$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft File: vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json) Hash identifier: YnIE1kToHc5FmP9qwOpZPXUL4kfzLg2/U+ktv1Tqa6E= Subject key identifier: DE:B3:2A:86:48:3E:ED:AE:BD:7C:62:94:6C:15:06:1F:CE:4B:77:A9 Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 Certificate issuer: /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft Manifest number: 023B Signing time: Sun 19 Oct 2025 04:03:26 +0000 Manifest this update: Sun 19 Oct 2025 04:03:25 +0000 Manifest next update: Sun 26 Oct 2025 04:03:25 +0000 Files and hashes: 1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: rQThVbMFEpD+NjtRrhzKhmu3EPAZjJBuMtOIVm/+/Es=) 2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: mMG9bEWCN7YmxGDEifOxzTHyHFARTgi2snMHU3b4IPo=) 3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: M+VldN3Zj4ItVsLXsshINI4uEpHeIoXEm9jDZJqFneg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Validity Not Before: Oct 19 04:03:25 2025 GMT Not After : Oct 26 04:03:25 2025 GMT Subject: CN=68f4630d-d9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:3b:f1:14:2c:f8:63:43:df:56:af:f4:76: 32:bb:29:7e:1f:32:21:fc:d4:47:5f:fb:ee:6a:7c: 1f:98:a5:a9:86:18:c0:b2:fd:bd:85:97:ff:fa:83: de:fa:cc:3c:b9:27:41:32:2c:31:80:c3:9f:b2:72: 41:8b:00:1b:0e:b3:6f:fa:4c:ff:23:fe:ce:f1:84: 87:78:b3:cc:e5:16:4e:4f:03:f5:8c:bf:61:99:ad: f5:bf:82:29:c1:65:d6:66:82:69:1c:13:53:41:78: e5:a1:21:e0:f2:7a:13:0d:e0:2e:b2:b3:0a:6d:4b: f2:bd:4c:d2:f8:0d:fe:cb:2e:94:be:89:73:e8:3d: bd:6d:6e:a6:35:38:98:a0:29:82:09:02:db:86:92: 1f:27:2c:32:8a:48:68:b2:8c:e6:08:20:9a:c3:75: 0d:d9:59:1b:2a:6b:c9:e3:71:a9:b7:ce:f8:47:04: b4:9d:b6:6a:1b:60:5d:e4:84:8c:17:8b:fe:8f:80: eb:35:2b:00:9c:62:a1:45:80:3e:c5:ba:3f:fd:dd: 2c:2f:0a:77:82:c0:21:a9:80:c6:43:5d:c6:58:3b: 0e:1c:ba:52:86:40:6a:e6:79:69:70:04:35:e3:75: 83:87:f1:c1:30:bd:95:25:ef:d7:08:0b:02:4f:ef: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B3:2A:86:48:3E:ED:AE:BD:7C:62:94:6C:15:06:1F:CE:4B:77:A9 X509v3 Authority Key Identifier: keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a3:eb:8d:99:a3:06:6e:79:5d:c5:76:46:60:61:db:fe:97: 64:26:61:70:0c:bf:99:b0:73:93:31:02:a7:c9:25:81:01:30: 32:2f:4e:0e:9a:dd:86:c1:fa:f1:2f:57:d4:d9:8b:6f:8a:08: ae:57:56:d1:a8:ab:95:58:6f:df:12:ba:04:66:cf:37:4c:26: 2f:24:64:0b:db:e6:51:65:ef:07:58:14:a8:d3:14:45:21:3d: e0:0c:3d:6c:7e:72:d3:39:79:51:a9:fd:08:f1:a1:15:3a:1b: 63:99:23:e1:ad:20:0a:12:7c:42:40:26:80:fc:39:ae:57:e1: c3:af:df:06:92:4b:15:89:6d:76:7e:b5:21:0a:2e:19:ec:7a: 8c:8b:94:fa:1f:93:af:73:3f:44:51:08:7b:b1:31:9e:64:d1: 22:c7:3f:c4:39:a0:9f:c9:ae:3f:b1:97:4d:9b:d0:8e:16:cd: 27:b8:9a:19:10:20:a1:a7:0b:e9:c1:66:03:fa:10:fe:e0:a7: 9e:c0:5c:8b:93:5e:45:61:67:b2:85:90:c9:46:fd:7d:67:4b: 9d:45:48:00:f1:46:52:66:0a:e0:22:6b:fd:39:fe:c1:c9:20: 55:78:87:6f:30:97:40:41:fb:60:d1:3b:b6:fe:99:d7:42:2f: 25:71:84:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBMjcxMTAvBgNVBAUTKEJDODYyMTQxMzA5NzE2QzBFNERDMzdERkZGMzNFNUFC MEM1NTRBRDAwHhcNMjUxMDE5MDQwMzI1WhcNMjUxMDI2MDQwMzI1WjAYMRYwFAYD VQQDEw02OGY0NjMwZC1kOWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1c78RQs+GND31av9HYyuyl+HzIh/NRHX/vuanwfmKWphhjAsv29hZf/+oPe +sw8uSdBMiwxgMOfsnJBiwAbDrNv+kz/I/7O8YSHeLPM5RZOTwP1jL9hma31v4Ip wWXWZoJpHBNTQXjloSHg8noTDeAusrMKbUvyvUzS+A3+yy6Uvolz6D29bW6mNTiY oCmCCQLbhpIfJywyikhosozmCCCaw3UN2VkbKmvJ43Gpt874RwS0nbZqG2Bd5ISM F4v+j4DrNSsAnGKhRYA+xbo//d0sLwp3gsAhqYDGQ13GWDsOHLpShkBq5nlpcAQ1 43WDh/HBML2VJe/XCAsCT+/yQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6zKoZI Pu2uvXxilGwVBh/OS3epMB8GA1UdIwQYMBaAFLyGIUEwlxbA5Nw33/8z5asMVUrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUEyNy82QThCRDA4QzQ0 NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZzRGszRGZmX3pQbHF3eFZT dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWWhRVENYRnNEazNEZmZfelBscXd4VlN0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUEyNy82QThCRDA4QzQ0NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZz RGszRGZmX3pQbHF3eFZTdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBko+uNmaMGbnldxXZGYGHb/pdkJmFwDL+ZsHOTMQKnySWBATAyL04O mt2GwfrxL1fU2YtvigiuV1bRqKuVWG/fEroEZs83TCYvJGQL2+ZRZe8HWBSo0xRF IT3gDD1sfnLTOXlRqf0I8aEVOhtjmSPhrSAKEnxCQCaA/DmuV+HDr98GkksViW12 frUhCi4Z7HqMi5T6H5Ovcz9EUQh7sTGeZNEixz/EOaCfya4/sZdNm9COFs0nuJoZ ECChpwvpwWYD+hD+4KeewFyLk15FYWeyhZDJRv19Z0udRUgA8UZSZgrgImv9Of7B ySBVeIdvMJdAQftg0Tu2/pnXQi8lcYSm -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:29 2025 by rpki-client