$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: 0+SLwhKAObFnqltTN3KxeX5rGvQ181+Qeg2cqgArV+M= Subject key identifier: 3E:9F:D9:52:3D:CD:4A:E7:88:90:B0:E6:AF:57:61:B9:7F:6C:A6:68 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 131D Signing time: Tue 04 Nov 2025 17:09:25 +0000 Manifest this update: Tue 04 Nov 2025 17:09:24 +0000 Manifest next update: Tue 11 Nov 2025 17:09:24 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: dgfDxjJXHQHDCLHwowOlsDy7i+CI7EmJ9fnviduZQNE=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: pmGjv9e4kJuui8gahJeniJTVkFZxLqAkqBkutIyaUmM=) 3: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: rzWRSvP8FzgLIAzzQm5a0g9KtMMg7ZcTgH4qB+DOkDI=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: JtAyYvcjsSIbHjMavRbf74w0IIhNg4IBABZJn0wcwzQ=) 5: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: 3fdnPO7nIXug6dYvzk2siFXVuDYGDIdJas3DCvUTWPA=) 6: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: DOUd4Ct4uA10KaiPoOZjeWOyNrfXwTZYgvv/v0X/i0Y=) 7: DEF977A6E53611EB81682769C4F9AE02.roa (hash: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4985 (0x1379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Nov 4 17:09:24 2025 GMT Not After : Nov 11 17:09:24 2025 GMT Subject: CN=690a3345-9c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:6e:af:7c:65:e2:95:6e:ba:0c:1f:3c:2b: 8e:b3:13:b1:8d:63:67:31:83:02:65:c1:c3:1c:32: ce:07:54:9d:09:01:62:24:5c:b6:79:a6:48:88:95: 0d:fb:79:3c:5f:bf:a2:32:de:c9:b2:e5:4d:83:4b: c1:77:7e:32:ae:8a:66:2d:d1:a7:1b:ca:1d:34:92: b5:77:fa:53:26:4f:59:37:f0:11:ea:44:0a:e9:21: fd:13:84:b1:68:8c:61:c3:e6:27:12:8d:50:af:8e: ca:5f:43:46:21:2f:30:93:73:32:ba:af:02:89:33: ca:0b:55:50:d3:ce:65:b1:77:b2:f9:3b:a7:68:2a: 81:73:c2:0d:de:f5:17:69:7f:a4:71:6a:95:82:0d: 55:85:80:c4:49:5d:95:98:18:fb:b2:29:1b:e9:4a: b2:70:02:2b:4b:f4:ca:75:9f:8e:a6:e4:ac:b0:44: 56:a0:78:66:c1:e8:94:43:27:78:71:91:6a:cf:74: ad:76:0b:d0:d1:b1:80:dc:ab:ee:a5:83:73:55:02: 67:dd:f9:85:d0:92:23:ea:23:03:00:fe:51:4d:87: f2:f7:d0:4d:04:5d:6a:d2:f1:74:54:36:39:cb:a8: 27:7a:7d:a0:c4:62:63:ee:29:31:b0:ee:1d:e7:84: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9F:D9:52:3D:CD:4A:E7:88:90:B0:E6:AF:57:61:B9:7F:6C:A6:68 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e9:6c:6c:7a:5a:f3:7e:bb:27:51:ad:9d:94:73:bc:cf:7c: 1d:6b:30:a9:66:44:5b:5d:45:30:68:65:6f:33:fe:c9:e4:d1: c0:21:70:f2:9f:8e:84:8c:46:47:0c:c6:7a:81:e9:bf:9e:f3: 9e:6b:17:b1:63:ad:6e:12:a7:78:3d:9d:ed:7e:26:b0:a2:c4: 12:d9:1f:4c:ba:67:c7:8f:40:d2:69:7d:13:ae:b9:b0:25:89: 4f:8c:28:6c:17:32:39:7c:a8:e1:f5:a2:ab:fa:3b:a4:16:ab: e3:8e:0c:d9:c4:de:0b:2f:78:ca:40:f5:a7:38:08:03:77:7b: b1:49:9b:57:3a:2c:88:7b:75:66:50:81:c5:7f:d3:e0:ae:7a: 24:33:99:2a:bf:ae:6d:10:ab:b8:50:d5:6f:c8:03:6c:ff:27: 7d:63:81:b2:59:45:46:57:9b:88:e6:03:5c:ca:12:6e:05:4c: 48:06:5e:02:4c:68:83:81:12:1c:de:4c:af:97:74:d7:29:b1: e2:98:05:10:86:d4:57:cd:af:3a:e6:b4:0c:77:bf:d7:cf:5f: eb:f8:00:f3:eb:e8:1b:aa:cd:29:19:8c:0f:de:75:82:c4:11: ab:07:48:4a:b1:a4:22:ff:66:d5:91:93:aa:03:a3:85:e0:20: 0a:b1:05:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUxMTA0MTcwOTI0WhcNMjUxMTExMTcwOTI0WjAYMRYwFAYD VQQDEw02OTBhMzM0NS05YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tpur3xl4pVuugwfPCuOsxOxjWNnMYMCZcHDHDLOB1SdCQFiJFy2eaZIiJUN +3k8X7+iMt7JsuVNg0vBd34yropmLdGnG8odNJK1d/pTJk9ZN/AR6kQK6SH9E4Sx aIxhw+YnEo1Qr47KX0NGIS8wk3Myuq8CiTPKC1VQ085lsXey+TunaCqBc8IN3vUX aX+kcWqVgg1VhYDESV2VmBj7sikb6UqycAIrS/TKdZ+OpuSssERWoHhmweiUQyd4 cZFqz3StdgvQ0bGA3KvupYNzVQJn3fmF0JIj6iMDAP5RTYfy99BNBF1q0vF0VDY5 y6gnen2gxGJj7ikxsO4d54S7iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6f2VI9 zUrniJCw5q9XYbl/bKZoMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw6WxselrzfrsnUa2dlHO8z3wdazCpZkRbXUUwaGVvM/7J5NHAIXDy n46EjEZHDMZ6gem/nvOeaxexY61uEqd4PZ3tfiawosQS2R9MumfHj0DSaX0Trrmw JYlPjChsFzI5fKjh9aKr+jukFqvjjgzZxN4LL3jKQPWnOAgDd3uxSZtXOiyIe3Vm UIHFf9PgrnokM5kqv65tEKu4UNVvyANs/yd9Y4GyWUVGV5uI5gNcyhJuBUxIBl4C TGiDgRIc3kyvl3TXKbHimAUQhtRXza865rQMd7/Xz1/r+ADz6+gbqs0pGYwP3nWC xBGrB0hKsaQi/2bVkZOqA6OF4CAKsQXA -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:08 2025 by rpki-client