$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json) Hash identifier: bzsWpbCj2UVIElFLGF0+bqOPeW7oUlfNMrm1Z2H5Uws= Subject key identifier: 3B:AA:2A:4F:7F:DE:98:CE:E2:49:C1:BB:D0:39:BC:F1:19:8C:E7:AC Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft Manifest number: 7C Signing time: Sun 19 Oct 2025 10:09:20 +0000 Manifest this update: Sun 19 Oct 2025 10:09:20 +0000 Manifest next update: Sun 26 Oct 2025 10:09:20 +0000 Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: uEVWDM8zmmiNGO5eA5+k9LhqEU4akY83NZDurManE+M=) 2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: pXA/nNICBjxxRUXdfG7Iajai0avdelFN1HiA2VJOvYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Validity Not Before: Oct 19 10:09:20 2025 GMT Not After : Oct 26 10:09:20 2025 GMT Subject: CN=68f4b8d0-be02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c8:15:c1:9d:fa:4f:d5:b9:96:2e:30:86:cf: ad:40:e0:45:51:38:1b:03:b2:9a:0b:07:37:65:5e: 56:a1:a2:3d:fa:3e:ba:a3:ce:e8:f9:c9:5e:fd:42: fc:47:2e:90:a1:ec:01:4f:c4:7d:44:10:ba:ce:38: af:51:d0:21:32:00:cb:d6:0b:de:57:8d:d1:a3:de: 50:8a:e3:27:b7:ee:ed:84:4b:3f:11:17:dd:ab:0e: 70:65:aa:1b:e2:b9:ed:10:73:58:54:61:d0:22:a5: be:5e:df:e7:2d:b8:7c:1d:0f:56:30:0a:8e:22:39: 01:18:11:eb:70:56:2a:1c:59:e4:af:27:64:6b:c5: 7c:a2:5b:30:34:21:2e:ec:e0:e8:bb:68:9c:ff:63: 22:54:25:ff:d0:12:3b:d3:3f:a5:7e:b3:bb:e8:0f: 60:43:3b:62:a7:83:04:24:d0:cf:cc:c1:be:aa:b9: 1c:69:c4:dd:9f:61:6c:90:c7:d4:c0:be:09:f2:ac: c4:40:da:5e:ff:2f:e3:5a:54:14:13:1a:23:62:6f: 94:1d:e7:4f:09:6f:b9:1e:86:01:11:4b:33:77:52: 14:e3:26:a7:77:d5:00:dd:06:b6:1b:f0:31:a0:3b: f1:9d:07:bb:2d:2e:20:65:bb:5a:6d:49:4a:fd:38: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AA:2A:4F:7F:DE:98:CE:E2:49:C1:BB:D0:39:BC:F1:19:8C:E7:AC X509v3 Authority Key Identifier: keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:ec:91:65:0b:c1:55:3f:2e:e3:6e:0e:fa:0f:0f:d6:84:9e: d5:92:ec:9d:d4:2f:0e:1f:77:63:70:7e:61:63:45:40:cb:aa: b9:47:d8:ea:13:c1:37:b0:c4:bc:61:b7:ab:0d:86:65:d0:1a: 6f:15:63:70:b9:34:32:87:c1:52:0c:be:c7:ba:2c:ac:52:be: 3a:0c:60:31:78:45:73:b1:a2:31:0c:51:1d:0b:f4:44:6b:4a: a4:86:a4:f7:37:ee:2b:2b:aa:ac:d2:d9:58:56:17:a9:2f:fa: f8:51:fb:8b:f8:9e:1f:b6:e4:f8:42:6a:a2:5e:0b:94:07:20: 8a:be:21:94:d2:2b:00:c5:5f:bd:e3:04:a6:4b:e7:a0:5c:a4: 3d:19:44:b0:0b:b8:36:da:d8:79:e6:6e:7c:c4:92:b7:80:04: 83:cb:d7:11:ed:4f:00:9e:c4:f4:55:69:58:75:14:4f:5a:0c: 5a:19:99:9f:8e:53:cd:35:12:4c:95:b9:ea:20:2b:d7:38:00: 3e:35:ed:ed:07:c0:c6:86:3b:d4:45:38:e1:11:55:0b:de:cb: 59:ef:93:9f:e3:a6:01:fc:35:d7:13:28:41:b1:c5:d1:67:8c: c8:05:01:7a:de:fb:bc:ce:13:d5:59:a8:49:ca:95:26:ae:7a: ce:b6:78:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDEyNzQxMTAvBgNVBAUTKDY5NThBMUFCM0FDRjdGOTVFREE1QUQ5QzlFNDFFNDQ5 QjZEMTE3RjIwHhcNMjUxMDE5MTAwOTIwWhcNMjUxMDI2MTAwOTIwWjAYMRYwFAYD VQQDEw02OGY0YjhkMC1iZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58gVwZ36T9W5li4whs+tQOBFUTgbA7KaCwc3ZV5WoaI9+j66o87o+cle/UL8 Ry6QoewBT8R9RBC6zjivUdAhMgDL1gveV43Ro95QiuMnt+7thEs/ERfdqw5wZaob 4rntEHNYVGHQIqW+Xt/nLbh8HQ9WMAqOIjkBGBHrcFYqHFnkrydka8V8olswNCEu 7ODou2ic/2MiVCX/0BI70z+lfrO76A9gQztip4MEJNDPzMG+qrkcacTdn2FskMfU wL4J8qzEQNpe/y/jWlQUExojYm+UHedPCW+5HoYBEUszd1IU4yand9UA3Qa2G/Ax oDvxnQe7LS4gZbtabUlK/Thk8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuqKk9/ 3pjO4knBu9A5vPEZjOesMB8GA1UdIwQYMBaAFGlYoas6z3+V7aWtnJ5B5Em20Rfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTI3NC9EOTlGM0FGQUZC MjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1WHRwYTJjbmtIa1NiYlJG X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTI3NC9EOTlGM0FGQUZCMjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1 WHRwYTJjbmtIa1NiYlJGX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDu7JFlC8FVPy7jbg76Dw/WhJ7Vkuyd1C8OH3djcH5hY0VAy6q5R9jq E8E3sMS8YberDYZl0BpvFWNwuTQyh8FSDL7HuiysUr46DGAxeEVzsaIxDFEdC/RE a0qkhqT3N+4rK6qs0tlYVhepL/r4UfuL+J4ftuT4QmqiXguUByCKviGU0isAxV+9 4wSmS+egXKQ9GUSwC7g22th55m58xJK3gASDy9cR7U8AnsT0VWlYdRRPWgxaGZmf jlPNNRJMlbnqICvXOAA+Ne3tB8DGhjvURTjhEVUL3stZ75Of46YB/DXXEyhBscXR Z4zIBQF63vu8zhPVWahJypUmrnrOtnjE -----END CERTIFICATE-----Generated at Mon Oct 20 04:50:07 2025 by rpki-client