$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft File: Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json) Hash identifier: Z39ebBfHDfSU51QhVRvVNeAm9YQ8tQKfTwLOv1Su1nA= Subject key identifier: 01:09:B3:E0:9E:0C:32:BF:85:69:1A:27:63:FB:44:5A:F5:86:64:1B Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft Manifest number: 03D5 Signing time: Wed 05 Nov 2025 00:43:07 +0000 Manifest this update: Wed 05 Nov 2025 00:43:06 +0000 Manifest next update: Wed 12 Nov 2025 00:43:06 +0000 Files and hashes: 1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: Rz2+qeOg/9FyDMvjI4sqBSWj0iQkFkmH4QKVpXWlsy4=) 2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: l/s5xmTdNpZpeVMlmGz5C4jtr1q5+jW3USj6jM51K9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Validity Not Before: Nov 5 00:43:06 2025 GMT Not After : Nov 12 00:43:06 2025 GMT Subject: CN=690a9d9a-0ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:40:4e:04:d3:56:d7:40:1f:55:c4:1d:36: 6f:40:30:82:a3:b6:63:3c:fc:c6:53:83:eb:06:7b: 21:8b:e8:fe:af:46:9a:c7:ed:37:58:75:5a:90:79: 05:d1:5a:c1:e9:ac:c4:29:90:58:1b:a6:0e:ee:42: 34:7e:93:36:01:93:0a:b8:9c:38:39:99:95:af:24: 36:33:79:2e:2a:71:84:44:c0:42:06:6d:96:58:0e: 5e:83:50:e2:c9:ed:c0:ec:20:43:6a:0f:f3:5d:0d: 59:6c:66:d6:e7:3f:f1:2b:e1:ef:18:0e:50:0e:e7: 7b:1b:14:28:ec:50:86:de:86:26:d4:2c:37:ae:4d: 0b:7b:1d:30:66:f0:df:f6:31:ca:ae:48:48:a8:b2: 24:87:ae:a9:ec:a9:8a:51:0e:e3:b1:3a:c1:c9:03: 75:72:f7:d3:2f:fd:d0:eb:05:6a:62:75:c3:2b:57: 0f:31:89:d2:a5:c6:f9:7a:82:d3:e0:b7:c1:71:fe: 80:06:fc:63:89:8d:86:1a:9f:c0:bd:5c:22:3b:8d: 90:26:fb:f3:98:ac:fd:4c:a4:df:7b:12:0e:40:8b: 0d:79:ca:8a:51:ea:7b:ba:f3:f6:e8:1f:9b:a6:58: 4e:ec:25:6c:2b:5f:d4:7c:3a:f8:eb:65:11:38:2d: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:09:B3:E0:9E:0C:32:BF:85:69:1A:27:63:FB:44:5A:F5:86:64:1B X509v3 Authority Key Identifier: keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ab:9e:8f:c0:1f:f6:30:4a:1d:1f:2e:43:85:fc:44:f5:16: 1f:0c:4f:3b:50:f6:41:f0:c0:a2:94:57:5e:9f:e0:cc:ba:4f: 8f:bb:26:97:f1:88:64:20:c2:c6:44:27:a8:10:3d:94:b5:07: 00:31:5d:9b:35:15:64:3d:d5:c4:a0:41:82:ec:71:10:57:21: f4:ed:05:13:ed:03:7b:b6:0e:d9:44:33:c1:cd:82:4a:73:ac: bd:82:a2:04:69:6d:2a:7e:a9:53:4c:e0:13:09:0b:32:9b:8e: fa:ba:88:fb:ee:7e:34:fc:29:8d:ab:b3:9d:4e:a1:a4:5d:ff: 38:21:ea:86:80:80:3e:8a:1a:0f:7b:6e:5e:a2:c5:33:17:5d: 42:c0:ba:59:16:76:f1:ed:5e:87:5f:35:d6:8e:38:e6:ae:87: 98:cf:e4:b6:fc:37:57:bd:ba:01:4a:54:e2:a5:87:83:99:43: ae:6f:1f:ef:c3:e4:03:f9:42:2c:a2:bd:f5:ed:62:05:8c:bb: 44:6a:e2:e6:38:f8:ea:f6:5a:3e:41:85:ef:80:9b:65:c0:a9: 6a:ce:97:d1:f1:02:f6:b8:e9:af:da:dd:ac:c5:ce:4f:89:97: a3:72:68:f9:48:22:df:69:a6:4a:43:9a:8a:e9:bd:89:de:d1: 92:fd:28:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDU3MjdFRUU4REEyRTJDQzc5RkFCQTBEQUQxOUM4ODQ4 MkJEMTU5REMwHhcNMjUxMTA1MDA0MzA2WhcNMjUxMTEyMDA0MzA2WjAYMRYwFAYD VQQDEw02OTBhOWQ5YS0wY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxpATgTTVtdAH1XEHTZvQDCCo7ZjPPzGU4PrBnshi+j+r0aax+03WHVakHkF 0VrB6azEKZBYG6YO7kI0fpM2AZMKuJw4OZmVryQ2M3kuKnGERMBCBm2WWA5eg1Di ye3A7CBDag/zXQ1ZbGbW5z/xK+HvGA5QDud7GxQo7FCG3oYm1Cw3rk0Lex0wZvDf 9jHKrkhIqLIkh66p7KmKUQ7jsTrByQN1cvfTL/3Q6wVqYnXDK1cPMYnSpcb5eoLT 4LfBcf6ABvxjiY2GGp/AvVwiO42QJvvzmKz9TKTfexIOQIsNecqKUep7uvP26B+b plhO7CVsK1/UfDr462UROC3L7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEJs+Ce DDK/hWkaJ2P7RFr1hmQbMB8GA1UdIwQYMBaAFFcn7ujaLizHn6ug2tGciEgr0Vnc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC9GODAyOUE0NkE1 Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxNZWZxNkRhMFp5SVNDdlJX ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5ZnU2Tm91TE1lZnE2RGEwWnlJU0N2Uldkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC9GODAyOUE0NkE1Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxN ZWZxNkRhMFp5SVNDdlJXZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6q56PwB/2MEodHy5DhfxE9RYfDE87UPZB8MCilFden+DMuk+PuyaX 8YhkIMLGRCeoED2UtQcAMV2bNRVkPdXEoEGC7HEQVyH07QUT7QN7tg7ZRDPBzYJK c6y9gqIEaW0qfqlTTOATCQsym476uoj77n40/CmNq7OdTqGkXf84IeqGgIA+ihoP e25eosUzF11CwLpZFnbx7V6HXzXWjjjmroeYz+S2/DdXvboBSlTipYeDmUOubx/v w+QD+UIsor317WIFjLtEauLmOPjq9lo+QYXvgJtlwKlqzpfR8QL2uOmv2t2sxc5P iZejcmj5SCLfaaZKQ5qK6b2J3tGS/Sio -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:50 2025 by rpki-client