$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: zWYDZ1ym3HWqxz3yqeDxI+4FFBRCw+DB/NaF24EH0iw= Subject key identifier: 96:29:95:64:78:C1:90:C3:4F:89:C6:60:BB:91:71:4D:36:AF:9E:05 Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: 0165 Signing time: Wed 05 Nov 2025 04:10:23 +0000 Manifest this update: Wed 05 Nov 2025 04:10:22 +0000 Manifest next update: Wed 12 Nov 2025 04:10:22 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: ojK6nfOBiCOsdgJuc9Kqh9koeLvrvhK1W0reRcCnbVQ=) 2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Validity Not Before: Nov 5 04:10:22 2025 GMT Not After : Nov 12 04:10:22 2025 GMT Subject: CN=690ace2f-69dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:66:3c:76:a6:0b:ab:8c:d2:e3:e2:29:0d: e5:3a:81:6b:52:57:96:8a:1c:02:93:f6:57:0f:84: 44:ec:c0:8a:17:53:c5:d9:e8:6f:4b:c6:ab:66:a7: 2c:2a:52:ad:91:20:a0:fd:df:8c:d3:13:f6:ab:66: 64:f5:37:4c:59:98:52:69:3f:e2:ad:fa:1d:d0:d2: 5a:f1:71:84:c8:8c:a9:d9:3f:d6:ab:a4:e3:9c:73: 7e:87:63:48:79:1f:b6:9f:f5:5d:17:29:d4:e5:f1: 9f:cf:f9:68:60:98:5c:ac:7f:5b:1c:27:47:9a:0a: f2:81:90:46:d8:7d:c9:54:8a:a5:32:d4:24:0d:a7: c1:12:3a:c5:3a:25:ae:73:6f:69:76:39:75:92:1b: 41:ed:ee:43:c4:88:85:c2:b6:f5:c6:b7:98:d9:e7: cc:e6:dd:6a:aa:b6:e4:9c:f3:e5:65:9b:f7:78:4b: 99:1c:54:2e:88:19:df:fc:cc:e6:7a:c1:9b:21:6d: f9:78:5e:f8:7e:81:76:d9:df:02:13:2b:88:ed:3e: 1e:76:29:62:d7:cc:b3:9a:c7:8a:89:51:b8:fc:cb: e0:64:bd:0e:d6:1a:3a:a8:02:99:f4:3a:15:92:05: 40:17:f6:77:e0:39:06:1e:88:8f:70:10:6f:26:76: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:29:95:64:78:C1:90:C3:4F:89:C6:60:BB:91:71:4D:36:AF:9E:05 X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:2d:1c:e8:6c:0b:68:90:20:11:47:50:81:cc:2f:3e:ea:32: e3:67:77:da:f4:3d:51:78:f4:57:b8:85:69:33:d3:8a:a8:2a: e3:26:62:6d:bb:70:fa:4f:82:47:fe:b1:ca:1f:15:dc:e1:11: 88:c9:cb:e1:e4:aa:0f:1a:e7:09:f6:c8:72:77:17:53:90:90: f1:5f:2d:05:f0:ab:3b:6f:7f:63:66:3b:e8:54:ae:02:49:1e: 98:88:02:a4:35:c1:d1:96:6a:9b:c8:4a:ea:77:3f:54:f5:6b: 76:2d:70:ae:dc:af:72:ab:53:03:44:bc:f5:1b:96:e9:17:ba: 11:82:0b:a9:be:b6:b1:a9:a3:d3:52:07:ed:2f:a2:c7:ec:5a: ef:bc:25:1d:d4:29:4f:a7:df:c8:3a:df:99:46:35:79:93:57: 95:a0:d7:62:fa:86:0c:b0:4f:60:f4:fa:45:f7:d7:e3:cf:08: fe:0d:a6:3d:cd:32:18:33:64:bc:1f:84:e1:7e:05:4a:87:e7: 54:0b:c1:5c:37:c3:2f:16:06:0a:1c:f3:f1:39:d2:8f:5b:d0: 6b:84:cd:75:c7:cf:dc:16:71:c5:69:9d:05:01:7e:59:0f:89: 26:5b:0a:8f:71:0f:a2:11:74:29:f2:87:ea:3c:a2:7d:37:c9: 2a:f7:fb:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4 Nzc0RUVCQ0QwHhcNMjUxMTA1MDQxMDIyWhcNMjUxMTEyMDQxMDIyWjAYMRYwFAYD VQQDEw02OTBhY2UyZi02OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHhmPHamC6uM0uPiKQ3lOoFrUleWihwCk/ZXD4RE7MCKF1PF2ehvS8arZqcs KlKtkSCg/d+M0xP2q2Zk9TdMWZhSaT/irfod0NJa8XGEyIyp2T/Wq6TjnHN+h2NI eR+2n/VdFynU5fGfz/loYJhcrH9bHCdHmgrygZBG2H3JVIqlMtQkDafBEjrFOiWu c29pdjl1khtB7e5DxIiFwrb1xreY2efM5t1qqrbknPPlZZv3eEuZHFQuiBnf/Mzm esGbIW35eF74foF22d8CEyuI7T4edili18yzmseKiVG4/MvgZL0O1ho6qAKZ9DoV kgVAF/Z34DkGHoiPcBBvJna87wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYplWR4 wZDDT4nGYLuRcU02r54FMB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5 QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VCRC9DQ0Q4MTQyODk5QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdH UTM4OXRiSVVJSXlIZE82ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHLRzobAtokCARR1CBzC8+6jLjZ3fa9D1RePRXuIVpM9OKqCrjJmJt u3D6T4JH/rHKHxXc4RGIycvh5KoPGucJ9shydxdTkJDxXy0F8Ks7b39jZjvoVK4C SR6YiAKkNcHRlmqbyErqdz9U9Wt2LXCu3K9yq1MDRLz1G5bpF7oRggupvraxqaPT UgftL6LH7FrvvCUd1ClPp9/IOt+ZRjV5k1eVoNdi+oYMsE9g9PpF99fjzwj+DaY9 zTIYM2S8H4ThfgVKh+dUC8FcN8MvFgYKHPPxOdKPW9BrhM11x8/cFnHFaZ0FAX5Z D4kmWwqPcQ+iEXQp8ofqPKJ9N8kq9/uS -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:01 2025 by rpki-client