$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: 4UeJ2TZQMTJfJy8/Qtii6xx7lKx2KE5tyw9v2z51rtk= Subject key identifier: 85:F6:2A:6F:DF:14:DA:05:53:40:A5:7B:5A:DD:16:6F:FE:26:01:18 Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 149F Signing time: Sat 18 Oct 2025 19:08:31 +0000 Manifest this update: Sat 18 Oct 2025 19:08:31 +0000 Manifest next update: Sat 25 Oct 2025 19:08:31 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: zhzxGroBjgCRgtrkiN5KV6pZUx7Cb2rgDYSGqdZ2qXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: Oct 18 19:08:31 2025 GMT Not After : Oct 25 19:08:31 2025 GMT Subject: CN=68f3e5af-ea89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:c8:65:0d:da:36:fd:72:75:30:b8:43:6f: 30:81:b6:54:f3:8a:43:bd:8a:62:fc:79:a8:95:66: 15:fb:3f:2b:fa:dc:35:b1:be:bf:55:0d:6e:68:7b: 1d:75:a0:6c:77:95:e1:6f:8e:17:9f:31:6a:a5:df: f3:5d:a1:6f:bd:ac:29:81:b6:f1:82:f3:8c:3a:2a: 3e:5c:4d:46:d7:f4:e9:61:f0:52:3b:82:78:6c:7f: b2:0f:c2:aa:41:fd:cd:47:f7:59:7b:6f:68:85:cd: 8b:d9:f3:cc:ef:d3:de:41:c4:77:d4:94:b5:23:aa: be:97:5f:74:0b:cb:ff:4f:8c:e2:1a:e7:45:44:47: 44:eb:ee:1d:d0:fb:0b:1e:0e:a5:f2:e2:b4:b1:05: bc:80:fd:a0:e4:66:b9:46:61:4b:df:e5:f7:e4:d7: 1f:da:2a:eb:6a:43:54:4a:cb:28:40:6f:de:ee:18: 99:9d:a0:8c:fd:5e:a3:87:4c:fa:3f:1a:28:a8:36: e0:8a:f4:db:df:eb:22:4f:a9:64:3e:47:08:03:16: e7:ab:ae:96:15:9d:a7:62:2c:26:57:a3:08:fc:91: 49:b7:2c:41:3f:fc:bc:54:b8:39:d8:6c:4a:52:94: 45:d6:81:dd:00:79:e4:fc:65:d4:7d:eb:78:04:e2: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F6:2A:6F:DF:14:DA:05:53:40:A5:7B:5A:DD:16:6F:FE:26:01:18 X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:91:bb:af:52:39:33:b4:4d:68:c4:fd:17:42:27:3b:79:1c: 7f:a1:1c:d9:59:b7:42:58:cb:11:6d:41:28:f6:6b:f2:60:ab: b9:14:84:1f:6f:7b:d5:9e:1b:44:be:3d:0a:7a:7d:26:c4:fc: ce:f7:5f:82:63:94:84:6a:e4:28:78:1d:05:7e:bc:8d:89:5b: bf:5d:e6:8f:4f:52:5b:a8:1a:36:84:e6:c9:29:16:08:1d:39: 79:fc:81:41:70:09:53:1d:f0:05:f7:46:77:c5:99:ce:72:a9: b9:5f:20:96:10:31:dd:6a:a4:ef:04:c6:01:2b:80:0c:f9:0f: 20:bb:e2:ba:08:72:6c:d9:3b:73:79:8d:e4:f8:43:d6:0d:8a: df:5b:a8:07:58:d0:9d:4a:96:73:d2:18:4f:9a:46:26:ae:a9: a7:d7:ef:26:d9:31:71:c3:62:41:18:66:5c:8f:87:f5:5f:b1: 6d:f1:94:7b:2e:da:82:56:94:57:d1:e8:81:83:43:87:5b:c5: ff:b7:23:27:8b:a8:75:a7:25:83:2f:1f:f2:89:85:35:c7:ab: 74:60:4b:de:77:4c:a7:04:10:75:31:43:82:03:b7:39:91:41: 74:77:5f:06:ec:e7:f3:bc:33:8b:ac:e8:26:4d:b7:64:9d:ba: f6:17:e8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjUxMDE4MTkwODMxWhcNMjUxMDI1MTkwODMxWjAYMRYwFAYD VQQDEw02OGYzZTVhZi1lYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcPIZQ3aNv1ydTC4Q28wgbZU84pDvYpi/HmolWYV+z8r+tw1sb6/VQ1uaHsd daBsd5Xhb44XnzFqpd/zXaFvvawpgbbxgvOMOio+XE1G1/TpYfBSO4J4bH+yD8Kq Qf3NR/dZe29ohc2L2fPM79PeQcR31JS1I6q+l190C8v/T4ziGudFREdE6+4d0PsL Hg6l8uK0sQW8gP2g5Ga5RmFL3+X35Ncf2irrakNUSssoQG/e7hiZnaCM/V6jh0z6 PxooqDbgivTb3+siT6lkPkcIAxbnq66WFZ2nYiwmV6MI/JFJtyxBP/y8VLg52GxK UpRF1oHdAHnk/GXUfet4BOJ9FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIX2Km/f FNoFU0Cle1rdFm/+JgEYMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0kbuvUjkztE1oxP0XQic7eRx/oRzZWbdCWMsRbUEo9mvyYKu5FIQf b3vVnhtEvj0Ken0mxPzO91+CY5SEauQoeB0FfryNiVu/XeaPT1JbqBo2hObJKRYI HTl5/IFBcAlTHfAF90Z3xZnOcqm5XyCWEDHdaqTvBMYBK4AM+Q8gu+K6CHJs2Ttz eY3k+EPWDYrfW6gHWNCdSpZz0hhPmkYmrqmn1+8m2TFxw2JBGGZcj4f1X7Ft8ZR7 LtqCVpRX0eiBg0OHW8X/tyMni6h1pyWDLx/yiYU1x6t0YEved0ynBBB1MUOCA7c5 kUF0d18G7OfzvDOLrOgmTbdknbr2F+iu -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:24 2025 by rpki-client