$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: YCEQBw0iSmr612jCVkgpVDbykcD1Hs81hW5oU5UD6q8= Subject key identifier: 73:2A:2E:56:E8:BD:DB:8F:6D:CA:96:28:15:54:B6:85:0F:BD:7F:35 Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 091E Signing time: Sat 18 Oct 2025 21:22:19 +0000 Manifest this update: Sat 18 Oct 2025 21:22:19 +0000 Manifest next update: Sat 25 Oct 2025 21:22:19 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: dXSHTNTRZ4uDE1WA2n69+syuebdh2sFMTq5T1xPgq1E=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Oct 18 21:22:19 2025 GMT Not After : Oct 25 21:22:19 2025 GMT Subject: CN=68f4050b-b40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:b8:42:a1:f2:4e:cc:de:c0:a9:25:c5:73: f0:12:94:3e:04:dc:17:e4:6d:df:cf:3e:a3:35:bf: 53:8e:00:c6:48:5e:8d:06:2f:13:22:38:5c:58:6a: 81:d4:84:a0:0b:5b:60:b8:26:60:fc:81:25:fb:b5: 75:55:c8:24:7b:25:36:61:23:7f:db:64:1e:6d:0a: 3b:51:ec:4d:2d:3c:4a:f0:7e:83:cc:f7:91:c4:b6: 1e:85:1b:b5:b7:7f:f4:8f:21:26:1c:5a:ef:a3:b4: 8a:dc:71:47:18:be:3f:e6:28:49:ab:06:fd:49:d5: 6b:ac:6b:89:e0:74:b8:98:9c:80:10:83:90:13:b0: 67:20:9f:37:50:8f:ea:77:2d:af:95:1d:e0:5c:54: 5e:df:82:86:74:b8:f3:1e:15:2c:9f:59:8b:44:f1: c9:1a:be:35:0e:af:6a:55:b0:cb:3d:cd:25:cd:df: 9a:a1:70:fd:e9:64:6b:a1:28:4c:26:6e:c2:30:7d: 18:da:dc:25:f0:29:8d:f6:23:5d:f5:e7:d5:af:2a: c9:cf:51:c4:67:05:ba:75:b8:02:6e:46:61:1b:88: bc:ca:09:85:30:a2:8f:36:84:72:cb:65:b1:a2:25: 2c:38:25:7e:c2:2e:b0:ef:c9:3a:87:44:11:44:eb: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2A:2E:56:E8:BD:DB:8F:6D:CA:96:28:15:54:B6:85:0F:BD:7F:35 X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:33:11:83:20:85:85:84:73:cc:20:98:05:df:56:f8:d4:6e: c9:6c:0b:a1:38:38:5b:dc:a3:33:70:b7:83:72:30:6e:ce:91: 53:a6:cc:3b:84:95:72:54:fe:f9:a3:70:a8:61:90:7d:9e:04: 83:8e:e7:8a:45:bb:4d:6d:74:48:aa:97:21:f3:4c:27:4e:ec: af:45:93:c6:24:0a:5f:2e:3c:9e:bc:5d:8f:65:a6:0f:e6:bd: 5a:68:e4:6a:22:d9:76:28:26:68:55:6d:35:98:2c:59:1f:e7: 84:ac:85:50:3c:ad:c6:d4:08:14:ca:8f:f5:1a:2d:11:32:51: 92:6f:06:0a:a6:be:01:bb:e5:04:a7:e7:16:40:6b:90:92:ec: b1:f7:90:90:6f:97:9a:43:72:a6:6b:b5:12:99:ca:b4:38:ac: e6:3b:d4:91:d3:9e:da:a0:c9:02:d5:ec:e0:c6:5f:78:3a:06: d4:01:6f:d4:df:42:0b:71:e0:59:83:2a:88:7f:b3:aa:70:40: 35:47:e7:1e:a6:80:41:c3:99:9e:ee:26:fe:21:c3:9c:b7:c2: c9:b0:54:f3:f0:90:6f:80:26:be:4d:79:7c:0b:60:52:9a:95: 8c:06:04:c2:67:fa:fc:4b:41:4f:c1:97:01:53:49:d3:69:cc: 2c:f3:f0:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUxMDE4MjEyMjE5WhcNMjUxMDI1MjEyMjE5WjAYMRYwFAYD VQQDEw02OGY0MDUwYi1iNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsju4QqHyTszewKklxXPwEpQ+BNwX5G3fzz6jNb9TjgDGSF6NBi8TIjhcWGqB 1ISgC1tguCZg/IEl+7V1VcgkeyU2YSN/22QebQo7UexNLTxK8H6DzPeRxLYehRu1 t3/0jyEmHFrvo7SK3HFHGL4/5ihJqwb9SdVrrGuJ4HS4mJyAEIOQE7BnIJ83UI/q dy2vlR3gXFRe34KGdLjzHhUsn1mLRPHJGr41Dq9qVbDLPc0lzd+aoXD96WRroShM Jm7CMH0Y2twl8CmN9iNd9efVryrJz1HEZwW6dbgCbkZhG4i8ygmFMKKPNoRyy2Wx oiUsOCV+wi6w78k6h0QRROvVzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMqLlbo vduPbcqWKBVUtoUPvX81MB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRMxGDIIWFhHPMIJgF31b41G7JbAuhODhb3KMzcLeDcjBuzpFTpsw7 hJVyVP75o3CoYZB9ngSDjueKRbtNbXRIqpch80wnTuyvRZPGJApfLjyevF2PZaYP 5r1aaORqItl2KCZoVW01mCxZH+eErIVQPK3G1AgUyo/1Gi0RMlGSbwYKpr4Bu+UE p+cWQGuQkuyx95CQb5eaQ3Kma7USmcq0OKzmO9SR057aoMkC1ezgxl94OgbUAW/U 30ILceBZgyqIf7OqcEA1R+cepoBBw5me7ib+IcOct8LJsFTz8JBvgCa+TXl8C2BS mpWMBgTCZ/r8S0FPwZcBU0nTacws8/DF -----END CERTIFICATE-----Generated at Mon Oct 20 18:52:56 2025 by rpki-client