$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: bMHehY1VuYPnbVhOOCnE/sGBjwGnh94955+1lBs/iNI= Subject key identifier: FA:3C:4A:08:58:6A:DD:52:4A:1F:9B:4C:AD:1D:7A:C2:7E:83:7B:A6 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 12B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 127A Signing time: Sun 02 Nov 2025 17:09:06 +0000 Manifest this update: Sun 02 Nov 2025 17:09:05 +0000 Manifest next update: Sun 09 Nov 2025 17:09:05 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: 1EuRhfQRinaHPA9J/0kAi2rTTA9YfMVV7O+uP+NPea4=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: EztUCIPqk3y/a6AcLfvax6DUhCHP6l9BEvQIvIo9iws=) 4: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: ugTs/oyoKALkGSyMUkjHh2f/tiPGip4BWJ+dEzDMSyU=) 5: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: /d3XQ565KopoANcg+pwgBZqGoqy8+pW8EGFbyyXXzys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4784 (0x12b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Nov 2 17:09:05 2025 GMT Not After : Nov 9 17:09:05 2025 GMT Subject: CN=69079032-4ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:7b:20:84:8b:61:d1:6b:f2:88:8d:7e:fa: 8f:a5:b5:20:ea:19:57:ee:90:95:91:9c:cd:0a:24: 15:51:19:da:7a:67:ba:e9:32:ff:b0:6c:95:b6:41: 61:0e:60:32:87:c0:63:36:0d:ad:b5:a5:de:ef:04: 03:9e:47:69:e7:74:a6:ba:1f:7a:6f:7f:ec:0e:6d: 8f:d6:f1:5f:5c:5f:ab:ba:94:d8:db:4d:03:f2:92: 31:a1:9b:c1:f2:82:8c:39:18:ba:19:d3:cd:c5:8b: e7:b1:1a:56:2f:81:36:72:61:68:e2:5f:75:81:a8: 63:72:b1:37:aa:ac:da:db:6b:df:9f:43:65:19:38: ff:43:5f:1a:9c:cb:42:43:8a:28:43:08:25:aa:f4: 16:4e:25:a0:f2:42:9c:d9:33:97:f5:45:53:85:18: ca:bf:67:e9:04:83:06:6e:7e:c5:bd:9d:ac:39:a9: 32:78:db:32:96:8f:8e:45:44:51:08:d2:e4:7d:e4: b8:c5:18:cb:ef:42:7b:43:25:9e:08:79:7a:85:ae: 48:a0:af:27:2f:a1:d3:e4:eb:fe:97:97:61:9e:1b: 32:88:50:cb:df:33:ee:34:06:c1:2b:63:31:13:30: b6:12:a6:a4:fb:42:95:08:ad:99:69:ec:c3:05:28: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3C:4A:08:58:6A:DD:52:4A:1F:9B:4C:AD:1D:7A:C2:7E:83:7B:A6 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e7:22:90:5b:90:fa:27:61:8b:5e:f1:3f:e7:46:e3:86:dc: fe:a8:15:a1:5f:f6:c6:44:24:b7:dc:52:6c:5d:55:1b:78:bd: e5:e0:7d:30:7e:fb:be:58:71:c3:04:cf:ec:62:c3:b3:7c:33: 99:6e:52:6c:fd:3d:d0:d6:85:11:d0:bb:16:d8:8b:da:e9:ae: 09:a8:4c:8f:aa:4e:4b:ec:12:d6:1f:e6:8f:34:cf:fb:23:4e: 0a:71:a5:95:77:41:cb:2a:f9:bc:3d:0f:32:9f:1d:09:e8:48: c7:de:95:d7:a2:e8:c2:17:0f:d9:79:0b:ef:36:35:3f:ee:b4: c7:e0:ee:93:b7:78:41:d1:7a:2a:04:32:17:fd:10:d1:b7:49: c6:0d:fe:1f:07:5c:03:9e:70:74:59:52:ed:5d:20:0e:13:6b: 06:ce:20:f1:77:88:55:f8:14:dd:70:34:a5:51:59:c3:62:5e: b7:7e:7a:fc:b7:3f:2c:76:b9:21:a6:14:43:67:2a:af:be:a9: 76:8d:36:dd:ac:5f:1c:80:78:20:ea:fe:2e:c9:07:b7:bf:7a: 98:36:67:04:c8:0b:a8:d5:ba:9c:57:92:75:9a:6f:81:27:40: ec:d4:3c:f7:15:16:da:9e:2d:a0:e4:7a:36:46:c5:cd:a6:ed: ca:71:7f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUxMTAyMTcwOTA1WhcNMjUxMTA5MTcwOTA1WjAYMRYwFAYD VQQDEw02OTA3OTAzMi00ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3V7IISLYdFr8oiNfvqPpbUg6hlX7pCVkZzNCiQVURnaeme66TL/sGyVtkFh DmAyh8BjNg2ttaXe7wQDnkdp53Smuh96b3/sDm2P1vFfXF+rupTY200D8pIxoZvB 8oKMORi6GdPNxYvnsRpWL4E2cmFo4l91gahjcrE3qqza22vfn0NlGTj/Q18anMtC Q4ooQwglqvQWTiWg8kKc2TOX9UVThRjKv2fpBIMGbn7FvZ2sOakyeNsylo+ORURR CNLkfeS4xRjL70J7QyWeCHl6ha5IoK8nL6HT5Ov+l5dhnhsyiFDL3zPuNAbBK2Mx EzC2Eqak+0KVCK2ZaezDBSg24wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo8SghY at1SSh+bTK0desJ+g3umMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA05yKQW5D6J2GLXvE/50bjhtz+qBWhX/bGRCS33FJsXVUbeL3l4H0w fvu+WHHDBM/sYsOzfDOZblJs/T3Q1oUR0LsW2Iva6a4JqEyPqk5L7BLWH+aPNM/7 I04KcaWVd0HLKvm8PQ8ynx0J6EjH3pXXoujCFw/ZeQvvNjU/7rTH4O6Tt3hB0Xoq BDIX/RDRt0nGDf4fB1wDnnB0WVLtXSAOE2sGziDxd4hV+BTdcDSlUVnDYl63fnr8 tz8sdrkhphRDZyqvvql2jTbdrF8cgHgg6v4uyQe3v3qYNmcEyAuo1bqcV5J1mm+B J0Ds1Dz3FRbani2g5Ho2RsXNpu3KcX+Z -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:32 2025 by rpki-client