$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft File: vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json) Hash identifier: NOg4xB/69aZxjibPNJeI6Aib+0Pn5++GFhWVSO5wrbw= Subject key identifier: D2:80:47:BA:CC:53:09:E9:02:49:61:16:56:45:11:68:89:5C:FC:6A Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft Manifest number: 10BF Signing time: Sat 18 Oct 2025 18:57:58 +0000 Manifest this update: Sat 18 Oct 2025 18:57:57 +0000 Manifest next update: Sat 25 Oct 2025 18:57:57 +0000 Files and hashes: 1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: zjHoEXD9BZd6pb5ZKVSGsZ5AWDfzom+G7qtrooX9P7w=) 2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: mgb6NflmQm35vBEH6/rdIKJ5eJitJ9zemuTs4qdaAl8=) 3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: 5GGssBwo34kMxY1fgtwCfjU7+p5mfAazSfRBFfVGB/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Validity Not Before: Oct 18 18:57:57 2025 GMT Not After : Oct 25 18:57:57 2025 GMT Subject: CN=68f3e335-e891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:eb:11:3a:5b:f5:29:a1:e7:cf:a4:e7:3a: 8a:41:f6:5b:53:db:44:82:ce:4f:09:38:47:06:dd: 6c:5f:ed:8f:86:1a:d6:de:96:78:7a:e9:2d:e9:fd: f6:ab:df:42:e1:71:c8:80:62:72:6a:fb:30:37:62: 3d:4f:5e:a1:98:13:af:b6:07:09:65:3e:e0:55:5f: 89:9f:dc:d8:b6:c3:05:c8:5f:52:2c:37:9e:a9:d0: 77:b0:43:3a:cd:3a:dd:fe:7f:8d:16:b6:5c:da:a8: 53:4e:f6:e5:52:21:2c:64:8a:fa:a7:6b:f8:c2:18: a5:41:81:a8:be:fd:f7:91:5d:4e:7f:75:c8:19:cc: 5e:76:ff:86:26:ff:1a:bc:fa:45:34:49:b4:ce:51: 10:c1:55:80:b7:8a:7d:83:94:09:09:92:08:d8:c4: 6d:ba:fb:81:d8:f0:4e:bc:98:5b:87:b2:18:e3:d4: ce:96:44:7d:c5:7b:de:66:72:37:20:34:99:e9:1e: 20:45:2e:77:04:9f:f0:7b:7a:c8:28:cc:81:94:d7: 3c:62:6f:e1:b4:96:63:53:51:d6:9b:e4:10:6f:17: 2d:f8:42:73:8d:03:55:87:e7:be:4c:c4:92:e5:40: c1:de:5d:2e:bc:c2:64:0b:08:8d:f1:bc:bd:70:a1: a7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:80:47:BA:CC:53:09:E9:02:49:61:16:56:45:11:68:89:5C:FC:6A X509v3 Authority Key Identifier: keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5c:d5:23:58:43:e0:9d:59:db:da:9f:14:a1:0e:b9:46:2e: fa:ac:0b:f9:28:03:db:b3:f8:28:13:de:c0:b1:91:f7:7d:14: 23:e4:53:78:b2:a2:7c:d5:90:38:c0:eb:d8:c7:35:a3:09:d7: 43:cd:9c:2a:85:63:00:15:6a:93:ce:ee:22:ce:a7:b5:30:78: 4b:73:f9:00:e1:8a:5f:32:04:35:40:c7:69:13:55:4e:5c:c5: ec:13:47:9e:77:c9:12:b6:8d:24:19:ff:2a:40:2a:51:a9:2f: ab:28:a8:3f:6a:3f:bd:49:9b:3b:6a:12:13:b9:1b:44:9c:12: 21:06:e7:10:61:07:9a:bb:fd:60:c7:86:d4:22:30:db:ef:ca: e7:bd:75:72:1a:cb:b4:5c:b9:81:2e:b3:db:1e:27:15:7d:5d: 9d:4a:38:e4:d9:3e:cb:49:ac:99:e0:b8:33:43:a7:f8:bf:69: a8:8d:0e:8c:ee:31:cf:d5:5a:f5:d9:95:2a:fa:8a:3f:b4:63: fb:9b:bb:8a:ab:54:73:38:41:b5:ab:d7:bd:9d:ed:d4:3c:58: 39:cd:c5:56:90:7b:2f:14:6d:f9:ae:92:8e:24:ae:e3:7b:8a: 59:78:78:53:c7:5a:ca:d9:ec:b9:26:ec:21:f2:53:d4:79:37: 16:37:fb:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKEJEMTRDRjFBOUYwOEY2ODEzN0ZFODExNkNENzc2QURC REIyRkVGQjQwHhcNMjUxMDE4MTg1NzU3WhcNMjUxMDI1MTg1NzU3WjAYMRYwFAYD VQQDEw02OGYzZTMzNS1lODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qvrETpb9Smh58+k5zqKQfZbU9tEgs5PCThHBt1sX+2PhhrW3pZ4eukt6f32 q99C4XHIgGJyavswN2I9T16hmBOvtgcJZT7gVV+Jn9zYtsMFyF9SLDeeqdB3sEM6 zTrd/n+NFrZc2qhTTvblUiEsZIr6p2v4whilQYGovv33kV1Of3XIGcxedv+GJv8a vPpFNEm0zlEQwVWAt4p9g5QJCZII2MRtuvuB2PBOvJhbh7IY49TOlkR9xXveZnI3 IDSZ6R4gRS53BJ/we3rIKMyBlNc8Ym/htJZjU1HWm+QQbxct+EJzjQNVh+e+TMSS 5UDB3l0uvMJkCwiN8by9cKGnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKAR7rM UwnpAklhFlZFEWiJXPxqMB8GA1UdIwQYMBaAFL0UzxqfCPaBN/6BFs13atvbL++0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlvRTNfb0VXelhkcTI5c3Y3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSVFBHcDhJOW9FM19vRVd6WGRxMjlzdjc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlv RTNfb0VXelhkcTI5c3Y3N1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNXNUjWEPgnVnb2p8UoQ65Ri76rAv5KAPbs/goE97AsZH3fRQj5FN4 sqJ81ZA4wOvYxzWjCddDzZwqhWMAFWqTzu4izqe1MHhLc/kA4YpfMgQ1QMdpE1VO XMXsE0eed8kSto0kGf8qQCpRqS+rKKg/aj+9SZs7ahITuRtEnBIhBucQYQeau/1g x4bUIjDb78rnvXVyGsu0XLmBLrPbHicVfV2dSjjk2T7LSayZ4LgzQ6f4v2mojQ6M 7jHP1Vr12ZUq+oo/tGP7m7uKq1RzOEG1q9e9ne3UPFg5zcVWkHsvFG35rpKOJK7j e4pZeHhTx1rK2ey5Juwh8lPUeTcWN/tk -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:54 2025 by rpki-client