$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft File: vHDzdLcox7cRwkpoJ_dHekKyKk0.mft (raw, json) Hash identifier: ldmVj9CmEd+THrRFsQOtITT35U8ayAde67G2xHKxUus= Subject key identifier: 08:99:BC:D1:F8:09:78:9B:37:D1:A5:4E:70:F8:AF:36:DA:ED:2F:BE Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D Certificate issuer: /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft Manifest number: 79 Signing time: Sun 19 Oct 2025 10:05:14 +0000 Manifest this update: Sun 19 Oct 2025 10:05:14 +0000 Manifest next update: Sun 26 Oct 2025 10:05:14 +0000 Files and hashes: 1: vHDzdLcox7cRwkpoJ_dHekKyKk0.crl (hash: NuLXlDwmaRXDQJfX2KTtNJw85AKP7LfClsoCXPNya2Q=) 2: 3B69BCFAF53A11EF907A433EC4F9AE02.roa (hash: g53LMcn3iRdJAKtGtiImyfZixGirZg93i3IYIo94JAU=) 3: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (hash: XvWuI1YoEga2y2ypcrjG1/r0tc+yszPXr1W996sUaXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Validity Not Before: Oct 19 10:05:14 2025 GMT Not After : Oct 26 10:05:14 2025 GMT Subject: CN=68f4b7da-9e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:fa:e7:b8:1c:15:dc:b7:08:f4:d8:d3:f7: a1:b9:94:71:58:41:78:3f:58:e4:36:5e:cf:af:3a: fc:88:9d:41:8a:02:32:30:8c:aa:50:99:d6:4f:e2: 94:e3:ce:6b:92:92:f2:1a:2d:b6:bb:cd:d5:c8:b6: 16:46:22:9e:47:55:d2:1d:87:f1:70:3f:41:d2:d2: 36:5c:41:a4:64:1e:c5:31:8c:d6:1e:31:47:f0:b4: fb:cc:13:42:4b:09:5d:91:71:13:0b:86:72:f7:ad: 87:29:5a:1e:6a:78:98:5b:a1:23:46:0b:20:21:03: d9:fc:60:43:ef:d0:ee:ff:ba:b4:2c:01:4f:78:ed: 82:1c:d8:cc:85:5e:ea:70:57:3e:77:63:12:01:14: 41:e0:4f:6d:cd:09:e4:dd:8f:13:b9:cb:6a:10:79: 64:66:a7:54:0c:e5:5b:90:44:9e:8c:fb:bb:1f:44: f1:71:fc:b5:42:3f:a3:4f:c5:5e:8a:2a:6d:77:76: 2f:a4:0e:3e:1d:c5:90:66:0d:37:9a:e4:0f:85:1e: 0d:22:2a:16:89:11:a6:03:a3:2a:cb:26:f3:8b:1c: a2:0f:2d:73:bd:3b:92:b0:81:f2:1d:37:c8:4d:6f: 92:7f:80:72:fd:1d:d5:41:37:90:88:7f:e8:7e:21: c8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:99:BC:D1:F8:09:78:9B:37:D1:A5:4E:70:F8:AF:36:DA:ED:2F:BE X509v3 Authority Key Identifier: keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f9:fc:0a:6d:25:53:b8:01:d0:c1:43:70:b6:48:0e:61:a2: 92:f6:c4:09:29:f4:6f:52:45:77:ce:0f:e8:e8:3c:c4:26:a5: 82:4b:08:72:79:a3:ed:9f:ad:cc:af:20:26:61:4f:9d:f1:26: 72:23:91:3a:0c:01:96:e4:2b:ba:3b:36:f3:38:7c:9a:b4:98: f5:6f:fa:f5:0a:3b:a6:64:e8:83:60:17:58:bc:e7:e1:d2:ea: 4b:34:2d:2f:8b:8a:d1:bf:20:f6:6f:d6:5c:18:f7:28:be:d9: f3:4f:5c:ba:dc:ef:3e:f4:29:4b:9c:f0:e6:69:15:8b:86:90: 23:90:76:85:a4:d1:2e:59:6a:a1:99:1c:a6:37:a8:a8:f4:10: 38:88:c9:04:28:6c:3c:77:02:46:89:2e:61:6c:2e:e2:5f:f0: ab:5c:9c:92:7a:9a:69:fb:b0:c4:f1:4e:55:90:4e:84:5c:fa: 39:d6:8e:4d:c0:6b:86:5f:63:2e:23:31:da:70:5d:3c:63:0d: fc:5f:d9:7e:4c:3f:30:98:7e:3d:3b:d8:a1:c7:d2:a6:e9:6a: 70:cc:5e:b8:85:81:2a:86:f5:bd:62:cf:c1:a6:2e:68:39:1c: e6:92:df:0f:72:40:dd:61:79:d7:e4:ec:06:44:a7:5f:00:a6: 49:67:8e:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkE3NTExMC8GA1UEBRMoQkM3MEYzNzRCNzI4QzdCNzExQzI0QTY4MjdGNzQ3N0E0 MkIyMkE0RDAeFw0yNTEwMTkxMDA1MTRaFw0yNTEwMjYxMDA1MTRaMBgxFjAUBgNV BAMTDTY4ZjRiN2RhLTllNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4wfrnuBwV3LcI9NjT96G5lHFYQXg/WOQ2Xs+vOvyInUGKAjIwjKpQmdZP4pTj zmuSkvIaLba7zdXIthZGIp5HVdIdh/FwP0HS0jZcQaRkHsUxjNYeMUfwtPvME0JL CV2RcRMLhnL3rYcpWh5qeJhboSNGCyAhA9n8YEPv0O7/urQsAU947YIc2MyFXupw Vz53YxIBFEHgT23NCeTdjxO5y2oQeWRmp1QM5VuQRJ6M+7sfRPFx/LVCP6NPxV6K Km13di+kDj4dxZBmDTea5A+FHg0iKhaJEaYDoyrLJvOLHKIPLXO9O5KwgfIdN8hN b5J/gHL9HdVBN5CIf+h+IcgfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCJm80fgJ eJs30aVOcPivNtrtL74wHwYDVR0jBBgwFoAUvHDzdLcox7cRwkpoJ/dHekKyKk0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQTc1L0VGNUNENkRBRjUz OTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdjUndrcG9KX2RIZWtLeUtr MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkhEemRMY294N2NSd2twb0pfZEhla0t5S2swLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QTc1L0VGNUNENkRBRjUzOTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdj UndrcG9KX2RIZWtLeUtrMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAT5/AptJVO4AdDBQ3C2SA5hopL2xAkp9G9SRXfOD+joPMQmpYJLCHJ5 o+2frcyvICZhT53xJnIjkToMAZbkK7o7NvM4fJq0mPVv+vUKO6Zk6INgF1i85+HS 6ks0LS+LitG/IPZv1lwY9yi+2fNPXLrc7z70KUuc8OZpFYuGkCOQdoWk0S5ZaqGZ HKY3qKj0EDiIyQQobDx3AkaJLmFsLuJf8KtcnJJ6mmn7sMTxTlWQToRc+jnWjk3A a4ZfYy4jMdpwXTxjDfxf2X5MPzCYfj072KHH0qbpanDMXriFgSqG9b1iz8GmLmg5 HOaS3w9yQN1hedfk7AZEp18Apklnjpc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:14 2025 by rpki-client