$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: eRhpGy/zG96r4NmslaiXicmjN8StIl7Fn+ueU85SUac= Subject key identifier: 19:69:9D:9A:2E:CC:E8:51:11:C2:4C:F3:1A:3C:9F:D2:99:0C:8B:DE Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: B9 Signing time: Wed 05 Nov 2025 06:21:13 +0000 Manifest this update: Wed 05 Nov 2025 06:21:12 +0000 Manifest next update: Wed 12 Nov 2025 06:21:12 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: aC+KU7OYMEDVFqzSDpX827I1C/JDoOI/gIusd8nplAI=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: c/aPIx7sIlMm9hEs7EP/H/t3hc0Qsr+nc2nekVdkKmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Nov 5 06:21:12 2025 GMT Not After : Nov 12 06:21:12 2025 GMT Subject: CN=690aecd8-df38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:32:c7:cf:df:64:60:7c:01:51:e3:7e:cc: 50:10:c3:42:3a:09:8a:f6:94:23:cd:85:74:f9:c4: 2b:32:16:85:02:2f:c9:49:b1:b2:a0:70:f3:c1:17: 02:d3:c6:d2:b4:73:87:42:70:70:a4:52:1c:a4:77: 30:21:55:38:fc:35:69:8b:09:46:68:86:11:4c:03: f1:26:97:ee:25:f4:87:b7:7a:cf:19:92:1b:dd:4b: 4a:7d:b5:cc:90:5f:13:08:32:ed:8e:57:65:e7:ac: 22:8d:b8:24:3a:67:14:fc:43:14:6f:9a:41:95:68: 70:e6:38:5e:09:df:3d:a4:38:73:5f:1e:4f:a3:eb: 92:c6:4c:7b:8a:a8:e7:0b:50:f4:4e:f7:0c:c5:a4: 8a:3c:b7:57:f1:d6:39:f8:e1:0b:a7:e1:74:2d:fc: ac:7c:56:cd:1f:c5:f8:ca:f3:6a:ce:5e:02:35:a5: 62:6b:f6:43:80:e5:43:b7:5b:df:e1:70:81:65:0b: 8c:b5:14:72:87:ad:1e:f9:08:16:be:07:52:33:e3: 20:a9:5d:5d:63:be:93:40:ef:4c:fd:8b:44:33:e7: 44:d7:69:38:4b:68:27:55:9d:38:1c:16:36:39:bd: 5f:5d:25:89:db:3d:3a:72:b7:16:f7:fd:70:62:22: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:69:9D:9A:2E:CC:E8:51:11:C2:4C:F3:1A:3C:9F:D2:99:0C:8B:DE X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:de:73:a3:0d:50:b5:a7:03:76:d6:dd:b6:6b:8e:99:d6:cd: 7a:4a:4a:1c:ea:b1:cb:cb:1c:1f:90:7d:13:c9:af:a2:38:df: d3:15:7a:00:49:cd:42:93:21:53:8b:3a:1d:97:bd:5f:16:55: fc:05:c2:24:92:ca:c8:81:36:72:df:84:f9:7a:85:7f:b6:eb: 63:5b:a6:8b:c3:c7:47:d6:ce:f3:d7:fe:c1:e4:22:b5:15:42: cb:ef:d2:03:5f:57:9a:de:7e:03:0e:52:24:44:65:16:fe:c2: 65:12:d8:8a:42:73:fd:ae:f3:3a:3d:42:74:76:1f:5c:39:2f: 64:c6:17:7e:57:db:6f:e6:88:d5:62:20:3c:34:68:1a:aa:cd: e6:35:fb:31:8f:f2:ff:30:9c:04:74:b8:35:69:c0:46:ae:9d: ab:73:ed:7b:ba:97:25:5e:78:b0:a6:cf:62:d1:11:2a:20:9c: e4:8e:bd:71:6e:35:99:10:8d:ca:e1:4a:10:e6:3c:92:e3:f7: 91:21:ca:79:54:fd:76:0b:4e:8b:3d:26:7d:06:26:4f:c6:bb: 01:db:ec:a3:3c:47:d1:94:04:9e:81:39:bc:07:1e:4f:df:a7: 26:a4:72:92:d4:f2:2d:39:a6:b5:4f:49:5a:21:82:18:b6:5a: 4e:59:e8:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjUxMTA1MDYyMTEyWhcNMjUxMTEyMDYyMTEyWjAYMRYwFAYD VQQDEw02OTBhZWNkOC1kZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRIyx8/fZGB8AVHjfsxQEMNCOgmK9pQjzYV0+cQrMhaFAi/JSbGyoHDzwRcC 08bStHOHQnBwpFIcpHcwIVU4/DVpiwlGaIYRTAPxJpfuJfSHt3rPGZIb3UtKfbXM kF8TCDLtjldl56wijbgkOmcU/EMUb5pBlWhw5jheCd89pDhzXx5Po+uSxkx7iqjn C1D0TvcMxaSKPLdX8dY5+OELp+F0LfysfFbNH8X4yvNqzl4CNaVia/ZDgOVDt1vf 4XCBZQuMtRRyh60e+QgWvgdSM+MgqV1dY76TQO9M/YtEM+dE12k4S2gnVZ04HBY2 Ob1fXSWJ2z06crcW9/1wYiIjXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlpnZou zOhREcJM8xo8n9KZDIveMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm3nOjDVC1pwN21t22a46Z1s16Skoc6rHLyxwfkH0Tya+iON/TFXoA Sc1CkyFTizodl71fFlX8BcIkksrIgTZy34T5eoV/tutjW6aLw8dH1s7z1/7B5CK1 FULL79IDX1ea3n4DDlIkRGUW/sJlEtiKQnP9rvM6PUJ0dh9cOS9kxhd+V9tv5ojV YiA8NGgaqs3mNfsxj/L/MJwEdLg1acBGrp2rc+17upclXniwps9i0REqIJzkjr1x bjWZEI3K4UoQ5jyS4/eRIcp5VP12C06LPSZ9BiZPxrsB2+yjPEfRlASegTm8Bx5P 36cmpHKS1PItOaa1T0laIYIYtlpOWei3 -----END CERTIFICATE-----Generated at Wed Nov 5 15:41:02 2025 by rpki-client