$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft File: vjv7J425oD3qOFbX_iKSGDdNj8A.mft (raw, json) Hash identifier: CCZKvyuT7S6PaNe+cZsSEnvvWWcQZW0vXeargZFiVhw= Subject key identifier: 1F:A8:08:10:96:EC:52:A6:DA:E7:AD:54:05:E9:C0:76:84:A0:65:EA Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 Certificate issuer: /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft Manifest number: 9B Signing time: Wed 05 Nov 2025 06:34:06 +0000 Manifest this update: Wed 05 Nov 2025 06:34:06 +0000 Manifest next update: Wed 12 Nov 2025 06:34:06 +0000 Files and hashes: 1: vjv7J425oD3qOFbX_iKSGDdNj8A.crl (hash: 2bxVLN+11Z8bzSPxUFdUxPxkPPOORqyH75Mn6n88JbA=) 2: FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (hash: xoOr7mcziDhALfamVuTQnWFaiiFOCUXOClhl7nV0wbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145884, serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Validity Not Before: Nov 5 06:34:06 2025 GMT Not After : Nov 12 06:34:06 2025 GMT Subject: CN=690aefde-780e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:96:f1:7b:4d:a3:5f:42:3d:c3:4b:ee:c4: b5:dd:8e:ba:29:5c:51:29:2d:36:95:f4:37:3a:7b: 99:ef:13:dc:20:d4:ad:c4:0d:0b:fd:de:9b:d6:d2: cb:00:db:64:ef:c5:3e:ac:14:43:83:c0:e8:4b:db: e6:00:25:c4:73:cb:76:bd:c2:47:22:c9:c1:67:c5: 4b:c1:4a:ab:5b:86:8b:57:34:25:d4:a4:82:68:4c: 16:b3:bd:64:b0:58:ee:74:73:05:4a:37:f3:21:e3: 13:2e:01:06:57:f7:c3:26:44:a8:0b:4d:28:93:dc: a9:e2:c8:6a:ba:dd:2b:36:ee:56:df:16:66:82:29: 97:20:4e:5e:97:b3:48:07:15:ed:b2:44:4f:b1:a2: 49:63:74:33:59:1e:fc:00:cc:46:90:d9:c2:3e:93: f8:be:3a:ed:89:2b:cc:b0:b7:73:81:e3:6d:f8:76: 0c:14:e0:dd:bd:cd:2e:47:e7:81:a3:42:2e:9e:80: 4a:0c:82:be:80:31:0a:4c:d4:7a:a8:68:4a:59:39: b5:82:0f:5a:53:5e:64:13:0d:36:20:ae:cb:16:4e: 6a:5d:ed:87:9a:5b:ac:8f:80:de:b7:42:9c:2b:e0: 17:90:d6:16:cb:53:5b:15:36:c9:0f:21:c2:62:7e: e6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A8:08:10:96:EC:52:A6:DA:E7:AD:54:05:E9:C0:76:84:A0:65:EA X509v3 Authority Key Identifier: keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:12:a4:45:38:43:89:2a:13:1c:a2:43:9f:11:bc:f5:b0:90: a5:ed:55:d4:d1:70:a7:70:65:ec:fb:b3:46:13:65:f1:f1:9c: 25:bb:68:17:42:f0:81:fc:a1:8c:e6:77:7e:3b:50:5b:e7:dc: c1:8b:a6:0f:82:96:d7:3b:1b:5e:da:34:7c:e4:d7:90:4a:3c: 4e:12:f9:0a:d9:60:19:f8:b1:7e:48:d7:00:82:13:d7:46:a3: fc:5f:ac:70:cf:fb:2a:a1:05:0e:98:f9:2d:90:a1:bb:ca:74: c2:62:b5:5c:af:35:92:dc:74:9b:c5:27:c4:e7:8f:4c:2c:76: ab:8f:71:68:a0:ce:c1:5d:f9:d8:53:d9:7e:98:2d:20:bd:e7: 62:e9:4a:62:26:d8:35:d6:12:e5:b2:a4:dd:7b:be:d4:0c:0f: 45:d7:88:c5:41:50:36:ae:37:b2:eb:e5:56:7b:11:00:13:e1: ac:a1:0f:aa:ec:f1:7d:fd:20:53:a4:4a:37:db:a5:51:5c:fa: bf:dd:d1:3b:78:0e:21:81:43:b7:8d:2e:37:48:82:81:4c:4d: ee:a0:10:09:70:e5:5b:23:50:e7:1a:e1:f3:fa:64:3a:33:75: 5f:4e:34:00:a5:86:03:69:98:fa:94:a3:98:c4:b1:6f:fe:79: c1:8d:f2:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU4ODQxMTAvBgNVBAUTKEJFM0JGQjI3OERCOUEwM0RFQTM4NTZEN0ZFMjI5MjE4 Mzc0RDhGQzAwHhcNMjUxMTA1MDYzNDA2WhcNMjUxMTEyMDYzNDA2WjAYMRYwFAYD VQQDEw02OTBhZWZkZS03ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1OW8XtNo19CPcNL7sS13Y66KVxRKS02lfQ3OnuZ7xPcINStxA0L/d6b1tLL ANtk78U+rBRDg8DoS9vmACXEc8t2vcJHIsnBZ8VLwUqrW4aLVzQl1KSCaEwWs71k sFjudHMFSjfzIeMTLgEGV/fDJkSoC00ok9yp4shqut0rNu5W3xZmgimXIE5el7NI BxXtskRPsaJJY3QzWR78AMxGkNnCPpP4vjrtiSvMsLdzgeNt+HYMFODdvc0uR+eB o0IunoBKDIK+gDEKTNR6qGhKWTm1gg9aU15kEw02IK7LFk5qXe2Hmlusj4Det0Kc K+AXkNYWy1NbFTbJDyHCYn7mmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+oCBCW 7FKm2uetVAXpwHaEoGXqMB8GA1UdIwQYMBaAFL47+yeNuaA96jhW1/4ikhg3TY/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTg4NC82MUIwNzA1QUNE RUIxMUVGOEI1QjMwMUZDNEY5QUUwMi92anY3SjQyNW9EM3FPRmJYX2lLU0dEZE5q OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqdjdKNDI1b0QzcU9GYlhfaUtTR0RkTmo4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTg4NC82MUIwNzA1QUNERUIxMUVGOEI1QjMwMUZDNEY5QUUwMi92anY3SjQyNW9E M3FPRmJYX2lLU0dEZE5qOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkEqRFOEOJKhMcokOfEbz1sJCl7VXU0XCncGXs+7NGE2Xx8Zwlu2gX QvCB/KGM5nd+O1Bb59zBi6YPgpbXOxte2jR85NeQSjxOEvkK2WAZ+LF+SNcAghPX RqP8X6xwz/sqoQUOmPktkKG7ynTCYrVcrzWS3HSbxSfE549MLHarj3FooM7BXfnY U9l+mC0gvedi6UpiJtg11hLlsqTde77UDA9F14jFQVA2rjey6+VWexEAE+GsoQ+q 7PF9/SBTpEo326VRXPq/3dE7eA4hgUO3jS43SIKBTE3uoBAJcOVbI1DnGuHz+mQ6 M3VfTjQApYYDaZj6lKOYxLFv/nnBjfJ5 -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:37 2025 by rpki-client