$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: eh5ctpYah+w3heUubK4f/R0tD/5TVzhqqCLl4nSg/60= Subject key identifier: 42:E6:81:1F:C4:27:DC:92:CF:F2:2D:7E:FC:E9:A3:3B:58:B4:56:A1 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 049A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0490 Signing time: Wed 22 Oct 2025 03:45:44 +0000 Manifest this update: Wed 22 Oct 2025 03:45:44 +0000 Manifest next update: Wed 29 Oct 2025 03:45:44 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: Q7IPVde6ww5QBWJBQ4PY63RuSfoTn0rrjy0sWPFklaM=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Oct 22 03:45:44 2025 GMT Not After : Oct 29 03:45:44 2025 GMT Subject: CN=68f85368-1672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:80:9e:04:56:a6:14:df:8d:72:93:48:b6:bf: e0:e8:42:98:8f:75:36:80:ca:6a:25:64:96:f1:1d: 87:b5:d6:98:27:0c:7e:dc:4e:08:9a:5b:61:7e:2d: 2e:3e:c3:d1:15:c5:43:f5:78:6a:cb:b5:3a:49:a2: f6:84:7d:b4:ca:42:29:18:fa:03:2a:81:d0:77:a2: 4d:8b:7a:93:c6:90:42:c4:e5:64:c5:20:62:06:64: a8:9b:68:96:a9:40:52:76:b3:c0:c9:fd:3d:0f:ed: 99:0b:9e:61:c2:91:99:c3:b1:be:d3:15:b4:61:c9: 97:1c:1d:58:eb:36:35:5b:4e:2a:d5:3a:3a:df:af: c1:45:c8:1b:57:0f:47:89:17:b2:e9:42:80:63:2c: 04:04:a9:d1:39:12:a5:ce:49:2e:54:19:46:82:ba: 39:2a:5c:fb:66:70:d3:39:c5:fb:25:f4:e0:c2:0d: 8c:0b:0b:83:55:c9:7a:14:7b:ee:50:1b:e4:b6:bd: 3c:53:b0:d6:9d:d3:61:31:19:f5:61:1d:ec:ce:85: 99:b0:aa:e8:0d:52:6a:1d:3b:84:6f:ad:c8:ad:78: b0:b2:65:69:04:32:8d:44:7e:07:bb:b2:4c:2e:bf: f2:9e:23:53:2e:4e:b0:ad:af:b4:eb:46:8f:61:31: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E6:81:1F:C4:27:DC:92:CF:F2:2D:7E:FC:E9:A3:3B:58:B4:56:A1 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:0d:bb:99:57:20:38:96:67:18:a9:a4:fd:18:64:9c:e7:72: 2c:be:04:4a:12:88:a9:9f:c1:6c:39:19:4e:6a:4b:97:3c:5e: 76:0a:bd:ad:ca:31:82:04:eb:8c:b6:54:d0:66:9d:c1:0e:31: ad:82:06:b0:17:2d:6c:ea:63:9c:da:c3:be:ac:e9:87:74:5e: 0c:c7:b7:12:af:5d:1f:4d:e4:c5:e7:a4:35:e7:f1:4a:45:bd: b8:32:87:81:1e:ac:4e:24:55:da:99:bd:1f:b8:85:41:52:67: 32:7c:75:8f:ec:8d:ed:28:85:a3:1f:0a:78:52:60:b1:ae:31: 62:ca:2a:22:3e:00:ed:ce:de:4d:11:29:99:9d:e7:21:8b:b2: 78:79:04:be:c0:8f:08:a2:c0:fa:ea:2a:c0:85:bc:21:c5:9a: e2:eb:30:5d:08:05:34:d9:e2:ca:d8:81:20:15:48:24:f2:82: 7f:c7:86:09:06:a9:fd:be:65:61:98:9d:99:37:2f:51:3e:47: bb:20:2c:6f:c7:47:c8:bc:54:be:db:55:8c:be:5f:3f:87:ae: af:55:d4:02:bf:80:0e:92:0c:2d:e6:b8:66:d3:c6:55:c9:b1: 20:2d:10:a0:06:ef:d1:88:88:e9:c2:cf:c8:ad:1b:b7:ae:e6: 41:cd:70:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUxMDIyMDM0NTQ0WhcNMjUxMDI5MDM0NTQ0WjAYMRYwFAYD VQQDEw02OGY4NTM2OC0xNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24CeBFamFN+NcpNItr/g6EKYj3U2gMpqJWSW8R2HtdaYJwx+3E4Imlthfi0u PsPRFcVD9Xhqy7U6SaL2hH20ykIpGPoDKoHQd6JNi3qTxpBCxOVkxSBiBmSom2iW qUBSdrPAyf09D+2ZC55hwpGZw7G+0xW0YcmXHB1Y6zY1W04q1To636/BRcgbVw9H iRey6UKAYywEBKnRORKlzkkuVBlGgro5Klz7ZnDTOcX7JfTgwg2MCwuDVcl6FHvu UBvktr08U7DWndNhMRn1YR3szoWZsKroDVJqHTuEb63IrXiwsmVpBDKNRH4Hu7JM Lr/yniNTLk6wra+060aPYTFu+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELmgR/E J9ySz/ItfvzpoztYtFahMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5DbuZVyA4lmcYqaT9GGSc53IsvgRKEoipn8FsORlOakuXPF52Cr2t yjGCBOuMtlTQZp3BDjGtggawFy1s6mOc2sO+rOmHdF4Mx7cSr10fTeTF56Q15/FK Rb24MoeBHqxOJFXamb0fuIVBUmcyfHWP7I3tKIWjHwp4UmCxrjFiyioiPgDtzt5N ESmZnechi7J4eQS+wI8IosD66irAhbwhxZri6zBdCAU02eLK2IEgFUgk8oJ/x4YJ Bqn9vmVhmJ2ZNy9RPke7ICxvx0fIvFS+21WMvl8/h66vVdQCv4AOkgwt5rhm08ZV ybEgLRCgBu/RiIjpws/IrRu3ruZBzXBO -----END CERTIFICATE-----Generated at Wed Oct 22 12:13:36 2025 by rpki-client