$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft File: vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json) Hash identifier: p2a+xSoh1RNV+HL0NIfbJdyAX+/pzRosCtac5zu95+U= Subject key identifier: 69:AE:5C:BB:E4:FA:0F:55:FF:F4:BF:B7:0A:FA:D0:E5:0C:F1:1B:B9 Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft Manifest number: 3A Signing time: Sun 19 Oct 2025 11:06:59 +0000 Manifest this update: Sun 19 Oct 2025 11:06:58 +0000 Manifest next update: Sun 26 Oct 2025 11:06:58 +0000 Files and hashes: 1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: QlQ71gtULujuXmYrw1T/iTX/IWG/jXTuNht4sxUL8Nw=) 2: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: 9kelna+bn4AOokX7+VNhCMprSYcOppK0alNOtL2P1j4=) 3: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: qjbaR5DPgSKsm7fnzDHbXrkez/bN/PhLzRqIXdA5oKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Validity Not Before: Oct 19 11:06:58 2025 GMT Not After : Oct 26 11:06:58 2025 GMT Subject: CN=68f4c652-e815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:3f:5a:d3:ac:5f:ba:4f:1d:31:47:19:f3: ca:6b:1b:25:88:a6:b3:7d:ae:17:33:01:30:17:f5: 3f:4f:c0:ae:28:9e:3f:f9:76:a2:40:3b:34:85:ba: 57:c2:22:c3:4c:fa:a4:f1:24:8a:2f:41:de:b1:ac: 11:78:22:d1:53:71:09:89:26:fb:6c:ef:08:25:00: b3:ed:3b:66:d6:e5:30:a8:4b:fb:3c:b5:f2:94:d5: e3:ed:40:d2:d5:f8:2c:8f:7a:a6:e8:40:b1:92:da: 54:2c:20:92:62:51:c2:0e:39:1d:f0:78:dd:b5:85: ae:89:eb:40:78:c9:c1:5a:17:c5:7d:f6:19:76:e6: 7a:7a:e3:24:81:69:d6:d1:aa:e9:cf:33:38:1a:c8: cd:2e:6f:81:c7:83:64:7e:3d:c4:b1:cc:43:04:66: 43:bc:79:ed:8a:58:21:c1:d1:1a:7c:44:d8:13:0d: 2e:17:4a:5b:0c:b2:d6:c8:2b:fb:c5:b5:25:0f:e0: cb:57:d5:ad:ae:c3:d2:b5:56:b1:3c:70:dd:d9:e7: ca:be:b6:d7:c3:54:3f:d3:54:50:88:d9:84:ef:4f: 3e:16:ac:49:eb:55:34:23:be:78:a6:71:59:d9:8e: 22:9b:9c:79:45:a3:99:db:c7:38:36:9d:f8:89:25: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AE:5C:BB:E4:FA:0F:55:FF:F4:BF:B7:0A:FA:D0:E5:0C:F1:1B:B9 X509v3 Authority Key Identifier: keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f0:fa:71:2c:fd:01:95:f4:44:b3:05:5c:bd:36:b5:11:91: 18:38:d6:02:e9:2a:a4:92:23:a4:8d:13:de:5d:0a:33:4c:d9: 99:eb:b6:04:c2:bd:d4:d3:d4:97:3e:10:88:f0:3c:a2:dc:05: 61:80:b4:7b:69:11:96:f8:57:e6:d1:99:af:70:c4:29:e8:90: 62:46:c7:0b:a6:96:12:a6:c1:c5:e0:ec:da:4d:9c:1b:b3:e9: 94:aa:44:cf:42:25:d6:73:de:44:a8:3d:ed:54:fb:fd:83:94: 57:e2:bb:f0:77:4e:ca:4b:86:24:96:db:54:39:84:08:64:09: 94:84:c7:95:3a:91:50:19:e1:c8:60:70:b3:fa:48:46:bd:a2: 7e:38:85:68:99:7d:81:ef:19:b1:d9:53:7b:7a:6b:88:d6:ea: 95:ac:cc:f3:37:27:6a:95:0b:30:6d:23:5c:3c:7f:b7:ad:86: 54:23:e5:56:24:14:cb:fd:99:33:ca:d5:ca:0c:de:26:00:c8: 56:68:9f:a5:ad:4e:48:f5:b6:a6:b3:dd:7c:97:54:e5:81:95: cc:c2:8b:06:85:36:02:04:55:05:d0:e3:25:51:b7:83:c9:58: f7:43:cd:aa:21:07:07:a5:7b:1b:dd:7a:ef:ab:0a:a2:6c:c6: 7f:91:61:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzE4QzExMC8GA1UEBRMoQkU0MzAxRTJBNDBCNEY2QTQ3RTE4NUE2NzU3RDlBNkU4 RDdDNzQ0MjAeFw0yNTEwMTkxMTA2NThaFw0yNTEwMjYxMTA2NThaMBgxFjAUBgNV BAMTDTY4ZjRjNjUyLWU4MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSKj9a06xfuk8dMUcZ88prGyWIprN9rhczATAX9T9PwK4onj/5dqJAOzSFulfC IsNM+qTxJIovQd6xrBF4ItFTcQmJJvts7wglALPtO2bW5TCoS/s8tfKU1ePtQNLV +CyPeqboQLGS2lQsIJJiUcIOOR3weN21ha6J60B4ycFaF8V99hl25np64ySBadbR qunPMzgayM0ub4HHg2R+PcSxzEMEZkO8ee2KWCHB0Rp8RNgTDS4XSlsMstbIK/vF tSUP4MtX1a2uw9K1VrE8cN3Z58q+ttfDVD/TVFCI2YTvTz4WrEnrVTQjvnimcVnZ jiKbnHlFo5nbxzg2nfiJJbbhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaa5cu+T6 D1X/9L+3CvrQ5QzxG7kwHwYDVR0jBBgwFoAUvkMB4qQLT2pH4YWmdX2abo18dEIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMThDL0NFOUIwOUVFNjE1 NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJwSDRZV21kWDJhYm8xOGRF SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmtNQjRxUUxUMnBINFlXbWRYMmFibzE4ZEVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MThDL0NFOUIwOUVFNjE1NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJw SDRZV21kWDJhYm8xOGRFSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJDw+nEs/QGV9ESzBVy9NrURkRg41gLpKqSSI6SNE95dCjNM2ZnrtgTC vdTT1Jc+EIjwPKLcBWGAtHtpEZb4V+bRma9wxCnokGJGxwumlhKmwcXg7NpNnBuz 6ZSqRM9CJdZz3kSoPe1U+/2DlFfiu/B3TspLhiSW21Q5hAhkCZSEx5U6kVAZ4chg cLP6SEa9on44hWiZfYHvGbHZU3t6a4jW6pWszPM3J2qVCzBtI1w8f7ethlQj5VYk FMv9mTPK1coM3iYAyFZon6WtTkj1tqaz3XyXVOWBlczCiwaFNgIEVQXQ4yVRt4PJ WPdDzaohBwelexvdeu+rCqJsxn+RYSI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:25 2025 by rpki-client