$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: FFJh3Sba1eKSD1HFeSONxpRPQ4ZzFEEkDvEN+xtLOoo= Subject key identifier: 2D:21:17:D8:6C:1F:2F:EF:9E:21:FD:B7:4B:CE:A7:DB:24:26:08:8D Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 0232 Signing time: Wed 05 Nov 2025 02:00:50 +0000 Manifest this update: Wed 05 Nov 2025 02:00:49 +0000 Manifest next update: Wed 12 Nov 2025 02:00:49 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: obQVmMRuRB1xLN9FbI0LW+Hx3/1bbegQ1nkbCYPv0B8=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: kKgc9mKeybgGGMkDQ58sZzpe326cVTFWWZKCKZ6tXgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Validity Not Before: Nov 5 02:00:49 2025 GMT Not After : Nov 12 02:00:49 2025 GMT Subject: CN=690aafd1-fdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:6e:55:aa:01:c8:84:15:9d:3c:c4:c6:e7: a2:de:be:2c:a8:aa:d6:b4:60:3b:ea:d6:de:d5:32: 23:7d:5e:53:37:0a:28:9e:04:1f:00:95:c8:df:d7: be:0d:b4:13:0b:aa:e9:58:32:bc:f0:d5:0e:0e:f9: aa:04:f6:5b:4c:4e:c6:93:55:00:12:28:64:77:6d: 72:a7:a8:d1:41:aa:1d:87:90:8f:ed:08:5c:3c:31: 6c:9d:f0:56:90:b7:85:53:e5:1f:a7:11:90:1d:65: 95:60:f8:be:9e:a5:06:8b:13:bf:ae:33:c6:2a:d5: 7e:68:f9:ee:41:77:ca:15:41:dc:34:98:4e:d7:d3: f1:f0:15:0d:28:99:3b:f6:28:2b:cd:f6:a7:78:06: 7d:cf:d3:b6:b4:3f:86:48:c6:2c:84:5c:09:62:6d: 68:25:36:e6:04:b4:d9:63:be:ce:42:9c:e5:02:43: d4:fc:68:64:da:89:aa:eb:81:a0:3e:13:7c:30:94: bc:7c:c6:66:1d:59:46:84:1a:9b:bd:41:da:2f:63: 2b:da:b6:58:75:6c:0f:1d:ed:2e:b3:98:c7:c4:50: 22:62:52:75:9f:8e:60:10:7d:98:0c:30:77:4a:bc: 21:bf:12:f7:30:39:89:7d:cc:c9:19:69:34:e5:da: 61:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:21:17:D8:6C:1F:2F:EF:9E:21:FD:B7:4B:CE:A7:DB:24:26:08:8D X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:16:4e:54:24:c5:ac:ad:0a:62:53:07:39:6f:38:ce:54:3a: 87:e7:e4:c8:a2:99:7d:1d:71:cc:f7:7e:b2:84:e1:0e:ce:a7: e2:bc:34:09:b8:10:31:7e:63:d9:45:f0:56:92:8c:48:8c:7d: f5:65:2e:ae:2b:0a:b7:4b:a2:00:01:08:27:2d:72:d8:40:dc: cc:29:5f:f3:a4:b6:52:53:df:75:5b:e7:01:d3:83:87:d4:00: 2b:fc:61:f1:fa:0b:86:cd:07:94:6e:fc:8a:92:46:0c:dc:93: 2a:8b:81:15:77:b4:2c:68:9e:1b:b3:41:cf:3f:a8:bd:6f:fd: 0f:e0:e3:9e:0b:e6:75:84:76:68:6f:4a:9a:d9:57:5a:bc:42: 4d:cc:7a:d4:50:c3:85:9c:07:ba:7b:04:ba:91:3f:05:62:bd: 74:4f:dc:71:a2:94:c7:0e:55:b6:f3:bd:40:f5:b0:07:00:00: 71:26:56:97:6f:81:a4:90:54:5e:c6:ae:68:e8:10:88:b3:eb: 8e:a7:9b:22:00:41:92:3d:e2:ee:81:b9:d1:7d:0d:74:66:c9: 2a:df:04:7d:e2:33:51:36:ff:ed:c2:7b:f6:fe:ca:68:98:c2: e7:11:ca:8e:c3:2d:a8:95:bb:c9:02:d9:d7:ce:30:95:a0:1c: c3:5b:16:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjUxMTA1MDIwMDQ5WhcNMjUxMTEyMDIwMDQ5WjAYMRYwFAYD VQQDEw02OTBhYWZkMS1mZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIZuVaoByIQVnTzExuei3r4sqKrWtGA76tbe1TIjfV5TNwoongQfAJXI39e+ DbQTC6rpWDK88NUODvmqBPZbTE7Gk1UAEihkd21yp6jRQaodh5CP7QhcPDFsnfBW kLeFU+UfpxGQHWWVYPi+nqUGixO/rjPGKtV+aPnuQXfKFUHcNJhO19Px8BUNKJk7 9igrzfaneAZ9z9O2tD+GSMYshFwJYm1oJTbmBLTZY77OQpzlAkPU/Ghk2omq64Gg PhN8MJS8fMZmHVlGhBqbvUHaL2Mr2rZYdWwPHe0us5jHxFAiYlJ1n45gEH2YDDB3 SrwhvxL3MDmJfczJGWk05dphXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0hF9hs Hy/vniH9t0vOp9skJgiNMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcFk5UJMWsrQpiUwc5bzjOVDqH5+TIopl9HXHM936yhOEOzqfivDQJ uBAxfmPZRfBWkoxIjH31ZS6uKwq3S6IAAQgnLXLYQNzMKV/zpLZSU991W+cB04OH 1AAr/GHx+guGzQeUbvyKkkYM3JMqi4EVd7QsaJ4bs0HPP6i9b/0P4OOeC+Z1hHZo b0qa2VdavEJNzHrUUMOFnAe6ewS6kT8FYr10T9xxopTHDlW2871A9bAHAABxJlaX b4GkkFRexq5o6BCIs+uOp5siAEGSPeLugbnRfQ10Zskq3wR94jNRNv/twnv2/spo mMLnEcqOwy2olbvJAtnXzjCVoBzDWxYk -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:36 2025 by rpki-client