$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json) Hash identifier: OpJSx1j5dCCc1Yoewz94WswnYiV+26akKYKEtxCxYi4= Subject key identifier: BD:02:C4:DC:0A:45:D5:7C:3C:B2:52:21:FB:75:7B:34:84:09:BA:15 Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft Manifest number: 2624 Signing time: Tue 04 Nov 2025 16:24:56 +0000 Manifest this update: Tue 04 Nov 2025 16:24:55 +0000 Manifest next update: Tue 11 Nov 2025 16:24:55 +0000 Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: m9RIPL3EF90bTAFnh9d1C6HjZ1OztP7bzcx9vb5YrWw=) 2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: tee5qyYUeYtzVgY5XM9ROj+LoDAFDMjISaly7p7VUNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Validity Not Before: Nov 4 16:24:55 2025 GMT Not After : Nov 11 16:24:55 2025 GMT Subject: CN=690a28d8-2b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:76:5e:a9:2e:3d:0f:ff:2d:fb:d4:c0:9c: 52:b0:28:86:8e:8f:a6:23:a4:20:8d:18:31:d6:36: 1e:b2:ce:df:d9:cd:b5:7c:c3:49:c4:ce:87:73:1c: af:4c:4d:97:05:c6:cd:5f:b5:4c:8a:11:ae:53:ea: 38:f3:25:ad:38:bf:80:6d:cc:7a:92:9d:24:8e:7e: 7a:d8:a7:31:4d:15:2b:a0:1e:98:c3:cd:0c:dd:f9: 21:99:b1:96:e6:73:a2:c0:51:9a:53:2d:88:54:89: 01:c0:3b:9d:b3:ba:ce:83:5e:33:48:eb:79:28:69: 94:7f:55:a2:bf:d5:84:1c:c4:9e:b6:69:fe:99:16: 00:c8:b1:f1:9e:8f:85:7f:92:02:2a:31:a1:e9:cc: 0c:67:50:a9:0c:f1:cf:1d:d7:f7:ca:6d:fa:cc:77: a8:fe:c1:71:08:60:e5:79:1d:7f:39:57:50:1f:40: d8:d4:f6:f7:06:5a:ea:0f:61:6c:1c:f7:79:e8:70: 17:ba:2c:1d:9c:69:c8:9b:c0:ef:67:60:07:0b:99: 33:31:42:c0:81:4e:c5:12:a0:95:99:eb:ad:02:43: e0:2d:b9:eb:8c:b5:5e:b0:80:93:54:bf:fd:58:db: 79:4a:82:df:ce:cf:6b:32:c9:ee:8f:9a:9a:0a:9d: 71:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:C4:DC:0A:45:D5:7C:3C:B2:52:21:FB:75:7B:34:84:09:BA:15 X509v3 Authority Key Identifier: keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:71:1e:2c:0b:a2:b7:b7:03:cc:54:3c:19:7c:41:67:4e:96: 65:21:ee:d7:52:96:b3:fc:44:3c:9f:ff:bb:b4:21:bb:62:07: 8d:08:f7:87:cc:da:a0:4c:06:f7:47:8e:dd:ff:31:cb:dc:d8: da:5a:83:ee:82:4c:54:3f:5b:21:73:73:89:6a:a1:dd:0a:fd: 69:dc:b5:f5:93:1d:4f:ea:63:9a:1d:79:9c:81:90:05:fc:5c: 9b:bd:96:c3:46:43:b2:8f:11:53:0b:7a:a1:18:96:21:93:8b: c1:9b:4b:84:d7:5a:a5:3a:d8:33:52:bd:bc:ea:69:99:b0:34: ac:4f:83:cb:1d:1c:88:34:08:45:07:82:0f:37:c2:a8:f6:e6: b3:aa:e3:6e:b8:60:4e:83:60:86:c1:a9:67:ca:8f:6c:eb:2f: b1:19:86:59:dd:cb:70:8f:82:92:9c:23:31:59:d7:c6:ae:2a: 89:ec:49:5b:2d:83:fe:66:df:76:e0:ce:05:41:b0:e1:d9:31: 15:c5:bb:1c:28:87:d1:9a:bf:c7:ad:80:ad:18:64:fe:7a:09: 86:5d:a2:e3:52:a8:d8:3b:bb:bb:13:fb:44:5a:7c:79:2b:38: 19:6e:a4:bf:88:8c:86:0c:0e:a4:48:55:8b:44:77:1b:9f:ae: 2b:69:c8:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoQkU3NjRFRkVGNTNEODY5QzQ0RjYwNzA5OTYxMTNFMEEx ODE4NDExQjAeFw0yNTExMDQxNjI0NTVaFw0yNTExMTExNjI0NTVaMBgxFjAUBgNV BAMTDTY5MGEyOGQ4LTJiMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy6HZeqS49D/8t+9TAnFKwKIaOj6YjpCCNGDHWNh6yzt/ZzbV8w0nEzodzHK9M TZcFxs1ftUyKEa5T6jjzJa04v4BtzHqSnSSOfnrYpzFNFSugHpjDzQzd+SGZsZbm c6LAUZpTLYhUiQHAO52zus6DXjNI63koaZR/VaK/1YQcxJ62af6ZFgDIsfGej4V/ kgIqMaHpzAxnUKkM8c8d1/fKbfrMd6j+wXEIYOV5HX85V1AfQNjU9vcGWuoPYWwc 93nocBe6LB2cacibwO9nYAcLmTMxQsCBTsUSoJWZ660CQ+AtueuMtV6wgJNUv/1Y 23lKgt/Oz2syye6PmpoKnXGVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvQLE3ApF 1Xw8slIh+3V7NIQJuhUwHwYDVR0jBBgwFoAUvnZO/vU9hpxE9gcJlhE+ChgYQRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4RTlnY0psaEUtQ2hnWVFS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm5aT192VTlocHhFOWdjSmxoRS1DaGdZUVJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4 RTlnY0psaEUtQ2hnWVFScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA1xHiwLore3A8xUPBl8QWdOlmUh7tdSlrP8RDyf/7u0IbtiB40I94fM 2qBMBvdHjt3/Mcvc2Npag+6CTFQ/WyFzc4lqod0K/WnctfWTHU/qY5odeZyBkAX8 XJu9lsNGQ7KPEVMLeqEYliGTi8GbS4TXWqU62DNSvbzqaZmwNKxPg8sdHIg0CEUH gg83wqj25rOq4264YE6DYIbBqWfKj2zrL7EZhlndy3CPgpKcIzFZ18auKonsSVst g/5m33bgzgVBsOHZMRXFuxwoh9Gav8etgK0YZP56CYZdouNSqNg7u7sT+0RafHkr OBlupL+IjIYMDqRIVYtEdxufritpyOo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:30 2025 by rpki-client