$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json) Hash identifier: zHs1FBXf8UyoPjCJ2hFb72Q/yQUzJPNo4dKLmdsfMwQ= Subject key identifier: EB:DD:A6:A4:F9:64:0C:BE:FD:20:36:92:AA:C5:56:E7:4F:1B:67:04 Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Certificate serial: 1907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft Manifest number: 18F1 Signing time: Sun 02 Nov 2025 16:28:02 +0000 Manifest this update: Sun 02 Nov 2025 16:28:02 +0000 Manifest next update: Sun 09 Nov 2025 16:28:02 +0000 Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: bxa/S2k8GzRDy1v/YrLoIu6fc8o2LUInZJZ+73NO86E=) 2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: hGExMUb+w4JyWjME6Pb9a+xtMzWk7NBawSO3YXbXwM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6407 (0x1907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Validity Not Before: Nov 2 16:28:02 2025 GMT Not After : Nov 9 16:28:02 2025 GMT Subject: CN=69078692-d94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:37:09:e6:75:31:2c:d9:45:a7:11:f4:5c: 1a:78:d3:19:21:50:7d:0a:90:66:86:a4:da:15:0a: 2c:39:c5:2c:0f:d0:ba:d0:8e:c1:56:32:be:76:6a: b0:0a:2d:5e:7c:b9:2c:a6:79:78:0c:34:22:78:53: a9:4b:59:46:8a:76:42:df:8b:54:e9:f1:a4:a0:c5: 8c:d2:7b:73:88:34:69:7e:fd:8b:cb:e6:43:83:aa: 60:e7:e6:7e:28:b1:d7:80:a0:37:ac:7f:b6:62:03: a5:63:fa:d4:42:05:ff:f5:41:1a:cb:e2:6c:37:c3: 0f:76:59:a8:57:05:49:3c:48:8a:aa:a5:3d:46:8b: 72:81:f7:99:7e:7a:90:11:64:39:c4:16:94:f0:f7: b1:42:a1:77:b1:7d:82:20:15:18:c7:47:22:07:80: bb:55:e5:b7:2e:23:03:56:5c:b6:68:8e:d0:49:64: 5b:8f:b5:ee:25:c0:b3:f2:e1:79:64:49:eb:13:23: 33:52:c0:c9:02:79:c1:ef:4e:b5:3f:f3:96:a1:b1: 65:53:8b:74:64:60:68:f5:96:ed:3a:ba:71:8c:e5: 1c:50:ee:70:73:17:b6:b5:4a:22:ad:60:1c:80:bd: c2:21:6e:8f:da:d5:60:57:73:04:41:74:c3:24:b1: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DD:A6:A4:F9:64:0C:BE:FD:20:36:92:AA:C5:56:E7:4F:1B:67:04 X509v3 Authority Key Identifier: keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:24:67:cf:b4:2c:b6:a3:47:1a:3d:6d:16:28:02:96:c8:34: 7f:2b:f4:b5:1d:b1:9d:d2:1b:fd:64:62:15:85:8e:21:5e:45: 12:f5:64:51:14:b0:86:0b:8a:7e:39:d6:b6:23:2f:26:de:17: 5a:ad:f5:1f:de:6c:64:9b:27:65:38:17:76:cc:e1:bf:d6:5c: e7:65:0b:7c:59:9c:72:58:85:98:80:f6:9a:7e:87:8e:84:45: a9:7e:12:bb:1b:2b:82:b7:7b:f9:6a:44:d2:b4:58:76:0e:d2: f5:3e:85:5b:f4:24:52:9b:39:12:3d:39:13:2a:d9:6a:6d:c8: 05:f9:ea:00:9a:f6:24:a9:d7:5c:88:ee:1c:d6:1c:0c:2e:35: 5f:1c:c4:e1:aa:ff:8a:36:d8:bb:6b:e1:8e:52:0d:ac:00:bf: 68:b6:46:f8:f4:c3:a7:b9:d4:df:0e:fe:a0:25:be:0a:8b:d6: 62:5e:20:ba:ff:bb:d2:2f:90:1b:4f:d6:78:78:d1:48:47:96: 48:32:31:e9:a5:9f:0e:69:33:73:c2:a6:50:d5:79:cf:aa:66: 6a:e9:a5:76:f2:52:7f:6c:10:c3:91:24:3e:93:18:32:8e:b8: 04:31:37:88:7f:76:30:77:25:17:33:ea:a6:a5:ca:c2:b6:d1: e1:c0:db:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEMTMxMTAvBgNVBAUTKDZFMjdDRkQxODlFRTQ2NDQzMUQ0QjkwMTNCQ0MwNzU4 QTgwMjY0RTYwHhcNMjUxMTAyMTYyODAyWhcNMjUxMTA5MTYyODAyWjAYMRYwFAYD VQQDEw02OTA3ODY5Mi1kOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTc3CeZ1MSzZRacR9FwaeNMZIVB9CpBmhqTaFQosOcUsD9C60I7BVjK+dmqw Ci1efLkspnl4DDQieFOpS1lGinZC34tU6fGkoMWM0ntziDRpfv2Ly+ZDg6pg5+Z+ KLHXgKA3rH+2YgOlY/rUQgX/9UEay+JsN8MPdlmoVwVJPEiKqqU9RotygfeZfnqQ EWQ5xBaU8PexQqF3sX2CIBUYx0ciB4C7VeW3LiMDVly2aI7QSWRbj7XuJcCz8uF5 ZEnrEyMzUsDJAnnB7061P/OWobFlU4t0ZGBo9ZbtOrpxjOUcUO5wcxe2tUoirWAc gL3CIW6P2tVgV3MEQXTDJLEJWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvdpqT5 ZAy+/SA2kqrFVudPG2cEMB8GA1UdIwQYMBaAFG4nz9GJ7kZEMdS5ATvMB1ioAmTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0QxMy9BQTI1REYxQzk4 RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJrUXgxTGtCTzh3SFdLZ0Na T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpZlAwWW51UmtReDFMa0JPOHdIV0tnQ1pPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0QxMy9BQTI1REYxQzk4RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJr UXgxTGtCTzh3SFdLZ0NaT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7JGfPtCy2o0caPW0WKAKWyDR/K/S1HbGd0hv9ZGIVhY4hXkUS9WRR FLCGC4p+Oda2Iy8m3hdarfUf3mxkmydlOBd2zOG/1lznZQt8WZxyWIWYgPaafoeO hEWpfhK7GyuCt3v5akTStFh2DtL1PoVb9CRSmzkSPTkTKtlqbcgF+eoAmvYkqddc iO4c1hwMLjVfHMThqv+KNti7a+GOUg2sAL9otkb49MOnudTfDv6gJb4Ki9ZiXiC6 /7vSL5AbT9Z4eNFIR5ZIMjHppZ8OaTNzwqZQ1XnPqmZq6aV28lJ/bBDDkSQ+kxgy jrgEMTeIf3YwdyUXM+qmpcrCttHhwNuJ -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:03 2025 by rpki-client