$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json) Hash identifier: vDsShD79cE5b8ENElcVBqczTFaFwwETtmAnsHbjfb5I= Subject key identifier: 14:07:E0:81:01:E1:D4:49:BE:69:B9:7A:ED:3D:72:0E:A7:ED:0E:58 Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft Manifest number: 8C Signing time: Sun 19 Oct 2025 10:09:38 +0000 Manifest this update: Sun 19 Oct 2025 10:09:36 +0000 Manifest next update: Sun 26 Oct 2025 10:09:36 +0000 Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: rST/j34385erfbgAp4JtI2ClYJL9Doc0mtf2y/mKuBo=) 2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: cqpKhHQ429f1vtQzVS9iSS/6yBn8Tr7cOiYSPyhXnqM=) 3: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: hsVU/mADy2OXX1cQt4x/FdSd52E8zN5hB6L5qVYRCOM=) 4: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: K72GRxN+2ab3JpFVQDE8rFQueI0JJ5aBZHWdLQsQchI=) 5: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=) 6: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 4EsnPXpvxqy3HJn3NlZW+cFTXRzXY3NCiOsR6rWCGCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Validity Not Before: Oct 19 10:09:36 2025 GMT Not After : Oct 26 10:09:36 2025 GMT Subject: CN=68f4b8e1-b75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:61:08:34:8c:f3:52:70:3d:8d:62:3c:f6: 37:45:92:70:62:40:f3:f5:78:26:f3:fc:aa:70:49: d9:b8:4d:22:f2:07:e4:27:4a:ad:33:9d:a4:84:fb: 5b:db:b8:12:11:22:30:34:23:cf:47:ea:7e:76:21: a8:cb:ba:14:70:9e:03:e3:a6:06:ea:0f:3a:4e:c1: ec:51:0a:d3:b2:c8:42:cc:13:3e:b4:01:e2:db:e8: 56:d0:c5:a3:74:8b:7c:b8:79:a9:26:7e:5f:03:f6: 48:73:0e:c4:96:c6:a6:48:34:d2:f4:e9:29:df:3a: fc:91:0c:39:e7:9c:f4:b3:1b:fc:30:ed:b5:10:25: f7:cc:47:b5:78:78:e3:8d:4a:9f:9b:dc:9e:c1:a2: 42:29:12:8a:80:c7:1f:4e:0a:47:15:4b:c2:eb:94: c7:5b:9c:fe:d9:96:1a:9e:80:64:ed:5d:2d:d2:35: 15:e5:25:91:80:98:73:98:a2:74:c3:64:1b:a0:98: a4:04:c8:eb:27:04:9c:8f:c8:ff:b9:1a:dd:c4:89: 11:f5:ed:5e:8c:75:27:02:e0:d2:31:3b:3e:27:18: 59:55:0e:d6:0b:68:d8:c7:2c:d5:13:b8:63:a1:14: e7:27:ea:28:e4:b3:92:44:3b:be:cf:32:f7:a7:84: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:07:E0:81:01:E1:D4:49:BE:69:B9:7A:ED:3D:72:0E:A7:ED:0E:58 X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:57:aa:7f:46:0c:ea:fa:3e:7c:96:cc:ed:4b:62:d7:5d:07: 98:b6:cf:d5:9d:70:a8:50:9b:91:8e:da:72:75:2f:2e:25:5f: 51:65:01:5a:2f:c1:84:59:5e:10:53:cc:cf:74:e6:4c:a8:82: 6e:45:c7:42:74:aa:ea:65:ed:ae:0a:46:59:21:5d:3a:f5:84: 16:32:8a:83:40:33:70:17:ee:79:bf:fc:7a:93:d1:04:f3:0b: d4:2c:1e:06:b6:3b:05:cf:ae:78:e9:4c:ae:fa:4a:15:5e:0e: be:7c:20:bf:e1:8b:ca:76:0e:e5:25:9f:e5:85:cb:ef:fd:97: 10:7a:f3:e7:91:fa:2b:66:dd:d3:fa:65:d1:fe:08:11:2e:a9: 84:8f:d2:cc:e8:ac:80:a1:3b:8c:ab:1d:19:cf:a3:2f:52:f1: ba:48:d7:81:0a:4c:d7:07:ca:ac:8b:ec:11:b1:ad:c8:6a:55: 6d:c6:2e:46:de:e7:4f:c7:74:10:76:d5:fc:d5:83:bc:3b:be: 10:df:11:ca:a7:14:77:b7:8c:15:e4:6b:dc:8c:1e:48:c8:a6: 22:f6:8a:3e:eb:6a:69:be:63:a8:d1:01:10:99:22:40:5e:0a: de:63:78:43:41:aa:39:38:3e:c9:60:1a:d7:4f:4e:91:16:74: e9:4f:18:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy QjcwRTJGOTkwHhcNMjUxMDE5MTAwOTM2WhcNMjUxMDI2MTAwOTM2WjAYMRYwFAYD VQQDEw02OGY0YjhlMS1iNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys9hCDSM81JwPY1iPPY3RZJwYkDz9Xgm8/yqcEnZuE0i8gfkJ0qtM52khPtb 27gSESIwNCPPR+p+diGoy7oUcJ4D46YG6g86TsHsUQrTsshCzBM+tAHi2+hW0MWj dIt8uHmpJn5fA/ZIcw7ElsamSDTS9Okp3zr8kQw555z0sxv8MO21ECX3zEe1eHjj jUqfm9yewaJCKRKKgMcfTgpHFUvC65THW5z+2ZYanoBk7V0t0jUV5SWRgJhzmKJ0 w2QboJikBMjrJwScj8j/uRrdxIkR9e1ejHUnAuDSMTs+JxhZVQ7WC2jYxyzVE7hj oRTnJ+oo5LOSRDu+zzL3p4QMyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQH4IEB 4dRJvmm5eu09cg6n7Q5YMB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZj UTF5TTlWd3BIeElyY09MNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8V6p/Rgzq+j58lsztS2LXXQeYts/VnXCoUJuRjtpydS8uJV9RZQFa L8GEWV4QU8zPdOZMqIJuRcdCdKrqZe2uCkZZIV069YQWMoqDQDNwF+55v/x6k9EE 8wvULB4GtjsFz6546Uyu+koVXg6+fCC/4YvKdg7lJZ/lhcvv/ZcQevPnkforZt3T +mXR/ggRLqmEj9LM6KyAoTuMqx0Zz6MvUvG6SNeBCkzXB8qsi+wRsa3IalVtxi5G 3udPx3QQdtX81YO8O74Q3xHKpxR3t4wV5GvcjB5IyKYi9oo+62ppvmOo0QEQmSJA XgreY3hDQao5OD7JYBrXT06RFnTpTxit -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:26 2025 by rpki-client