$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json) Hash identifier: /pCy+q0N5zm294Mcj+sI0dv6Yyyz8b475ed3MlcfOXo= Subject key identifier: 7B:B2:13:83:C5:F0:71:6C:31:CD:7C:70:4B:4C:18:5A:14:A7:7E:13 Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft Manifest number: 0206 Signing time: Mon 03 Nov 2025 02:20:02 +0000 Manifest this update: Mon 03 Nov 2025 02:20:02 +0000 Manifest next update: Mon 10 Nov 2025 02:20:02 +0000 Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: tfzDxz+oXhWOMOQuma91Coy0UpW87JgeT+wMvH2hEuk=) 2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: okvmN+fO8yeb8sv3bijRR7qzwb2TLJ+EV1o8F+ji/G8=) 3: 6A9D79ECD6E311EE94842842C4F9AE02.roa (hash: lxKtarKsATY2wiXkVbh3EFTMWa9NQc/B8XJ8gCOAwlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Validity Not Before: Nov 3 02:20:02 2025 GMT Not After : Nov 10 02:20:02 2025 GMT Subject: CN=69081152-21f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:1d:ab:98:af:b5:3c:b5:3b:8e:0f:c6:19: 69:08:40:97:f3:fb:23:db:04:f1:f9:89:82:24:ea: 6f:26:09:ee:24:7c:88:f1:7b:fd:70:1d:55:43:b3: 6a:41:06:10:03:b1:d0:c4:a3:ae:e5:29:8e:33:49: 7e:e0:b7:7b:d0:57:09:b4:43:34:e1:3f:b9:0a:7d: 9c:fc:1e:6f:13:d0:90:8f:c4:06:87:2e:f2:5f:b7: 45:97:6c:7c:f3:b3:7f:f2:39:1d:8d:eb:ac:6b:11: 41:60:e6:c9:39:bc:0f:a1:76:d3:e5:29:f3:be:04: 2e:a3:48:61:81:f9:f2:4e:b6:9f:85:80:ef:b9:86: d0:bc:5f:4b:03:4d:60:0d:ba:ec:66:d7:b6:d5:a0: 61:f8:8c:e2:0d:ce:7f:10:0e:bd:ea:9d:6c:b0:f9: d4:e6:4e:08:2b:f1:8f:42:ee:dd:16:bf:f0:ba:fd: 88:36:99:f7:93:6e:f0:d1:56:b1:59:cc:69:e0:6a: 3c:e6:79:b9:b1:8d:71:c1:6f:c3:20:1d:12:dc:c4: fa:ef:a6:7a:50:49:b4:93:ba:1b:12:23:4b:b1:ac: 04:ca:34:e5:71:d0:7c:b4:d7:ce:fd:b8:01:9d:47: ed:fe:7b:d2:fd:1a:66:8a:6a:32:09:6e:52:8d:5a: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B2:13:83:C5:F0:71:6C:31:CD:7C:70:4B:4C:18:5A:14:A7:7E:13 X509v3 Authority Key Identifier: keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b2:fc:8f:00:1f:5d:2e:03:6c:2f:40:19:2f:14:47:6b:8a: 83:bb:35:ed:e1:32:e8:2b:40:d8:43:42:3b:8c:52:f7:90:9b: c0:2a:8e:82:49:ef:77:40:b2:a8:6d:7a:8b:c8:a2:99:b9:f5: 3b:d0:14:20:7e:cd:79:b6:81:40:3d:92:17:35:1a:cd:e6:70: 07:b9:6b:cb:6e:b0:d9:0a:26:82:c7:78:2e:25:db:16:73:9c: cb:51:1c:35:47:66:46:d3:ff:87:5d:aa:13:1f:f4:2c:dc:04: 2d:27:b6:e3:87:e9:fa:59:40:8d:1c:85:6f:b7:85:c6:80:8d: b8:e1:67:a6:c3:c4:e7:bd:e5:aa:31:b3:c9:83:11:a4:eb:61: c9:1c:63:cb:d7:38:5e:81:61:db:99:44:d4:fb:0e:0c:1e:9c: 45:e2:0f:4a:fd:6d:59:65:84:2b:8b:63:b4:83:d4:dd:fb:6d: 11:7f:24:ea:79:7e:73:0a:7b:b0:fc:33:3d:0e:52:cf:f7:36: 6b:17:40:1a:d8:81:c1:3b:62:de:44:0d:40:d6:51:18:f6:e2: 5b:7f:ab:ac:51:ce:f7:13:0a:2a:f1:29:ff:e8:0a:fb:28:d4: 22:20:c6:a3:9d:e8:bf:5b:80:5a:a1:e8:0c:eb:18:6f:cf:8f: 2e:bc:cf:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1MUIxMTAvBgNVBAUTKDVGRTA0Qzk1N0E2Q0JDNTQwQTM0RjQ1M0QxM0UzRjgw NTBDOEY0RUUwHhcNMjUxMTAzMDIyMDAyWhcNMjUxMTEwMDIyMDAyWjAYMRYwFAYD VQQDEw02OTA4MTE1Mi0yMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywIdq5ivtTy1O44PxhlpCECX8/sj2wTx+YmCJOpvJgnuJHyI8Xv9cB1VQ7Nq QQYQA7HQxKOu5SmOM0l+4Ld70FcJtEM04T+5Cn2c/B5vE9CQj8QGhy7yX7dFl2x8 87N/8jkdjeusaxFBYObJObwPoXbT5SnzvgQuo0hhgfnyTrafhYDvuYbQvF9LA01g DbrsZte21aBh+IziDc5/EA696p1ssPnU5k4IK/GPQu7dFr/wuv2INpn3k27w0Vax Wcxp4Go85nm5sY1xwW/DIB0S3MT676Z6UEm0k7obEiNLsawEyjTlcdB8tNfO/bgB nUft/nvS/RpmimoyCW5SjVql4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuyE4PF 8HFsMc18cEtMGFoUp34TMB8GA1UdIwQYMBaAFF/gTJV6bLxUCjT0U9E+P4BQyPTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTUxQi8wMENBOThGMkEx QTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZGUUtOUFJUMFQ0X2dGREk5 TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZG UUtOUFJUMFQ0X2dGREk5TzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCysvyPAB9dLgNsL0AZLxRHa4qDuzXt4TLoK0DYQ0I7jFL3kJvAKo6C Se93QLKobXqLyKKZufU70BQgfs15toFAPZIXNRrN5nAHuWvLbrDZCiaCx3guJdsW c5zLURw1R2ZG0/+HXaoTH/Qs3AQtJ7bjh+n6WUCNHIVvt4XGgI244Wemw8TnveWq MbPJgxGk62HJHGPL1zhegWHbmUTU+w4MHpxF4g9K/W1ZZYQri2O0g9Td+20RfyTq eX5zCnuw/DM9DlLP9zZrF0Aa2IHBO2LeRA1A1lEY9uJbf6usUc73Ewoq8Sn/6Ar7 KNQiIMajnei/W4BaoegM6xhvz48uvM/0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:09 2025 by rpki-client