$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json) Hash identifier: yZA6v4jUubpxgM2ydrxGeAWjN1SchpW1GihD4LxLywI= Subject key identifier: 29:53:22:79:B9:99:19:37:D9:6F:AA:ED:9C:99:41:CE:C8:F9:80:4F Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 354B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft Manifest number: 351A Signing time: Tue 04 Nov 2025 15:02:23 +0000 Manifest this update: Tue 04 Nov 2025 15:02:22 +0000 Manifest next update: Tue 11 Nov 2025 15:02:22 +0000 Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: HqyFdnP/HZVfIf1L+bsVyrz9fg7kW08+eMfexG6Vxv8=) 2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: UllqnXfDL+2VdUTPx8xQ2Za44+cPvkaWdFYKS+C8QQM=) 3: 931C5524175011EB8585CA60C4F9AE02.roa (hash: zSmeOMcR4UTwUq4R32M120QhIdCnmd/G6j8Yf4YDhJ0=) 4: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: ZD0GATgarU5SJf51be/V12br/cDS5vLdtBMxX0BhbhU=) 5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: lO7bWRMdVQIujCi4o8pQPJbkrtgWtKnNWX6be5e8XsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13643 (0x354b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: Nov 4 15:02:22 2025 GMT Not After : Nov 11 15:02:22 2025 GMT Subject: CN=690a157e-5082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:5c:ba:36:cd:f9:81:ea:9a:a0:ac:fd:54: e1:84:6c:5b:49:d0:1c:1f:a8:e8:47:10:60:7e:5f: 5f:e0:1a:2d:ab:ca:4d:3c:82:17:8a:e1:93:5f:b0: e9:ca:cb:5e:74:b0:e3:41:cd:a1:54:49:6d:79:5e: d4:0d:aa:dc:95:92:06:10:00:0e:40:62:98:77:d1: d4:63:fd:6f:a9:f8:ab:64:de:cc:de:db:20:a2:80: ae:cd:cd:b1:e1:6d:4c:6c:9c:ea:ee:8f:74:5e:87: 71:2b:8d:4e:d9:31:ef:89:83:90:54:f2:96:4f:3d: 9b:14:79:ff:a1:57:c7:17:24:19:7f:7e:b2:af:f1: f0:13:3d:fa:1b:f6:95:25:d8:9a:7a:8f:2d:e6:45: df:fd:9b:ef:b9:fe:3b:86:c0:e6:cc:29:0e:aa:d0: e6:c1:bc:d7:f5:c5:4d:28:fd:06:4a:2b:4b:36:e7: ad:ef:2f:ad:f6:db:c1:4f:32:05:a6:bb:f7:8b:ea: 40:57:68:9e:55:ca:0a:19:4f:ba:d2:a5:7c:c8:9e: f1:c0:57:2c:8a:25:ae:84:6c:5c:c7:bd:ea:f8:29: b3:28:a1:2f:9e:f0:68:3d:56:b7:3f:85:fe:59:1b: 53:d0:7d:1f:89:d5:98:b1:d6:92:8f:d5:e8:9b:a5: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:53:22:79:B9:99:19:37:D9:6F:AA:ED:9C:99:41:CE:C8:F9:80:4F X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:55:e9:5e:f2:ec:df:a1:61:00:09:32:6b:7b:7c:a1:e9:6f: 77:90:0c:c7:1c:97:eb:10:3d:0f:77:f5:4f:92:87:6b:96:8e: b2:1b:0f:20:0d:13:9c:d4:68:e0:01:3c:82:4e:54:05:5a:f3: 23:f5:7e:9f:d0:c8:03:57:ad:2a:80:04:07:a1:03:2d:58:d4: d0:dd:b1:cb:90:b1:e4:ee:c5:df:c1:5b:05:d8:af:bc:f2:1e: 87:f7:9f:27:ff:37:60:eb:57:bc:fc:14:3c:f9:a6:d1:f4:e7: 1e:21:3f:a9:5b:40:95:5c:fb:18:a0:ab:a2:7b:d2:8b:ac:f4: 7b:e4:28:d0:3e:2c:7a:d8:ba:2b:88:c4:8e:df:25:8b:e9:13: dc:9a:dc:8c:48:9c:22:e0:d2:ba:7c:69:c3:12:01:4d:91:a1: fe:0b:f1:3a:db:39:51:1c:1b:34:f5:03:27:15:6f:20:b5:f9: a8:2d:d7:72:b9:70:db:1c:39:58:d0:9a:1a:aa:2f:51:e3:8f: 77:d0:25:26:83:4f:ee:0c:5d:f7:6c:66:da:93:92:14:8a:09: 06:51:47:2e:b5:a5:b6:23:bf:88:ae:d8:b3:ec:f8:50:c5:ce: 8c:0f:ba:0a:13:16:c4:6e:d7:96:f2:89:ec:0f:b6:d5:bb:84: f1:0d:96:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjUxMTA0MTUwMjIyWhcNMjUxMTExMTUwMjIyWjAYMRYwFAYD VQQDEw02OTBhMTU3ZS01MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArh5cujbN+YHqmqCs/VThhGxbSdAcH6joRxBgfl9f4Botq8pNPIIXiuGTX7Dp ystedLDjQc2hVElteV7UDarclZIGEAAOQGKYd9HUY/1vqfirZN7M3tsgooCuzc2x 4W1MbJzq7o90XodxK41O2THviYOQVPKWTz2bFHn/oVfHFyQZf36yr/HwEz36G/aV Jdiaeo8t5kXf/Zvvuf47hsDmzCkOqtDmwbzX9cVNKP0GSitLNuet7y+t9tvBTzIF prv3i+pAV2ieVcoKGU+60qV8yJ7xwFcsiiWuhGxcx73q+CmzKKEvnvBoPVa3P4X+ WRtT0H0fidWYsdaSj9Xom6Wm9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClTInm5 mRk32W+q7ZyZQc7I+YBPMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkRCQS8wNzc4NTFBNDFEOUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3ph RVZtMW5zMWVPWlBwZ21WUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABVele8uzfoWEACTJre3yh6W93kAzHHJfrED0Pd/VPkodrlo6yGw8g DROc1GjgATyCTlQFWvMj9X6f0MgDV60qgAQHoQMtWNTQ3bHLkLHk7sXfwVsF2K+8 8h6H958n/zdg61e8/BQ8+abR9OceIT+pW0CVXPsYoKuie9KLrPR75CjQPix62Lor iMSO3yWL6RPcmtyMSJwi4NK6fGnDEgFNkaH+C/E62zlRHBs09QMnFW8gtfmoLddy uXDbHDlY0Joaqi9R44930CUmg0/uDF33bGbak5IUigkGUUcutaW2I7+Irtiz7PhQ xc6MD7oKExbEbteW8onsD7bVu4TxDZY1 -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:51 2025 by rpki-client