$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: 8wztCQO1Sc24zaVKgC/MjvUvfdxxpljXGUcTPnk08Tc= Subject key identifier: A6:28:00:33:A1:3C:39:85:0B:FD:AE:E5:AA:E7:E7:77:2F:19:0E:85 Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: 01C2 Signing time: Sun 19 Oct 2025 05:25:26 +0000 Manifest this update: Sun 19 Oct 2025 05:25:25 +0000 Manifest next update: Sun 26 Oct 2025 05:25:25 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: KwtvgMNbeW+buWgHC1E5RCMPUwZPGw77KfcBoTketzM=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: jnuMHWmzh0Mkxo/UqfQiHQK9zwVM6oBly72+HKRXMlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: Oct 19 05:25:25 2025 GMT Not After : Oct 26 05:25:25 2025 GMT Subject: CN=68f47645-8141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:69:d9:6f:02:b2:a4:ae:f1:cc:41:c9:11: 9f:b0:13:33:b3:7b:97:b9:44:50:d2:98:44:c7:c4: cd:76:b0:5a:3e:a6:e9:66:93:f0:9e:81:bf:93:b4: 79:98:85:81:c5:dc:a7:90:89:4e:ab:9f:67:a5:c4: aa:f6:7c:8a:63:1b:10:32:56:f7:d3:0e:3b:c0:0a: 76:4f:6e:14:c5:21:ef:9b:a6:e8:23:e2:9e:1e:a9: b8:85:d3:2f:e9:ed:d9:88:ac:c0:6c:ab:48:e2:5d: cd:91:93:1e:f1:91:0e:3e:47:59:ba:05:39:5f:0c: 79:19:67:71:c3:53:53:14:4e:6e:d0:e8:d4:2f:ed: 63:2c:36:8a:1a:e1:00:6b:f6:2d:fa:a1:07:69:77: 74:b5:cf:de:34:57:16:49:d7:e1:35:a4:dc:71:de: a8:52:c0:2e:25:72:fe:98:d4:30:19:cf:69:f5:d7: fb:1f:8d:8a:be:64:ac:79:04:f7:84:f6:43:2b:17: 63:bb:3d:62:f7:22:15:9c:6d:df:4d:50:2c:d4:7f: 0b:7a:18:f4:43:83:43:5b:16:c1:dd:2f:35:93:d1: 62:cd:c2:9c:d7:bd:0c:13:d5:ff:b4:38:71:d8:59: 61:fe:2f:ab:52:c0:f4:7b:b6:11:82:ea:50:26:71: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:00:33:A1:3C:39:85:0B:FD:AE:E5:AA:E7:E7:77:2F:19:0E:85 X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1c:18:03:4a:20:50:28:46:9a:04:d0:25:40:c8:0b:ba:13: 9f:c5:14:db:12:7d:ea:db:a9:36:9b:0d:b1:32:80:b0:0d:80: f4:cf:16:93:e2:f1:94:d7:60:0f:45:21:76:c5:70:91:b0:fe: 6f:a1:99:05:4e:f0:cf:75:a0:88:24:df:dc:ec:8b:81:e4:6c: 39:08:7d:1c:54:7b:62:42:b0:da:4a:66:12:2c:99:3a:5c:04: ad:86:0d:5e:08:49:41:eb:ae:18:36:58:cd:1f:16:51:ea:c9: f1:6b:aa:66:2c:2b:eb:ed:fb:3e:a6:f5:e3:93:e2:e3:0c:a3: 25:32:46:e1:7c:5b:ca:94:37:16:33:cb:94:a0:68:f0:f7:13: be:30:d9:4d:d8:bc:b1:20:64:f4:7d:67:b1:56:cb:c2:5f:9e: ba:45:0f:9b:51:0a:85:90:7e:cb:5f:4e:66:4c:66:75:bd:33: b3:36:44:04:ad:9f:58:73:e5:8d:f3:03:35:f1:b5:5e:24:22: dc:b6:07:7a:7e:89:c6:46:d5:74:3a:7f:51:ad:ab:d7:06:74: 62:ba:d9:01:bb:27:e4:ed:57:e8:1d:58:de:7a:b4:bf:19:2d: a2:a4:91:43:96:29:06:f8:d2:2d:3b:c9:c8:be:fb:c1:c3:6f: 06:ab:fb:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjUxMDE5MDUyNTI1WhcNMjUxMDI2MDUyNTI1WjAYMRYwFAYD VQQDEw02OGY0NzY0NS04MTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmdp2W8CsqSu8cxByRGfsBMzs3uXuURQ0phEx8TNdrBaPqbpZpPwnoG/k7R5 mIWBxdynkIlOq59npcSq9nyKYxsQMlb30w47wAp2T24UxSHvm6boI+KeHqm4hdMv 6e3ZiKzAbKtI4l3NkZMe8ZEOPkdZugU5Xwx5GWdxw1NTFE5u0OjUL+1jLDaKGuEA a/Yt+qEHaXd0tc/eNFcWSdfhNaTccd6oUsAuJXL+mNQwGc9p9df7H42KvmSseQT3 hPZDKxdjuz1i9yIVnG3fTVAs1H8Lehj0Q4NDWxbB3S81k9FizcKc170ME9X/tDhx 2Flh/i+rUsD0e7YRgupQJnG0UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYoADOh PDmFC/2u5arn53cvGQ6FMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvHBgDSiBQKEaaBNAlQMgLuhOfxRTbEn3q26k2mw2xMoCwDYD0zxaT 4vGU12APRSF2xXCRsP5voZkFTvDPdaCIJN/c7IuB5Gw5CH0cVHtiQrDaSmYSLJk6 XASthg1eCElB664YNljNHxZR6snxa6pmLCvr7fs+pvXjk+LjDKMlMkbhfFvKlDcW M8uUoGjw9xO+MNlN2LyxIGT0fWexVsvCX566RQ+bUQqFkH7LX05mTGZ1vTOzNkQE rZ9Yc+WN8wM18bVeJCLctgd6fonGRtV0On9RravXBnRiutkBuyfk7VfoHVjeerS/ GS2ipJFDlikG+NItO8nIvvvBw28Gq/uj -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:46 2025 by rpki-client