$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: 2bvVSL036jlZ0t3b5A2lV5F+SGQ18Zh5F5aPN2jObuQ= Subject key identifier: 65:0A:37:A9:31:F4:D7:39:93:50:3E:62:FA:42:16:FC:B7:53:27:FC Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 353A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 3509 Signing time: Sat 18 Oct 2025 14:23:21 +0000 Manifest this update: Sat 18 Oct 2025 14:23:20 +0000 Manifest next update: Sat 25 Oct 2025 14:23:20 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: TARcmeIadqA1zAf0awlnZbAEqOVe1FCNIfR+CfZn3SY=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 6: A82F26B0466911F0ACD64867C4F9AE02.roa (hash: 2ZVWAkjDpndv3LhT9XdZy2paoKqw+nEDo6qJplPnRnM=) 7: 30941278EF2011EF9264077FC4F9AE02.roa (hash: dH1BFoeKKcX/dB6MDpyS3SQGnjUCambU+BCLw/wlqFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13626 (0x353a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Oct 18 14:23:20 2025 GMT Not After : Oct 25 14:23:20 2025 GMT Subject: CN=68f3a2d8-1853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:00:6c:03:4e:82:c0:25:b8:a1:23:91:04: 83:f7:f8:55:dd:27:d2:87:6e:54:f8:47:bd:19:82: 10:74:a8:b6:3f:d3:9a:f7:0a:23:ff:4e:ec:70:58: b6:4a:46:b7:19:e6:b9:fa:35:6b:5f:ad:87:38:09: f7:ef:6a:bd:3c:ac:e8:79:32:0f:e4:02:8c:ce:08: 8f:65:01:e8:48:d4:7f:23:8b:ad:40:7e:01:fa:da: b7:69:14:d8:4a:2d:76:43:a4:4f:d5:6b:f1:28:df: f2:b8:c8:a6:95:b1:e7:82:76:d9:91:f7:4e:6b:87: 30:80:5d:ac:33:67:8e:d8:69:fd:bf:ac:35:a4:04: de:71:94:1a:93:df:c1:f7:7a:db:52:ac:d4:e9:47: d9:04:46:1d:ad:6a:a9:dc:70:80:1b:de:bd:25:45: d1:0e:dd:3b:a5:1f:29:b9:b3:19:e5:f8:25:8f:43: cb:d9:3d:bb:0f:a8:b0:3f:d3:df:94:6e:cd:92:3b: e8:5a:ad:4d:56:fe:03:5a:40:98:fd:4a:46:f6:b6: 74:54:91:1e:8b:9b:15:c5:d0:36:1b:f6:84:0f:40: f6:cb:63:3b:4f:b9:c1:65:48:8a:2e:cc:23:23:77: 84:f5:7b:92:1e:ee:03:b6:87:13:42:9b:9d:92:ff: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0A:37:A9:31:F4:D7:39:93:50:3E:62:FA:42:16:FC:B7:53:27:FC X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:44:41:d9:8e:c2:46:de:07:6a:2c:92:bc:ed:73:78:a9:de: 0d:9b:b2:3f:24:ce:6e:08:e2:bc:0d:84:3a:84:43:56:d6:39: 8b:02:d2:79:ee:a6:f0:a9:91:9f:da:12:c6:f3:08:23:cb:93: a3:cf:3e:66:85:5d:0f:a2:e6:f0:22:b6:49:ac:1b:9b:f6:49: e9:45:90:7c:dc:d2:d0:02:79:84:06:20:eb:92:c8:e1:97:80: 17:00:73:93:8e:65:3e:a4:a1:95:12:ea:70:cd:02:d3:bc:6c: 89:5a:82:ae:3f:0f:c8:9a:bb:1e:db:86:b1:9d:f6:e3:1f:a5: 81:06:a9:78:18:ed:e3:f2:01:38:2e:03:92:54:82:15:79:51: 4f:1b:ce:d7:6a:55:23:b0:8b:69:db:5a:e3:19:e9:21:9b:d8: be:de:ca:e0:7d:46:19:17:96:36:c4:ab:8e:ae:f1:e9:ca:9e: 1c:1d:dd:5d:27:ff:1c:74:36:8c:71:3d:15:ca:39:b2:99:22: 4c:f3:d3:91:ad:fe:24:2b:52:c5:6d:6f:78:92:c5:01:34:d3: 17:c9:28:53:e0:44:9c:8c:8a:30:1b:ea:d7:a0:48:6c:36:63: 3b:a4:78:df:64:23:d0:27:d3:6f:93:a3:07:d4:37:b0:d2:67: 94:ed:5b:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUxMDE4MTQyMzIwWhcNMjUxMDI1MTQyMzIwWjAYMRYwFAYD VQQDEw02OGYzYTJkOC0xODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl4AbANOgsAluKEjkQSD9/hV3SfSh25U+Ee9GYIQdKi2P9Oa9woj/07scFi2 Ska3Gea5+jVrX62HOAn372q9PKzoeTIP5AKMzgiPZQHoSNR/I4utQH4B+tq3aRTY Si12Q6RP1WvxKN/yuMimlbHngnbZkfdOa4cwgF2sM2eO2Gn9v6w1pATecZQak9/B 93rbUqzU6UfZBEYdrWqp3HCAG969JUXRDt07pR8pubMZ5fglj0PL2T27D6iwP9Pf lG7NkjvoWq1NVv4DWkCY/UpG9rZ0VJEei5sVxdA2G/aED0D2y2M7T7nBZUiKLswj I3eE9XuSHu4DtocTQpudkv9NcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUKN6kx 9Nc5k1A+YvpCFvy3Uyf8MB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLREHZjsJG3gdqLJK87XN4qd4Nm7I/JM5uCOK8DYQ6hENW1jmLAtJ5 7qbwqZGf2hLG8wgjy5Ojzz5mhV0PoubwIrZJrBub9knpRZB83NLQAnmEBiDrksjh l4AXAHOTjmU+pKGVEupwzQLTvGyJWoKuPw/Imrse24axnfbjH6WBBql4GO3j8gE4 LgOSVIIVeVFPG87XalUjsItp21rjGekhm9i+3srgfUYZF5Y2xKuOrvHpyp4cHd1d J/8cdDaMcT0VyjmymSJM89ORrf4kK1LFbW94ksUBNNMXyShT4EScjIowG+rXoEhs NmM7pHjfZCPQJ9Nvk6MH1Dew0meU7Vtd -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:11 2025 by rpki-client