$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json) Hash identifier: 6d84vnAMjlHJ3YuyAne1y99yc5ZlpHFeM/YZykMYcIg= Subject key identifier: C5:D7:7E:AA:14:A5:9C:0E:94:ED:3F:B5:27:CB:4B:CA:4D:03:AC:54 Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 3542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft Manifest number: 3511 Signing time: Sat 18 Oct 2025 15:06:36 +0000 Manifest this update: Sat 18 Oct 2025 15:06:36 +0000 Manifest next update: Sat 25 Oct 2025 15:06:36 +0000 Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: fdwP3u/VnqC4eHCo+CucWI843bCWYMmXgYOTozsHJdo=) 2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: UllqnXfDL+2VdUTPx8xQ2Za44+cPvkaWdFYKS+C8QQM=) 3: 931C5524175011EB8585CA60C4F9AE02.roa (hash: zSmeOMcR4UTwUq4R32M120QhIdCnmd/G6j8Yf4YDhJ0=) 4: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: ZD0GATgarU5SJf51be/V12br/cDS5vLdtBMxX0BhbhU=) 5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: lO7bWRMdVQIujCi4o8pQPJbkrtgWtKnNWX6be5e8XsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13634 (0x3542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: Oct 18 15:06:36 2025 GMT Not After : Oct 25 15:06:36 2025 GMT Subject: CN=68f3acfc-f94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:38:58:cb:4b:f0:99:b5:64:bd:d2:89:b9:7e: dd:08:51:db:0c:b5:87:70:7d:4c:40:6c:77:4f:4f: 17:2b:df:bd:9d:80:00:78:0e:9e:75:7d:c3:e7:59: 4f:97:ad:3b:c3:c5:9b:e4:96:37:f9:82:ca:e8:f8: c0:94:6a:0b:b2:42:84:d4:4e:9a:bd:cd:d5:a2:29: 44:06:23:89:7e:61:dc:8e:04:0d:cd:de:28:6b:e0: 51:6c:8f:37:fe:04:94:43:25:22:74:f3:b2:23:30: a7:e1:11:ec:47:98:20:5d:ee:66:f4:42:3b:ed:08: 12:92:a6:80:42:7b:d8:76:3d:82:ff:86:6f:08:b0: 0e:d6:03:91:5b:0d:1c:c2:33:84:48:16:25:e6:b2: 26:e1:22:27:fa:40:1a:2d:7f:1a:e2:9b:59:7a:f7: b7:6c:80:8b:d6:41:b6:f0:1e:21:6e:36:1a:83:bd: 09:c1:bf:de:fb:6e:ed:d5:51:69:8e:8f:1e:a2:c2: ee:9e:8f:a2:0b:4d:4c:88:ef:a9:76:09:bc:d2:6c: 46:d6:09:ae:ce:05:f2:a4:7e:2f:47:2b:8a:c6:0d: 81:8e:95:c3:04:63:5f:77:e3:1d:d2:ef:cc:a2:42: ee:2a:f2:0f:48:6c:6d:56:52:c2:8f:99:1a:b5:a6: 15:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:7E:AA:14:A5:9C:0E:94:ED:3F:B5:27:CB:4B:CA:4D:03:AC:54 X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:65:f9:c3:64:85:9d:95:19:e9:24:6d:25:39:f6:38:d5:41: a4:a8:b6:9d:34:ff:c6:de:73:f3:12:75:72:eb:4b:46:8e:55: 9b:62:1e:57:d9:8a:6a:5f:ca:f2:6e:5b:71:ba:27:c6:6a:e4: ae:44:f7:ff:53:c1:02:e0:8d:cd:f0:43:47:02:a9:2c:f2:f1: da:81:cd:39:12:7e:f0:9c:94:fc:72:81:9c:1a:25:cb:5b:fa: e5:32:89:ff:91:48:8b:0b:e0:b5:8c:6d:bf:cb:e3:ec:4c:71: 24:14:0d:fa:03:bb:1f:de:94:1d:f5:8a:65:24:7b:25:36:f0: 4a:e8:52:a5:56:0d:f0:33:ff:45:3e:c2:65:42:3e:3e:40:94: 63:d6:d3:79:cc:67:96:76:8e:eb:0b:c3:3a:7a:c5:e5:f5:31: 2d:96:1c:5c:e2:eb:c2:9e:d3:b5:0c:b7:75:20:10:e0:0d:8d: ee:29:be:04:db:f7:f7:79:5d:49:57:10:af:de:42:cf:06:75: 60:8e:a8:f8:c1:19:bc:9f:e1:e8:12:bb:35:73:13:ff:00:64: 09:e7:aa:2e:97:72:e4:ae:a1:0a:9b:ef:7d:de:91:88:7d:c7: 4c:32:32:33:b8:c4:0b:e7:3e:63:6a:9d:38:53:3c:d5:97:ba: f3:09:98:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjUxMDE4MTUwNjM2WhcNMjUxMDI1MTUwNjM2WjAYMRYwFAYD VQQDEw02OGYzYWNmYy1mOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljhYy0vwmbVkvdKJuX7dCFHbDLWHcH1MQGx3T08XK9+9nYAAeA6edX3D51lP l607w8Wb5JY3+YLK6PjAlGoLskKE1E6avc3VoilEBiOJfmHcjgQNzd4oa+BRbI83 /gSUQyUidPOyIzCn4RHsR5ggXe5m9EI77QgSkqaAQnvYdj2C/4ZvCLAO1gORWw0c wjOESBYl5rIm4SIn+kAaLX8a4ptZeve3bICL1kG28B4hbjYag70Jwb/e+27t1VFp jo8eosLuno+iC01MiO+pdgm80mxG1gmuzgXypH4vRyuKxg2BjpXDBGNfd+Md0u/M okLuKvIPSGxtVlLCj5kataYVgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXXfqoU pZwOlO0/tSfLS8pNA6xUMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkRCQS8wNzc4NTFBNDFEOUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3ph RVZtMW5zMWVPWlBwZ21WUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaZfnDZIWdlRnpJG0lOfY41UGkqLadNP/G3nPzEnVy60tGjlWbYh5X 2YpqX8rybltxuifGauSuRPf/U8EC4I3N8ENHAqks8vHagc05En7wnJT8coGcGiXL W/rlMon/kUiLC+C1jG2/y+PsTHEkFA36A7sf3pQd9YplJHslNvBK6FKlVg3wM/9F PsJlQj4+QJRj1tN5zGeWdo7rC8M6esXl9TEtlhxc4uvCntO1DLd1IBDgDY3uKb4E 2/f3eV1JVxCv3kLPBnVgjqj4wRm8n+HoErs1cxP/AGQJ56oul3LkrqEKm+993pGI fcdMMjIzuMQL5z5jap04UzzVl7rzCZjR -----END CERTIFICATE-----Generated at Mon Oct 20 04:08:36 2025 by rpki-client