$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: k+xqu6MGtYwah4aitXga8CSHs1zyb0xJU2FwYG5OmR4= Subject key identifier: 20:84:AF:BE:AD:2B:5B:13:2A:D1:ED:60:3B:3C:05:63:39:C5:83:22 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0E18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0E0F Signing time: Sat 18 Oct 2025 18:30:27 +0000 Manifest this update: Sat 18 Oct 2025 18:30:26 +0000 Manifest next update: Sat 25 Oct 2025 18:30:26 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: 1TZuX/yohPJw1yHOBZsuFgda9gqS9R89Wr064IkkHEI=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: J3asPRjW2OTxFxfAPN+SaGNCDyYHApcc4gcIkuEE9lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3608 (0xe18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Oct 18 18:30:26 2025 GMT Not After : Oct 25 18:30:26 2025 GMT Subject: CN=68f3dcc2-dd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c8:ed:9c:a0:86:15:0f:91:36:50:81:e7:c2: a3:0e:16:8e:39:19:6b:8a:ca:15:dc:34:28:29:a0: 6e:66:65:7e:9a:e3:2b:68:39:63:06:1c:b2:32:85: 81:66:80:3c:b9:f2:8f:2a:19:30:d3:cd:16:88:35: ed:bc:5f:96:e7:80:ba:2a:e8:35:07:17:bc:10:d9: 6a:ad:44:b8:aa:db:84:51:82:62:48:30:ca:e9:6b: 8c:95:91:df:05:2f:a6:fe:68:5a:a8:db:c7:02:a5: e9:aa:1d:f2:15:63:8d:26:b8:d6:66:06:86:9c:f9: d5:70:18:24:7d:f9:5c:66:02:88:33:cb:07:d3:2c: f4:7b:a1:68:91:93:be:0d:e0:db:6c:44:31:9e:a4: 67:c6:e7:6c:7f:05:c1:a8:58:2a:43:3d:7a:32:2d: 74:4d:80:86:3b:72:9f:a1:9c:0f:92:e4:7a:af:36: a3:a6:47:5d:cd:e2:14:02:e2:ab:b9:c6:a9:a6:4a: 08:45:90:bd:0d:8c:ae:84:01:18:9a:1a:36:3d:9e: 24:04:fd:4a:f9:76:1a:82:d2:5c:1d:ed:87:65:d3: 07:bf:68:f6:a9:53:25:5c:14:83:78:be:cd:a5:7d: 85:b0:90:fd:6a:5d:ba:38:a1:f2:0d:70:96:05:40: 4d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:84:AF:BE:AD:2B:5B:13:2A:D1:ED:60:3B:3C:05:63:39:C5:83:22 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:30:3a:c7:7f:8f:71:ca:89:46:73:26:fc:7d:5b:8e:fb:26: ce:fe:32:2d:31:9e:84:db:d2:ef:b2:b5:ba:74:81:7e:85:59: 52:05:3c:38:03:0b:cd:9c:10:31:89:7d:12:db:7d:9d:8a:5e: 57:e0:b7:45:cb:fa:5c:b4:d8:b3:2a:64:04:84:f0:2e:14:b0: 4d:46:d5:0d:1f:f3:a0:5a:fb:23:cb:38:91:d1:b9:ed:7b:f1: a0:65:94:59:71:bc:78:45:4d:0d:a2:e3:d9:58:06:b5:de:0b: 19:e4:d2:da:e2:c2:98:a8:8e:06:46:f2:f4:29:4f:7c:c9:8c: fa:8c:1f:2c:2f:90:bd:a5:45:10:56:bd:4b:be:e9:f8:9e:97: 78:b0:da:ac:38:ad:4f:2e:f5:b4:21:d9:ae:9d:06:11:5f:c7: 09:03:2b:9a:14:b0:1d:58:00:89:01:d0:63:03:16:ea:15:13: a4:a1:64:de:b9:b9:be:37:90:71:68:09:9a:dd:19:4b:fb:e2: 75:5b:bb:79:40:b6:8f:de:fb:f0:7f:4f:c3:c6:58:14:54:f6: d7:59:ba:1a:b0:bd:fe:04:44:7a:06:0a:22:0d:0e:4a:26:62: 42:c3:e0:40:c2:38:1e:0e:0b:8d:7d:22:e2:39:8b:27:62:c1: 58:c1:bf:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUxMDE4MTgzMDI2WhcNMjUxMDI1MTgzMDI2WjAYMRYwFAYD VQQDEw02OGYzZGNjMi1kZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MjtnKCGFQ+RNlCB58KjDhaOORlrisoV3DQoKaBuZmV+muMraDljBhyyMoWB ZoA8ufKPKhkw080WiDXtvF+W54C6Kug1Bxe8ENlqrUS4qtuEUYJiSDDK6WuMlZHf BS+m/mhaqNvHAqXpqh3yFWONJrjWZgaGnPnVcBgkfflcZgKIM8sH0yz0e6FokZO+ DeDbbEQxnqRnxudsfwXBqFgqQz16Mi10TYCGO3KfoZwPkuR6rzajpkddzeIUAuKr ucappkoIRZC9DYyuhAEYmho2PZ4kBP1K+XYagtJcHe2HZdMHv2j2qVMlXBSDeL7N pX2FsJD9al26OKHyDXCWBUBN7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCEr76t K1sTKtHtYDs8BWM5xYMiMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWMDrHf49xyolGcyb8fVuO+ybO/jItMZ6E29LvsrW6dIF+hVlSBTw4 AwvNnBAxiX0S232dil5X4LdFy/pctNizKmQEhPAuFLBNRtUNH/OgWvsjyziR0bnt e/GgZZRZcbx4RU0NouPZWAa13gsZ5NLa4sKYqI4GRvL0KU98yYz6jB8sL5C9pUUQ Vr1Lvun4npd4sNqsOK1PLvW0IdmunQYRX8cJAyuaFLAdWACJAdBjAxbqFROkoWTe ubm+N5BxaAma3RlL++J1W7t5QLaP3vvwf0/DxlgUVPbXWboasL3+BER6BgoiDQ5K JmJCw+BAwjgeDguNfSLiOYsnYsFYwb9k -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:05 2025 by rpki-client