$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft File: vNvXHXuijevFk59cynZuyp91YxA.mft (raw, json) Hash identifier: Oyz7Jvqeuf5wM00TV739ecwFkJJKRTPZjUwwiWaxPUg= Subject key identifier: E0:13:AF:69:8E:53:12:91:30:32:67:95:FC:93:CB:DA:D6:89:E4:5D Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Certificate serial: 2782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft Manifest number: 276A Signing time: Mon 20 Oct 2025 15:50:18 +0000 Manifest this update: Mon 20 Oct 2025 15:50:18 +0000 Manifest next update: Mon 27 Oct 2025 15:50:18 +0000 Files and hashes: 1: vNvXHXuijevFk59cynZuyp91YxA.crl (hash: eR4fp4GsKL0Hn2XuP+aW0su6i3fdwSwqKuVylEr3W94=) 2: 962B0D98B14111E5A3B46B15C4F9AE02.roa (hash: yQHlkxuzz99/7kQgioJqP7ffoLiy5kq1xOtP6xkgYXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10114 (0x2782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126285, serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Validity Not Before: Oct 20 15:50:18 2025 GMT Not After : Oct 27 15:50:18 2025 GMT Subject: CN=68f65a3a-4b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:c4:f8:e3:51:16:b1:ce:6f:8f:a8:64:4d: cc:53:d6:51:c2:be:d1:43:63:31:d7:8b:7b:69:91: b6:d4:2b:5c:4f:ea:61:49:c0:cc:26:1b:c5:ad:a4: 3d:5b:5c:f4:cd:f7:2e:4f:a0:f5:8b:11:b9:7d:e7: 5c:f4:64:1c:00:f4:c7:3d:ba:21:53:41:25:17:69: 3b:db:a1:15:cc:ae:3f:fd:85:59:48:7b:0b:cc:75: cb:9d:77:b2:32:67:7e:e6:ca:40:cc:bf:95:19:f2: 94:37:9d:6e:a8:eb:0b:39:4b:d6:3c:4e:5b:be:e7: 46:56:74:6a:c4:c3:d8:09:4b:2f:3c:bd:ae:98:39: 65:70:93:a9:bb:b4:d7:be:bd:bf:ee:f9:1b:72:a9: 7d:19:17:7e:e8:f9:bc:f2:0a:af:cb:bb:74:5e:b8: 36:b4:d2:38:29:5a:24:d5:09:a7:6f:81:66:b1:6e: ef:f6:d5:02:61:da:12:12:cd:89:79:84:f7:fe:03: 63:e5:e6:72:b2:11:b0:50:c9:43:ab:70:f1:2e:73: 57:95:0c:fa:86:46:54:14:43:3e:1b:96:16:f1:e4: d4:a4:24:41:8c:ca:7f:03:73:80:94:48:d6:e6:f1: af:f0:4d:48:c9:55:ce:49:f5:dd:c7:9d:dc:12:db: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:13:AF:69:8E:53:12:91:30:32:67:95:FC:93:CB:DA:D6:89:E4:5D X509v3 Authority Key Identifier: keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:a4:b3:c3:7c:85:3a:9f:bd:21:29:33:05:dd:78:98:1d:cc: a4:5f:cd:4f:f0:c2:bd:f7:1b:a1:80:ac:99:7c:5f:f3:19:4f: 06:2f:37:9f:f6:57:e6:5f:35:2b:1e:51:cf:95:b0:45:6c:85: 33:b1:c0:e8:80:ea:1d:d2:ed:b4:63:8e:e4:94:88:db:c8:63: f2:a2:57:da:c9:c9:f4:3e:49:5c:67:8b:c0:25:50:c8:32:6d: c5:e0:72:3e:9a:ea:a4:62:b1:d7:2d:aa:2d:d1:da:7c:a5:ae: e9:0e:a9:b4:75:9c:12:f2:af:57:a8:32:cc:ff:fb:12:17:b0: 6e:2b:37:ed:aa:c9:94:4b:34:81:35:0f:86:e2:29:17:41:ea: 97:af:2a:d2:8c:79:c2:6b:87:3e:7f:c8:68:9b:f4:23:d8:bc: d2:34:51:33:9e:e3:2a:e5:8d:35:3c:32:2c:46:7a:48:fa:81: 94:a7:37:8e:43:fd:9b:84:52:b0:eb:d0:1b:a2:71:8e:2c:65: 0c:44:cc:00:b5:d8:a2:64:8e:bf:ae:61:67:cd:a1:cf:37:99: c5:23:ef:e0:6c:7e:f4:92:6a:43:d3:7c:71:16:30:df:0e:f6: 2b:bf:d6:11:b1:d6:46:5b:4a:66:45:47:53:67:2e:01:f2:12: e4:7f:79:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB OUY3NTYzMTAwHhcNMjUxMDIwMTU1MDE4WhcNMjUxMDI3MTU1MDE4WjAYMRYwFAYD VQQDEw02OGY2NWEzYS00YjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0nE+ONRFrHOb4+oZE3MU9ZRwr7RQ2Mx14t7aZG21CtcT+phScDMJhvFraQ9 W1z0zfcuT6D1ixG5fedc9GQcAPTHPbohU0ElF2k726EVzK4//YVZSHsLzHXLnXey Mmd+5spAzL+VGfKUN51uqOsLOUvWPE5bvudGVnRqxMPYCUsvPL2umDllcJOpu7TX vr2/7vkbcql9GRd+6Pm88gqvy7t0Xrg2tNI4KVok1Qmnb4FmsW7v9tUCYdoSEs2J eYT3/gNj5eZyshGwUMlDq3DxLnNXlQz6hkZUFEM+G5YW8eTUpCRBjMp/A3OAlEjW 5vGv8E1IyVXOSfXdx53cEtvt5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOATr2mO UxKRMDJnlfyTy9rWieRdMB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI4NS9CMjYxMEI1OEMzRjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpl dkZrNTljeW5adXlwOTFZeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHpLPDfIU6n70hKTMF3XiYHcykX81P8MK99xuhgKyZfF/zGU8GLzef 9lfmXzUrHlHPlbBFbIUzscDogOod0u20Y47klIjbyGPyolfaycn0PklcZ4vAJVDI Mm3F4HI+muqkYrHXLaot0dp8pa7pDqm0dZwS8q9XqDLM//sSF7BuKzftqsmUSzSB NQ+G4ikXQeqXryrSjHnCa4c+f8hom/Qj2LzSNFEznuMq5Y01PDIsRnpI+oGUpzeO Q/2bhFKw69AbonGOLGUMRMwAtdiiZI6/rmFnzaHPN5nFI+/gbH70kmpD03xxFjDf DvYrv9YRsdZGW0pmRUdTZy4B8hLkf3mO -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:59 2025 by rpki-client