$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: Q6OWfUKTl6I0Ms1e6wT9OeVmTqJnnrSpn3CI5NGyrJg= Subject key identifier: 99:7D:93:D2:BF:B6:76:38:3E:C2:1E:BF:99:AC:96:DB:CE:16:67:68 Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 0640 Signing time: Sun 19 Oct 2025 00:15:30 +0000 Manifest this update: Sun 19 Oct 2025 00:15:30 +0000 Manifest next update: Sun 26 Oct 2025 00:15:30 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: WaV3b7rp+scE6fNHUADXM56o1IRthbekl2AGN0DJQ7o=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: Oct 19 00:15:30 2025 GMT Not After : Oct 26 00:15:30 2025 GMT Subject: CN=68f42da2-9238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d0:16:05:07:4b:54:a0:71:36:7b:c8:47:a4: d2:b3:72:c3:06:94:ed:85:e6:07:f5:1e:45:05:67: e9:b7:f4:99:a0:1c:b8:f0:17:46:8c:07:11:0d:2a: 9c:ea:29:10:52:ef:d8:7f:cc:5d:26:e2:78:ae:7d: bc:82:ae:ac:f8:b5:c6:dd:c2:e8:cd:45:dd:dd:74: 2a:74:9f:ce:ba:15:ba:de:1f:51:b9:7c:70:85:30: d0:60:aa:ca:56:fa:e0:55:09:65:c5:1a:d3:70:e7: 3a:b7:c5:57:ce:90:4a:cc:d5:f9:c0:be:67:dc:ae: 5a:f5:9f:b0:d9:4c:a9:f2:e7:9d:c8:0c:68:28:a1: 16:a8:ae:16:74:68:8d:f7:d1:10:22:5c:2f:b1:f8: fe:19:60:1d:04:c1:42:64:a3:60:30:8c:12:78:24: 53:a9:a4:b8:18:d6:cf:2d:7a:21:1c:4f:58:47:48: de:85:07:62:1f:ec:f4:8e:bc:ce:64:b9:66:35:20: d9:ca:4b:20:1b:3f:a2:5b:3b:e7:52:00:df:dc:b2: 6a:b4:5b:b0:e6:d5:bc:04:cd:fd:0e:93:81:90:48: 18:c3:f3:70:69:70:01:d8:de:01:aa:a8:60:28:ce: b4:99:27:84:a8:a5:c7:80:7b:b0:0e:54:68:15:d3: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7D:93:D2:BF:B6:76:38:3E:C2:1E:BF:99:AC:96:DB:CE:16:67:68 X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:64:56:c4:e0:59:ad:9d:73:42:65:ac:72:34:b1:c3:c6:40: a8:72:9a:19:29:89:34:cf:ec:48:c9:3a:4f:64:26:02:da:4c: e3:dc:88:e0:14:38:1c:ff:f7:eb:17:f7:44:2e:f5:5a:46:82: dd:2b:a8:d3:e3:9e:1c:8d:9f:8a:d3:d1:4d:12:7f:32:1a:9f: 7c:e8:ea:bf:50:63:44:d9:e3:bf:39:68:d4:d6:86:8c:11:9a: c7:8f:5b:95:cd:de:79:c6:f5:a7:e8:eb:23:f1:a1:94:18:ab: f7:30:e3:d4:9a:c3:f2:bc:3b:d1:6f:68:06:0e:b6:55:f4:e7: 4d:01:35:0b:b8:11:9d:09:78:ab:ec:25:56:43:9b:f0:af:32: 5c:3b:1e:54:84:02:24:ea:9c:f3:68:a3:42:11:26:6d:fd:6d: f1:15:ab:30:d4:1d:f9:57:7a:a7:4a:48:62:29:1a:3a:81:d7: ff:79:3f:c8:95:17:89:b1:7b:76:02:2d:96:e0:94:55:f1:2e: ea:9f:55:3b:81:59:77:9b:02:88:a1:ff:0c:3a:aa:2f:09:e6: 99:d2:01:56:6a:26:78:49:12:aa:6a:1b:b9:d4:c3:d1:f7:65: bb:43:46:65:7d:bd:bd:68:55:ef:50:9b:fb:81:b1:6f:70:60: dd:2d:29:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUxMDE5MDAxNTMwWhcNMjUxMDI2MDAxNTMwWjAYMRYwFAYD VQQDEw02OGY0MmRhMi05MjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NAWBQdLVKBxNnvIR6TSs3LDBpTtheYH9R5FBWfpt/SZoBy48BdGjAcRDSqc 6ikQUu/Yf8xdJuJ4rn28gq6s+LXG3cLozUXd3XQqdJ/OuhW63h9RuXxwhTDQYKrK VvrgVQllxRrTcOc6t8VXzpBKzNX5wL5n3K5a9Z+w2Uyp8uedyAxoKKEWqK4WdGiN 99EQIlwvsfj+GWAdBMFCZKNgMIwSeCRTqaS4GNbPLXohHE9YR0jehQdiH+z0jrzO ZLlmNSDZyksgGz+iWzvnUgDf3LJqtFuw5tW8BM39DpOBkEgYw/NwaXAB2N4Bqqhg KM60mSeEqKXHgHuwDlRoFdMBtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl9k9K/ tnY4PsIev5msltvOFmdoMB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVZFbE4FmtnXNCZaxyNLHDxkCocpoZKYk0z+xIyTpPZCYC2kzj3Ijg FDgc//frF/dELvVaRoLdK6jT454cjZ+K09FNEn8yGp986Oq/UGNE2eO/OWjU1oaM EZrHj1uVzd55xvWn6Osj8aGUGKv3MOPUmsPyvDvRb2gGDrZV9OdNATULuBGdCXir 7CVWQ5vwrzJcOx5UhAIk6pzzaKNCESZt/W3xFasw1B35V3qnSkhiKRo6gdf/eT/I lReJsXt2Ai2W4JRV8S7qn1U7gVl3mwKIof8MOqovCeaZ0gFWaiZ4SRKqahu51MPR 92W7Q0Zlfb29aFXvUJv7gbFvcGDdLSla -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:39 2025 by rpki-client