$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json) Hash identifier: oojQcZCb5FKKSDEm+9hlxN8Nd8z41aUbVFEvKQXZpWE= Subject key identifier: BA:07:22:3A:A4:0D:1C:1B:81:82:A2:98:8C:14:76:22:AC:32:76:7B Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft Manifest number: 0148 Signing time: Sun 19 Oct 2025 07:01:52 +0000 Manifest this update: Sun 19 Oct 2025 07:01:51 +0000 Manifest next update: Sun 26 Oct 2025 07:01:51 +0000 Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: vMdaQ+t8O4kW+K6WwW2AvC0a5o8srVzYGfUjYBqo7gw=) 2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: MNtM9pXu4p6v7Z7f6/Wop8L0VMv9VFX8mmGYuSjaQTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Validity Not Before: Oct 19 07:01:51 2025 GMT Not After : Oct 26 07:01:51 2025 GMT Subject: CN=68f48cdf-ed15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:b8:65:78:86:ba:98:f6:06:23:57:e4:b4: 8c:90:a7:95:05:bc:ca:21:d9:19:e5:26:20:7f:dd: 4a:e9:9c:96:d7:59:87:f4:1e:c5:15:bd:65:9d:91: fe:3d:0a:a3:d4:5d:f5:97:c9:0f:fb:0d:44:11:80: 99:09:92:cb:85:b9:58:b4:11:24:e3:f1:96:9f:4c: 6a:7f:d4:50:34:dd:89:aa:99:a3:f9:86:15:38:a2: d2:ff:99:9f:5f:23:93:ca:bf:4d:f0:b5:aa:a6:ee: 73:6a:65:d1:13:30:b9:2a:f3:96:67:4a:20:47:3f: 19:ea:ef:4c:ad:63:97:6b:37:ab:6d:11:a3:5d:c2: 24:b4:35:4e:e8:c6:02:8b:c9:88:09:f9:59:6d:0f: 3c:a0:fc:17:84:7f:07:a3:56:99:89:56:d6:85:83: 6a:99:4c:76:ee:66:b1:74:d6:dd:09:56:bd:42:c9: 5c:21:7e:a4:cc:ed:7c:79:90:d8:ef:c9:da:51:09: bc:10:92:38:6a:16:b1:1d:bb:c5:2e:2a:74:8e:20: 85:4d:ef:10:56:ec:87:8f:fd:6f:d1:43:2f:ef:f0: 43:d0:22:54:66:12:88:bf:dc:9d:da:61:6e:dc:b7: 84:53:5c:26:0e:52:d0:e9:e6:f5:17:8d:a1:bc:12: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:07:22:3A:A4:0D:1C:1B:81:82:A2:98:8C:14:76:22:AC:32:76:7B X509v3 Authority Key Identifier: keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:fb:6c:07:c4:b2:7e:a2:5d:72:86:c6:45:cc:c8:e9:c0:c5: 03:bc:e8:76:b5:c0:2c:8f:82:e0:c6:41:87:07:a5:0f:d1:5c: ec:1c:d2:9d:fe:f6:88:32:86:12:48:94:70:a0:6d:e9:3e:d0: 4a:33:be:f1:37:10:a6:05:97:cf:bc:65:c8:f7:36:b9:3f:9d: 20:6b:01:ee:7f:28:13:e9:46:49:86:6e:b4:7e:b2:53:ac:62: 61:eb:90:2f:8a:1b:7d:36:94:dc:e0:a1:5e:85:c1:1b:1c:ee: 9c:6e:b5:81:13:94:20:de:74:99:4b:ab:72:7d:25:47:a7:af: 2a:18:cf:78:a0:5d:45:4e:87:a9:04:8c:6d:96:82:e0:9d:05: 31:d5:5e:9e:18:0f:3f:57:c0:48:56:e7:0d:01:10:4e:18:31: eb:50:9b:d8:33:89:15:56:60:43:18:b9:5b:bd:04:e9:6e:1b: 5c:8f:8c:1a:e4:87:84:e4:e7:97:39:03:4e:b6:47:f8:a3:b3: bc:84:4e:85:ba:87:3e:ab:57:a7:3d:5a:10:4f:85:6f:37:65: 1c:ae:47:47:72:47:00:1b:86:b5:ed:78:97:da:67:7a:05:31: 0c:c7:45:b4:2d:50:3b:77:25:d6:44:93:27:4f:2b:8d:a4:10: e3:c5:98:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw QkE0RDE2OEEwHhcNMjUxMDE5MDcwMTUxWhcNMjUxMDI2MDcwMTUxWjAYMRYwFAYD VQQDEw02OGY0OGNkZi1lZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFC4ZXiGupj2BiNX5LSMkKeVBbzKIdkZ5SYgf91K6ZyW11mH9B7FFb1lnZH+ PQqj1F31l8kP+w1EEYCZCZLLhblYtBEk4/GWn0xqf9RQNN2Jqpmj+YYVOKLS/5mf XyOTyr9N8LWqpu5zamXREzC5KvOWZ0ogRz8Z6u9MrWOXazerbRGjXcIktDVO6MYC i8mICflZbQ88oPwXhH8Ho1aZiVbWhYNqmUx27maxdNbdCVa9QslcIX6kzO18eZDY 78naUQm8EJI4ahaxHbvFLip0jiCFTe8QVuyHj/1v0UMv7/BD0CJUZhKIv9yd2mFu 3LeEU1wmDlLQ6eb1F42hvBL7+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoHIjqk DRwbgYKimIwUdiKsMnZ7MB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1 QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hq Q2h1X2F2QmxHTGtMcE5Gb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4+2wHxLJ+ol1yhsZFzMjpwMUDvOh2tcAsj4LgxkGHB6UP0VzsHNKd /vaIMoYSSJRwoG3pPtBKM77xNxCmBZfPvGXI9za5P50gawHufygT6UZJhm60frJT rGJh65Aviht9NpTc4KFehcEbHO6cbrWBE5Qg3nSZS6tyfSVHp68qGM94oF1FToep BIxtloLgnQUx1V6eGA8/V8BIVucNARBOGDHrUJvYM4kVVmBDGLlbvQTpbhtcj4wa 5IeE5OeXOQNOtkf4o7O8hE6Fuoc+q1enPVoQT4VvN2UcrkdHckcAG4a17XiX2md6 BTEMx0W0LVA7dyXWRJMnTyuNpBDjxZhL -----END CERTIFICATE-----Generated at Mon Oct 20 21:02:53 2025 by rpki-client