$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: Y/kELQjTnaDFDQl/FM/+yiOoEHQ/ZvVJYb3rszR/r/I= Subject key identifier: 40:51:FF:55:FD:91:45:75:8D:AC:28:6B:30:7A:93:88:03:7F:11:92 Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: EB Signing time: Mon 03 Nov 2025 05:19:40 +0000 Manifest this update: Mon 03 Nov 2025 05:19:39 +0000 Manifest next update: Mon 10 Nov 2025 05:19:39 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: 4P7u9GgVNs7IatTAwZk44pfjqCXYujNROgxgRk668w0=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: 1UcWorT+hHuzqY8KzQLhN3a0TdkRPLNkQE9UL68LZgs=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: xNPSf2uxf0gfylw09N39nWcLaL34aWsQPkwDaLt++sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Nov 3 05:19:39 2025 GMT Not After : Nov 10 05:19:39 2025 GMT Subject: CN=69083b6c-1af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:59:29:2a:07:af:09:92:3a:fb:09:a5:91: 2f:90:3a:79:48:c3:f6:6b:a9:d4:94:ba:2b:ae:29: 25:61:26:bf:ce:f6:62:17:56:80:20:4f:02:9c:fc: 1b:49:b5:d6:b0:25:13:c3:24:b6:d4:60:04:7f:3c: 5a:db:4a:4c:5d:1f:2d:56:52:34:08:3b:58:7a:9c: 18:7a:9a:89:44:96:f2:40:cb:78:c6:96:a5:23:af: fd:b5:81:1d:5d:45:7c:53:23:9b:e4:cc:47:01:7a: cb:25:d1:92:7b:56:dc:0b:55:f3:82:62:0f:07:0d: 40:54:9e:01:43:f9:33:18:35:82:a5:26:1f:86:a4: 0c:8e:f1:19:69:21:d2:84:cb:9a:a0:5d:ea:c7:e7: a5:c6:43:cc:0c:64:66:2e:07:32:d6:7c:85:41:1a: f3:49:cd:28:32:af:8f:0d:cf:ef:63:b9:57:35:92: 4e:86:b3:aa:95:47:b5:9d:37:91:8b:16:f3:ff:27: 72:72:db:a7:e9:61:f0:79:6c:ee:c3:43:c5:99:ba: 12:1c:82:01:dd:b9:02:99:5d:f3:34:56:df:64:1f: 50:26:08:00:da:1d:91:ad:13:3d:4f:23:5b:ac:13: 34:3c:88:12:3b:8b:a9:62:0e:a8:43:43:06:a7:21: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:51:FF:55:FD:91:45:75:8D:AC:28:6B:30:7A:93:88:03:7F:11:92 X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:0a:dc:3c:6a:62:08:c7:cd:1f:57:9a:c1:78:08:09:b9:2b: 1e:13:0b:01:d6:03:16:3c:51:75:6e:14:8f:e7:f4:c3:5d:d6: 84:d7:b6:37:d0:87:65:13:ee:c0:e1:35:d9:ba:bc:a4:92:a2: fb:aa:8a:16:24:07:0a:fd:d3:b0:af:ae:49:a9:0c:a2:47:da: 7c:0f:f5:f8:b7:77:41:e1:a9:ca:51:09:ff:d0:f3:70:b3:fd: 35:6b:e2:e4:2a:78:4d:34:19:1e:bf:a9:c9:c3:3c:7d:7c:05: e5:5a:92:a6:7b:06:56:f0:fa:c5:4b:73:75:53:f4:4e:e6:5a: 94:68:b1:87:52:47:7c:fb:fb:25:44:47:cb:af:67:b3:cd:08: 1e:8e:95:68:c1:3b:28:c9:d6:a8:ec:53:32:89:fb:99:59:96: 2b:ed:e9:2f:7f:fb:d4:95:35:ca:16:b8:77:35:9a:40:71:46: c4:fa:96:27:b2:56:65:d2:1a:9a:2d:61:af:bc:8a:60:46:1d: 53:03:ac:1f:b7:1c:03:be:b9:77:15:20:80:e5:62:8c:f7:f5: 8a:7f:d7:66:9e:e1:7d:94:77:e3:db:c0:7a:c3:24:b6:90:5a: e4:4e:58:1e:c7:22:b8:c6:f4:1c:bc:21:1e:ec:e0:be:6a:27: 9a:34:dd:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4 NTUyMzNEN0MwHhcNMjUxMTAzMDUxOTM5WhcNMjUxMTEwMDUxOTM5WjAYMRYwFAYD VQQDEw02OTA4M2I2Yy0xYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPpZKSoHrwmSOvsJpZEvkDp5SMP2a6nUlLorriklYSa/zvZiF1aAIE8CnPwb SbXWsCUTwyS21GAEfzxa20pMXR8tVlI0CDtYepwYepqJRJbyQMt4xpalI6/9tYEd XUV8UyOb5MxHAXrLJdGSe1bcC1XzgmIPBw1AVJ4BQ/kzGDWCpSYfhqQMjvEZaSHS hMuaoF3qx+elxkPMDGRmLgcy1nyFQRrzSc0oMq+PDc/vY7lXNZJOhrOqlUe1nTeR ixbz/ydyctun6WHweWzuw0PFmboSHIIB3bkCmV3zNFbfZB9QJggA2h2RrRM9TyNb rBM0PIgSO4upYg6oQ0MGpyFYzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBR/1X9 kUV1jawoazB6k4gDfxGSMB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0 OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv ejh5T3BlbjBMWHFGVWpQWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkCtw8amIIx80fV5rBeAgJuSseEwsB1gMWPFF1bhSP5/TDXdaE17Y3 0IdlE+7A4TXZurykkqL7qooWJAcK/dOwr65JqQyiR9p8D/X4t3dB4anKUQn/0PNw s/01a+LkKnhNNBkev6nJwzx9fAXlWpKmewZW8PrFS3N1U/RO5lqUaLGHUkd8+/sl REfLr2ezzQgejpVowTsoydao7FMyifuZWZYr7ekvf/vUlTXKFrh3NZpAcUbE+pYn slZl0hqaLWGvvIpgRh1TA6wftxwDvrl3FSCA5WKM9/WKf9dmnuF9lHfj28B6wyS2 kFrkTlgexyK4xvQcvCEe7OC+aieaNN3k -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:16 2025 by rpki-client