$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: UpcnyqN8j989ShR4Bfa9qEsW11jAGTcWjmo8qThSc90= Subject key identifier: 88:43:90:83:3E:18:6A:9D:73:FD:AC:17:B1:CB:D2:46:82:3E:7F:D4 Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: 0145 Signing time: Sun 19 Oct 2025 07:08:24 +0000 Manifest this update: Sun 19 Oct 2025 07:08:23 +0000 Manifest next update: Sun 26 Oct 2025 07:08:23 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: bwfKiJxp8SPRE/7SnpuIk1fkscEQTmuiDg7XkGYRezo=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: Oct 19 07:08:23 2025 GMT Not After : Oct 26 07:08:23 2025 GMT Subject: CN=68f48e68-1ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:3e:54:83:0b:0f:c7:5b:d7:e5:90:be:c8: 54:9e:97:99:ab:49:31:7c:2b:23:ac:ea:cf:5f:1e: 72:9b:ed:b9:cf:a4:af:2a:9d:72:19:f5:63:c3:ae: bc:2d:b4:0f:23:f1:a8:8f:5f:15:18:7f:70:77:74: 73:6e:66:19:c8:f1:9d:2b:46:7b:b8:fd:29:38:c1: 37:f5:82:ec:4c:8f:0e:63:6f:a0:54:b0:70:15:07: c9:ea:92:3d:c2:38:cc:7f:2a:86:e4:c1:ca:33:84: 01:7d:5c:6f:43:5d:6c:0c:27:96:25:ce:c0:45:7d: 41:b3:57:1d:c1:03:26:eb:45:2c:6d:37:0f:d0:08: 76:85:ad:12:64:de:3b:4a:dc:0b:88:29:81:6c:de: 56:b7:9f:c2:f8:da:3f:58:58:2a:01:e0:f6:b9:d8: a6:95:bc:00:6d:a5:4d:7f:0d:2b:8d:61:df:3a:b0: d0:db:08:c3:d3:23:a2:01:4c:e6:9c:83:af:9d:89: 50:33:89:1c:66:a8:4c:3a:a4:3b:aa:e4:09:d7:88: 69:9f:7d:ed:30:74:e7:a3:61:8d:af:f0:6d:70:18: ef:c8:a7:92:2f:e0:eb:77:da:91:da:55:71:ea:19: a4:4f:3a:b9:33:f0:e4:86:f6:63:b5:92:05:66:c8: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:43:90:83:3E:18:6A:9D:73:FD:AC:17:B1:CB:D2:46:82:3E:7F:D4 X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:74:5a:6c:41:0f:2b:f1:97:3f:66:c8:a8:93:95:6a:9e:87: c8:a9:61:9b:45:09:f4:33:48:c7:c8:33:a5:5b:c4:dd:8f:3c: a7:f0:3c:2f:ed:cc:d4:ea:da:2c:14:82:39:51:b0:1b:94:f7: 29:71:01:6f:21:38:a5:f1:09:05:cc:97:34:4a:6a:bb:dc:90: dd:19:8e:02:f0:bf:29:13:a0:97:b6:5c:0e:3e:66:7a:a3:89: dc:cf:c8:12:bc:e1:73:30:ca:1b:9e:02:0e:e9:58:f9:7a:a1: 06:c0:6f:99:d4:25:3c:94:6f:39:a3:fd:28:f8:bc:72:c2:dc: 0f:17:23:69:34:57:b6:3e:95:5c:3b:65:94:0b:89:f7:e9:a6: 01:57:98:88:da:22:3e:9f:94:1c:48:65:78:1f:02:e8:12:fd: 41:e8:97:df:ff:76:06:51:61:9a:39:44:c5:ab:7b:97:1e:73: 39:ac:be:15:a6:41:cf:51:2a:ad:23:f9:9a:0f:49:0d:a9:f6: 59:d5:d4:78:ca:5c:00:07:b0:2f:b7:b5:c9:58:90:09:e1:b6: 13:98:f1:67:db:09:91:50:d5:3b:0e:9a:bd:2f:dd:21:c6:82: 24:5c:51:b4:1a:9d:67:e0:48:4b:fa:d4:f9:75:c6:e5:15:75: 37:5e:80:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUxMDE5MDcwODIzWhcNMjUxMDI2MDcwODIzWjAYMRYwFAYD VQQDEw02OGY0OGU2OC0xZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nk+VIMLD8db1+WQvshUnpeZq0kxfCsjrOrPXx5ym+25z6SvKp1yGfVjw668 LbQPI/Goj18VGH9wd3RzbmYZyPGdK0Z7uP0pOME39YLsTI8OY2+gVLBwFQfJ6pI9 wjjMfyqG5MHKM4QBfVxvQ11sDCeWJc7ARX1Bs1cdwQMm60UsbTcP0Ah2ha0SZN47 StwLiCmBbN5Wt5/C+No/WFgqAeD2udimlbwAbaVNfw0rjWHfOrDQ2wjD0yOiAUzm nIOvnYlQM4kcZqhMOqQ7quQJ14hpn33tMHTno2GNr/BtcBjvyKeSL+Drd9qR2lVx 6hmkTzq5M/DkhvZjtZIFZsi6JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhDkIM+ GGqdc/2sF7HL0kaCPn/UMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVdFpsQQ8r8Zc/Zsiok5VqnofIqWGbRQn0M0jHyDOlW8Tdjzyn8Dwv 7czU6tosFII5UbAblPcpcQFvITil8QkFzJc0Smq73JDdGY4C8L8pE6CXtlwOPmZ6 o4ncz8gSvOFzMMobngIO6Vj5eqEGwG+Z1CU8lG85o/0o+LxywtwPFyNpNFe2PpVc O2WUC4n36aYBV5iI2iI+n5QcSGV4HwLoEv1B6Jff/3YGUWGaOUTFq3uXHnM5rL4V pkHPUSqtI/maD0kNqfZZ1dR4ylwAB7Avt7XJWJAJ4bYTmPFn2wmRUNU7Dpq9L90h xoIkXFG0Gp1n4EhL+tT5dcblFXU3XoDe -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:11 2025 by rpki-client