$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: VKOLpqUlTdIIJSMle/MpOd+3C8kZAWdfq9uF9y6Lf2E= Subject key identifier: 60:41:FF:76:A6:0B:FB:CC:91:43:3C:C2:5A:60:85:B0:36:22:6E:93 Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 081A Signing time: Sun 02 Nov 2025 20:52:11 +0000 Manifest this update: Sun 02 Nov 2025 20:52:11 +0000 Manifest next update: Sun 09 Nov 2025 20:52:11 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: ZxlShHo1OpQ39eW8g80IhS+hH0rBFRttHwPJ3kK906o=) 2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: M4ZsvutOyCk2s1KYcKAwaMHyjjGJAz91GGFqruJgJoU=) 3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: HmCUmLVw28r2IcR7zzOMBoMlcQpH+3WxtRZQvA+31cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Nov 2 20:52:11 2025 GMT Not After : Nov 9 20:52:11 2025 GMT Subject: CN=6907c47b-c20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:ad:9c:50:ee:22:80:f2:9c:c7:0f:8f:a7: 41:20:43:5a:8d:67:74:e2:a1:9f:81:59:d0:05:ea: 9a:2f:fe:26:b5:6b:a3:75:fc:04:05:ae:af:3b:12: 3a:22:3f:25:ef:f7:9d:66:7e:3f:7b:14:78:19:b7: 5b:8e:f7:da:6c:d1:bb:b2:59:9d:9e:98:f2:24:00: bb:81:b4:5c:1c:27:b2:7a:cf:56:1e:04:2a:e6:7a: 9d:c4:f3:ba:af:a0:fe:0f:b3:cf:c5:c9:7a:9c:7b: 19:f0:ed:8e:8a:54:ba:37:c2:72:b2:66:ad:fc:01: 91:f0:6c:41:69:40:ac:6b:f0:bf:6f:f9:6b:98:2e: fd:f2:ae:c4:a2:3e:22:91:f0:6f:9a:9b:26:4a:81: 8c:d7:b1:68:44:b4:1c:fd:d0:c2:c2:33:a6:31:e8: 22:b8:dc:6f:75:5f:40:5b:f5:b4:04:f1:70:be:b1: b9:01:73:d0:8c:d0:f3:bc:0f:ee:06:ac:89:8f:23: ad:94:07:e6:b6:8a:64:1b:11:47:5b:5f:08:6a:12: ad:7b:01:1f:5e:e8:d0:ad:20:99:4d:8d:6d:29:ba: 22:97:41:0d:6c:5e:cb:b0:b9:11:cb:de:f7:a7:64: 3e:22:2f:ce:88:25:5a:9c:a7:34:fe:9c:e4:2d:84: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:41:FF:76:A6:0B:FB:CC:91:43:3C:C2:5A:60:85:B0:36:22:6E:93 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f9:4e:41:ee:a1:80:ba:a6:99:9b:7d:58:5d:60:72:d4:22: 66:06:72:72:84:25:c3:ad:b6:72:e0:fb:2b:ba:e5:f0:26:df: a1:dc:23:7d:2e:cb:8d:6f:24:74:12:ca:f3:22:55:f9:67:a9: 7a:6e:c4:ac:f8:d6:87:18:b8:15:5d:55:a6:b3:0a:a8:1e:90: d4:ba:8b:fc:1a:4b:38:32:85:0f:83:fc:33:26:8b:49:84:34: a4:69:0d:aa:59:30:53:40:bd:86:b5:d6:67:af:65:2e:20:cf: 59:bb:43:e9:5d:52:43:ce:f7:65:d1:60:5e:cb:d5:5b:a3:8d: 2b:fa:d8:af:f7:04:52:35:f2:89:27:eb:96:e8:08:73:ff:81: 38:5a:6c:6c:bf:27:18:21:75:7a:ed:97:c2:3a:38:f3:ce:fe: af:ef:89:4f:70:ed:69:47:66:4e:92:e1:62:07:b7:b0:91:38: 81:52:ac:9d:d0:73:1a:1b:ae:1a:1d:a2:b9:6f:fb:0a:80:5a: a2:89:f5:83:44:16:2b:a5:4c:cf:eb:da:f6:49:5b:03:30:69: 43:f1:d7:c7:56:0c:02:a0:92:48:a1:80:91:8d:ca:28:07:b6: ba:13:7f:9a:73:56:10:d4:13:8f:f7:3f:17:90:54:49:39:85: e1:e6:80:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjUxMTAyMjA1MjExWhcNMjUxMTA5MjA1MjExWjAYMRYwFAYD VQQDEw02OTA3YzQ3Yi1jMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VatnFDuIoDynMcPj6dBIENajWd04qGfgVnQBeqaL/4mtWujdfwEBa6vOxI6 Ij8l7/edZn4/exR4GbdbjvfabNG7slmdnpjyJAC7gbRcHCeyes9WHgQq5nqdxPO6 r6D+D7PPxcl6nHsZ8O2OilS6N8Jysmat/AGR8GxBaUCsa/C/b/lrmC798q7Eoj4i kfBvmpsmSoGM17FoRLQc/dDCwjOmMegiuNxvdV9AW/W0BPFwvrG5AXPQjNDzvA/u BqyJjyOtlAfmtopkGxFHW18IahKtewEfXujQrSCZTY1tKboil0ENbF7LsLkRy973 p2Q+Ii/OiCVanKc0/pzkLYROnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBB/3am C/vMkUM8wlpghbA2Im6TMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1+U5B7qGAuqaZm31YXWBy1CJmBnJyhCXDrbZy4PsruuXwJt+h3CN9 LsuNbyR0EsrzIlX5Z6l6bsSs+NaHGLgVXVWmswqoHpDUuov8Gks4MoUPg/wzJotJ hDSkaQ2qWTBTQL2GtdZnr2UuIM9Zu0PpXVJDzvdl0WBey9Vbo40r+tiv9wRSNfKJ J+uW6Ahz/4E4WmxsvycYIXV67ZfCOjjzzv6v74lPcO1pR2ZOkuFiB7ewkTiBUqyd 0HMaG64aHaK5b/sKgFqiifWDRBYrpUzP69r2SVsDMGlD8dfHVgwCoJJIoYCRjcoo B7a6E3+ac1YQ1BOP9z8XkFRJOYXh5oBD -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:53 2025 by rpki-client