$ rpki-client -vvf rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft File: a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft (raw, json) Hash identifier: EjGj3WE6jRD9aB3bOy7o/+ayt708pqK1cof0jsAKC6M= Subject key identifier: 32:4D:45:3C:35:B2:10:2C:08:DD:76:31:8E:2F:4A:C0:CE:33:07:34 Authority key identifier: 6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C Certificate issuer: /CN=A9152705/serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft Manifest number: 12 Signing time: Sun 19 Oct 2025 11:30:13 +0000 Manifest this update: Sun 19 Oct 2025 11:30:13 +0000 Manifest next update: Sun 26 Oct 2025 11:30:13 +0000 Files and hashes: 1: a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl (hash: nmZYhdfN2/4ESdFfvwat/0e/U/rKNG7c/j2Nk+lQufM=) 2: D5E5F60E92BF11F0BA90D823C4F9AE02.roa (hash: r5MD1RHeYrmwx+4qL0Z/lL7AllWPwSQqqeUriNLY+mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152705, serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Validity Not Before: Oct 19 11:30:13 2025 GMT Not After : Oct 26 11:30:13 2025 GMT Subject: CN=68f4cbc5-e50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:52:04:d9:73:d0:b7:64:3a:dc:49:7e:d8: b1:93:25:75:0d:24:f5:62:3f:c5:1d:89:84:bd:91: 14:00:1f:72:c9:ed:2b:79:53:c6:e8:9e:90:a0:50: 57:33:f3:99:59:07:22:76:67:5b:7e:2b:b4:f3:39: cd:70:6b:2b:c8:4e:c4:3d:d2:d0:4d:48:4c:b4:29: 53:e8:d1:2f:37:b4:93:25:c8:ad:9c:2f:22:60:8d: b3:a8:99:7f:c2:40:b8:09:bd:6a:19:26:c8:cd:ce: 2f:73:8f:3c:bd:fb:f7:7d:a0:b6:b7:98:db:cb:6d: a9:9d:d1:7d:c1:6d:a3:56:50:0a:59:1e:09:c5:f0: a3:77:67:7b:d4:27:fb:2c:f1:2c:4d:fb:4e:3c:8e: 4d:db:5b:54:2d:42:9e:c3:45:32:4e:ce:ed:63:fc: f6:a3:cd:74:03:a2:10:04:4a:0c:ec:53:4b:dd:42: eb:11:5a:a9:86:88:a9:3f:23:9d:88:f8:35:6b:4d: 55:db:e2:68:07:0d:77:f2:cc:50:e0:c0:9d:36:c1: 42:90:39:53:8d:4f:8a:b7:49:bb:c5:c8:8f:08:87: 66:e4:fa:a1:e7:ac:e1:cf:d2:5e:3e:eb:d7:1f:f5: e6:5d:a8:07:33:52:08:5b:b2:bd:a0:57:73:f4:fa: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4D:45:3C:35:B2:10:2C:08:DD:76:31:8E:2F:4A:C0:CE:33:07:34 X509v3 Authority Key Identifier: keyid:6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b5:ae:73:33:fe:dd:c2:81:43:b4:02:24:01:a8:d5:55:ae: f7:bc:4e:fc:9f:2d:21:1a:da:cc:a9:ef:bc:bb:10:06:ca:f1: 50:5f:f1:9e:f8:7c:89:46:32:1a:94:73:2b:d7:f0:30:2c:ba: a0:1e:e9:9d:71:78:f0:37:23:42:11:12:3b:e7:20:1a:71:61: 7c:c6:04:58:aa:73:3b:78:85:62:54:55:85:d9:72:24:09:98: 79:cd:12:c8:b3:2f:d2:12:f2:2f:7a:7a:12:33:78:d5:0e:33: 56:31:50:37:53:35:1b:5e:e5:45:94:ac:05:b0:ed:f0:2d:b1: 18:f1:06:22:0b:9f:58:ac:c7:2a:7c:a6:7b:34:42:05:36:91: 03:24:4b:9e:57:23:c3:5f:75:e0:c4:34:55:41:c9:0c:f3:41: 7b:7b:98:7c:7c:ab:0d:a2:23:d1:bc:d4:bf:a5:43:57:ac:0b: 8e:6b:69:7c:61:e8:e8:0f:76:a4:9f:3b:05:0b:3a:ea:a6:1f: ae:a7:08:3a:94:3d:37:5e:1a:0a:72:4e:3e:ea:30:80:9b:08: 02:e4:16:95:87:3d:58:68:91:2d:17:f0:23:2d:01:8c:55:ae: 10:c6:99:35:79:5d:a9:4a:cd:a6:1a:42:41:91:4b:73:2a:0f: f3:6f:e3:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjcwNTExMC8GA1UEBRMoNkJFQkMwMjEyRDZGRUQ4MzIxQzhENkYwQzVDOUM0QTY2 RUQ3MTE3QzAeFw0yNTEwMTkxMTMwMTNaFw0yNTEwMjYxMTMwMTNaMBgxFjAUBgNV BAMTDTY4ZjRjYmM1LWU1MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXC1IE2XPQt2Q63El+2LGTJXUNJPViP8UdiYS9kRQAH3LJ7St5U8bonpCgUFcz 85lZByJ2Z1t+K7TzOc1wayvITsQ90tBNSEy0KVPo0S83tJMlyK2cLyJgjbOomX/C QLgJvWoZJsjNzi9zjzy9+/d9oLa3mNvLbamd0X3BbaNWUApZHgnF8KN3Z3vUJ/ss 8SxN+048jk3bW1QtQp7DRTJOzu1j/PajzXQDohAESgzsU0vdQusRWqmGiKk/I52I +DVrTVXb4mgHDXfyzFDgwJ02wUKQOVONT4q3SbvFyI8Ih2bk+qHnrOHP0l4+69cf 9eZdqAczUghbsr2gV3P0+n+jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMk1FPDWy ECwI3XYxji9KwM4zBzQwHwYDVR0jBBgwFoAUa+vAIS1v7YMhyNbwxcnEpm7XEXww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyNzA1LzYyNzYwRDI2OTJC RjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lNaHlOYnd4Y25FcG03WEVY dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYS12QUlTMXY3WU1oeU5id3hjbkVwbTdYRVh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy NzA1LzYyNzYwRDI2OTJCRjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lN aHlOYnd4Y25FcG03WEVYdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACG1rnMz/t3CgUO0AiQBqNVVrve8TvyfLSEa2syp77y7EAbK8VBf8Z74 fIlGMhqUcyvX8DAsuqAe6Z1xePA3I0IREjvnIBpxYXzGBFiqczt4hWJUVYXZciQJ mHnNEsizL9IS8i96ehIzeNUOM1YxUDdTNRte5UWUrAWw7fAtsRjxBiILn1isxyp8 pns0QgU2kQMkS55XI8NfdeDENFVByQzzQXt7mHx8qw2iI9G81L+lQ1esC45raXxh 6OgPdqSfOwULOuqmH66nCDqUPTdeGgpyTj7qMICbCALkFpWHPVhokS0X8CMtAYxV rhDGmTV5XalKzaYaQkGRS3MqD/Nv4ws= -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:52 2025 by rpki-client