$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: RDjie9lHy+XH5DKzZC/SZt32QtilsmSug+eKHMONYzQ= Subject key identifier: C9:D5:39:FE:F5:71:D2:75:21:E9:AC:04:56:E0:57:1F:B9:CF:51:55 Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: E4 Signing time: Sun 19 Oct 2025 08:25:51 +0000 Manifest this update: Sun 19 Oct 2025 08:25:50 +0000 Manifest next update: Sun 26 Oct 2025 08:25:50 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: Ngx3ZdU0yzjJjoqVC43gVFYILKBy+z0kaQRT8rKvWjs=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: 1UcWorT+hHuzqY8KzQLhN3a0TdkRPLNkQE9UL68LZgs=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: xNPSf2uxf0gfylw09N39nWcLaL34aWsQPkwDaLt++sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Oct 19 08:25:50 2025 GMT Not After : Oct 26 08:25:50 2025 GMT Subject: CN=68f4a08f-0241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:ab:94:d7:49:92:75:db:ab:3a:b2:ab:e0: 81:bc:7a:a0:89:a0:04:1a:8f:b3:d1:59:cf:70:89: 01:13:22:4f:58:37:ea:1a:e4:f4:86:c8:2a:85:3c: 85:bf:8f:30:e2:7d:85:1b:b8:3f:ce:7d:cd:8e:56: b4:52:94:c1:ca:98:4d:4c:eb:97:61:96:59:65:6c: 22:b7:f3:6a:e2:99:c4:42:c2:5e:57:c4:e3:c4:38: eb:c6:8c:86:e8:e2:89:c6:6d:3e:ee:cc:31:d9:dd: 6d:bd:11:2b:0d:7a:6a:28:91:c9:38:86:a6:6b:f7: f1:4f:8c:da:83:67:de:05:87:b9:a4:dd:04:5a:a6: 40:9e:a5:42:d3:03:e8:9d:de:5b:5f:b0:bf:88:87: c4:c0:0d:cd:90:db:97:ae:be:d8:be:ef:d4:48:4f: f3:3d:96:03:32:0f:a9:ec:6c:71:fd:89:3a:d5:b8: 61:d7:7b:82:31:31:87:e9:c2:2b:35:06:70:eb:ec: 28:10:6d:b1:b0:45:d1:b7:55:33:2c:38:fe:fc:1b: 10:7a:d4:ec:85:1a:4f:0b:6c:de:2c:75:f7:1a:93: 52:62:48:2b:49:0d:c8:52:79:51:77:85:d1:9c:a2: 4a:3d:84:3b:a7:3d:9d:87:07:4d:29:3e:ad:f4:9c: 87:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D5:39:FE:F5:71:D2:75:21:E9:AC:04:56:E0:57:1F:B9:CF:51:55 X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:4f:b1:b5:56:d0:08:6c:e5:2f:f0:46:30:ab:ec:2c:90:d4: d6:f3:e5:ef:f0:8a:f1:c8:f4:4c:22:b4:f1:12:3d:fb:81:da: f0:a4:a4:82:f9:0f:0e:d0:09:bd:7c:3b:90:fb:97:b6:a7:01: 0c:94:57:25:99:79:fd:b5:1e:9b:4f:30:94:e4:ab:cb:dc:5c: 23:7b:cb:54:ba:22:a0:43:45:20:56:82:01:2d:0e:89:9a:11: e0:0b:8f:35:9c:ee:40:c8:89:ea:93:7e:b2:a1:e4:ba:ca:92: ef:42:e8:32:b5:a4:82:58:1f:59:a0:42:24:3a:8b:ce:ce:6b: cc:ba:b7:f8:ed:ac:6b:2b:60:82:bd:1e:b2:34:f4:6f:e5:9e: 40:09:6d:96:78:53:19:75:98:63:ca:81:19:39:cf:45:84:15: 10:6f:10:6f:c1:69:e6:09:26:02:51:11:aa:37:56:c4:13:f9: 94:bc:f9:20:28:b7:80:e2:14:b6:ba:00:51:a2:be:6a:07:98: 9a:01:49:74:f3:75:0a:ad:af:8a:11:e4:1f:b2:f3:9f:b4:3e: 51:52:5e:3e:16:c7:74:18:64:7b:cd:3e:4e:38:0a:b0:5a:8c: 18:3d:79:7f:c7:52:9e:d6:17:0d:ba:59:2c:0b:2e:d3:26:68: c1:e9:1e:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4 NTUyMzNEN0MwHhcNMjUxMDE5MDgyNTUwWhcNMjUxMDI2MDgyNTUwWjAYMRYwFAYD VQQDEw02OGY0YTA4Zi0wMjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrOrlNdJknXbqzqyq+CBvHqgiaAEGo+z0VnPcIkBEyJPWDfqGuT0hsgqhTyF v48w4n2FG7g/zn3Njla0UpTByphNTOuXYZZZZWwit/Nq4pnEQsJeV8TjxDjrxoyG 6OKJxm0+7swx2d1tvRErDXpqKJHJOIama/fxT4zag2feBYe5pN0EWqZAnqVC0wPo nd5bX7C/iIfEwA3NkNuXrr7Yvu/USE/zPZYDMg+p7Gxx/Yk61bhh13uCMTGH6cIr NQZw6+woEG2xsEXRt1UzLDj+/BsQetTshRpPC2zeLHX3GpNSYkgrSQ3IUnlRd4XR nKJKPYQ7pz2dhwdNKT6t9JyH4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnVOf71 cdJ1IemsBFbgVx+5z1FVMB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0 OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv ejh5T3BlbjBMWHFGVWpQWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgT7G1VtAIbOUv8EYwq+wskNTW8+Xv8IrxyPRMIrTxEj37gdrwpKSC +Q8O0Am9fDuQ+5e2pwEMlFclmXn9tR6bTzCU5KvL3Fwje8tUuiKgQ0UgVoIBLQ6J mhHgC481nO5AyInqk36yoeS6ypLvQugytaSCWB9ZoEIkOovOzmvMurf47axrK2CC vR6yNPRv5Z5ACW2WeFMZdZhjyoEZOc9FhBUQbxBvwWnmCSYCURGqN1bEE/mUvPkg KLeA4hS2ugBRor5qB5iaAUl083UKra+KEeQfsvOftD5RUl4+Fsd0GGR7zT5OOAqw WowYPXl/x1Ke1hcNulksCy7TJmjB6R48 -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:52 2025 by rpki-client