$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json) Hash identifier: 3zq5KOFqaTP8IXmFFqalzaa7tDrCWV1bW+pkq/wymps= Subject key identifier: B1:C1:DC:75:75:0C:15:5F:F0:82:EF:2D:A0:60:B2:B1:43:99:EF:64 Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft Manifest number: 25FC Signing time: Mon 20 Oct 2025 16:38:05 +0000 Manifest this update: Mon 20 Oct 2025 16:38:05 +0000 Manifest next update: Mon 27 Oct 2025 16:38:05 +0000 Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: KUnAGkP+7arnNWequy96On2IMlZQT8MFCIZHwIc8d7Q=) 2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: tee5qyYUeYtzVgY5XM9ROj+LoDAFDMjISaly7p7VUNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Validity Not Before: Oct 20 16:38:05 2025 GMT Not After : Oct 27 16:38:05 2025 GMT Subject: CN=68f6656d-769a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:e6:2f:63:b0:60:2a:49:bb:65:c4:ca:ee: 57:df:e3:d0:c4:17:05:ae:a2:0b:d2:92:e8:85:e4: 00:e8:52:4b:5e:2b:38:91:01:9f:15:e6:65:45:2a: 6a:e6:0a:91:ca:ea:d4:12:eb:6e:56:f0:c1:94:cf: 63:32:b6:ef:3a:be:e8:a0:8d:43:09:48:fa:12:0b: ec:6b:ef:e7:18:d1:6f:bf:a3:6f:6c:3d:8f:73:7d: 26:66:eb:ee:fe:cd:4a:fd:74:37:c7:b4:ce:1c:be: 4d:af:99:1d:e1:56:f3:cc:e1:f2:02:20:95:4e:f2: 69:f6:7b:76:55:a8:fe:20:2d:73:e0:bd:54:b9:e4: 22:c1:20:70:38:1c:35:c1:21:d6:a7:4b:18:52:41: 9c:e7:15:7e:82:61:ce:4f:87:6f:8b:8a:24:5c:f7: 12:3b:3a:33:e7:62:66:36:a2:3f:a1:a1:8f:94:0b: 93:57:ab:71:4c:62:c8:5a:b4:19:ed:59:7d:f4:79: 59:61:c0:61:d9:77:36:42:6f:f4:2e:05:75:98:15: 0c:14:57:b6:c8:40:a7:4c:c0:f3:c9:ec:26:fa:b3: a4:6e:39:1f:b6:21:ff:54:46:12:79:0b:ba:87:9b: 76:5f:9b:fb:79:06:e5:87:7a:2b:10:38:42:2e:86: ce:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C1:DC:75:75:0C:15:5F:F0:82:EF:2D:A0:60:B2:B1:43:99:EF:64 X509v3 Authority Key Identifier: keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1b:96:3e:a6:04:e0:aa:da:ad:f1:a3:80:a4:cf:5f:42:95: 8c:43:1e:84:71:d4:d3:fd:d2:17:51:9b:31:84:f4:6e:f0:ca: c7:69:a1:28:1a:4e:30:2d:ef:84:02:e3:14:84:b7:7d:9c:d8: b1:ef:a9:3a:26:81:db:b9:e6:e1:c1:14:c5:c7:b8:c1:cb:37: 8f:47:74:f1:7b:e0:45:36:1e:a4:8d:85:65:ee:79:70:af:64: b7:b2:cb:c9:9f:1e:26:1c:be:6b:7c:01:45:79:e6:e9:93:3f: 51:1f:5b:12:15:00:43:6c:01:30:00:30:8e:e4:3e:6f:32:b1: f4:74:f7:cf:70:9c:64:58:c5:d0:f8:91:fd:bd:1d:3e:f8:0e: f4:d8:2e:8f:9d:55:21:cc:ee:12:f7:4f:4f:96:80:ef:74:b6: cd:63:86:88:84:0e:ba:bd:5e:1c:e2:7d:97:77:1e:6a:d2:72: 05:ef:fb:06:e3:b7:7e:11:ff:40:d7:0a:b5:e6:6d:cc:d0:0a: e6:70:5f:0c:33:a2:80:c4:e3:e4:67:c7:9a:58:76:67:07:f7: 21:eb:bd:1f:8f:81:e4:43:46:83:db:b7:1f:ac:c1:af:87:32: 41:e1:98:fc:3d:17:2f:5f:c6:47:45:39:61:9d:d5:70:17:f6: a0:04:1a:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoQkU3NjRFRkVGNTNEODY5QzQ0RjYwNzA5OTYxMTNFMEEx ODE4NDExQjAeFw0yNTEwMjAxNjM4MDVaFw0yNTEwMjcxNjM4MDVaMBgxFjAUBgNV BAMTDTY4ZjY2NTZkLTc2OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjReYvY7BgKkm7ZcTK7lff49DEFwWuogvSkuiF5ADoUkteKziRAZ8V5mVFKmrm CpHK6tQS625W8MGUz2Mytu86vuigjUMJSPoSC+xr7+cY0W+/o29sPY9zfSZm6+7+ zUr9dDfHtM4cvk2vmR3hVvPM4fICIJVO8mn2e3ZVqP4gLXPgvVS55CLBIHA4HDXB IdanSxhSQZznFX6CYc5Ph2+LiiRc9xI7OjPnYmY2oj+hoY+UC5NXq3FMYshatBnt WX30eVlhwGHZdzZCb/QuBXWYFQwUV7bIQKdMwPPJ7Cb6s6RuOR+2If9URhJ5C7qH m3Zfm/t5BuWHeisQOEIuhs6VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUscHcdXUM FV/wgu8toGCysUOZ72QwHwYDVR0jBBgwFoAUvnZO/vU9hpxE9gcJlhE+ChgYQRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4RTlnY0psaEUtQ2hnWVFS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm5aT192VTlocHhFOWdjSmxoRS1DaGdZUVJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4 RTlnY0psaEUtQ2hnWVFScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHwblj6mBOCq2q3xo4Ckz19ClYxDHoRx1NP90hdRmzGE9G7wysdpoSga TjAt74QC4xSEt32c2LHvqTomgdu55uHBFMXHuMHLN49HdPF74EU2HqSNhWXueXCv ZLeyy8mfHiYcvmt8AUV55umTP1EfWxIVAENsATAAMI7kPm8ysfR0989wnGRYxdD4 kf29HT74DvTYLo+dVSHM7hL3T0+WgO90ts1jhoiEDrq9XhzifZd3HmrScgXv+wbj t34R/0DXCrXmbczQCuZwXwwzooDE4+Rnx5pYdmcH9yHrvR+PgeRDRoPbtx+swa+H MkHhmPw9Fy9fxkdFOWGd1XAX9qAEGnU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:03 2025 by rpki-client