$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: uGzFDxVBagj2VTwq5PajYKk0T/SyWk405o2KGZW0Tmo= Subject key identifier: 8E:D7:69:C3:52:63:B1:E1:47:46:D6:61:5E:89:EE:BA:76:95:B2:EB Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 0221 Signing time: Sun 19 Oct 2025 04:20:55 +0000 Manifest this update: Sun 19 Oct 2025 04:20:55 +0000 Manifest next update: Sun 26 Oct 2025 04:20:55 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: ycAmv+aMVOdHoh8P9e6ooOGxIvWQoGk48HQqhcw5l3g=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Oct 19 04:20:55 2025 GMT Not After : Oct 26 04:20:55 2025 GMT Subject: CN=68f46727-09b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:18:78:9a:f1:cf:e8:85:29:ba:24:a2:bd: 21:ab:0d:98:5f:1d:3d:d4:54:7d:7d:df:f9:d9:bb: dd:b2:64:97:d6:68:dc:ce:b9:c3:f9:57:81:c9:45: a9:b7:6b:d1:68:ac:88:2a:a3:e3:b0:e5:59:e1:25: 25:4e:94:5a:fe:25:c6:95:8f:d9:b8:fa:75:ca:c7: 92:6f:0d:72:8a:f8:13:66:48:b5:07:20:5e:27:f4: 28:33:f3:37:dc:24:16:64:c8:3c:72:db:49:75:a6: 34:f2:ac:98:e3:d9:1f:b5:56:a3:14:05:d2:1e:d0: 77:4c:ee:1f:b6:23:f8:e2:59:ee:19:e6:b8:12:3d: 15:3b:8c:c1:7f:3a:f8:9f:f1:3a:4e:d4:f1:3a:6c: 65:e0:6e:ee:1a:2c:83:b7:40:94:72:e2:d5:f8:8c: b4:fb:68:47:13:3a:a4:0a:50:c8:3f:0b:b1:4c:39: be:6c:9c:95:63:bf:42:7b:e7:2f:53:af:80:99:db: 5c:40:ad:89:c1:4b:cf:3c:08:dd:f1:4f:e2:f0:24: 39:f9:48:64:94:48:aa:4c:fe:99:cd:09:59:29:15: 97:62:e5:86:40:23:be:4f:1c:a0:2c:5f:10:a3:46: fb:05:d1:cc:6c:e3:74:63:10:17:ca:5e:fe:67:8d: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D7:69:C3:52:63:B1:E1:47:46:D6:61:5E:89:EE:BA:76:95:B2:EB X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f2:de:c6:31:5a:c3:78:d8:fb:a0:64:6a:81:c1:1d:f8:2b: 33:cc:d9:54:3c:0f:ae:65:f5:ab:57:33:40:fe:97:5d:a0:f7: b0:9f:a1:d2:e0:07:bf:75:5d:56:5f:13:1b:fa:1d:60:9a:82: f4:e9:1f:4e:15:dd:66:bd:81:d4:69:71:65:81:5a:d8:8e:0b: 54:94:b6:82:ea:1b:30:ae:48:5a:d2:cf:4b:2c:d8:1a:d5:83: 07:60:ba:69:59:82:cf:ec:d4:8d:39:05:31:f8:3c:63:b4:21: 2b:11:ab:e4:f7:6b:30:87:6b:fe:fb:6f:58:96:8b:33:ce:04: 52:68:ca:ba:b1:a5:d4:7b:0a:46:84:96:55:18:89:36:7c:f5: 1b:92:42:88:cc:28:d3:cc:79:8b:dd:b2:11:7f:fd:c7:50:1a: d3:7b:ae:95:87:6a:b7:02:f0:9e:4b:76:a8:3c:1d:19:c9:eb: 2e:9c:ff:ea:4d:e0:9f:81:4b:25:d3:a8:b7:15:a9:a8:22:24: 83:bd:1d:27:23:4b:0a:1e:a9:2e:c9:35:c6:a0:55:f5:c7:87: 60:de:f2:dc:7e:1a:0e:fa:88:4d:6d:60:eb:2f:f9:19:e8:cb: f8:2b:53:d5:92:e8:8e:b2:80:b2:fe:a4:57:15:52:9b:e2:32: c5:bb:fc:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjUxMDE5MDQyMDU1WhcNMjUxMDI2MDQyMDU1WjAYMRYwFAYD VQQDEw02OGY0NjcyNy0wOWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2wYeJrxz+iFKbokor0hqw2YXx091FR9fd/52bvdsmSX1mjczrnD+VeByUWp t2vRaKyIKqPjsOVZ4SUlTpRa/iXGlY/ZuPp1yseSbw1yivgTZki1ByBeJ/QoM/M3 3CQWZMg8cttJdaY08qyY49kftVajFAXSHtB3TO4ftiP44lnuGea4Ej0VO4zBfzr4 n/E6TtTxOmxl4G7uGiyDt0CUcuLV+Iy0+2hHEzqkClDIPwuxTDm+bJyVY79Ce+cv U6+AmdtcQK2JwUvPPAjd8U/i8CQ5+UhklEiqTP6ZzQlZKRWXYuWGQCO+TxygLF8Q o0b7BdHMbON0YxAXyl7+Z43MfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7XacNS Y7HhR0bWYV6J7rp2lbLrMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM8t7GMVrDeNj7oGRqgcEd+CszzNlUPA+uZfWrVzNA/pddoPewn6HS 4Ae/dV1WXxMb+h1gmoL06R9OFd1mvYHUaXFlgVrYjgtUlLaC6hswrkha0s9LLNga 1YMHYLppWYLP7NSNOQUx+DxjtCErEavk92swh2v++29YloszzgRSaMq6saXUewpG hJZVGIk2fPUbkkKIzCjTzHmL3bIRf/3HUBrTe66Vh2q3AvCeS3aoPB0ZyesunP/q TeCfgUsl06i3FamoIiSDvR0nI0sKHqkuyTXGoFX1x4dg3vLcfhoO+ohNbWDrL/kZ 6Mv4K1PVkuiOsoCy/qRXFVKb4jLFu/yA -----END CERTIFICATE-----Generated at Mon Oct 20 07:02:07 2025 by rpki-client