$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: d9ocF8ZJQBvJSfzz02zjVGliehIFm4fhECMcx6oi7/8= Subject key identifier: 7C:EE:57:80:69:0D:9A:6F:5B:09:66:9D:2A:47:D0:10:41:3C:6A:9E Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 2836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 281B Signing time: Sat 18 Oct 2025 15:49:31 +0000 Manifest this update: Sat 18 Oct 2025 15:49:30 +0000 Manifest next update: Sat 25 Oct 2025 15:49:30 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: SK1m3azqQ3Chh/T2JLCmpJhoeREOdUgKrfkcTt29oV4=) 2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: qyTxkkSSZz/mEPJmCPmO4drOsBAzqss/jEsEWzyS7n4=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: IqEsazWsEikd3PbwO1Zi4SKIR5/W/ukREa4rnvdDPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10294 (0x2836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Oct 18 15:49:30 2025 GMT Not After : Oct 25 15:49:30 2025 GMT Subject: CN=68f3b70a-4ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6d:10:8f:4d:c3:5f:a6:4f:d4:3e:2c:fa:69: 87:3a:b1:37:33:5c:a9:43:f5:e9:8a:31:52:41:1c: 52:17:e3:57:84:6e:59:e8:86:02:e4:c8:df:f4:6c: 6b:b0:5a:c6:71:e1:e7:d1:24:8f:b7:b9:05:a6:89: c7:5c:8e:2d:21:71:c3:ef:e9:18:3b:ca:3b:1a:f8: 04:c7:15:cb:cf:eb:7b:0f:ff:c3:92:43:8e:23:bf: 88:09:26:84:c2:d9:e3:3f:aa:92:a8:97:fc:20:e4: 49:c5:6d:31:32:7e:af:6d:a1:cf:a1:6f:54:ff:b0: f2:9e:b2:70:e8:bc:ec:8a:e6:66:b8:0b:1d:e0:82: 5f:ea:4f:6a:64:1a:6d:f9:76:48:e8:4f:84:1c:87: a8:ed:95:32:2f:27:1b:27:68:76:bf:b1:73:8b:9d: 8a:04:af:a1:f2:bc:7d:0d:cb:ef:c9:f1:b6:c3:17: f8:77:23:7e:e1:f1:6b:a6:4e:f8:96:ef:08:76:37: 9c:19:c5:4e:11:87:ac:7e:9a:10:a2:d5:16:40:7b: a7:d5:15:7b:c8:aa:95:9c:02:2d:bc:e4:f7:40:b9: fb:26:e6:52:1c:a2:80:33:ed:e3:b4:43:86:1c:30: 6e:34:39:cc:3b:14:1d:da:ef:3c:8c:1a:55:0b:d3: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EE:57:80:69:0D:9A:6F:5B:09:66:9D:2A:47:D0:10:41:3C:6A:9E X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:0f:a5:78:87:2d:67:61:4e:46:8d:e8:53:61:2a:0e:8d:1e: bb:db:64:a1:46:9a:80:b5:6e:65:85:e0:16:6d:9c:df:de:89: 97:8c:b5:31:a3:ea:60:39:c6:a9:e3:0d:65:15:d1:23:e5:80: 05:95:02:1c:61:71:aa:da:fa:31:69:84:e7:1b:45:60:39:35: 4a:48:fd:83:30:b8:18:e1:7c:fc:8a:cb:e0:31:bf:89:fa:0a: d1:0f:8c:1c:18:76:d1:74:3c:bf:cd:1a:0e:c5:38:c9:bb:60: e4:23:4a:a1:d8:40:3b:85:49:7f:57:ed:22:47:98:89:c3:cf: 89:24:a4:aa:17:1b:c8:dc:4a:56:08:ed:fa:9c:53:eb:fc:e1: 64:25:bf:2b:b5:2b:59:1a:76:45:21:4e:3d:c0:f8:d2:d7:d7: 96:79:7d:9a:c6:78:d1:a6:5d:55:13:f9:92:b1:9f:0b:18:20: 61:6b:94:4b:ab:b6:2b:0d:11:bc:6d:fd:9a:b3:05:39:14:6c: 77:fe:4e:eb:88:6c:7a:3f:e9:36:b5:51:e0:c8:d3:22:c5:b3: 5a:16:31:96:62:df:04:c2:c5:26:01:7c:95:38:08:2b:78:2c: 12:08:59:bc:20:4e:8a:40:18:60:99:f5:fe:dd:b4:ea:0a:14: 20:9e:af:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjUxMDE4MTU0OTMwWhcNMjUxMDI1MTU0OTMwWjAYMRYwFAYD VQQDEw02OGYzYjcwYS00ZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzm0Qj03DX6ZP1D4s+mmHOrE3M1ypQ/XpijFSQRxSF+NXhG5Z6IYC5Mjf9Gxr sFrGceHn0SSPt7kFponHXI4tIXHD7+kYO8o7GvgExxXLz+t7D//DkkOOI7+ICSaE wtnjP6qSqJf8IORJxW0xMn6vbaHPoW9U/7DynrJw6LzsiuZmuAsd4IJf6k9qZBpt +XZI6E+EHIeo7ZUyLycbJ2h2v7Fzi52KBK+h8rx9DcvvyfG2wxf4dyN+4fFrpk74 lu8IdjecGcVOEYesfpoQotUWQHun1RV7yKqVnAItvOT3QLn7JuZSHKKAM+3jtEOG HDBuNDnMOxQd2u88jBpVC9P2uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzuV4Bp DZpvWwlmnSpH0BBBPGqeMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJD6V4hy1nYU5GjehTYSoOjR6722ShRpqAtW5lheAWbZzf3omXjLUx o+pgOcap4w1lFdEj5YAFlQIcYXGq2voxaYTnG0VgOTVKSP2DMLgY4Xz8isvgMb+J +grRD4wcGHbRdDy/zRoOxTjJu2DkI0qh2EA7hUl/V+0iR5iJw8+JJKSqFxvI3EpW CO36nFPr/OFkJb8rtStZGnZFIU49wPjS19eWeX2axnjRpl1VE/mSsZ8LGCBha5RL q7YrDRG8bf2aswU5FGx3/k7riGx6P+k2tVHgyNMixbNaFjGWYt8EwsUmAXyVOAgr eCwSCFm8IE6KQBhgmfX+3bTqChQgnq8O -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:55 2025 by rpki-client