$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: Xb0u2/c3guQzKFPPyfsnx5KoAs/DFsoRaGmFYaBnyXY= Subject key identifier: F3:28:BC:07:1B:37:D4:17:66:37:B5:A4:9D:2F:48:F3:4B:32:FE:EE Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 86 Signing time: Sun 19 Oct 2025 09:53:54 +0000 Manifest this update: Sun 19 Oct 2025 09:53:54 +0000 Manifest next update: Sun 26 Oct 2025 09:53:54 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: 1PfZPXEzR1nMRBq4lcpkMSagJfOMOoE6CRxIeyQlaT0=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Oct 19 09:53:54 2025 GMT Not After : Oct 26 09:53:54 2025 GMT Subject: CN=68f4b532-acb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:45:ea:82:a0:4f:d7:75:ff:b2:64:6c:71:4e: ee:61:9e:98:88:d8:e9:28:e4:3a:29:ad:a4:10:67: db:28:09:0a:7e:57:93:3e:34:fa:52:7c:86:c1:46: 31:9b:eb:58:f1:d2:84:50:66:02:48:a3:a2:62:31: ff:96:b0:29:df:de:5c:01:0f:fc:df:52:b8:db:98: 77:95:c3:cb:2c:b3:33:be:e8:30:91:b0:6d:41:b4: 35:0c:e6:cd:01:9c:40:e2:0a:7f:27:e9:4b:27:33: 2d:3c:13:d3:db:92:5e:d7:70:b7:77:52:ac:74:fa: cf:24:31:cd:1e:81:84:ea:89:cb:3a:62:74:ff:90: 9c:c1:eb:b9:9f:e1:8c:a0:c5:6d:11:d5:16:1b:ee: f1:16:f7:17:b4:58:f4:67:a1:25:b7:76:e0:91:6a: fe:fe:fc:c9:fd:87:a7:df:f0:b7:98:e2:fe:01:23: 13:01:3b:53:64:bd:c1:53:7c:84:e3:2a:d6:75:fb: b4:18:94:88:94:31:a2:48:3b:ca:48:f2:6f:e3:74: 87:35:2c:08:af:32:89:d1:e6:6b:11:88:ed:05:f7: 77:c7:37:c0:b5:70:fd:40:2a:d4:ea:1c:94:c8:c7: 62:95:e3:b9:d9:04:22:bc:2e:fe:ee:87:d7:68:71: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:28:BC:07:1B:37:D4:17:66:37:B5:A4:9D:2F:48:F3:4B:32:FE:EE X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:8c:e9:cc:81:a7:d2:20:f8:95:7c:94:d2:65:6f:75:6d:a5: fb:95:b0:55:52:30:a7:3b:28:d3:7c:98:b7:8c:e7:15:3d:f3: 15:ce:a8:56:0f:30:9e:0c:95:f3:21:7a:69:0f:57:4d:53:a6: b3:46:9a:d0:16:04:d6:e0:59:55:1c:85:2c:eb:e3:3c:00:4d: cb:8d:c6:12:99:94:87:9d:f9:37:0b:9e:7e:d1:2f:e6:51:c5: da:6b:50:a3:c0:6a:aa:fe:40:10:bf:2a:77:c1:8f:11:a0:4d: 8a:11:2d:41:06:9b:2e:1b:13:51:4f:a8:b9:eb:c7:b1:84:9c: 53:b7:fa:ba:3f:30:26:c8:a6:61:27:55:34:89:da:4c:e9:e0: d2:58:4c:46:73:1b:d2:53:2d:d5:6c:5b:2f:39:d6:79:ab:77: b2:19:90:91:6c:df:1f:16:e9:5b:a1:b2:de:02:5d:3a:45:9a: c1:e0:b4:21:be:17:59:82:1f:82:62:06:6e:d4:68:ce:b3:a9: 82:22:63:0e:c3:ff:36:e6:58:de:7e:ab:22:93:99:92:da:29: 26:77:7b:50:76:60:35:c5:95:d8:66:38:5b:37:7e:24:59:24: 40:ff:53:11:ac:0b:97:b6:95:2c:36:86:df:ad:b9:e9:1c:01: ef:76:7d:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURCNjYxMTAvBgNVBAUTKEJDOEM3OUY3ODQ5MUExRDVBQTQ1REJFNDEzM0MwQzEw RjY5MzY0QUQwHhcNMjUxMDE5MDk1MzU0WhcNMjUxMDI2MDk1MzU0WjAYMRYwFAYD VQQDEw02OGY0YjUzMi1hY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA90XqgqBP13X/smRscU7uYZ6YiNjpKOQ6Ka2kEGfbKAkKfleTPjT6UnyGwUYx m+tY8dKEUGYCSKOiYjH/lrAp395cAQ/831K425h3lcPLLLMzvugwkbBtQbQ1DObN AZxA4gp/J+lLJzMtPBPT25Je13C3d1KsdPrPJDHNHoGE6onLOmJ0/5Ccweu5n+GM oMVtEdUWG+7xFvcXtFj0Z6Elt3bgkWr+/vzJ/Yen3/C3mOL+ASMTATtTZL3BU3yE 4yrWdfu0GJSIlDGiSDvKSPJv43SHNSwIrzKJ0eZrEYjtBfd3xzfAtXD9QCrU6hyU yMdileO52QQivC7+7ofXaHHwlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMovAcb N9QXZje1pJ0vSPNLMv7uMB8GA1UdIwQYMBaAFLyMefeEkaHVqkXb5BM8DBD2k2St MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREI2Ni83N0I2MTk5Q0Uw OUExMUVGQjYzQTgxMzBDNEY5QUUwMi92SXg1OTRTUm9kV3FSZHZrRXp3TUVQYVRa SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REI2Ni83N0I2MTk5Q0UwOUExMUVGQjYzQTgxMzBDNEY5QUUwMi92SXg1OTRTUm9k V3FSZHZrRXp3TUVQYVRaSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJjOnMgafSIPiVfJTSZW91baX7lbBVUjCnOyjTfJi3jOcVPfMVzqhW DzCeDJXzIXppD1dNU6azRprQFgTW4FlVHIUs6+M8AE3LjcYSmZSHnfk3C55+0S/m UcXaa1CjwGqq/kAQvyp3wY8RoE2KES1BBpsuGxNRT6i568exhJxTt/q6PzAmyKZh J1U0idpM6eDSWExGcxvSUy3VbFsvOdZ5q3eyGZCRbN8fFulbobLeAl06RZrB4LQh vhdZgh+CYgZu1GjOs6mCImMOw/825ljefqsik5mS2ikmd3tQdmA1xZXYZjhbN34k WSRA/1MRrAuXtpUsNobfrbnpHAHvdn3x -----END CERTIFICATE-----Generated at Tue Oct 21 10:17:18 2025 by rpki-client