$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: 6FUgnjMUOEubzlUDTxfn1R1UcvJ5+7BS9HflEI3WHMQ= Subject key identifier: 44:A6:55:A1:5B:23:81:7C:C3:8F:72:69:59:DC:C8:1B:FB:DB:31:C2 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 136B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 1311 Signing time: Sat 18 Oct 2025 17:34:24 +0000 Manifest this update: Sat 18 Oct 2025 17:34:23 +0000 Manifest next update: Sat 25 Oct 2025 17:34:23 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: a3GEDspbzKRQmBEDZm37TfNiu5iOOXdSkxfETMcyoLI=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: pmGjv9e4kJuui8gahJeniJTVkFZxLqAkqBkutIyaUmM=) 3: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: JtAyYvcjsSIbHjMavRbf74w0IIhNg4IBABZJn0wcwzQ=) 4: 2227B66CF97B11EFA2B83631C4F9AE02.roa (hash: x6GId7866GEm2yx9Alj41gMxCnlfSK7cwtQgE9xlFPo=) 5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: vz1JkowcSPPocIJM8LY5Tc1J1IEwQwHTAm7ad6CcM1k=) 6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: 3fdnPO7nIXug6dYvzk2siFXVuDYGDIdJas3DCvUTWPA=) 7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: DOUd4Ct4uA10KaiPoOZjeWOyNrfXwTZYgvv/v0X/i0Y=) 8: DEF977A6E53611EB81682769C4F9AE02.roa (hash: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4971 (0x136b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Oct 18 17:34:23 2025 GMT Not After : Oct 25 17:34:23 2025 GMT Subject: CN=68f3cf9f-1c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:92:4a:57:b2:0e:e7:90:0b:4c:1e:40:b9: 6c:55:79:10:d8:b6:19:0a:f9:42:fa:50:91:de:27: a3:91:5d:99:5c:d1:25:f9:f0:5f:96:5f:76:c5:39: 32:6c:e5:fc:7f:1c:24:74:eb:85:6e:c3:5a:36:9d: 42:f3:25:d3:cb:da:92:3d:3e:73:8b:b8:f4:09:09: 80:99:53:61:39:21:3c:1b:36:74:0b:61:c0:b8:e7: 8e:4a:85:6b:f9:d0:e0:52:7d:a4:c8:a7:7f:9e:88: d4:56:c1:95:40:b4:92:95:8f:14:e4:d7:be:39:3e: 06:d3:57:dd:b4:04:3e:86:32:bb:b0:a8:47:51:46: f6:19:bf:fc:6e:18:25:bb:36:d7:05:88:d2:7b:fd: 41:69:9f:db:0d:89:10:31:52:3d:6b:9f:b6:ca:b9: d5:db:e8:d4:51:63:7d:1c:eb:f4:2c:5f:5c:01:f3: 0a:70:3f:76:da:28:e9:0f:6e:ef:7b:9f:95:32:e4: 57:65:72:c8:67:a8:96:69:59:b7:32:28:56:f0:f2: 64:21:91:8b:2e:49:a5:37:d2:db:e9:ab:7d:1a:b1: 25:2d:1b:82:a0:eb:5e:ea:e2:90:bd:7f:2d:d0:a5: 60:95:60:c0:b6:ab:89:2f:ab:7e:96:b4:65:ae:cb: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A6:55:A1:5B:23:81:7C:C3:8F:72:69:59:DC:C8:1B:FB:DB:31:C2 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a7:1e:54:cc:32:28:b8:64:45:6f:af:44:69:86:d8:7b:31: 9a:29:82:7d:c2:dc:6a:d8:0c:3b:42:6e:0c:ec:85:59:9c:db: f8:94:bf:f7:b8:ad:10:a9:33:65:6f:a9:a4:ab:c7:d1:53:41: e2:64:7f:47:54:62:2e:46:51:f0:ab:9e:5e:ef:7e:35:0b:42: d2:99:0b:26:35:66:04:6c:10:09:31:f2:30:14:9b:e1:59:fe: d5:8a:86:01:1a:b2:16:90:ed:13:05:eb:c9:41:27:1f:66:2d: ec:0e:b9:06:24:e9:a1:4d:dc:0d:cf:12:60:b2:c0:74:64:71: c3:f2:c5:63:63:f4:8c:00:68:ce:c8:67:0a:b6:21:0b:3a:dc: fe:83:e6:40:12:5e:bf:41:11:23:4e:4e:4c:d6:d3:ea:ae:1d: 6d:2b:f2:c7:c7:66:fc:af:aa:1a:67:b9:a7:b4:41:72:e8:61: bb:37:c2:a1:22:b4:b3:8f:a6:d4:64:fb:25:ab:4c:02:d4:e7: fa:1a:a7:b5:51:ff:46:76:b9:8b:56:76:6d:94:a3:a3:24:90: 8e:46:65:6c:37:59:2f:51:d8:06:08:27:09:5a:52:e5:e2:1e: 2a:73:ee:38:bb:49:54:97:b7:2c:cb:0a:83:e1:40:9d:e4:cf: 80:f4:db:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUxMDE4MTczNDIzWhcNMjUxMDI1MTczNDIzWjAYMRYwFAYD VQQDEw02OGYzY2Y5Zi0xYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaWSSleyDueQC0weQLlsVXkQ2LYZCvlC+lCR3iejkV2ZXNEl+fBfll92xTky bOX8fxwkdOuFbsNaNp1C8yXTy9qSPT5zi7j0CQmAmVNhOSE8GzZ0C2HAuOeOSoVr +dDgUn2kyKd/nojUVsGVQLSSlY8U5Ne+OT4G01fdtAQ+hjK7sKhHUUb2Gb/8bhgl uzbXBYjSe/1BaZ/bDYkQMVI9a5+2yrnV2+jUUWN9HOv0LF9cAfMKcD922ijpD27v e5+VMuRXZXLIZ6iWaVm3MihW8PJkIZGLLkmlN9Lb6at9GrElLRuCoOte6uKQvX8t 0KVglWDAtquJL6t+lrRlrssrxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESmVaFb I4F8w49yaVncyBv72zHCMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAppx5UzDIouGRFb69EaYbYezGaKYJ9wtxq2Aw7Qm4M7IVZnNv4lL/3 uK0QqTNlb6mkq8fRU0HiZH9HVGIuRlHwq55e7341C0LSmQsmNWYEbBAJMfIwFJvh Wf7VioYBGrIWkO0TBevJQScfZi3sDrkGJOmhTdwNzxJgssB0ZHHD8sVjY/SMAGjO yGcKtiELOtz+g+ZAEl6/QREjTk5M1tPqrh1tK/LHx2b8r6oaZ7mntEFy6GG7N8Kh IrSzj6bUZPslq0wC1Of6Gqe1Uf9GdrmLVnZtlKOjJJCORmVsN1kvUdgGCCcJWlLl 4h4qc+44u0lUl7csywqD4UCd5M+A9Ntj -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:46 2025 by rpki-client