$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json) Hash identifier: l6BxMrErg34m6Q3RQonnHiG40rlQw1+VpTZUyJ0C/3o= Subject key identifier: 84:00:BD:A9:D4:35:C8:06:D8:5E:9C:A1:46:42:EC:24:08:AB:FF:68 Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft Manifest number: 045B Signing time: Wed 05 Nov 2025 00:16:29 +0000 Manifest this update: Wed 05 Nov 2025 00:16:28 +0000 Manifest next update: Wed 12 Nov 2025 00:16:28 +0000 Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: zhRysi1TP3a8eBMeuKj4+/ZaEL5U7Yl2TNwsFn7xoVs=) 2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: +VP5NY/+4Z/8NphSit3psl/B3s8Rh2QC3KRRxPvmIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Validity Not Before: Nov 5 00:16:28 2025 GMT Not After : Nov 12 00:16:28 2025 GMT Subject: CN=690a975d-9a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c8:f3:ee:7b:73:9c:8e:57:ec:f3:7f:2a:0a: 3c:f3:37:9c:32:7f:81:ef:35:46:69:82:58:9a:2b: 34:6e:5a:9a:0d:6e:f5:f8:27:1d:d6:47:b8:38:65: 80:a7:b4:ae:62:f1:69:a3:09:79:b9:40:8b:6a:8a: 5c:e8:c7:e1:a1:1c:da:6f:e7:91:f4:85:95:e1:80: cb:90:15:2a:d5:3c:8f:0d:a7:51:4d:81:64:96:8b: 9d:f8:80:c9:ae:8a:e4:15:79:32:68:63:91:e2:26: 7e:6d:2e:8a:1f:13:f1:f0:64:a0:4e:93:19:21:2f: 0f:a9:a5:2a:8f:68:e9:0c:18:03:23:78:1a:05:bd: a8:dd:ed:8d:7c:02:78:83:2f:1f:3a:fb:d9:84:61: 46:a2:b3:6c:0a:1f:94:fe:37:b5:50:a9:4f:be:30: 65:ba:79:fd:73:51:55:ae:93:3e:ad:17:e0:48:cf: 98:35:31:e7:9f:85:6e:98:89:ac:67:9a:46:d8:28: 56:42:2d:bf:08:d1:fe:64:45:9c:90:4c:6d:d7:7f: 04:cd:d7:e5:61:71:dc:f0:a0:0f:51:cf:eb:2d:f3: c3:05:03:a8:8a:b9:1f:30:25:b5:1c:7f:5f:22:22: 19:02:fe:a8:a9:fe:40:f7:0e:13:d6:99:c5:8b:29: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:BD:A9:D4:35:C8:06:D8:5E:9C:A1:46:42:EC:24:08:AB:FF:68 X509v3 Authority Key Identifier: keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:16:db:52:d2:39:2a:98:90:af:04:1a:ba:b4:fb:e2:c7:52: b6:9e:f7:dd:c0:97:eb:dc:cb:6c:1f:61:1b:ab:b0:4e:62:63: 29:76:4c:ea:2e:b7:58:4a:c6:42:1d:4a:47:2e:0f:da:cb:5a: e6:f7:36:84:4d:16:91:f8:4d:b8:da:39:e4:75:76:81:39:86: a4:fc:76:e2:36:1b:94:99:c0:c9:58:48:7c:6a:7d:86:76:f6: 06:aa:de:d8:37:80:50:b0:dd:ae:9c:fa:4c:2a:9a:42:ba:9a: c5:0f:45:74:0d:e7:fc:95:ed:0c:f3:4a:82:ae:26:73:a3:42: 03:8c:5e:66:b4:ca:53:a3:72:50:fb:3a:2b:0b:88:68:f0:3b: 3c:49:92:7e:83:62:84:91:17:59:dd:f4:b4:85:cd:53:5e:42: d1:f3:2a:da:a6:30:b7:f3:8d:27:2b:f2:90:4f:9c:00:dd:91: 6b:d2:73:33:9c:53:26:4f:59:b7:d3:33:b4:52:b7:9a:9b:6d: 21:fd:98:a7:58:a8:93:7e:a2:30:00:08:12:d2:1b:aa:b2:4f: 4f:d3:f8:68:89:a7:eb:f0:5b:9d:6b:1c:86:08:f3:96:4c:c2: 56:23:38:fa:45:71:a7:46:50:99:d8:24:68:5a:61:02:f9:a9: b7:5d:db:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy NzIxQzk4Q0UwHhcNMjUxMTA1MDAxNjI4WhcNMjUxMTEyMDAxNjI4WjAYMRYwFAYD VQQDEw02OTBhOTc1ZC05YTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48jz7ntznI5X7PN/Kgo88zecMn+B7zVGaYJYmis0blqaDW71+Ccd1ke4OGWA p7SuYvFpowl5uUCLaopc6MfhoRzab+eR9IWV4YDLkBUq1TyPDadRTYFkloud+IDJ rorkFXkyaGOR4iZ+bS6KHxPx8GSgTpMZIS8PqaUqj2jpDBgDI3gaBb2o3e2NfAJ4 gy8fOvvZhGFGorNsCh+U/je1UKlPvjBlunn9c1FVrpM+rRfgSM+YNTHnn4VumIms Z5pG2ChWQi2/CNH+ZEWckExt138EzdflYXHc8KAPUc/rLfPDBQOoirkfMCW1HH9f IiIZAv6oqf5A9w4T1pnFiynxGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQAvanU NcgG2F6coUZC7CQIq/9oMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T NGt5RFJjbDd3MFluSWNtTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIFttS0jkqmJCvBBq6tPvix1K2nvfdwJfr3MtsH2Ebq7BOYmMpdkzq LrdYSsZCHUpHLg/ay1rm9zaETRaR+E242jnkdXaBOYak/HbiNhuUmcDJWEh8an2G dvYGqt7YN4BQsN2unPpMKppCuprFD0V0Def8le0M80qCriZzo0IDjF5mtMpTo3JQ +zorC4ho8Ds8SZJ+g2KEkRdZ3fS0hc1TXkLR8yrapjC3840nK/KQT5wA3ZFr0nMz nFMmT1m30zO0Uream20h/ZinWKiTfqIwAAgS0huqsk9P0/hoiafr8FudaxyGCPOW TMJWIzj6RXGnRlCZ2CRoWmEC+am3XdvE -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:44 2025 by rpki-client