$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: JJ5o5TLhwdyh2ICSsXb0FihssmDIESLplL6sgslFWiM= Subject key identifier: 9A:46:67:F6:26:42:C0:C2:76:6A:EE:0D:03:4F:20:89:6E:55:DE:19 Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 022A Signing time: Sun 19 Oct 2025 04:12:31 +0000 Manifest this update: Sun 19 Oct 2025 04:12:31 +0000 Manifest next update: Sun 26 Oct 2025 04:12:31 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: U5+FVtT3jefFDtkCNcjEamGmfrs2doIW5gPT7GpPh44=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: kKgc9mKeybgGGMkDQ58sZzpe326cVTFWWZKCKZ6tXgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Validity Not Before: Oct 19 04:12:31 2025 GMT Not After : Oct 26 04:12:31 2025 GMT Subject: CN=68f4652f-0453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:a8:da:d3:36:99:b1:8a:6e:d9:e8:d2:4d: ef:a9:63:b0:ae:23:9d:6c:90:68:98:fb:6f:0c:c8: 71:86:58:18:86:61:f4:f4:72:79:fa:61:12:a2:0a: be:3a:4e:95:47:96:6e:7e:a5:c5:c6:e9:8a:94:66: e9:f2:5a:3f:da:77:9f:d0:63:95:ee:4a:5c:fa:7d: c4:d9:a6:df:4c:61:48:bc:4c:b5:0e:07:e2:3c:25: d0:68:1b:9e:d3:66:e7:51:05:1b:4d:6c:15:33:f5: 40:07:eb:22:6d:9d:0e:64:d6:8d:07:30:eb:a2:9d: 89:cf:0e:e6:e8:22:74:b4:f1:28:26:a6:6d:84:be: a0:4a:b9:43:19:b2:f5:57:89:1e:c2:e1:27:f8:46: 37:85:ba:f1:23:52:80:44:30:40:31:87:9b:44:30: bd:c1:f9:9d:80:9b:d2:11:61:df:0e:3e:f1:e7:f2: 7c:02:da:07:60:87:fc:72:d9:16:f3:26:bb:dd:06: 7d:e2:d6:cb:cd:9d:3f:3d:cf:6e:6c:a5:23:09:f2: 61:88:2d:fc:31:a5:c7:b8:8b:70:ef:7b:4c:38:e4: 64:e9:9b:07:c9:6d:e4:98:f4:09:d0:98:4f:10:d8: fd:a3:3e:64:66:32:0e:e7:8d:2c:74:fc:c7:b7:fa: 50:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:46:67:F6:26:42:C0:C2:76:6A:EE:0D:03:4F:20:89:6E:55:DE:19 X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e2:f6:e4:39:b3:b0:f0:bc:0d:0d:bd:5f:67:2e:80:97:80: a2:c1:9d:cb:ef:86:82:d4:5e:5e:3f:ab:d5:9c:65:06:fc:10: 6a:03:bc:42:0c:ab:79:05:51:42:19:3f:80:a6:56:2f:5f:c3: a9:fc:12:ac:6a:88:96:29:57:c5:e8:57:fd:28:0c:5b:43:46: cb:c0:a8:4a:99:48:44:b9:57:30:60:73:da:7a:a0:74:f0:76: 1c:ce:76:ff:ae:40:bf:1f:74:45:c0:64:06:b9:81:03:06:cf: 94:22:be:2a:eb:93:0f:c3:4e:79:e1:d9:22:41:8f:af:6f:b2: 7f:bc:d7:1d:53:2e:92:68:92:e3:23:8e:0d:75:7d:e6:75:bb: e0:dc:13:2d:b5:92:ae:7e:08:e9:43:1a:7f:85:86:24:69:82: 3c:97:9e:80:71:3d:f0:35:b4:eb:10:09:b7:f7:f0:3e:30:58: b8:ee:84:07:6c:dd:90:ea:d5:58:7d:e6:06:68:a6:be:33:02: ed:c0:8e:fc:bc:68:9d:12:27:ba:1f:2a:7e:a3:b5:2e:14:ad: cd:e1:ef:a2:d9:ac:81:ee:c9:26:68:cd:54:b0:ee:e4:d8:7a: 6c:76:ad:93:80:69:87:66:38:dd:07:76:b2:bf:74:ab:64:e1: 5a:37:c2:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjUxMDE5MDQxMjMxWhcNMjUxMDI2MDQxMjMxWjAYMRYwFAYD VQQDEw02OGY0NjUyZi0wNDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgeo2tM2mbGKbtno0k3vqWOwriOdbJBomPtvDMhxhlgYhmH09HJ5+mESogq+ Ok6VR5ZufqXFxumKlGbp8lo/2nef0GOV7kpc+n3E2abfTGFIvEy1DgfiPCXQaBue 02bnUQUbTWwVM/VAB+sibZ0OZNaNBzDrop2Jzw7m6CJ0tPEoJqZthL6gSrlDGbL1 V4kewuEn+EY3hbrxI1KARDBAMYebRDC9wfmdgJvSEWHfDj7x5/J8AtoHYIf8ctkW 8ya73QZ94tbLzZ0/Pc9ubKUjCfJhiC38MaXHuItw73tMOORk6ZsHyW3kmPQJ0JhP ENj9oz5kZjIO540sdPzHt/pQVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpGZ/Ym QsDCdmruDQNPIIluVd4ZMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM4vbkObOw8LwNDb1fZy6Al4CiwZ3L74aC1F5eP6vVnGUG/BBqA7xC DKt5BVFCGT+AplYvX8Op/BKsaoiWKVfF6Ff9KAxbQ0bLwKhKmUhEuVcwYHPaeqB0 8HYcznb/rkC/H3RFwGQGuYEDBs+UIr4q65MPw0554dkiQY+vb7J/vNcdUy6SaJLj I44NdX3mdbvg3BMttZKufgjpQxp/hYYkaYI8l56AcT3wNbTrEAm39/A+MFi47oQH bN2Q6tVYfeYGaKa+MwLtwI78vGidEie6Hyp+o7UuFK3N4e+i2ayB7skmaM1UsO7k 2Hpsdq2TgGmHZjjdB3ayv3SrZOFaN8K5 -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:25 2025 by rpki-client