$ rpki-client -vvf rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft File: b1bqmzoTdrDxragZkqO5YQgM4jI.mft (raw, json) Hash identifier: bEAQUcsky0qbJqdggLqNjX4s+yLHWJWPDIlLrjSq4nc= Subject key identifier: EC:BE:9D:73:5D:21:33:A6:1A:E4:CF:D7:F7:6B:7F:EE:0E:28:A2:A6 Authority key identifier: 6F:56:EA:9B:3A:13:76:B0:F1:AD:A8:19:92:A3:B9:61:08:0C:E2:32 Certificate issuer: /CN=A915E084/serialNumber=6F56EA9B3A1376B0F1ADA81992A3B961080CE232 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft Manifest number: 17 Signing time: Mon 03 Nov 2025 07:51:07 +0000 Manifest this update: Mon 03 Nov 2025 07:51:07 +0000 Manifest next update: Mon 10 Nov 2025 07:51:07 +0000 Files and hashes: 1: b1bqmzoTdrDxragZkqO5YQgM4jI.crl (hash: sHGKMQ5hXRZejt/Hz5c5KJ58qyFnRjpQeBJ19KhyS2E=) 2: C838C2CA95EE11F0BC1A5A49C4F9AE02.roa (hash: R+7miJij0uMYmn/nyzH1UtCDfprxK7pdQFWDNM5sU8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.crl rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E084, serialNumber=6F56EA9B3A1376B0F1ADA81992A3B961080CE232 Validity Not Before: Nov 3 07:51:07 2025 GMT Not After : Nov 10 07:51:07 2025 GMT Subject: CN=69085eeb-1e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:08:f4:36:b1:12:fc:bb:94:76:10:95:f6: 63:91:fc:7e:83:43:79:04:05:d7:95:71:4f:e2:eb: aa:a8:5a:ca:d4:fe:4f:82:21:b2:86:55:97:e3:fc: 92:c9:0d:43:e9:df:da:45:0c:b7:34:40:46:21:78: 82:38:d5:0e:3f:62:8a:03:e6:95:7e:27:f6:5a:60: 63:ff:fd:fe:8c:a5:f8:ed:64:8a:5e:28:97:58:a9: c5:33:7d:55:12:7c:c7:e3:77:da:a2:81:35:b5:55: 27:26:73:3d:c0:39:67:6b:aa:25:a8:87:5c:81:0c: 71:1b:27:00:d0:de:47:fa:bc:b0:e0:d2:cd:b0:2d: 35:1a:f0:c0:e2:70:e8:cd:4e:b3:99:1e:db:92:68: 6e:9f:3b:36:d5:93:e2:9b:da:04:f5:ce:df:e7:da: 32:73:b6:03:05:0b:18:61:39:68:ec:a9:9f:fd:38: 03:10:a8:07:12:0c:22:23:d4:df:b2:07:3d:f0:e3: 39:c3:b7:18:ae:fe:68:ee:94:59:05:cd:06:db:6d: 60:33:68:38:4e:9b:8e:ae:c9:c1:1f:fb:c4:dd:d3: c5:2d:ef:03:ad:eb:8e:e5:6b:a7:e7:2c:92:7c:a5: 6c:e9:73:19:38:13:4e:60:79:e4:42:c1:26:5c:f6: ca:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BE:9D:73:5D:21:33:A6:1A:E4:CF:D7:F7:6B:7F:EE:0E:28:A2:A6 X509v3 Authority Key Identifier: keyid:6F:56:EA:9B:3A:13:76:B0:F1:AD:A8:19:92:A3:B9:61:08:0C:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1d:34:5c:7a:e9:17:dd:1c:b1:f7:60:5b:01:a3:cb:e3:c3: 56:af:e4:8e:ff:d0:6a:1f:ac:41:de:c0:d5:5a:c0:06:99:69: 32:8f:28:64:05:57:65:24:f8:fc:a8:18:c2:c8:09:ee:24:7f: cb:aa:fa:0e:cc:b8:7a:d0:5a:d5:eb:7d:6b:a3:64:c0:ba:20: c2:41:67:e4:1d:57:70:5e:fc:e6:5e:c4:a9:eb:5b:88:91:aa: 38:fb:82:73:e8:61:ce:ff:7f:7c:9d:7a:a5:e2:8a:14:4a:b3: 2f:26:ea:bf:2a:55:c5:e9:6a:4b:be:e5:8d:0f:52:2e:82:49: e4:4f:7b:ab:ee:34:a3:ca:ec:2b:9d:3f:af:93:26:9d:b7:3e: 52:4f:14:36:7e:0a:c4:01:ee:76:60:ee:b4:bb:0d:fc:ee:4a: 79:91:19:3f:d8:17:14:af:3a:cb:72:c1:f2:73:88:be:a7:4d: c4:ae:5e:be:21:36:1a:c7:f5:50:e6:c5:47:4a:2f:75:91:7f: ad:e9:7c:5e:e8:b9:33:26:83:14:76:5e:37:c9:05:74:84:2f: d8:ad:15:eb:e4:a1:08:67:4f:55:83:02:6a:c4:1e:89:ef:3c: ce:c2:14:52:84:ad:ff:4d:9f:1f:5a:40:eb:fd:da:d2:de:cc: cf:16:6f:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTA4NDExMC8GA1UEBRMoNkY1NkVBOUIzQTEzNzZCMEYxQURBODE5OTJBM0I5NjEw ODBDRTIzMjAeFw0yNTExMDMwNzUxMDdaFw0yNTExMTAwNzUxMDdaMBgxFjAUBgNV BAMTDTY5MDg1ZWViLTFlOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0/wj0NrES/LuUdhCV9mOR/H6DQ3kEBdeVcU/i66qoWsrU/k+CIbKGVZfj/JLJ DUPp39pFDLc0QEYheII41Q4/YooD5pV+J/ZaYGP//f6MpfjtZIpeKJdYqcUzfVUS fMfjd9qigTW1VScmcz3AOWdrqiWoh1yBDHEbJwDQ3kf6vLDg0s2wLTUa8MDicOjN TrOZHtuSaG6fOzbVk+Kb2gT1zt/n2jJztgMFCxhhOWjsqZ/9OAMQqAcSDCIj1N+y Bz3w4znDtxiu/mjulFkFzQbbbWAzaDhOm46uycEf+8Td08Ut7wOt647la6fnLJJ8 pWzpcxk4E05geeRCwSZc9sr3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7L6dc10h M6Ya5M/X92t/7g4ooqYwHwYDVR0jBBgwFoAUb1bqmzoTdrDxragZkqO5YQgM4jIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMDg0LzBFNTQ0NDU2OTVF RTExRjBCODY5MzE0OEM0RjlBRTAyL2IxYnFtem9UZHJEeHJhZ1prcU81WVFnTTRq SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjFicW16b1RkckR4cmFnWmtxTzVZUWdNNGpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MDg0LzBFNTQ0NDU2OTVFRTExRjBCODY5MzE0OEM0RjlBRTAyL2IxYnFtem9UZHJE eHJhZ1prcU81WVFnTTRqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFsdNFx66RfdHLH3YFsBo8vjw1av5I7/0GofrEHewNVawAaZaTKPKGQF V2Uk+PyoGMLICe4kf8uq+g7MuHrQWtXrfWujZMC6IMJBZ+QdV3Be/OZexKnrW4iR qjj7gnPoYc7/f3ydeqXiihRKsy8m6r8qVcXpaku+5Y0PUi6CSeRPe6vuNKPK7Cud P6+TJp23PlJPFDZ+CsQB7nZg7rS7DfzuSnmRGT/YFxSvOstywfJziL6nTcSuXr4h NhrH9VDmxUdKL3WRf63pfF7ouTMmgxR2XjfJBXSEL9itFevkoQhnT1WDAmrEHonv PM7CFFKErf9Nnx9aQOv92tLezM8Wbyg= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:42 2025 by rpki-client