$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json) Hash identifier: tIqBgInpkKhnbU6Rvf1U6nkoAw2+Wll575UYb8TGFPo= Subject key identifier: 6A:F1:DE:5F:AF:BD:9E:DE:01:92:94:08:C0:C3:1F:F3:08:6F:FB:69 Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Certificate serial: 108F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft Manifest number: 1069 Signing time: Mon 20 Oct 2025 17:53:21 +0000 Manifest this update: Mon 20 Oct 2025 17:53:21 +0000 Manifest next update: Mon 27 Oct 2025 17:53:21 +0000 Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: 1zFTSuPqNL0++zHzn+pVAMF0ITYehEKhLClOCpNtKzs=) 2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: 4v2ndb5kC9RQ/ICFAsBPzACNjUkltroKMEeinvAl9Rg=) 3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: gSqRoN1z82N7viR2G1U5YkqGrldYUent3/4dX2IrRC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4239 (0x108f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Validity Not Before: Oct 20 17:53:21 2025 GMT Not After : Oct 27 17:53:21 2025 GMT Subject: CN=68f67711-3ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:fc:a4:33:81:c7:77:5e:95:68:9f:b3:ba: 44:a0:54:54:79:bb:8f:14:29:cc:90:f5:5b:c0:0f: 07:7e:81:24:97:a1:33:1a:ee:7f:a6:b3:80:ac:ca: 2c:1a:ec:d5:4e:d2:48:86:96:1e:9c:9f:d4:0d:00: 8f:2c:ef:58:6a:6c:3e:bf:75:53:86:af:f2:7f:29: a0:f4:41:53:e7:66:01:b8:7e:de:68:35:3f:90:76: 95:ff:b3:3b:0a:ff:65:dc:69:fe:a9:32:5c:db:00: ab:a4:1c:7f:18:1e:97:b8:4a:b7:18:00:0e:bb:cc: 84:64:71:f6:c8:43:21:39:96:29:42:f4:0f:3d:d1: 4f:6e:e3:8e:c8:68:ee:c6:56:06:ec:1e:38:43:d5: 9a:0f:da:fb:ee:40:cb:65:37:5d:01:bc:77:57:c6: 0e:5c:33:11:57:60:fc:5f:1e:70:6f:e9:7d:31:e5: ec:30:a6:bc:a0:29:b0:74:5b:f8:38:a1:92:9d:0a: b1:3a:4b:95:9b:71:d7:6d:09:89:e1:70:84:3a:b5: a7:45:52:f3:a1:08:8d:35:9a:8c:fd:9e:86:d6:c2: cd:19:db:5e:14:f5:7a:62:7f:bb:65:6a:65:29:f4: e1:07:e4:10:77:da:ab:39:9b:28:72:32:41:77:2d: d1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F1:DE:5F:AF:BD:9E:DE:01:92:94:08:C0:C3:1F:F3:08:6F:FB:69 X509v3 Authority Key Identifier: keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:b3:30:21:2a:a6:f6:9b:3b:00:9e:9c:2e:7f:bd:be:72:f3: 8a:02:4a:04:d5:99:f5:24:5c:9c:cb:8e:71:ab:2e:45:07:ba: 3a:16:33:0a:bc:62:f5:df:ff:6f:c2:ed:7e:d2:bc:9c:5b:9b: 24:4a:cc:63:a7:33:29:1d:2d:61:6e:04:cc:57:e5:f5:3d:45: 76:ec:a2:a9:f5:b9:39:f6:82:77:6d:b0:30:e7:b0:1b:3e:aa: a7:4c:2e:b8:df:12:9d:b5:eb:4c:9a:a2:d0:40:37:30:b8:eb: af:95:f5:8e:18:63:48:3f:c7:67:21:40:ed:26:2e:7a:11:a4: c3:dd:77:81:f0:ff:92:c2:f2:33:ab:28:bd:2a:f6:0c:6f:c1: ce:4f:8a:aa:be:69:34:3e:c0:23:ed:4e:8c:0e:96:34:9c:c2: f2:3c:ae:f5:c3:f3:70:45:a6:98:6f:40:cc:c3:50:bc:5e:3a: 2a:4d:00:5c:22:68:7e:5d:ee:b8:c9:6e:ff:af:40:e7:d4:45: 53:38:2d:a4:2a:43:25:b6:8c:d1:15:d1:8d:bf:df:33:dc:3c: 3b:34:9e:9b:27:01:2e:e9:e9:65:4d:7d:79:d5:17:f0:00:f9: d4:cd:ff:40:51:a6:de:e0:64:2d:26:2f:4e:7a:e1:d2:7f:a6: 62:33:cd:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4NTYxMTAvBgNVBAUTKDU1MUY1OEE2OEM4RkU2OTIwQjJFRjBBQzZFOTBBMkQz RjM1ODhBNzYwHhcNMjUxMDIwMTc1MzIxWhcNMjUxMDI3MTc1MzIxWjAYMRYwFAYD VQQDEw02OGY2NzcxMS0zYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK78pDOBx3delWifs7pEoFRUebuPFCnMkPVbwA8HfoEkl6EzGu5/prOArMos GuzVTtJIhpYenJ/UDQCPLO9Yamw+v3VThq/yfymg9EFT52YBuH7eaDU/kHaV/7M7 Cv9l3Gn+qTJc2wCrpBx/GB6XuEq3GAAOu8yEZHH2yEMhOZYpQvQPPdFPbuOOyGju xlYG7B44Q9WaD9r77kDLZTddAbx3V8YOXDMRV2D8Xx5wb+l9MeXsMKa8oCmwdFv4 OKGSnQqxOkuVm3HXbQmJ4XCEOrWnRVLzoQiNNZqM/Z6G1sLNGdteFPV6Yn+7ZWpl KfThB+QQd9qrOZsocjJBdy3RnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrx3l+v vZ7eAZKUCMDDH/MIb/tpMB8GA1UdIwQYMBaAFFUfWKaMj+aSCy7wrG6QotPzWIp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDg1Ni9FRDU3Nzk1RTRD NzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVwSUxMdkNzYnBDaTBfTllp blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSOVlwb3lQNXBJTEx2Q3NicENpMF9OWWluWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDg1Ni9FRDU3Nzk1RTRDNzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVw SUxMdkNzYnBDaTBfTllpblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXszAhKqb2mzsAnpwuf72+cvOKAkoE1Zn1JFycy45xqy5FB7o6FjMK vGL13/9vwu1+0rycW5skSsxjpzMpHS1hbgTMV+X1PUV27KKp9bk59oJ3bbAw57Ab PqqnTC643xKdtetMmqLQQDcwuOuvlfWOGGNIP8dnIUDtJi56EaTD3XeB8P+SwvIz qyi9KvYMb8HOT4qqvmk0PsAj7U6MDpY0nMLyPK71w/NwRaaYb0DMw1C8XjoqTQBc Imh+Xe64yW7/r0Dn1EVTOC2kKkMltozRFdGNv98z3Dw7NJ6bJwEu6ellTX151Rfw APnUzf9AUabe4GQtJi9OeuHSf6ZiM81L -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:23 2025 by rpki-client