$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: mnpt9Hai+O/RqmNcy7iTEHkmDrdR/Dnd4Hq1nZFRxTo= Subject key identifier: 7B:F0:20:F3:ED:41:AD:DB:CD:CC:BB:27:9B:7E:44:C6:D0:20:A9:9E Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: 0131 Signing time: Sun 19 Oct 2025 07:23:47 +0000 Manifest this update: Sun 19 Oct 2025 07:23:45 +0000 Manifest next update: Sun 26 Oct 2025 07:23:45 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: p9KqrnVTUSRIwgncL3HdD7pSAQIAr3pEZviRI82mro4=) 2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Oct 19 07:23:45 2025 GMT Not After : Oct 26 07:23:45 2025 GMT Subject: CN=68f49202-7f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:c4:f7:30:56:fc:b9:5f:f1:0e:60:10:64: a8:6f:56:fa:40:5d:3c:8a:90:63:83:4b:63:43:b3: b3:4c:71:9f:1a:7c:8e:91:03:0f:e6:b3:80:e4:8b: b8:90:0d:b6:ef:f8:f5:dd:b6:48:1d:eb:7f:43:fa: 1c:82:dc:24:97:15:0e:a9:22:66:8a:3d:4e:5d:77: 3d:2f:a1:ed:8e:b7:7f:c3:19:cd:8d:fc:3d:9f:ab: 1a:b1:d1:83:a3:dc:ec:d2:d7:6a:cb:f9:00:d4:1a: 23:2b:f5:e2:b8:89:76:04:84:b7:ab:bb:6a:47:9e: b9:f5:19:87:68:ba:86:68:a5:90:5b:ed:ef:67:2a: ce:39:40:fc:ba:eb:9e:30:4f:82:c1:cb:e7:02:d4: 1f:ba:23:fc:55:c2:77:fc:27:22:ac:b3:47:9d:21: 03:35:75:80:06:25:cd:26:ac:29:03:1f:c1:2d:07: be:e3:2d:59:ee:ff:15:a8:9e:81:59:b6:79:93:45: a0:94:cf:0c:3b:0d:2c:e4:07:ae:33:32:dd:21:22: b8:c5:f5:5d:95:42:aa:c5:af:db:0f:03:e0:c8:43: 79:0d:ef:20:79:12:8c:1c:fa:32:ff:00:8c:d5:2c: 89:05:91:91:98:6e:0c:25:41:e3:5e:4e:95:0e:c4: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F0:20:F3:ED:41:AD:DB:CD:CC:BB:27:9B:7E:44:C6:D0:20:A9:9E X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f8:0b:e7:ec:f8:47:e1:83:47:fb:9a:66:5a:53:d9:1c:93: fb:9c:5b:f3:d6:ee:5d:d0:5a:10:8c:d6:0d:22:12:ca:f0:4a: cc:bf:b9:ea:b3:37:3f:23:b2:c3:17:37:0a:c5:33:1f:82:1d: e4:3b:d3:94:a4:1e:f6:bb:f5:fb:08:7b:2e:6b:ce:0c:a2:de: ac:b4:8c:68:a2:d1:5c:77:6f:94:68:9b:8d:73:d3:52:a2:4a: af:2c:6c:0b:04:e4:ca:f6:77:f5:25:f9:a9:82:2e:89:0a:15: 4b:9e:f2:25:6f:22:70:91:a2:07:94:dd:69:8d:3a:2e:7f:6b: 6a:48:95:a7:1e:65:cd:92:ae:ae:68:48:b8:17:42:90:3a:32: f4:4b:4b:a5:96:8f:55:cb:2a:54:9a:c1:93:64:6a:b3:80:5d: c3:cb:9d:79:94:4c:55:d2:29:91:0f:e8:8e:0a:26:2c:81:31: 4a:6e:32:b8:13:14:76:58:e2:2a:80:4b:27:da:0f:a1:99:57: ac:3c:d2:fb:30:ac:e4:9c:b9:db:58:c8:4c:d3:61:b2:a6:ac: 62:d6:ad:f5:d0:9a:63:ca:f8:2d:26:f5:01:27:eb:d0:d8:19: 10:33:30:6c:f5:61:7b:15:f3:db:1b:a1:72:5b:e5:9f:8b:dc: eb:14:88:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUxMDE5MDcyMzQ1WhcNMjUxMDI2MDcyMzQ1WjAYMRYwFAYD VQQDEw02OGY0OTIwMi03ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2l7E9zBW/Llf8Q5gEGSob1b6QF08ipBjg0tjQ7OzTHGfGnyOkQMP5rOA5Iu4 kA227/j13bZIHet/Q/ocgtwklxUOqSJmij1OXXc9L6Htjrd/wxnNjfw9n6sasdGD o9zs0tdqy/kA1BojK/XiuIl2BIS3q7tqR5659RmHaLqGaKWQW+3vZyrOOUD8uuue ME+CwcvnAtQfuiP8VcJ3/CcirLNHnSEDNXWABiXNJqwpAx/BLQe+4y1Z7v8VqJ6B WbZ5k0WglM8MOw0s5AeuMzLdISK4xfVdlUKqxa/bDwPgyEN5De8geRKMHPoy/wCM 1SyJBZGRmG4MJUHjXk6VDsSMGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvwIPPt Qa3bzcy7J5t+RMbQIKmeMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1X UVdVcFVIOWJ5cHdBNFJnYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw+Avn7PhH4YNH+5pmWlPZHJP7nFvz1u5d0FoQjNYNIhLK8ErMv7nq szc/I7LDFzcKxTMfgh3kO9OUpB72u/X7CHsua84Mot6stIxootFcd2+UaJuNc9NS okqvLGwLBOTK9nf1Jfmpgi6JChVLnvIlbyJwkaIHlN1pjTouf2tqSJWnHmXNkq6u aEi4F0KQOjL0S0ullo9VyypUmsGTZGqzgF3Dy515lExV0imRD+iOCiYsgTFKbjK4 ExR2WOIqgEsn2g+hmVesPNL7MKzknLnbWMhM02Gypqxi1q310JpjyvgtJvUBJ+vQ 2BkQMzBs9WF7FfPbG6FyW+Wfi9zrFIge -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:52 2025 by rpki-client