$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft File: BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json) Hash identifier: 8DIYpJQ+4vibsynZ/Uuuq/pdHepTzbrK+nNUGtJaHEI= Subject key identifier: 22:F4:99:C0:B6:FA:81:CD:8C:30:48:28:E6:53:89:3F:43:B8:26:DF Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Certificate serial: 2441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft Manifest number: 2407 Signing time: Tue 04 Nov 2025 15:52:59 +0000 Manifest this update: Tue 04 Nov 2025 15:52:59 +0000 Manifest next update: Tue 11 Nov 2025 15:52:59 +0000 Files and hashes: 1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: CF76/DXLe/bnlIv4uvyTefjUmaO1UM6IeK3j3HEmLhg=) 2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=) 3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=) 4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=) 5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9281 (0x2441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Validity Not Before: Nov 4 15:52:59 2025 GMT Not After : Nov 11 15:52:59 2025 GMT Subject: CN=690a215b-82d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e1:d3:11:34:14:b7:b7:c6:ee:9f:e7:b5:94: 9d:b6:50:7e:d9:74:31:40:96:26:6e:cc:29:fd:53: a4:58:39:ba:4d:be:fb:34:4f:40:3e:9d:b7:da:6e: 3b:ee:1b:35:49:04:58:2b:fa:98:0e:d9:71:d4:75: bd:33:dc:03:76:cb:51:8b:4c:02:31:be:e7:50:5f: f1:9b:dd:6b:95:44:bf:17:47:a9:bf:5b:8f:e5:2d: 21:d9:fa:45:1a:a2:0a:33:e0:80:4c:b8:d4:73:46: 2a:7c:71:d8:0b:2f:61:a1:28:b0:76:23:41:65:f5: de:ff:18:2f:28:27:a4:03:71:2e:53:44:09:98:29: 02:e8:71:99:b0:25:08:c8:f3:d2:5a:97:5c:8c:53: 96:39:7d:1a:bc:25:d1:56:9e:a4:47:46:05:25:91: ae:2f:28:df:e4:bd:20:5d:20:09:01:01:6b:bc:79: b6:c3:53:03:5d:dc:f1:7c:f9:01:88:44:04:3c:19: 5c:13:74:39:62:31:66:27:a1:dd:08:f8:20:b1:8d: 3c:94:06:31:eb:b0:64:60:05:e4:9f:f2:dd:e1:02: 91:73:78:96:fa:2b:f1:8e:a2:00:a3:71:a1:89:cc: 3f:c2:6e:d5:24:63:c9:1a:20:6a:2f:8b:5f:0e:fc: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F4:99:C0:B6:FA:81:CD:8C:30:48:28:E6:53:89:3F:43:B8:26:DF X509v3 Authority Key Identifier: keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fe:45:91:f4:7d:da:30:ae:38:f9:47:45:20:3a:2c:09:12: ba:5f:21:02:7a:4b:8a:15:64:52:21:0f:a0:1f:7c:4a:07:d4: 72:37:28:b0:12:f8:20:c6:7e:8e:70:7b:9b:bd:5f:02:21:a8: 42:2a:32:37:44:5d:b4:07:e7:b1:10:ef:0d:78:01:07:51:cf: 1d:88:5a:93:6c:da:10:92:b8:3a:53:31:eb:dc:26:ad:83:3b: e6:00:f6:39:a8:c5:54:47:a2:6b:67:99:ab:7f:15:0d:03:0e: e3:30:c6:e7:8d:39:9e:2b:f2:e8:56:af:07:c4:ad:68:ca:44: 94:b4:bc:4e:b6:e0:57:2d:9f:42:ec:08:a7:f6:5c:d1:5b:ab: da:b5:fa:e4:5e:a9:8b:0e:3e:be:b8:8b:24:5f:fe:07:e0:5f: f7:7c:ed:03:a9:53:92:72:3d:b1:bb:4b:3b:c4:2e:24:de:a8: 8b:07:2a:17:2e:09:18:19:4e:f6:7f:93:40:c1:19:c0:79:93: a6:54:c5:63:9c:b9:48:48:9f:0d:19:e6:f2:5c:42:c2:53:83: 2b:79:7e:50:35:0b:15:2c:9f:75:e1:bf:02:4c:2b:69:5f:a7: 5f:b5:5a:e8:40:12:75:03:5e:f1:fc:78:bd:f1:8e:f0:3a:d8: dd:f8:58:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMkYxMTAvBgNVBAUTKDA0NUI1QzA4NjdERTU4MUQyQjc0ODQyRkVGODA0NUMx QTc3QkU4QkQwHhcNMjUxMTA0MTU1MjU5WhcNMjUxMTExMTU1MjU5WjAYMRYwFAYD VQQDEw02OTBhMjE1Yi04MmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+HTETQUt7fG7p/ntZSdtlB+2XQxQJYmbswp/VOkWDm6Tb77NE9APp232m47 7hs1SQRYK/qYDtlx1HW9M9wDdstRi0wCMb7nUF/xm91rlUS/F0epv1uP5S0h2fpF GqIKM+CATLjUc0YqfHHYCy9hoSiwdiNBZfXe/xgvKCekA3EuU0QJmCkC6HGZsCUI yPPSWpdcjFOWOX0avCXRVp6kR0YFJZGuLyjf5L0gXSAJAQFrvHm2w1MDXdzxfPkB iEQEPBlcE3Q5YjFmJ6HdCPggsY08lAYx67BkYAXkn/Ld4QKRc3iW+ivxjqIAo3Gh icw/wm7VJGPJGiBqL4tfDvzZxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL0mcC2 +oHNjDBIKOZTiT9DuCbfMB8GA1UdIwQYMBaAFARbXAhn3lgdK3SEL++ARcGne+i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyRi9ENDExNDE0QzZE NTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdCMHJkSVF2NzRCRndhZDc2 TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JGdGNDR2ZlV0IwcmRJUXY3NEJGd2FkNzZMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyRi9ENDExNDE0QzZENTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdC MHJkSVF2NzRCRndhZDc2TDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9/kWR9H3aMK44+UdFIDosCRK6XyECekuKFWRSIQ+gH3xKB9RyNyiw Evggxn6OcHubvV8CIahCKjI3RF20B+exEO8NeAEHUc8diFqTbNoQkrg6UzHr3Cat gzvmAPY5qMVUR6JrZ5mrfxUNAw7jMMbnjTmeK/LoVq8HxK1oykSUtLxOtuBXLZ9C 7Ain9lzRW6vatfrkXqmLDj6+uIskX/4H4F/3fO0DqVOScj2xu0s7xC4k3qiLByoX LgkYGU72f5NAwRnAeZOmVMVjnLlISJ8NGebyXELCU4MreX5QNQsVLJ914b8CTCtp X6dftVroQBJ1A17x/Hi98Y7wOtjd+FiI -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:27 2025 by rpki-client