$ rpki-client -vvf rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft File: VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft (raw, json) Hash identifier: uicSFFt4Xl4Ox2Xh+P7EEKfb80UgnSV7ageTnfY/Wgk= Subject key identifier: BF:9B:93:32:6E:BF:94:0A:A4:2E:7D:6D:8B:A5:2C:61:A2:86:E6:BC Authority key identifier: 56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 Certificate issuer: /CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft Manifest number: 0235 Signing time: Sun 19 Oct 2025 04:05:26 +0000 Manifest this update: Sun 19 Oct 2025 04:05:25 +0000 Manifest next update: Sun 26 Oct 2025 04:05:25 +0000 Files and hashes: 1: VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl (hash: Orwgy6RV6KMwP+z2VK/5pG4vfaawngTEaMfoTSUmSQM=) 2: 20BFA0B64A4911EDACB7AB0CC4F9AE02.roa (hash: fM0f1U3uv8elOOSoakvi5zas2tW7Yg5J98LgfW+bqBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F592, serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Validity Not Before: Oct 19 04:05:25 2025 GMT Not After : Oct 26 04:05:25 2025 GMT Subject: CN=68f46385-fc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:bc:ec:9a:1e:48:08:e6:2f:2f:ed:fc:1f: cd:ec:86:6e:83:b5:65:09:d7:32:e7:79:22:66:f6: 37:5f:10:2f:ec:4b:94:17:c8:bc:6d:8f:4d:02:5f: 9e:47:1b:08:39:e4:6d:37:8a:cc:6e:25:9a:37:cc: 31:51:9e:90:63:80:f8:52:18:1b:4a:df:de:b3:a3: 01:47:84:37:ac:01:1e:20:1b:7c:51:9c:db:dc:1e: a6:10:ea:af:a0:ed:71:a2:fd:c7:ad:85:89:6e:18: 69:f4:87:fa:f6:6c:bb:37:db:f8:7d:dd:77:6a:30: 0b:dd:7a:31:99:c9:3f:25:c2:e0:15:cd:06:3f:63: e5:07:41:5b:77:9b:68:4e:42:f8:a4:b1:6f:8e:79: 32:73:cb:ff:0b:6d:8c:0c:6b:ef:dd:68:9a:c9:75: ab:6d:47:80:f2:19:71:f4:7f:4c:13:5e:08:a9:90: 52:a3:48:5a:92:ba:77:1d:cc:6c:56:39:86:01:fc: 3b:6e:fc:a8:71:b4:b1:bd:ce:49:91:d1:64:52:f3: 71:b6:ae:fe:d2:42:1e:d5:e9:91:0e:ca:c5:de:58: 43:8c:f2:c6:b9:9c:df:04:9c:2c:55:54:7d:6a:d1: 76:ee:b5:d3:27:3c:6d:de:bb:6b:a9:80:a0:d2:1a: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9B:93:32:6E:BF:94:0A:A4:2E:7D:6D:8B:A5:2C:61:A2:86:E6:BC X509v3 Authority Key Identifier: keyid:56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:c1:06:85:9e:f0:ff:e7:d2:c5:22:f1:73:47:02:8f:df:b4: a8:ef:29:4f:4a:59:d3:6d:23:dc:ff:ad:47:aa:0e:1e:59:1d: e1:32:ea:94:07:96:09:9c:1c:ef:bd:ac:a6:6f:bc:15:9b:5a: af:c9:03:30:74:94:70:f2:07:58:aa:93:11:5c:a5:a6:0a:9c: 2d:c3:17:3e:23:f5:72:da:9f:6b:1a:1a:e6:c5:f1:d6:9b:62: 6f:f4:be:1c:bf:02:6a:3f:25:65:d2:e7:4a:13:ab:07:82:9f: 58:28:b1:41:7a:fc:21:29:71:fa:42:3f:80:f6:33:c4:3f:7e: 7d:95:5c:5e:ba:f4:4c:2e:ac:45:b4:1d:b6:f6:f6:85:ff:82: 01:9c:31:f8:da:df:b0:5a:87:81:d2:40:85:16:9f:55:b0:21: 1e:2e:96:ba:d7:e2:cd:32:72:c3:95:fe:b7:dc:fa:77:32:c2: 27:88:2e:78:9d:4a:d2:c0:fa:ed:8e:b0:6c:da:bb:bb:14:02: 40:4d:08:07:b8:44:25:97:6c:0e:b2:1a:16:8c:57:03:9a:05: 1f:7e:21:34:08:93:81:79:f6:32:dc:b6:10:ed:2b:fb:dc:dc: d1:dc:fd:df:33:43:88:b4:90:5e:55:ce:63:4d:28:88:9a:70: 9c:92:42:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1OTIxMTAvBgNVBAUTKDU2RDUyNDE5RDU2QUFDREY3RDAwNUJBMTVEOUREQjhG MTQyRTNBRDAwHhcNMjUxMDE5MDQwNTI1WhcNMjUxMDI2MDQwNTI1WjAYMRYwFAYD VQQDEw02OGY0NjM4NS1mYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOG87JoeSAjmLy/t/B/N7IZug7VlCdcy53kiZvY3XxAv7EuUF8i8bY9NAl+e RxsIOeRtN4rMbiWaN8wxUZ6QY4D4UhgbSt/es6MBR4Q3rAEeIBt8UZzb3B6mEOqv oO1xov3HrYWJbhhp9If69my7N9v4fd13ajAL3Xoxmck/JcLgFc0GP2PlB0Fbd5to TkL4pLFvjnkyc8v/C22MDGvv3WiayXWrbUeA8hlx9H9ME14IqZBSo0hakrp3Hcxs VjmGAfw7bvyocbSxvc5JkdFkUvNxtq7+0kIe1emRDsrF3lhDjPLGuZzfBJwsVVR9 atF27rXTJzxt3rtrqYCg0hpMPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+bkzJu v5QKpC59bYulLGGihua8MB8GA1UdIwQYMBaAFFbVJBnVaqzffQBboV2d248ULjrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjU5Mi9GQTU5MTJERTRB NDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJOOTlBRnVoWFozYmp4UXVP dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0VWtHZFZxck45OUFGdWhYWjNianhRdU90QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjU5Mi9GQTU5MTJERTRBNDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJO OTlBRnVoWFozYmp4UXVPdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgwQaFnvD/59LFIvFzRwKP37So7ylPSlnTbSPc/61Hqg4eWR3hMuqU B5YJnBzvvaymb7wVm1qvyQMwdJRw8gdYqpMRXKWmCpwtwxc+I/Vy2p9rGhrmxfHW m2Jv9L4cvwJqPyVl0udKE6sHgp9YKLFBevwhKXH6Qj+A9jPEP359lVxeuvRMLqxF tB229vaF/4IBnDH42t+wWoeB0kCFFp9VsCEeLpa61+LNMnLDlf633Pp3MsIniC54 nUrSwPrtjrBs2ru7FAJATQgHuEQll2wOshoWjFcDmgUffiE0CJOBefYy3LYQ7Sv7 3NzR3P3fM0OItJBeVc5jTSiImnCckkL+ -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:38 2025 by rpki-client