$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: aD9hOe2CVqmPmaqFP82nwvLqctvRYzgfZXR565xfCZc= Subject key identifier: 02:22:D2:70:F6:B2:C2:F4:68:F4:E2:A6:E7:B5:3A:68:EC:EB:53:DA Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 07E0 Signing time: Sat 18 Oct 2025 22:52:11 +0000 Manifest this update: Sat 18 Oct 2025 22:52:10 +0000 Manifest next update: Sat 25 Oct 2025 22:52:10 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: eLHNRvWtfRKhRJD4iPHHMoOcQEzYpzFfemTrX7fJoeI=) 2: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: q4XD/AQqfkjB0bWd2cAwQj0LVcqgF9IjAclvpli5BAw=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 4: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: q7i3CsKTp0yL6iYZiFHlx/5hnnt+XvM120dMmxFLBaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Oct 18 22:52:10 2025 GMT Not After : Oct 25 22:52:10 2025 GMT Subject: CN=68f41a1b-a702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:9d:7f:62:a6:9e:37:a8:49:3d:7e:07:f9: b8:87:dd:a9:5f:89:e2:e0:23:71:d3:84:16:cf:d8: 84:0b:22:45:89:c7:c7:15:1d:eb:b9:9e:08:09:ef: e4:d3:6e:80:16:fa:57:15:04:5b:a9:9b:68:ae:56: e7:0f:2e:9e:6e:b5:10:8a:8b:36:1d:f6:28:dd:97: ab:91:ac:05:a5:6b:89:54:f6:7c:bb:24:24:2f:74: 5e:83:c4:0b:32:e9:3e:c3:02:85:7e:7e:c7:2e:ef: 23:1e:28:16:cf:74:4e:89:80:c8:e5:c4:23:56:ee: 8c:17:c3:ba:2a:ad:ef:13:68:43:ee:63:0b:42:3c: 1d:bb:db:61:83:26:bb:b7:b8:aa:52:d8:63:48:1d: e2:de:ff:64:de:e5:19:e0:56:99:73:ae:73:e2:cc: 15:dc:6f:c5:c1:bd:32:d0:80:cf:8d:f1:1b:a9:2b: b5:1a:62:1d:0d:0b:3b:57:58:9e:26:e9:b3:55:ee: 1a:2c:ad:7a:b6:e5:95:fc:ce:df:fc:9c:bb:a8:39: a3:ea:37:97:d6:35:3c:3a:5d:d1:bf:83:ea:d8:3e: 66:3e:e5:ea:37:fa:6c:d5:98:d5:d2:e9:dc:54:c9: c4:7c:30:77:10:03:d4:49:03:ef:12:2f:19:50:e2: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:22:D2:70:F6:B2:C2:F4:68:F4:E2:A6:E7:B5:3A:68:EC:EB:53:DA X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:59:ce:1c:42:20:3b:5c:5c:f8:5c:4f:7c:af:8c:0d:fb:d2: 3d:04:d3:58:79:3a:08:52:db:81:e7:dd:73:2b:4c:50:89:28: a6:8c:91:b9:a1:67:d0:4e:eb:f1:7e:02:e3:0a:e3:ac:5a:e9: 8e:95:86:b3:3e:92:3d:2f:3d:03:99:f0:77:0b:ac:53:8a:1c: 5f:69:e0:16:7b:22:22:1e:fd:92:9d:94:69:2a:d5:ca:30:32: 86:70:eb:f9:0c:c0:3f:13:d8:2b:67:01:ee:99:5f:96:4d:89: 32:ed:54:3d:e1:22:f4:c9:72:16:a1:93:9c:36:ea:6c:96:6d: ef:43:92:ea:84:87:22:5a:d2:6b:a9:1c:fe:ee:47:22:fd:32: d6:4e:f6:45:d5:6f:98:62:ec:c7:24:0a:7f:73:69:6e:31:06: b5:7d:84:75:08:4e:0f:a2:99:6e:41:a1:78:c3:bb:7c:00:68: 39:a9:bd:d6:a2:e7:fe:1c:3c:9c:38:3c:1b:1d:bd:38:18:d7: 2e:82:db:e9:e8:d6:9b:b1:a6:c0:a4:96:35:41:e7:4f:be:08: 87:95:08:ea:95:24:72:8a:c3:27:e0:8d:3e:8c:61:b7:89:f5: 2a:13:7f:73:03:ae:6e:30:f2:bd:e4:83:52:b6:66:8d:de:99: 55:20:14:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUxMDE4MjI1MjEwWhcNMjUxMDI1MjI1MjEwWjAYMRYwFAYD VQQDEw02OGY0MWExYi1hNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC2df2KmnjeoST1+B/m4h92pX4ni4CNx04QWz9iECyJFicfHFR3ruZ4ICe/k 026AFvpXFQRbqZtorlbnDy6ebrUQios2HfYo3ZerkawFpWuJVPZ8uyQkL3Reg8QL Muk+wwKFfn7HLu8jHigWz3ROiYDI5cQjVu6MF8O6Kq3vE2hD7mMLQjwdu9thgya7 t7iqUthjSB3i3v9k3uUZ4FaZc65z4swV3G/Fwb0y0IDPjfEbqSu1GmIdDQs7V1ie JumzVe4aLK16tuWV/M7f/Jy7qDmj6jeX1jU8Ol3Rv4Pq2D5mPuXqN/ps1ZjV0unc VMnEfDB3EAPUSQPvEi8ZUOKJywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIi0nD2 ssL0aPTipue1Omjs61PaMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgWc4cQiA7XFz4XE98r4wN+9I9BNNYeToIUtuB591zK0xQiSimjJG5 oWfQTuvxfgLjCuOsWumOlYazPpI9Lz0DmfB3C6xTihxfaeAWeyIiHv2SnZRpKtXK MDKGcOv5DMA/E9grZwHumV+WTYky7VQ94SL0yXIWoZOcNupslm3vQ5LqhIciWtJr qRz+7kci/TLWTvZF1W+YYuzHJAp/c2luMQa1fYR1CE4PopluQaF4w7t8AGg5qb3W ouf+HDycODwbHb04GNcugtvp6NabsabApJY1QedPvgiHlQjqlSRyisMn4I0+jGG3 ifUqE39zA65uMPK95INStmaN3plVIBSf -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:47 2025 by rpki-client