$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: hmW6aUiymgAFbRynp5uFFhZRtPUKnQ+oQa/t+wwphk4= Subject key identifier: D9:82:EA:5D:9B:D2:29:05:32:4E:33:66:C8:E6:06:84:71:7E:8C:90 Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0CBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0CB4 Signing time: Tue 04 Nov 2025 18:17:30 +0000 Manifest this update: Tue 04 Nov 2025 18:17:30 +0000 Manifest next update: Tue 11 Nov 2025 18:17:30 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: ojCTbfe2JY4cvzsm228zSIApb6QKvqk5gCegF6f+A7g=) 2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: XqdQSfz9/Zl7eYUBAr06CP3dhexiFqvZGJN1XSM9VAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: Nov 4 18:17:30 2025 GMT Not After : Nov 11 18:17:30 2025 GMT Subject: CN=690a433a-cf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:21:7b:e6:61:a8:6f:5e:28:64:f6:76:b6: a7:8e:8c:23:a8:0c:8e:96:01:c3:d8:ee:a5:db:3d: e3:0e:df:57:17:2b:b1:30:28:bc:8e:56:9b:bb:b1: f2:02:4c:9d:70:02:a7:ea:44:5b:68:de:74:43:e5: b7:c1:ed:ba:44:26:5c:dd:b8:f4:ad:2f:f3:01:32: 3c:ae:e7:19:9f:5b:ee:c0:8a:66:ba:57:6d:34:55: 85:47:0c:f5:61:c1:ad:ac:d0:3f:ac:6d:fd:bf:38: 4e:93:15:62:18:cf:0b:73:6b:db:13:a7:47:c6:d0: a0:6e:2d:f8:3c:12:df:3f:8f:4a:36:be:c0:e8:08: 02:60:e3:01:fd:fb:b5:09:71:af:ce:57:2a:60:07: 6b:23:ce:40:ae:ba:9b:c5:da:d1:57:d5:53:e7:72: fe:a1:6b:49:e1:5d:ec:b9:d2:03:63:45:4d:71:36: be:3f:b7:8d:47:b1:f9:44:f9:a2:18:a1:f0:ec:9d: e2:4d:82:c7:9e:a4:67:3f:8d:4d:30:88:3c:5f:b8: 33:af:76:72:94:3e:5c:3a:21:73:66:1f:3e:58:37: 18:77:a0:c5:2c:d0:7d:24:5b:e5:33:19:2e:43:10: 70:d6:7e:b7:f6:8d:6b:94:c4:b4:04:66:d7:93:27: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:82:EA:5D:9B:D2:29:05:32:4E:33:66:C8:E6:06:84:71:7E:8C:90 X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:6f:eb:9f:01:ad:2e:1d:9a:7d:50:f0:77:f1:39:e3:06:78: 3d:d9:09:b5:d2:d5:b0:72:6d:3b:0d:ca:36:2d:54:08:23:f1: 4a:f4:5e:ac:98:b7:97:86:68:56:86:53:83:fa:14:ca:d8:90: 02:22:58:09:21:ea:21:f8:72:73:c9:89:fd:6e:f9:3c:d6:f8: 4b:2d:25:61:63:87:99:55:82:77:44:7b:c1:a1:7d:f8:6b:9f: 80:8a:60:75:ab:5b:de:da:94:6b:4a:ec:74:17:f2:44:a3:7b: fb:41:82:fa:48:c5:50:8a:22:68:78:c2:6c:b2:14:6f:df:67: 99:a8:dd:eb:ca:2e:e6:4e:b1:9e:73:d0:2d:1c:25:4e:ac:ad: c6:32:bc:d6:99:3c:3d:7b:59:76:44:91:57:61:67:f8:fc:7b: f8:2b:70:94:df:78:04:99:d1:b5:b3:9c:82:3a:a7:1c:05:ea: 8d:15:77:4e:a8:e4:69:80:93:62:1a:52:61:ce:d9:9f:53:52: 8f:dd:cd:d2:7e:52:56:ae:fc:f7:da:37:6a:62:9a:fd:c2:c5: 83:f4:d9:e6:05:11:47:16:a8:07:8e:39:d0:55:d4:a3:8e:5f: bf:6e:99:a4:23:ed:aa:3f:b8:0a:31:f9:91:50:ce:45:b1:b0: 7d:93:4c:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjUxMTA0MTgxNzMwWhcNMjUxMTExMTgxNzMwWjAYMRYwFAYD VQQDEw02OTBhNDMzYS1jZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy58he+ZhqG9eKGT2dranjowjqAyOlgHD2O6l2z3jDt9XFyuxMCi8jlabu7Hy AkydcAKn6kRbaN50Q+W3we26RCZc3bj0rS/zATI8rucZn1vuwIpmuldtNFWFRwz1 YcGtrNA/rG39vzhOkxViGM8Lc2vbE6dHxtCgbi34PBLfP49KNr7A6AgCYOMB/fu1 CXGvzlcqYAdrI85ArrqbxdrRV9VT53L+oWtJ4V3sudIDY0VNcTa+P7eNR7H5RPmi GKHw7J3iTYLHnqRnP41NMIg8X7gzr3ZylD5cOiFzZh8+WDcYd6DFLNB9JFvlMxku QxBw1n639o1rlMS0BGbXkycjXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmC6l2b 0ikFMk4zZsjmBoRxfoyQMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYb+ufAa0uHZp9UPB38TnjBng92Qm10tWwcm07Dco2LVQII/FK9F6s mLeXhmhWhlOD+hTK2JACIlgJIeoh+HJzyYn9bvk81vhLLSVhY4eZVYJ3RHvBoX34 a5+AimB1q1ve2pRrSux0F/JEo3v7QYL6SMVQiiJoeMJsshRv32eZqN3ryi7mTrGe c9AtHCVOrK3GMrzWmTw9e1l2RJFXYWf4/Hv4K3CU33gEmdG1s5yCOqccBeqNFXdO qORpgJNiGlJhztmfU1KP3c3SflJWrvz32jdqYpr9wsWD9NnmBRFHFqgHjjnQVdSj jl+/bpmkI+2qP7gKMfmRUM5FsbB9k0yk -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:28 2025 by rpki-client