$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json) Hash identifier: atNltgRZJ31NmCOg4EWl4LTkt8EmBmrE4MTxn9ZL3vs= Subject key identifier: FC:52:AF:98:15:3D:3B:96:EE:DE:D5:30:C2:7F:6F:44:DC:6B:12:86 Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft Manifest number: 0150 Signing time: Wed 05 Nov 2025 04:21:08 +0000 Manifest this update: Wed 05 Nov 2025 04:21:07 +0000 Manifest next update: Wed 12 Nov 2025 04:21:07 +0000 Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: eyh22MdZw20J7OFDy41SfIi7N92PFu21dELNCjUWb+Q=) 2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: MNtM9pXu4p6v7Z7f6/Wop8L0VMv9VFX8mmGYuSjaQTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Validity Not Before: Nov 5 04:21:07 2025 GMT Not After : Nov 12 04:21:07 2025 GMT Subject: CN=690ad0b4-2e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:83:34:50:82:36:cd:75:f1:6a:a4:46:fd: 0b:31:c6:dd:09:83:fe:0f:b0:0f:3e:af:5d:3c:33: f4:2a:a2:22:a9:36:53:89:67:52:6a:c1:1c:40:4f: 3a:40:68:6c:d7:2a:72:62:69:25:03:12:38:68:86: 61:4f:93:97:c7:23:78:0c:43:88:77:28:a6:46:31: 88:fe:82:97:e7:92:ed:ef:1c:2f:c5:3c:9f:ae:fe: 52:70:9c:61:5b:55:b9:68:cd:e8:f8:d2:0d:df:81: 69:16:a9:c3:74:e7:fb:43:1a:3e:bd:7f:a5:b3:25: e6:9f:0f:4f:a0:ae:0f:d1:35:73:3b:10:9e:91:e9: 5f:2d:3d:41:c6:74:8d:79:52:9b:3a:78:94:6d:79: 8e:5e:7e:35:29:03:14:ce:f4:ca:d7:49:7b:80:4d: f7:ff:1b:d4:31:63:ee:84:71:ea:8c:f8:87:56:d3: 68:b9:70:30:96:0f:47:45:b2:84:27:ec:25:d0:be: 96:26:37:30:55:9f:67:a6:ed:01:97:2c:22:14:fe: ed:27:83:3d:c3:91:12:ec:c8:b1:0c:1b:74:0b:97: 9b:a5:b0:97:c0:d4:5f:66:5d:ac:af:86:56:8b:78: e5:49:fd:38:9e:6f:58:f5:b7:51:51:f2:74:ab:86: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:52:AF:98:15:3D:3B:96:EE:DE:D5:30:C2:7F:6F:44:DC:6B:12:86 X509v3 Authority Key Identifier: keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:65:94:b1:55:31:06:ac:ef:f6:24:08:14:ba:74:f7:a0:1f: 69:97:72:74:16:b4:8c:8f:71:34:03:b5:12:20:09:5a:43:cd: ff:80:43:8f:94:ad:f2:36:cc:d3:e8:94:e8:76:f0:eb:1b:74: 1b:fb:5a:96:5a:37:d4:ae:0c:4e:06:97:52:94:9f:36:c8:c9: 5c:20:fc:c8:3e:eb:be:e3:eb:33:95:ba:ee:73:f8:8d:43:a2: 3f:f9:ee:79:f8:1a:ad:90:5b:69:ca:13:c4:0f:d2:ad:73:ab: 2c:c1:d1:a8:70:da:8e:1f:c2:42:f5:f7:81:08:43:4d:55:15: 1f:9d:9b:0e:82:ce:88:22:73:8f:18:b5:95:1f:0e:21:d6:01: eb:1e:2c:bc:57:23:56:1f:aa:21:a0:40:45:0c:8c:2d:d3:f0: 93:a9:0a:a1:96:07:dd:a7:91:17:91:56:96:4f:1e:35:19:f9: 49:ed:d2:68:9d:4b:2b:19:da:8a:91:58:0b:7d:79:c1:65:6e: 02:aa:5a:74:cf:50:81:68:0e:99:5f:71:71:f9:d5:c3:cb:81: 64:8c:5d:d1:ad:b3:28:47:8e:be:98:6b:30:ed:29:c3:e2:5f: 3a:bf:64:ae:06:31:4d:4c:f2:a8:84:cc:8f:d4:71:78:8c:78: 5c:3a:03:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw QkE0RDE2OEEwHhcNMjUxMTA1MDQyMTA3WhcNMjUxMTEyMDQyMTA3WjAYMRYwFAYD VQQDEw02OTBhZDBiNC0yZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1WDNFCCNs118WqkRv0LMcbdCYP+D7APPq9dPDP0KqIiqTZTiWdSasEcQE86 QGhs1ypyYmklAxI4aIZhT5OXxyN4DEOIdyimRjGI/oKX55Lt7xwvxTyfrv5ScJxh W1W5aM3o+NIN34FpFqnDdOf7Qxo+vX+lsyXmnw9PoK4P0TVzOxCekelfLT1BxnSN eVKbOniUbXmOXn41KQMUzvTK10l7gE33/xvUMWPuhHHqjPiHVtNouXAwlg9HRbKE J+wl0L6WJjcwVZ9npu0BlywiFP7tJ4M9w5ES7MixDBt0C5ebpbCXwNRfZl2sr4ZW i3jlSf04nm9Y9bdRUfJ0q4bWHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxSr5gV PTuW7t7VMMJ/b0TcaxKGMB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1 QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hq Q2h1X2F2QmxHTGtMcE5Gb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6ZZSxVTEGrO/2JAgUunT3oB9pl3J0FrSMj3E0A7USIAlaQ83/gEOP lK3yNszT6JTodvDrG3Qb+1qWWjfUrgxOBpdSlJ82yMlcIPzIPuu+4+szlbruc/iN Q6I/+e55+BqtkFtpyhPED9Ktc6sswdGocNqOH8JC9feBCENNVRUfnZsOgs6IInOP GLWVHw4h1gHrHiy8VyNWH6ohoEBFDIwt0/CTqQqhlgfdp5EXkVaWTx41GflJ7dJo nUsrGdqKkVgLfXnBZW4Cqlp0z1CBaA6ZX3Fx+dXDy4FkjF3RrbMoR46+mGsw7SnD 4l86v2SuBjFNTPKohMyP1HF4jHhcOgPO -----END CERTIFICATE-----Generated at Wed Nov 5 09:54:58 2025 by rpki-client