$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json) Hash identifier: G9FCQwtaYkL0n3lVpAIfEi7thO2QomCsIQSsdfGkuww= Subject key identifier: 13:A6:10:4C:9E:4E:36:E7:7D:17:B1:8F:19:54:20:BF:81:BD:64:F2 Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Certificate serial: 1097 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft Manifest number: 1071 Signing time: Tue 04 Nov 2025 17:30:00 +0000 Manifest this update: Tue 04 Nov 2025 17:30:00 +0000 Manifest next update: Tue 11 Nov 2025 17:30:00 +0000 Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: x7Y/ZnqhZ7Uz4bGoOx9/LvvnfDdPhY/VBQfGUs1k94c=) 2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: 4v2ndb5kC9RQ/ICFAsBPzACNjUkltroKMEeinvAl9Rg=) 3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: gSqRoN1z82N7viR2G1U5YkqGrldYUent3/4dX2IrRC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4247 (0x1097) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Validity Not Before: Nov 4 17:30:00 2025 GMT Not After : Nov 11 17:30:00 2025 GMT Subject: CN=690a3818-17b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:ce:ba:0e:6b:96:d0:3f:ec:66:26:f6:f4: 31:5a:96:2e:b1:2a:71:cc:b6:64:6d:a6:f1:da:e7: 72:5e:79:ed:05:87:89:9c:e9:97:d9:f3:6c:5d:15: 95:df:d4:cd:d7:6b:02:f0:be:d0:80:08:45:87:e2: c4:52:94:5b:1d:1e:db:e8:f0:21:db:c4:dc:f3:20: ff:3d:9f:01:bb:20:d6:e4:6a:78:9f:52:2a:21:c4: ff:e9:89:e1:6c:46:b2:53:41:c0:9b:aa:b5:a2:4b: 49:77:25:be:fe:04:84:7f:f1:7a:28:4a:2d:25:a4: 50:b7:41:3b:f1:44:98:a9:1e:a1:28:82:9a:46:4b: 1a:6b:94:93:12:8c:4f:e6:b2:02:26:c3:78:3b:f8: da:92:74:e9:01:9d:86:4d:25:bb:55:db:a5:4b:18: b4:9c:fe:d3:16:7a:cf:ae:24:0b:c5:87:af:3a:ca: 4a:94:64:74:2e:83:10:4e:9b:70:7b:75:39:15:f7: 9a:74:3f:69:f2:85:8e:d2:e3:27:20:d1:7d:2d:72: d7:18:de:83:dd:ae:a7:b2:fd:d3:e2:8b:cf:a0:6a: 3b:1a:d8:5c:71:9f:9f:23:fa:a0:01:ef:75:91:d6: 51:9a:2e:e0:fe:22:51:91:a1:1e:1d:b3:5a:53:fd: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A6:10:4C:9E:4E:36:E7:7D:17:B1:8F:19:54:20:BF:81:BD:64:F2 X509v3 Authority Key Identifier: keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:56:70:36:33:c5:6f:11:07:d5:13:3e:cb:c6:6d:98:c3:63: 39:5c:41:b6:eb:91:9e:b1:56:16:6a:7f:51:2f:06:20:74:19: e0:d7:ee:1c:fc:12:1b:25:62:19:96:d9:9e:d8:03:c7:ef:dc: 5d:70:32:2f:48:a1:91:55:d9:b4:10:7e:05:db:6d:fa:9b:84: bd:57:1b:99:79:96:75:1d:55:06:87:6f:25:40:38:05:8e:f0: 7f:38:d7:89:d3:71:2f:14:44:b6:9b:84:69:6d:30:ce:5e:e0: d9:59:43:2c:80:86:c7:14:02:2d:ac:4a:b7:fe:77:b3:72:80: b6:b7:48:c9:41:01:0e:50:dc:48:99:fd:07:c5:44:12:20:e9: 90:b3:a0:d4:ac:17:df:79:1f:e3:0b:77:dd:3f:bd:28:1b:e3: 77:97:3b:43:da:0f:98:36:b8:72:27:e8:ce:da:4b:89:39:26: 23:ca:0e:4f:75:e8:8e:7d:5d:41:f0:49:b4:30:41:df:b7:be: 49:0e:80:4f:a5:53:c5:1f:6d:55:06:e3:f1:93:bb:eb:90:43: fc:29:11:ba:4e:42:72:0f:f6:9e:0b:67:dc:eb:10:c0:f9:3d: 7a:47:64:13:c2:58:44:71:9c:f8:ea:ff:7a:b3:93:6a:f7:c0: 98:f9:61:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4NTYxMTAvBgNVBAUTKDU1MUY1OEE2OEM4RkU2OTIwQjJFRjBBQzZFOTBBMkQz RjM1ODhBNzYwHhcNMjUxMTA0MTczMDAwWhcNMjUxMTExMTczMDAwWjAYMRYwFAYD VQQDEw02OTBhMzgxOC0xN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWnOug5rltA/7GYm9vQxWpYusSpxzLZkbabx2udyXnntBYeJnOmX2fNsXRWV 39TN12sC8L7QgAhFh+LEUpRbHR7b6PAh28Tc8yD/PZ8BuyDW5Gp4n1IqIcT/6Ynh bEayU0HAm6q1oktJdyW+/gSEf/F6KEotJaRQt0E78USYqR6hKIKaRksaa5STEoxP 5rICJsN4O/jaknTpAZ2GTSW7VdulSxi0nP7TFnrPriQLxYevOspKlGR0LoMQTptw e3U5FfeadD9p8oWO0uMnINF9LXLXGN6D3a6nsv3T4ovPoGo7GthccZ+fI/qgAe91 kdZRmi7g/iJRkaEeHbNaU/1cpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOmEEye TjbnfRexjxlUIL+BvWTyMB8GA1UdIwQYMBaAFFUfWKaMj+aSCy7wrG6QotPzWIp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDg1Ni9FRDU3Nzk1RTRD NzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVwSUxMdkNzYnBDaTBfTllp blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSOVlwb3lQNXBJTEx2Q3NicENpMF9OWWluWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDg1Ni9FRDU3Nzk1RTRDNzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVw SUxMdkNzYnBDaTBfTllpblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnVnA2M8VvEQfVEz7Lxm2Yw2M5XEG265GesVYWan9RLwYgdBng1+4c /BIbJWIZltme2APH79xdcDIvSKGRVdm0EH4F2236m4S9VxuZeZZ1HVUGh28lQDgF jvB/ONeJ03EvFES2m4RpbTDOXuDZWUMsgIbHFAItrEq3/nezcoC2t0jJQQEOUNxI mf0HxUQSIOmQs6DUrBffeR/jC3fdP70oG+N3lztD2g+YNrhyJ+jO2kuJOSYjyg5P deiOfV1B8Em0MEHft75JDoBPpVPFH21VBuPxk7vrkEP8KRG6TkJyD/aeC2fc6xDA +T16R2QTwlhEcZz46v96s5Nq98CY+WE1 -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:31 2025 by rpki-client