$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: QW+CGK0hBF4WIUMejdj30tnsOQJQD6naeGjgGGkmlWw= Subject key identifier: F7:57:E8:35:F9:9D:FC:C2:56:56:0D:33:2C:A8:84:7E:FA:36:2D:82 Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0CAA Signing time: Sat 18 Oct 2025 18:55:31 +0000 Manifest this update: Sat 18 Oct 2025 18:55:31 +0000 Manifest next update: Sat 25 Oct 2025 18:55:31 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: DX+vHW/kmeeCWrPxEhwNtLNMba0bfpwRAiKbNGzykz4=) 2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: XqdQSfz9/Zl7eYUBAr06CP3dhexiFqvZGJN1XSM9VAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: Oct 18 18:55:31 2025 GMT Not After : Oct 25 18:55:31 2025 GMT Subject: CN=68f3e2a3-c3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:e5:c6:35:80:a4:f1:ec:d6:e4:ab:39:5a: 59:30:2f:e4:20:2c:36:6c:42:f6:a8:59:26:df:e0: e1:c8:fe:fc:4f:78:7e:8c:15:91:8a:69:85:cf:87: 2e:3f:c7:3d:2e:d1:e1:58:93:66:1a:1b:1d:1d:2c: c7:56:95:d3:7b:91:fd:63:79:3d:7c:bf:b5:10:be: 25:2d:5e:1e:7f:45:91:ed:2e:37:83:1f:1b:3f:1a: 97:bf:6f:93:12:ca:d0:75:9e:97:76:fb:01:fb:b8: a5:ce:a3:02:a7:15:a6:13:56:77:89:b9:55:68:07: 3a:a8:7e:fa:e7:22:1a:24:18:9f:22:d3:5f:d9:71: 28:65:96:d2:45:0f:a1:e9:8f:33:49:e4:a9:c6:61: 4b:7c:a0:0e:ba:ca:e0:51:b4:40:f6:30:c2:28:5a: bf:cd:a9:93:67:ac:d4:ba:f9:8a:6f:ce:40:df:9f: 62:62:de:fe:c2:ea:5f:e0:f1:eb:6a:8b:b2:f4:68: bd:4f:91:be:35:4a:00:6d:3e:dc:e3:77:fb:37:56: e3:08:2e:e6:19:47:d1:04:4a:2a:f4:1e:9f:0a:62: 1a:0f:62:34:d8:69:05:e8:32:d7:45:7a:42:55:1e: 15:8d:e3:79:21:45:95:b2:e2:85:84:56:9d:8f:e0: 6c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:57:E8:35:F9:9D:FC:C2:56:56:0D:33:2C:A8:84:7E:FA:36:2D:82 X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:59:1e:da:e1:a2:af:0c:96:c1:07:ea:2f:c3:95:aa:50:8e: 62:21:cd:b7:af:14:7c:2e:1c:d8:c2:37:2d:93:32:88:5d:6f: a7:99:73:77:fa:01:19:b1:77:c5:05:31:40:6a:da:8f:c0:ec: 2e:e1:97:ad:54:0a:e4:b3:f8:9c:59:ab:55:b9:0c:07:9b:3e: 7b:d6:9a:1a:a1:8c:b0:02:c7:72:77:69:51:33:4e:46:da:b0: 90:30:65:7e:a3:9e:58:7d:4d:d3:94:64:5a:eb:61:1f:0b:1f: ea:3d:91:61:55:49:03:65:fd:87:3e:a5:48:cc:c7:43:16:99: 65:3e:63:4a:d3:3f:86:48:ef:02:fe:ff:1a:a1:66:de:3b:a9: 22:e5:63:7d:0a:12:bc:c6:3f:8f:ed:b0:5e:93:50:2d:6b:72: 03:af:e3:54:b0:34:f1:5b:5a:b1:0e:c9:f3:65:2a:0c:d4:6c: 7d:ea:4f:98:0e:b4:d3:36:a9:a1:8c:03:c5:6e:37:80:92:6a: 19:05:9d:25:98:91:59:83:39:d4:af:9b:22:a4:8a:ce:80:fd: b6:64:9b:f1:2c:66:4d:42:90:b3:b0:c4:c5:9a:ff:81:5a:f0: 52:db:17:4d:3e:00:45:f7:e5:ea:93:e7:62:be:f1:98:4f:bf: e6:4b:e4:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjUxMDE4MTg1NTMxWhcNMjUxMDI1MTg1NTMxWjAYMRYwFAYD VQQDEw02OGYzZTJhMy1jM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHHlxjWApPHs1uSrOVpZMC/kICw2bEL2qFkm3+DhyP78T3h+jBWRimmFz4cu P8c9LtHhWJNmGhsdHSzHVpXTe5H9Y3k9fL+1EL4lLV4ef0WR7S43gx8bPxqXv2+T EsrQdZ6XdvsB+7ilzqMCpxWmE1Z3iblVaAc6qH765yIaJBifItNf2XEoZZbSRQ+h 6Y8zSeSpxmFLfKAOusrgUbRA9jDCKFq/zamTZ6zUuvmKb85A359iYt7+wupf4PHr aouy9Gi9T5G+NUoAbT7c43f7N1bjCC7mGUfRBEoq9B6fCmIaD2I02GkF6DLXRXpC VR4VjeN5IUWVsuKFhFadj+BsPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdX6DX5 nfzCVlYNMyyohH76Ni2CMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+WR7a4aKvDJbBB+ovw5WqUI5iIc23rxR8LhzYwjctkzKIXW+nmXN3 +gEZsXfFBTFAatqPwOwu4ZetVArks/icWatVuQwHmz571poaoYywAsdyd2lRM05G 2rCQMGV+o55YfU3TlGRa62EfCx/qPZFhVUkDZf2HPqVIzMdDFpllPmNK0z+GSO8C /v8aoWbeO6ki5WN9ChK8xj+P7bBek1Ata3IDr+NUsDTxW1qxDsnzZSoM1Gx96k+Y DrTTNqmhjAPFbjeAkmoZBZ0lmJFZgznUr5sipIrOgP22ZJvxLGZNQpCzsMTFmv+B WvBS2xdNPgBF9+Xqk+divvGYT7/mS+Ss -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:12 2025 by rpki-client