$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft File: BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json) Hash identifier: wOfuXjsdKbS8VQRM8o2h0xs6QrpPfrO4XiBAbNYxpUU= Subject key identifier: AA:1F:BE:F7:25:BB:59:D7:0E:FA:32:E0:7A:E2:14:63:91:EE:70:46 Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 Certificate issuer: /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Certificate serial: 0521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft Manifest number: 051C Signing time: Mon 27 Oct 2025 00:33:33 +0000 Manifest this update: Mon 27 Oct 2025 00:33:32 +0000 Manifest next update: Mon 03 Nov 2025 00:33:32 +0000 Files and hashes: 1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: jfIO0u3uPGeaF9nMLEOVZq/rIUih4BC+5L4iUc1XAYQ=) 2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: sy0Mbt4ke59HBbem5DYUNkJ8NfZs0P/CrbYjmapjxqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1313 (0x521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B2C1, serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Validity Not Before: Oct 27 00:33:32 2025 GMT Not After : Nov 3 00:33:32 2025 GMT Subject: CN=68febddc-83c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:67:02:20:1a:db:74:fd:80:9f:88:fb:a2: c6:88:bf:9a:7b:59:64:f7:19:f2:11:c8:9a:74:de: e6:16:ce:6a:a7:59:5c:af:5f:16:e7:74:02:87:1d: 2f:93:3f:c5:82:f2:5f:00:b0:40:3b:6c:66:12:62: 98:49:08:0e:e5:2e:fd:bd:77:de:af:77:61:21:4c: 0a:fb:f9:2f:d7:27:c8:c0:e5:38:5c:09:f9:bb:ff: 74:7b:9b:dd:1b:eb:80:4c:c5:a4:c3:3c:a1:28:b6: ce:41:6f:09:0f:43:98:08:78:8b:d3:74:83:0d:ca: dd:42:07:84:a3:62:8e:a1:93:0f:0f:b5:24:c9:c3: b3:d5:8c:b3:80:eb:9c:88:e7:c9:19:29:8b:ec:03: f2:d9:37:5b:45:11:bc:1e:2f:fa:5e:3d:04:74:53: b6:43:75:b6:f1:ab:26:4e:c7:7e:19:a7:37:35:2c: d9:78:47:3a:96:d9:7f:07:3e:0a:ab:84:12:66:d8: 0b:5b:7a:54:bd:76:28:33:9c:4d:12:88:2d:90:13: 75:02:00:ae:dd:c6:64:34:2a:9e:7a:9d:82:4b:00: 56:b7:3c:e5:32:84:ab:57:0d:84:72:91:4f:3a:f0: 7b:92:c1:7d:1d:8d:41:da:14:bd:db:b0:67:ca:54: af:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1F:BE:F7:25:BB:59:D7:0E:FA:32:E0:7A:E2:14:63:91:EE:70:46 X509v3 Authority Key Identifier: keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:25:76:b2:6a:b5:b5:47:35:d8:c0:02:62:2e:cf:eb:8f:51: 7c:f2:e7:05:4b:3b:28:38:2a:69:b0:fb:0b:b5:e5:46:01:97: ae:11:26:d1:e1:be:a7:40:5d:98:cd:05:09:6b:c0:f6:24:ac: 5c:6e:7a:7c:0f:7b:8c:63:eb:da:d4:44:56:e2:42:fe:ec:8b: 7d:31:39:0f:7a:46:e5:bb:2a:8d:aa:07:32:47:0b:09:90:5d: e7:3c:2e:93:35:94:59:39:d9:f0:00:67:aa:8c:cb:74:88:06: 66:82:de:55:0f:dd:78:ff:46:44:e6:57:8c:a3:54:a6:ce:70: 95:57:2b:6b:b3:98:47:3b:fe:4d:13:90:d7:a2:43:98:22:bb: b5:51:71:a9:f1:9f:01:a5:58:06:81:17:fc:47:39:2b:a4:9c: 5a:fb:0e:02:7d:85:1d:e5:24:15:8c:61:58:8b:21:a2:c2:15: 3a:62:4e:59:e0:45:1a:df:6d:f6:9d:8f:eb:17:24:b7:ad:85: 57:ed:e1:4f:9b:62:7f:78:1e:43:6b:bd:be:2b:1f:7c:d1:20: 93:ba:95:ad:62:5a:f0:04:7d:d4:e7:64:0f:3d:f8:c6:0f:57: fc:8c:97:f5:75:b0:5a:ce:3e:b2:ab:15:f5:35:8a:fd:a5:04: 37:44:99:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIyQzExMTAvBgNVBAUTKDA2RDdBMTAyRDM4QzEwOTY4MDRGOERBNTJFMkNGNzhE ODkxQUM3MjEwHhcNMjUxMDI3MDAzMzMyWhcNMjUxMTAzMDAzMzMyWjAYMRYwFAYD VQQDEw02OGZlYmRkYy04M2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJVnAiAa23T9gJ+I+6LGiL+ae1lk9xnyEciadN7mFs5qp1lcr18W53QChx0v kz/FgvJfALBAO2xmEmKYSQgO5S79vXfer3dhIUwK+/kv1yfIwOU4XAn5u/90e5vd G+uATMWkwzyhKLbOQW8JD0OYCHiL03SDDcrdQgeEo2KOoZMPD7UkycOz1YyzgOuc iOfJGSmL7APy2TdbRRG8Hi/6Xj0EdFO2Q3W28asmTsd+Gac3NSzZeEc6ltl/Bz4K q4QSZtgLW3pUvXYoM5xNEogtkBN1AgCu3cZkNCqeep2CSwBWtzzlMoSrVw2EcpFP OvB7ksF9HY1B2hS927BnylSvZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKofvvcl u1nXDvoy4HriFGOR7nBGMB8GA1UdIwQYMBaAFAbXoQLTjBCWgE+NpS4s942JGsch MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjJDMS8yRUE1MUQ1NjIw REMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVKYUFUNDJsTGl6M2pZa2F4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0ZWhBdE9NRUphQVQ0MmxMaXozallrYXh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjJDMS8yRUE1MUQ1NjIwREMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVK YUFUNDJsTGl6M2pZa2F4eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGJXayarW1RzXYwAJiLs/rj1F88ucFSzsoOCppsPsLteVGAZeuESbR 4b6nQF2YzQUJa8D2JKxcbnp8D3uMY+va1ERW4kL+7It9MTkPekbluyqNqgcyRwsJ kF3nPC6TNZRZOdnwAGeqjMt0iAZmgt5VD914/0ZE5leMo1SmznCVVytrs5hHO/5N E5DXokOYIru1UXGp8Z8BpVgGgRf8RzkrpJxa+w4CfYUd5SQVjGFYiyGiwhU6Yk5Z 4EUa3232nY/rFyS3rYVX7eFPm2J/eB5Da72+Kx980SCTupWtYlrwBH3U52QPPfjG D1f8jJf1dbBazj6yqxX1NYr9pQQ3RJnh -----END CERTIFICATE-----Generated at Wed Oct 29 00:25:08 2025 by rpki-client