$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json) Hash identifier: 7MY1GJ55Afoz4d33gFMIjtZ2VRozx/sQ4Wy7z7Uvujk= Subject key identifier: 7A:E9:82:28:B9:99:82:AB:67:33:53:FF:5A:C8:E0:71:D5:F9:53:5D Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Certificate serial: 3542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft Manifest number: 3508 Signing time: Tue 04 Nov 2025 15:16:48 +0000 Manifest this update: Tue 04 Nov 2025 15:16:47 +0000 Manifest next update: Tue 11 Nov 2025 15:16:47 +0000 Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: 0fuRHblOh+XdpWU+j//VTZpYBk/iXBuLu6KkAywubDA=) 2: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: kaUlqr3b8A7no1oe3E82H4SD9C+VUB4JZZk+4clJWRg=) 3: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: VG6uEFBAKDNWG5jrp+h5u5H00t+QV3JS7QeUIT589uA=) 4: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: LAU2JxX8T47cr50yu6tjbJf0N73aEylHsaRmxgaBsa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13634 (0x3542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Validity Not Before: Nov 4 15:16:47 2025 GMT Not After : Nov 11 15:16:47 2025 GMT Subject: CN=690a18df-7e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6b:ba:0c:8e:e7:38:e1:36:d2:6b:ae:55:6f: 0b:bc:b3:e2:54:f0:f2:d6:4b:7f:2f:fc:5f:9d:98: 0e:bd:63:7f:c9:cf:f8:1c:49:b9:18:54:c7:59:b6: cc:59:a2:03:9b:32:5b:0c:ea:06:f8:32:84:c7:6b: 4b:ef:2f:4c:37:b4:58:45:cd:bd:6c:9d:d1:7d:98: 0a:d5:46:b9:8f:7c:85:ba:eb:71:0b:5d:0c:90:92: 48:36:1c:77:49:7c:b3:99:9b:6b:7a:6d:28:92:95: ba:97:73:15:a5:e2:d6:67:20:55:18:58:a3:3a:e2: 06:16:f7:ce:4d:87:0f:0d:a7:90:6a:c3:1b:26:9a: e8:e5:57:32:43:ef:35:5a:24:b5:27:a9:ac:b0:15: 8f:f3:1c:15:fa:d8:10:43:8c:f6:21:d9:18:1b:15: f3:7a:68:f0:82:ef:6d:be:1b:96:44:8f:2c:88:2d: ec:81:d9:fd:8a:2f:df:35:64:59:0c:b5:c9:af:19: 78:d0:98:81:bb:bb:ef:fa:8b:02:a7:61:04:fc:6a: 67:54:33:96:8d:98:c4:b3:f4:6f:ae:3b:64:ee:72: 22:72:29:19:d6:8f:24:b2:f5:b5:fe:23:21:f1:bd: 1d:5c:b5:b7:86:63:04:17:e7:6c:71:cd:00:48:88: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E9:82:28:B9:99:82:AB:67:33:53:FF:5A:C8:E0:71:D5:F9:53:5D X509v3 Authority Key Identifier: keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:54:00:76:c6:d0:2d:e7:d3:20:43:a4:a5:64:15:e6:2e:20: c9:bc:9b:b9:dc:ee:e7:7f:78:9e:d6:be:00:b2:54:ab:3c:72: 4d:90:54:dc:d3:7f:69:74:cc:d8:5a:c1:8e:12:c6:5f:61:22: db:a9:1f:6b:9e:0c:d6:40:c4:4b:4d:b3:34:05:1c:d9:24:c0: 0a:39:5a:f8:2e:4e:68:43:a1:b9:b8:64:62:00:30:55:28:f3: f0:64:16:dd:7a:54:9a:94:fe:b3:05:e1:6a:d2:a2:3e:db:1a: 2c:a1:b1:3e:ef:a8:c2:b9:ae:06:17:14:48:51:5d:82:9e:ae: 57:f0:4d:67:2f:10:77:e0:6c:53:04:99:4c:eb:81:66:82:3e: 05:f2:b9:70:91:53:7b:4f:0c:58:42:93:e5:4d:70:e1:1e:5b: a9:d3:45:d9:9e:5b:ed:8e:71:0a:ac:da:30:ec:c9:bb:9d:4d: 4c:11:30:33:a5:1a:c4:ed:3b:6c:34:e8:9d:e3:f9:31:bc:5b: e4:da:93:82:91:47:89:74:41:33:d3:70:5c:ff:65:4a:0c:ff: 06:fa:78:14:4d:b8:d9:5f:cb:f8:9f:c1:9c:f1:14:11:6a:b0: 66:a6:6e:5b:c5:73:4d:a5:aa:4f:01:17:6e:50:bf:85:5b:15: 8e:48:76:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC NjcxRTVFRUUwHhcNMjUxMTA0MTUxNjQ3WhcNMjUxMTExMTUxNjQ3WjAYMRYwFAYD VQQDEw02OTBhMThkZi03ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Gu6DI7nOOE20muuVW8LvLPiVPDy1kt/L/xfnZgOvWN/yc/4HEm5GFTHWbbM WaIDmzJbDOoG+DKEx2tL7y9MN7RYRc29bJ3RfZgK1Ua5j3yFuutxC10MkJJINhx3 SXyzmZtrem0okpW6l3MVpeLWZyBVGFijOuIGFvfOTYcPDaeQasMbJpro5VcyQ+81 WiS1J6mssBWP8xwV+tgQQ4z2IdkYGxXzemjwgu9tvhuWRI8siC3sgdn9ii/fNWRZ DLXJrxl40JiBu7vv+osCp2EE/GpnVDOWjZjEs/Rvrjtk7nIicikZ1o8ksvW1/iMh 8b0dXLW3hmMEF+dscc0ASIiAlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrpgii5 mYKrZzNT/1rI4HHV+VNdMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzcyNi9GOUZGRjZBQzFEQTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRq Tlp2LXdhTlBHWksyY2VYdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCVAB2xtAt59MgQ6SlZBXmLiDJvJu53O7nf3ie1r4AslSrPHJNkFTc 039pdMzYWsGOEsZfYSLbqR9rngzWQMRLTbM0BRzZJMAKOVr4Lk5oQ6G5uGRiADBV KPPwZBbdelSalP6zBeFq0qI+2xosobE+76jCua4GFxRIUV2Cnq5X8E1nLxB34GxT BJlM64Fmgj4F8rlwkVN7TwxYQpPlTXDhHlup00XZnlvtjnEKrNow7Mm7nU1METAz pRrE7TtsNOid4/kxvFvk2pOCkUeJdEEz03Bc/2VKDP8G+ngUTbjZX8v4n8Gc8RQR arBmpm5bxXNNpapPARduUL+FWxWOSHaT -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:32 2025 by rpki-client