$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: W04pv8FmEUf42S4eMnFgzMdVoseQNSKXCyPR3Fm/G2c= Subject key identifier: 8F:3B:3F:34:0F:AD:46:DB:CA:04:59:EC:F3:00:E0:B9:41:85:52:85 Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0BB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0BAD Signing time: Tue 04 Nov 2025 19:03:22 +0000 Manifest this update: Tue 04 Nov 2025 19:03:22 +0000 Manifest next update: Tue 11 Nov 2025 19:03:22 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: KCRhmZvdx6p7nPJgTqUMmGGkzBfLAf1EyaieYUh9ylI=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: 2QDvhbtMSuUMKkHjiP/BzPb8Yd8fGPxfNmWlpQE2e54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2996 (0xbb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Nov 4 19:03:22 2025 GMT Not After : Nov 11 19:03:22 2025 GMT Subject: CN=690a4dfa-7962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:cd:3b:d6:03:1c:50:69:71:39:fa:49:96: d3:f9:64:04:fb:d7:55:22:83:ed:7c:58:a4:61:24: 74:bd:91:99:1e:82:75:c6:38:ba:e2:80:a3:c3:31: 0e:3e:f0:a7:c9:5c:49:35:8c:9c:4f:57:cb:ee:9f: e5:be:76:86:ac:90:54:7d:69:05:0a:34:85:0e:bf: 01:0e:65:3d:b3:6b:63:23:e9:0f:8a:1a:ca:a9:23: 5e:79:21:c6:f0:cc:1c:67:7a:ec:26:d1:f3:97:53: 78:5d:f2:28:ad:c6:b1:a4:ab:2e:1e:d6:2e:79:f5: 6f:8a:16:83:1a:19:3b:30:8f:38:e6:e4:45:0d:eb: b9:4d:4c:6a:c5:30:04:82:e1:a6:49:76:7e:95:a5: 1e:e5:76:00:4f:2c:eb:35:d1:ef:d5:b1:9d:3e:9a: 6a:6e:ab:4b:59:49:98:72:5d:11:fa:76:c1:7e:ce: b0:5d:2c:65:4f:fd:b7:10:21:06:1e:36:8b:26:4d: 24:a5:49:ad:bd:f3:21:5d:81:1f:88:1c:22:c1:ce: c6:a0:64:b7:91:b1:0f:89:27:47:a0:d6:7b:78:65: 8a:f0:58:97:fe:e2:9c:69:fd:3c:91:bc:28:eb:7c: 65:7a:5a:0f:4d:0c:a0:b6:7c:79:ec:44:c1:70:85: 99:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3B:3F:34:0F:AD:46:DB:CA:04:59:EC:F3:00:E0:B9:41:85:52:85 X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:25:88:61:d1:e1:ff:77:ef:27:8d:08:c2:5b:6d:c9:96:54: 0a:ef:ae:6a:5b:5d:40:c2:88:8e:c9:b9:ff:6f:ed:bb:e5:df: cd:1f:48:85:14:07:80:32:f9:a1:87:8e:e9:79:19:af:d1:08: fd:6a:73:f4:7a:b4:ed:25:96:a3:f4:bb:94:c6:35:80:f9:22: 54:3a:02:fc:a8:da:25:02:82:8f:1d:01:b2:3a:6c:f3:b7:cd: e5:36:50:a3:e7:06:48:66:6d:a3:d3:82:44:8c:2f:ea:b1:39: 5b:bc:d6:58:0d:de:ca:ed:b0:a6:aa:8e:c5:91:a1:32:e9:d3: 5c:68:73:f1:1a:ba:49:74:cb:3e:a3:9b:37:4b:13:a0:63:c6: 75:97:b5:94:5a:64:d6:d1:2c:5a:38:22:e4:26:9b:2f:a4:30: 95:48:e1:13:8a:e0:a4:0b:99:65:83:a1:34:dd:22:1c:95:6f: 3a:1c:d4:8e:c1:2b:7e:b6:10:76:0d:50:22:92:c1:38:17:79: b3:02:9f:6f:bd:e3:ba:5d:3c:54:66:07:85:c6:db:85:24:1e: f3:7f:93:40:95:a8:34:09:98:a2:d0:4d:3e:63:62:b7:1e:6f: 21:56:3f:3d:2e:f8:21:26:9f:01:3d:bf:f5:f5:a5:2c:05:fc: 0b:88:6c:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjUxMTA0MTkwMzIyWhcNMjUxMTExMTkwMzIyWjAYMRYwFAYD VQQDEw02OTBhNGRmYS03OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MHNO9YDHFBpcTn6SZbT+WQE+9dVIoPtfFikYSR0vZGZHoJ1xji64oCjwzEO PvCnyVxJNYycT1fL7p/lvnaGrJBUfWkFCjSFDr8BDmU9s2tjI+kPihrKqSNeeSHG 8MwcZ3rsJtHzl1N4XfIorcaxpKsuHtYuefVvihaDGhk7MI845uRFDeu5TUxqxTAE guGmSXZ+laUe5XYATyzrNdHv1bGdPppqbqtLWUmYcl0R+nbBfs6wXSxlT/23ECEG HjaLJk0kpUmtvfMhXYEfiBwiwc7GoGS3kbEPiSdHoNZ7eGWK8FiX/uKcaf08kbwo 63xleloPTQygtnx57ETBcIWZ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI87PzQP rUbbygRZ7PMA4LlBhVKFMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWJYhh0eH/d+8njQjCW23JllQK765qW11AwoiOybn/b+275d/NH0iF FAeAMvmhh47peRmv0Qj9anP0erTtJZaj9LuUxjWA+SJUOgL8qNolAoKPHQGyOmzz t83lNlCj5wZIZm2j04JEjC/qsTlbvNZYDd7K7bCmqo7FkaEy6dNcaHPxGrpJdMs+ o5s3SxOgY8Z1l7WUWmTW0SxaOCLkJpsvpDCVSOETiuCkC5llg6E03SIclW86HNSO wSt+thB2DVAiksE4F3mzAp9vveO6XTxUZgeFxtuFJB7zf5NAlag0CZii0E0+Y2K3 Hm8hVj89LvghJp8BPb/19aUsBfwLiGwz -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:15 2025 by rpki-client