$ rpki-client -vvf rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft File: bC3jjX43M-CH3e95d-MYOcCt7jc.mft (raw, json) Hash identifier: Ysxi+BmJnoVbLOXTvKenNB4Q/Z3QvQJEInZxolDRIxU= Subject key identifier: D1:C3:FB:DA:9E:B1:A5:01:9A:EE:13:78:17:5E:DB:2E:85:CF:BB:1F Authority key identifier: 6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 Certificate issuer: /CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft Manifest number: 0244 Signing time: Sat 25 Oct 2025 05:00:03 +0000 Manifest this update: Sat 25 Oct 2025 05:00:02 +0000 Manifest next update: Sat 01 Nov 2025 05:00:02 +0000 Files and hashes: 1: bC3jjX43M-CH3e95d-MYOcCt7jc.crl (hash: AN7uQFLFxKhHHI924IplWLMhLTCz4SCR/FhlvlWK94E=) 2: 164993A63FBA11EDA5387132C4F9AE02.roa (hash: XYc2mxLenXQc+O8B80ZFK5EpIFxtXO429dywGYqqozs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 05:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181380, serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Validity Not Before: Oct 25 05:00:02 2025 GMT Not After : Nov 1 05:00:02 2025 GMT Subject: CN=68fc5952-4ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:d2:92:03:a3:8f:b3:be:25:6d:01:93:53: b7:bb:d6:80:1c:4f:18:83:23:ef:07:d4:00:44:f6: 2d:3c:28:58:ec:ae:48:87:b0:90:d7:6e:06:3f:80: 3b:c3:a8:c9:5d:43:15:df:b7:8d:9f:84:62:38:39: 01:c6:53:20:5f:9b:f5:37:45:ac:15:1f:c4:69:e2: 3f:9e:25:b7:2a:5d:79:5d:82:ca:1a:80:d0:88:e4: e3:0b:4a:60:db:25:d7:b4:d9:47:7e:c6:fe:2e:40: c8:b0:61:50:44:90:c1:7c:80:e7:4b:f0:ca:91:48: 0b:38:93:2a:a2:0a:74:72:03:fc:25:8b:2d:55:29: ea:4f:23:1e:a3:52:f6:02:2c:e7:e1:34:0b:2e:75: 45:95:6e:3c:51:55:f3:9e:3f:55:f1:3b:bb:ec:61: 50:51:26:05:86:a1:1f:81:27:f7:c7:06:2e:34:af: 73:3c:25:0d:79:50:d5:cb:8d:14:6c:b8:7b:68:7c: 60:2f:e2:27:e4:a6:df:8a:e2:17:e5:d3:50:a7:04: 4d:f3:33:b5:ce:ec:83:85:80:d3:55:40:1e:58:9e: 24:57:96:21:d5:91:f3:63:36:07:8c:ce:37:86:d4: 25:ae:a5:cb:a7:4c:aa:58:f7:72:81:34:bf:5d:e6: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C3:FB:DA:9E:B1:A5:01:9A:EE:13:78:17:5E:DB:2E:85:CF:BB:1F X509v3 Authority Key Identifier: keyid:6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b5:50:1e:83:5c:b7:07:e3:89:cb:77:9f:8e:e4:0c:6e:84: 12:c4:18:36:85:cf:3e:95:ce:1c:f2:bb:fd:49:ad:ba:99:d1: 90:c3:65:ca:4b:fb:00:03:20:e8:f4:90:1a:5a:5f:b7:00:fc: c8:63:3a:6c:01:b6:d1:58:97:5e:ff:2d:a1:ec:87:ad:b7:74: be:70:7a:13:9d:01:d1:95:9d:f0:74:30:68:24:5f:bf:bb:f3: 10:73:4b:14:02:04:bb:3d:35:aa:96:4e:30:e3:cc:3f:24:e7: f1:31:f1:eb:f8:1a:0b:88:7f:81:36:40:0c:a0:9d:43:25:0f: 85:79:c1:27:ca:27:ec:51:6e:ee:9f:3b:e3:32:5b:27:a4:ed: 21:1e:00:64:9c:e0:d4:1a:32:7e:28:77:77:e9:47:60:2f:c6: 0a:1f:e1:26:0f:ea:aa:54:aa:12:e4:3f:15:42:ac:03:1c:91: 20:85:cc:16:29:f5:f8:48:2a:81:e4:ac:ad:1a:3d:dd:a2:fc: 5b:46:5c:9a:ce:3e:32:7d:a6:e3:ea:06:0a:2d:ce:8a:80:ea: cb:b8:41:99:a9:ef:6e:5d:2a:e1:bd:a6:b2:d7:a0:3a:fe:55: ff:1b:df:9d:b2:61:16:54:99:60:ab:a4:96:9f:76:82:53:9d: bf:a4:3c:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzODAxMTAvBgNVBAUTKDZDMkRFMzhEN0UzNzMzRTA4N0RERUY3OTc3RTMxODM5 QzBBREVFMzcwHhcNMjUxMDI1MDUwMDAyWhcNMjUxMTAxMDUwMDAyWjAYMRYwFAYD VQQDEw02OGZjNTk1Mi00YWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYLSkgOjj7O+JW0Bk1O3u9aAHE8YgyPvB9QARPYtPChY7K5Ih7CQ124GP4A7 w6jJXUMV37eNn4RiODkBxlMgX5v1N0WsFR/EaeI/niW3Kl15XYLKGoDQiOTjC0pg 2yXXtNlHfsb+LkDIsGFQRJDBfIDnS/DKkUgLOJMqogp0cgP8JYstVSnqTyMeo1L2 Aizn4TQLLnVFlW48UVXznj9V8Tu77GFQUSYFhqEfgSf3xwYuNK9zPCUNeVDVy40U bLh7aHxgL+In5KbfiuIX5dNQpwRN8zO1zuyDhYDTVUAeWJ4kV5Yh1ZHzYzYHjM43 htQlrqXLp0yqWPdygTS/XeZM1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHD+9qe saUBmu4TeBde2y6Fz7sfMB8GA1UdIwQYMBaAFGwt441+NzPgh93veXfjGDnAre43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM4MC8wREYzQjM5QTNF RkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00tQ0gzZTk1ZC1NWU9jQ3Q3 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDM2pqWDQzTS1DSDNlOTVkLU1ZT2NDdDdqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM4MC8wREYzQjM5QTNFRkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00t Q0gzZTk1ZC1NWU9jQ3Q3amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVtVAeg1y3B+OJy3efjuQMboQSxBg2hc8+lc4c8rv9Sa26mdGQw2XK S/sAAyDo9JAaWl+3APzIYzpsAbbRWJde/y2h7Iett3S+cHoTnQHRlZ3wdDBoJF+/ u/MQc0sUAgS7PTWqlk4w48w/JOfxMfHr+BoLiH+BNkAMoJ1DJQ+FecEnyifsUW7u nzvjMlsnpO0hHgBknODUGjJ+KHd36UdgL8YKH+EmD+qqVKoS5D8VQqwDHJEghcwW KfX4SCqB5KytGj3dovxbRlyazj4yfabj6gYKLc6KgOrLuEGZqe9uXSrhvaay16A6 /lX/G9+dsmEWVJlgq6SWn3aCU52/pDz3 -----END CERTIFICATE-----Generated at Sun Oct 26 05:19:57 2025 by rpki-client