$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json) Hash identifier: Vrnklcfqfq6T3tG3+XFfcKJFsbrkmvdBOekL/emah+4= Subject key identifier: E4:4D:4D:D2:8C:52:5B:77:5C:7E:7E:59:1A:56:E6:11:9D:8E:AA:97 Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Certificate serial: 1102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft Manifest number: 10F9 Signing time: Mon 20 Oct 2025 17:43:57 +0000 Manifest this update: Mon 20 Oct 2025 17:43:56 +0000 Manifest next update: Mon 27 Oct 2025 17:43:56 +0000 Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: WWazl9d09xscY8DaosDI5FEjxQR/M04Bb3n+1vt/2e0=) 2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: 8YN4HjFnFIcDaShQHDoigKa3LLkHGTw5fy+IJogcxeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4354 (0x1102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Validity Not Before: Oct 20 17:43:56 2025 GMT Not After : Oct 27 17:43:56 2025 GMT Subject: CN=68f674dd-29e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:16:fe:81:10:57:77:80:fd:9d:0a:d7:5d: 4e:65:2d:8a:23:04:e1:23:de:a4:6d:5f:88:bb:e2: 50:3d:0a:c0:5f:03:85:09:3e:1a:1f:ce:56:49:8b: 8d:fd:f9:b8:fe:b5:ea:b8:41:01:6b:94:9e:00:b1: c8:9c:30:19:2a:b8:1f:6e:29:f4:08:2e:3a:77:52: 27:37:b1:c0:84:ee:71:43:c0:60:9c:c3:d0:26:be: cf:fb:a5:33:81:82:37:c0:66:a4:2c:34:f9:66:5c: 1a:9d:c5:b6:90:af:30:ff:0d:e9:58:3e:a3:82:ec: 47:65:a6:92:8d:03:6b:86:3e:e6:8b:34:a1:4d:46: fc:4f:7e:10:d7:94:23:ee:96:48:7b:e5:d1:05:53: e7:1b:46:a4:b5:3e:6e:87:c8:cd:9d:4d:e2:8a:4e: a3:6b:e4:da:c1:91:a5:2e:a4:d9:62:0a:bf:2f:52: f9:11:f8:9f:16:e9:ff:df:7f:a5:ae:94:8a:a3:67: 61:1d:38:f2:e1:47:da:d4:3a:c3:0e:05:d3:55:ef: f1:4e:f3:5d:c3:96:22:5a:07:e9:0e:4a:c4:8f:2d: fc:2d:96:47:ea:53:e1:c3:2b:2c:46:07:2e:ea:14: b7:76:96:96:08:ce:9a:d8:9e:b4:4a:5d:9a:c0:33: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4D:4D:D2:8C:52:5B:77:5C:7E:7E:59:1A:56:E6:11:9D:8E:AA:97 X509v3 Authority Key Identifier: keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7e:ce:62:a6:7c:41:68:40:9d:44:ca:9d:a5:82:66:d5:30: 57:eb:b2:d3:f7:d8:95:bc:fa:57:59:a6:72:89:aa:ab:62:81: a8:7d:87:b7:e1:2d:b7:e6:a2:14:dc:85:04:7b:ac:56:b9:a3: a5:28:28:79:ea:dc:81:5d:dc:9b:2f:e9:12:62:aa:83:ce:7c: 12:fa:80:31:c0:44:7b:55:b0:64:80:e9:c2:4a:9f:5c:64:fe: 8b:0e:18:32:54:a0:be:2e:12:40:64:67:76:b0:7d:de:37:14: d8:b0:28:0c:1a:f7:57:ce:62:ba:3f:c5:05:14:ef:6d:62:0d: 39:e3:a5:c2:de:c5:fc:1d:94:1d:89:ae:14:bb:c4:0e:4d:b0: c5:9b:17:e7:55:89:d4:5c:2c:b9:01:72:3c:70:c0:01:84:da: 36:a3:62:a4:b2:6e:87:f1:ec:ca:b0:5e:8c:54:af:36:f4:16: 4b:b8:86:9f:5e:03:d2:50:aa:96:a0:bf:f7:b7:93:f3:c3:a1: 58:2f:51:66:20:ec:46:53:91:76:f5:00:41:35:70:2c:4a:f9: 92:ba:31:23:d7:05:91:ad:ee:4e:02:e6:1d:ee:00:00:57:17: 34:da:ee:54:3a:dc:73:9c:f2:c5:26:af:af:f6:44:9b:6b:04: 28:d2:96:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF RDY4QUUyQjMwHhcNMjUxMDIwMTc0MzU2WhcNMjUxMDI3MTc0MzU2WjAYMRYwFAYD VQQDEw02OGY2NzRkZC0yOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZcW/oEQV3eA/Z0K111OZS2KIwThI96kbV+Iu+JQPQrAXwOFCT4aH85WSYuN /fm4/rXquEEBa5SeALHInDAZKrgfbin0CC46d1InN7HAhO5xQ8BgnMPQJr7P+6Uz gYI3wGakLDT5ZlwancW2kK8w/w3pWD6jguxHZaaSjQNrhj7mizShTUb8T34Q15Qj 7pZIe+XRBVPnG0aktT5uh8jNnU3iik6ja+TawZGlLqTZYgq/L1L5EfifFun/33+l rpSKo2dhHTjy4Ufa1DrDDgXTVe/xTvNdw5YiWgfpDkrEjy38LZZH6lPhwyssRgcu 6hS3dpaWCM6a2J60Sl2awDPLxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORNTdKM Ult3XH5+WRpW5hGdjqqXMB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1 RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0 ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Rjk1RS9CNzA4Nzk2ODI1RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNU RGdBYmN0SlBNTFB0YUs0ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCufs5ipnxBaECdRMqdpYJm1TBX67LT99iVvPpXWaZyiaqrYoGofYe3 4S235qIU3IUEe6xWuaOlKCh56tyBXdybL+kSYqqDznwS+oAxwER7VbBkgOnCSp9c ZP6LDhgyVKC+LhJAZGd2sH3eNxTYsCgMGvdXzmK6P8UFFO9tYg0546XC3sX8HZQd ia4Uu8QOTbDFmxfnVYnUXCy5AXI8cMABhNo2o2Kksm6H8ezKsF6MVK829BZLuIaf XgPSUKqWoL/3t5Pzw6FYL1FmIOxGU5F29QBBNXAsSvmSujEj1wWRre5OAuYd7gAA Vxc02u5UOtxznPLFJq+v9kSbawQo0pax -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:07 2025 by rpki-client