$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: ulSXa7Fq+v0vq64RsHQAGbBomNaWt/Mrht9wNZjcB+s= Subject key identifier: 51:58:01:47:BE:C2:57:65:BE:8B:4F:B9:0D:1E:62:59:6B:6B:1C:BB Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 82 Signing time: Mon 03 Nov 2025 06:40:14 +0000 Manifest this update: Mon 03 Nov 2025 06:40:14 +0000 Manifest next update: Mon 10 Nov 2025 06:40:14 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: ffNDMweFX7/p/r62oDfO5oPHlyzGOiH5OoYIBhHtG3A=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Nov 3 06:40:14 2025 GMT Not After : Nov 10 06:40:14 2025 GMT Subject: CN=69084e4e-d8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:3b:7e:2a:d7:17:4e:8b:93:50:ec:de:53: 9f:4c:15:81:79:72:7d:e2:72:78:74:27:16:06:29: e9:f5:0d:dc:72:4c:2b:03:16:63:3c:48:10:59:e8: 1b:51:54:56:36:ee:b1:17:1d:01:49:0e:a6:34:9c: bb:ef:cf:12:f4:ee:22:bd:b3:bc:04:64:18:f9:29: 75:b0:f7:6a:0c:c0:9d:85:bb:cd:7f:73:b0:aa:2d: 3c:96:0f:69:3c:da:3c:67:fa:96:68:3e:a7:82:1e: 25:ee:4d:e4:bd:e5:e6:f3:6e:14:58:24:75:13:99: f6:51:9b:8e:a6:fa:5c:98:0b:61:08:38:54:3a:82: 82:b8:94:eb:2e:d6:be:a1:e3:ad:c5:22:18:08:f4: b7:67:40:a9:9a:14:68:c6:95:10:2e:1a:8e:ee:45: 00:6b:7a:10:9c:fc:eb:c1:fd:c9:f3:e0:d2:af:fc: 7a:b8:4d:d1:f5:7b:48:e7:54:41:0e:ae:7f:8c:9a: 75:4f:47:6a:04:cc:42:05:17:78:32:c2:b8:76:93: e7:fc:60:de:3c:d5:87:e9:6d:b6:03:40:15:94:e5: 12:eb:7a:04:c6:e7:66:15:93:5b:b2:30:53:0a:c3: d7:e8:31:85:6d:e6:f0:12:6f:63:8f:c4:f4:ef:a5: 26:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:58:01:47:BE:C2:57:65:BE:8B:4F:B9:0D:1E:62:59:6B:6B:1C:BB X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:de:5e:a1:21:b2:7b:f7:66:b8:d7:49:9f:5a:35:0f:62:0c: 99:c9:d1:c2:3a:8f:05:7f:b3:1b:13:cf:79:3d:ad:83:a4:50: 95:64:32:a8:71:e5:be:0f:6f:58:6e:f7:0f:44:c5:27:04:2d: a8:99:f9:53:e1:e2:f4:16:a9:2f:5f:e6:13:86:c5:00:45:d7: 8e:71:ba:01:1b:d3:2b:72:43:f1:0e:ad:a9:b6:5e:7e:b9:17: 54:2d:10:6d:84:91:42:6c:0c:e9:18:a2:f9:5e:c7:70:db:dc: 7d:88:60:bd:17:e6:3b:9d:c4:71:0c:89:55:a6:66:d9:0f:f9: 0d:4f:a1:ff:c3:d3:03:2f:86:6d:4e:fe:86:1a:d6:f5:3a:6e: 8e:87:06:e9:d7:6e:b0:0f:ab:13:ad:8a:53:94:53:6c:8b:24: 44:9e:f8:cc:ba:50:f6:e0:90:ec:53:d2:4b:08:52:76:72:76: 0d:2d:a0:b3:91:c6:95:ef:20:61:e0:3c:82:44:1d:aa:48:d3: 1d:64:4f:b9:f0:ff:2f:dc:c4:9e:da:93:e4:88:eb:42:2c:d9: f4:8f:df:f7:94:c2:22:74:ad:37:52:f4:ad:c9:21:62:a0:e2: e6:78:d9:60:58:04:cb:d1:e5:96:dd:51:1d:c7:7f:81:5a:40: db:47:58:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNUQxMTAvBgNVBAUTKDBGRTA2MzI0RjE3ODdDOEYyMTRGQkVBRTY3RDg4NkQy MkY4MTY3MDIwHhcNMjUxMTAzMDY0MDE0WhcNMjUxMTEwMDY0MDE0WjAYMRYwFAYD VQQDEw02OTA4NGU0ZS1kOGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto07firXF06Lk1Ds3lOfTBWBeXJ94nJ4dCcWBinp9Q3cckwrAxZjPEgQWegb UVRWNu6xFx0BSQ6mNJy7788S9O4ivbO8BGQY+Sl1sPdqDMCdhbvNf3Owqi08lg9p PNo8Z/qWaD6ngh4l7k3kveXm824UWCR1E5n2UZuOpvpcmAthCDhUOoKCuJTrLta+ oeOtxSIYCPS3Z0CpmhRoxpUQLhqO7kUAa3oQnPzrwf3J8+DSr/x6uE3R9XtI51RB Dq5/jJp1T0dqBMxCBRd4MsK4dpPn/GDePNWH6W22A0AVlOUS63oExudmFZNbsjBT CsPX6DGFbebwEm9jj8T076UmLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFYAUe+ wldlvotPuQ0eYllraxy7MB8GA1UdIwQYMBaAFA/gYyTxeHyPIU++rmfYhtIvgWcC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI1RC85OEZEMUE0MkYx QzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJOGhUNzZ1WjlpRzBpLUJa d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI1RC85OEZEMUE0MkYxQzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJ OGhUNzZ1WjlpRzBpLUJad0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW3l6hIbJ792a410mfWjUPYgyZydHCOo8Ff7MbE895Pa2DpFCVZDKo ceW+D29YbvcPRMUnBC2omflT4eL0FqkvX+YThsUARdeOcboBG9MrckPxDq2ptl5+ uRdULRBthJFCbAzpGKL5Xsdw29x9iGC9F+Y7ncRxDIlVpmbZD/kNT6H/w9MDL4Zt Tv6GGtb1Om6Ohwbp126wD6sTrYpTlFNsiyREnvjMulD24JDsU9JLCFJ2cnYNLaCz kcaV7yBh4DyCRB2qSNMdZE+58P8v3MSe2pPkiOtCLNn0j9/3lMIidK03UvStySFi oOLmeNlgWATL0eWW3VEdx3+BWkDbR1io -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:12 2025 by rpki-client