$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft File: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json) Hash identifier: Cvice4sY24G3CmBQZboeIDYbY0fkoPOPpcz2TcQ6+Ls= Subject key identifier: EB:76:17:2C:33:D5:37:CC:E8:22:92:ED:8E:3D:24:02:39:0C:43:AC Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 Certificate issuer: /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft Manifest number: 01B4 Signing time: Mon 20 Oct 2025 15:19:09 +0000 Manifest this update: Mon 20 Oct 2025 15:19:08 +0000 Manifest next update: Mon 27 Oct 2025 15:19:08 +0000 Files and hashes: 1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: /R0jTlptpIIG6P56MMX4EVFauNomWsCLqB3dluMok90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Validity Not Before: Oct 20 15:19:08 2025 GMT Not After : Oct 27 15:19:08 2025 GMT Subject: CN=68f652ed-94e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:f6:de:13:60:a1:a9:b7:00:77:78:a6:8e: 32:7f:c7:7a:b0:df:f3:51:e4:71:ec:88:bd:87:cb: 5e:4d:00:08:87:5a:6b:aa:4f:2c:45:da:de:c4:41: b2:4e:57:c5:76:4a:33:f0:a6:34:1c:b7:74:fe:c6: 8f:81:29:0c:35:7c:71:40:e8:c3:7f:1a:e4:62:33: 26:c4:2a:c2:e3:ca:ee:dc:f7:1e:d6:9d:89:0d:0f: 89:c0:66:54:7d:d1:76:44:3c:3f:c4:3b:51:fe:47: c6:1c:46:a6:67:48:fd:16:f5:f9:16:0f:f5:f7:83: 6e:4d:4f:9c:92:6e:66:62:df:c6:4a:c4:d1:3a:31: c2:24:8e:ae:46:73:24:27:89:4c:da:75:bd:92:15: ba:4a:51:f1:b6:80:67:0d:73:48:db:40:75:68:34: 67:bd:f9:e9:51:26:4b:e6:55:c6:70:42:90:e3:6a: eb:8b:e0:55:2d:2a:43:3c:29:94:9e:04:b0:0a:9a: c5:6f:be:31:26:6c:90:da:ba:04:1c:e6:0e:0a:48: 97:78:46:34:80:94:47:8d:55:65:dd:ac:2c:ee:30: ae:51:09:8f:3e:84:de:04:b7:ff:54:5e:99:7c:59: dd:0d:2c:5e:25:eb:46:b9:a1:06:ef:73:ee:d4:8a: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:76:17:2C:33:D5:37:CC:E8:22:92:ED:8E:3D:24:02:39:0C:43:AC X509v3 Authority Key Identifier: keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b7:12:41:10:7a:a1:05:09:88:15:3f:00:b3:7a:16:a1:21: 55:2f:03:af:a3:05:45:c4:37:f5:cf:68:9b:43:e1:16:1d:c1: 43:09:6d:c0:ee:ae:c3:eb:e8:7b:ee:bc:41:ba:83:ad:32:51: 4a:a0:12:e3:6c:7c:8e:86:4a:70:1d:61:56:c1:df:c1:01:66: 49:5c:74:93:32:a3:ee:9c:53:2b:bc:67:10:cd:d6:57:ae:8d: ee:1e:05:36:72:76:96:73:ce:12:3d:1f:c3:e8:cc:11:01:a4: 82:6e:7e:57:a3:3a:17:df:55:36:39:f5:5b:96:f9:2c:de:f9: 52:58:91:3b:0d:cd:16:d5:96:c5:39:d9:b7:61:28:08:42:61: 7a:6d:35:69:75:ec:3b:d1:42:62:33:bc:68:66:56:e2:f9:ec: 4a:15:d2:20:5f:f2:8c:99:2e:4f:32:b9:26:65:8e:a1:7d:3c: 94:96:e3:0f:b3:4e:b0:c7:a9:99:8b:54:de:a3:ce:d7:cd:14: a2:16:48:71:c8:e4:78:e5:da:de:e0:44:ed:f9:31:6b:c3:f4: 2c:e1:20:75:b9:ea:9d:e8:00:71:91:2f:6f:3b:52:0b:bb:49: ac:2d:2b:44:dc:cc:3d:d4:0a:97:ff:d8:cd:2b:7f:be:3c:60: 66:2f:f3:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM2ODQxMTAvBgNVBAUTKEQxNTNGNzU4NUY2MkU5QzMxNTEyRDI4Njg4ODQwMUMx QTY4RERFMTYwHhcNMjUxMDIwMTUxOTA4WhcNMjUxMDI3MTUxOTA4WjAYMRYwFAYD VQQDEw02OGY2NTJlZC05NGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRr23hNgoam3AHd4po4yf8d6sN/zUeRx7Ii9h8teTQAIh1prqk8sRdrexEGy TlfFdkoz8KY0HLd0/saPgSkMNXxxQOjDfxrkYjMmxCrC48ru3Pce1p2JDQ+JwGZU fdF2RDw/xDtR/kfGHEamZ0j9FvX5Fg/194NuTU+ckm5mYt/GSsTROjHCJI6uRnMk J4lM2nW9khW6SlHxtoBnDXNI20B1aDRnvfnpUSZL5lXGcEKQ42rri+BVLSpDPCmU ngSwCprFb74xJmyQ2roEHOYOCkiXeEY0gJRHjVVl3aws7jCuUQmPPoTeBLf/VF6Z fFndDSxeJetGuaEG73Pu1IqHEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOt2Fywz 1TfM6CKS7Y49JAI5DEOsMB8GA1UdIwQYMBaAFNFT91hfYunDFRLShoiEAcGmjd4W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC9BNkM4NDBCMjJB QjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZjTVZFdEtHaUlRQndhYU4z aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBWUDNXRjlpNmNNVkV0S0dpSVFCd2FhTjNoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzY4NC9BNkM4NDBCMjJBQjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZj TVZFdEtHaUlRQndhYU4zaFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVtxJBEHqhBQmIFT8As3oWoSFVLwOvowVFxDf1z2ibQ+EWHcFDCW3A 7q7D6+h77rxBuoOtMlFKoBLjbHyOhkpwHWFWwd/BAWZJXHSTMqPunFMrvGcQzdZX ro3uHgU2cnaWc84SPR/D6MwRAaSCbn5XozoX31U2OfVblvks3vlSWJE7Dc0W1ZbF Odm3YSgIQmF6bTVpdew70UJiM7xoZlbi+exKFdIgX/KMmS5PMrkmZY6hfTyUluMP s06wx6mZi1Teo87XzRSiFkhxyOR45dre4ETt+TFrw/Qs4SB1ueqd6ABxkS9vO1IL u0msLStE3Mw91AqX/9jNK3++PGBmL/N3 -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:53 2025 by rpki-client