75lP4m4hWE9TsUhck5cuJSmm2x OHAhc6WwNS8KaL3HNHC9vd+aBaqgJdt0B0fAKcwM/qdctNHZJ73JxZHAqA5RoMXY 9mXdcW+tK3ExuGAGnSBPjEVyKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEBsuVz iNOYU2jPKL6hbn9b5fNPMB8GA1UdIwQYMBaAFNG2vnzVFUWBPsMXZoB6zdmHqQ/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDE4Ri83NUI5MEQyNEFG QjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZRS13eGRtZ0hyTjJZZXBE OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBiYS1mTlVWUllFLXd4ZG1nSHJOMlllcEQ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDE4Ri83NUI5MEQyNEFGQjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZ RS13eGRtZ0hyTjJZZXBEOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApQMkDsJwF6I0oOGhV7FNR5bu4uwKbkFaU6COkLxRlkqos3OeQ+ad/ mg13drZKBbFIEOnLLCHfSXxk0CVVjOtkJwieRspu53e4T7tjfIuQcW73+U7Csuk8 aeUZTBqAElt8qrzMmDfv/mUUNyIpa/4Xd1r4o35K21o0V4fqcvLNcqkEmqg8i3nD D6YDRCQniEf6nUsdU5ObBoX5HUZWtqWdDGjIKGA1H3zqJWerpFSrcbv5paSGdMDT EfQvt/ai08rbGwe4QwRZ5hzzQ80R0B/6JARWVhvB4UZd/P8usyPZlmbGzHkFPyJm 5w/Tvm694k6+v3UBTgteBZ2jozs/nhdE -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:07 2025 by rpki-client