$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft File: b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json) Hash identifier: bBZVxuDugyJlLwIn82iLenwzq+CyCmoBooFfa7FH5rQ= Subject key identifier: CF:58:B9:16:49:C5:9E:BC:DB:DC:03:A3:FB:1B:3E:B3:7C:E0:A5:B6 Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 Certificate issuer: /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft Manifest number: 3B Signing time: Wed 05 Nov 2025 07:42:35 +0000 Manifest this update: Wed 05 Nov 2025 07:42:34 +0000 Manifest next update: Wed 12 Nov 2025 07:42:34 +0000 Files and hashes: 1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: MkcSXxmPLBhkAmqPh4l90+yZqK6VU+pCSnTitzF79jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Validity Not Before: Nov 5 07:42:34 2025 GMT Not After : Nov 12 07:42:34 2025 GMT Subject: CN=690affea-8553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:47:d6:92:a2:13:13:03:67:f3:10:46:04: 9f:fd:7a:4b:95:08:05:81:c0:5f:bb:3d:82:15:8c: 05:73:78:43:7c:34:4d:75:94:5b:05:5d:54:5e:65: 5b:bf:77:6b:02:4d:02:cc:5d:24:ea:14:dc:75:31: f1:fa:40:2a:cd:db:4c:f3:b4:8e:f3:14:44:8c:fc: 01:b9:89:7a:ec:7c:80:36:e5:64:0e:5d:84:dd:bb: 62:ea:6a:54:0d:8a:9a:92:79:84:ff:32:67:a3:f9: 8d:ec:7f:c9:f2:63:bf:b3:a4:ab:34:11:ad:fa:bf: 4b:76:a5:3a:ee:03:21:1f:2b:e9:a1:92:07:25:0f: e0:ed:f6:8d:da:1b:fd:ab:1f:19:8a:71:35:42:a6: 22:6d:b6:0a:06:b7:f5:20:c3:f1:24:95:ab:58:81: 67:d6:6b:a6:c1:9a:41:a7:01:40:11:64:15:a2:6a: 22:ef:63:9f:e4:66:34:d4:c1:64:a1:47:3e:4e:bd: 00:c6:b7:54:17:2e:d1:42:25:33:5d:21:eb:f3:38: a2:0b:33:0b:ab:37:66:de:30:2c:76:49:1a:bc:ce: 8a:ae:89:8c:a2:96:07:6f:c7:6f:6d:ed:3c:df:6c: 8e:b2:e3:c5:fc:0b:1c:a3:9f:a3:bc:1b:95:7d:39: a0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:58:B9:16:49:C5:9E:BC:DB:DC:03:A3:FB:1B:3E:B3:7C:E0:A5:B6 X509v3 Authority Key Identifier: keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a3:b6:14:3c:0d:7e:8a:51:4e:92:83:f1:8e:6c:71:43:a3: 07:2e:56:a7:79:2b:d7:a1:c5:9a:76:be:9e:69:d2:81:48:50: b4:e2:15:ae:c0:b7:22:8b:44:b6:7a:53:ff:52:41:b9:9e:db: 7a:63:1c:cb:c5:56:08:26:50:42:38:07:07:49:2c:6b:77:29: ea:3d:15:7e:85:3e:9e:73:02:3b:d6:1b:55:ce:08:cf:7a:6c: 71:81:4d:f0:81:64:eb:48:8d:ba:3b:a9:6a:eb:01:a8:07:42: f4:2b:10:6b:b1:f5:40:03:46:26:41:56:8e:49:39:e0:d0:bc: f6:02:1c:9a:48:38:51:c8:59:90:d0:56:9e:d8:82:ee:72:a7: 71:b1:d0:01:eb:c8:1a:cd:c7:d7:cf:e5:24:b8:dc:7a:4a:fd: 5e:4c:97:ec:dd:b5:3a:ec:8a:b0:f6:cb:41:9d:0f:24:4e:26: a9:13:f5:80:67:0d:be:a6:dd:28:bf:98:5f:45:0a:85:b7:21: 69:fd:b1:e9:82:38:6e:00:74:f3:35:36:39:68:20:29:c7:ac: 6c:fe:6f:c1:f1:bc:23:e2:31:02:f3:53:77:85:ca:d3:18:ef: f0:cd:01:1e:f9:f5:62:82:59:e3:9f:73:d2:3f:e1:6d:03:5d: 6d:0b:5c:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoNkY0NURCNUQyOEJCQjlBNjUzRjgyRDFDRjc4MjdBNTk4 Mzc2NDVGMzAeFw0yNTExMDUwNzQyMzRaFw0yNTExMTIwNzQyMzRaMBgxFjAUBgNV BAMTDTY5MGFmZmVhLTg1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCunkfWkqITEwNn8xBGBJ/9ekuVCAWBwF+7PYIVjAVzeEN8NE11lFsFXVReZVu/ d2sCTQLMXSTqFNx1MfH6QCrN20zztI7zFESM/AG5iXrsfIA25WQOXYTdu2LqalQN ipqSeYT/Mmej+Y3sf8nyY7+zpKs0Ea36v0t2pTruAyEfK+mhkgclD+Dt9o3aG/2r HxmKcTVCpiJttgoGt/Ugw/EklatYgWfWa6bBmkGnAUARZBWiaiLvY5/kZjTUwWSh Rz5OvQDGt1QXLtFCJTNdIevzOKILMwurN2beMCx2SRq8zoquiYyilgdvx29t7Tzf bI6y48X8Cxyjn6O8G5V9OaB3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz1i5FknF nrzb3AOj+xs+s3zgpbYwHwYDVR0jBBgwFoAUb0XbXSi7uaZT+C0c94J6WYN2RfMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5L0EyN0I4QkZDNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2IwWGJYU2k3dWFaVC1DMGM5NEo2V1lOMlJm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjBYYlhTaTd1YVpULUMwYzk0SjZXWU4yUmZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 MzA5L0EyN0I4QkZDNjEzRDExRjBCMDM2QjgzNkM0RjlBRTAyL2IwWGJYU2k3dWFa VC1DMGM5NEo2V1lOMlJmTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKjthQ8DX6KUU6Sg/GObHFDowcuVqd5K9ehxZp2vp5p0oFIULTiFa7A tyKLRLZ6U/9SQbme23pjHMvFVggmUEI4BwdJLGt3Keo9FX6FPp5zAjvWG1XOCM96 bHGBTfCBZOtIjbo7qWrrAagHQvQrEGux9UADRiZBVo5JOeDQvPYCHJpIOFHIWZDQ Vp7Ygu5yp3Gx0AHryBrNx9fP5SS43HpK/V5Ml+zdtTrsirD2y0GdDyROJqkT9YBn Db6m3Si/mF9FCoW3IWn9semCOG4AdPM1NjloICnHrGz+b8HxvCPiMQLzU3eFytMY 7/DNAR759WKCWeOfc9I/4W0DXW0LXJc= -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:44 2025 by rpki-client