$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json) Hash identifier: qFdghJYd7SKX0H+4UsW30ga7DLUFO0Iu9jUvr82CyHk= Subject key identifier: 11:22:48:E8:4E:7D:C8:5D:7E:E9:CA:B6:78:63:E2:17:1B:C9:95:8F Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 Certificate issuer: /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft Manifest number: F9 Signing time: Wed 05 Nov 2025 05:23:12 +0000 Manifest this update: Wed 05 Nov 2025 05:23:12 +0000 Manifest next update: Wed 12 Nov 2025 05:23:12 +0000 Files and hashes: 1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: Wn+bOLT2a4E6IxFPWN7iUez4X8SgvHSwC//ASdj/qGU=) 2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Validity Not Before: Nov 5 05:23:12 2025 GMT Not After : Nov 12 05:23:12 2025 GMT Subject: CN=690adf40-9368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:04:50:25:f3:ab:29:e4:2c:e0:45:7d:e5: ac:fa:a2:de:0d:82:51:b8:cf:ab:7d:a0:b2:ee:bf: 47:12:f1:c8:38:0d:a4:89:b9:58:ea:3d:63:49:e9: 13:a6:43:d2:59:4d:70:a5:0a:96:56:6c:3d:50:37: 4e:1a:e1:36:de:2f:2c:d2:29:ea:b9:8a:68:9a:93: 68:f3:2f:8c:4e:55:cd:9d:fe:0c:07:91:07:db:21: 10:4a:24:35:eb:9e:45:8b:57:71:10:ea:fb:ed:5a: 60:4f:5d:e4:88:de:bd:93:a1:48:3b:b7:61:f5:23: df:e9:6f:e5:2d:48:7d:2a:22:a8:88:48:03:37:51: 51:30:96:79:24:47:2f:a4:e0:af:04:e1:ae:a5:09: 40:8d:21:bd:1b:00:58:b7:81:8c:86:71:3e:16:7e: 27:d3:46:85:68:09:24:22:29:fd:62:4c:47:83:54: 04:63:c9:6d:4d:8b:86:06:d5:72:b3:cf:ec:26:6e: f9:49:a8:b1:d6:c2:12:0e:63:3e:af:a0:31:b6:48: 65:35:4b:37:b9:53:7e:71:d7:79:11:11:f7:de:65: 70:b7:f3:62:58:c5:11:08:0a:77:d4:6a:cc:6b:d2: d2:0f:9e:49:f5:24:f1:b1:f7:ea:5f:65:c9:4d:81: 22:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:22:48:E8:4E:7D:C8:5D:7E:E9:CA:B6:78:63:E2:17:1B:C9:95:8F X509v3 Authority Key Identifier: keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:76:81:c5:44:f6:55:35:9e:39:79:1d:9c:ff:53:3f:a2:19: 53:ab:42:b3:56:7a:c7:d5:a1:cd:01:e7:9b:7e:49:09:3d:10: 00:f7:f4:54:0c:23:56:fa:ea:d6:ee:10:98:d3:0f:85:a5:f6: 73:00:71:14:e9:a6:79:56:5f:b7:6f:07:12:07:98:29:3d:32: 05:d0:8e:56:07:fe:f5:3b:ed:ad:c5:68:62:62:e2:0c:63:22: 7a:eb:56:ef:26:c1:bb:12:29:81:e5:15:e5:ed:57:1c:d5:45: e4:c5:3f:bd:00:3f:e2:53:40:c8:59:13:a8:95:42:06:48:dd: d4:9a:58:1f:af:2d:20:06:17:b6:bd:bf:5f:40:f6:41:11:25: 95:76:08:85:6f:3a:87:8e:c3:df:94:91:ab:c1:5e:8c:0b:c3: 53:3f:25:1e:ed:8d:c6:75:85:5a:e4:4e:5b:5e:9b:73:d0:3d: 32:91:92:43:ff:86:b2:1d:3a:c4:89:02:c3:14:9e:9f:45:af: a1:2b:e1:ab:b0:de:e0:a6:6c:9c:a5:c0:44:be:fc:d7:b2:f8: 18:64:49:10:cc:fa:4c:82:e2:ef:c9:71:01:01:61:8e:64:39: 8d:43:02:a9:56:5a:3c:26:1f:fa:7f:27:25:70:c8:c2:30:b1: 22:e4:eb:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy Q0VFMzZFRjIwHhcNMjUxMTA1MDUyMzEyWhcNMjUxMTEyMDUyMzEyWjAYMRYwFAYD VQQDEw02OTBhZGY0MC05MzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYMEUCXzqynkLOBFfeWs+qLeDYJRuM+rfaCy7r9HEvHIOA2kiblY6j1jSekT pkPSWU1wpQqWVmw9UDdOGuE23i8s0inquYpompNo8y+MTlXNnf4MB5EH2yEQSiQ1 655Fi1dxEOr77VpgT13kiN69k6FIO7dh9SPf6W/lLUh9KiKoiEgDN1FRMJZ5JEcv pOCvBOGupQlAjSG9GwBYt4GMhnE+Fn4n00aFaAkkIin9YkxHg1QEY8ltTYuGBtVy s8/sJm75Saix1sISDmM+r6AxtkhlNUs3uVN+cdd5ERH33mVwt/NiWMURCAp31GrM a9LSD55J9STxsffqX2XJTYEiVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEiSOhO fchdfunKtnhj4hcbyZWPMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUwMy83Qjg4NUZFNDQzMTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFC czBVQjN5NkJvcWNzN2pidkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEdoHFRPZVNZ45eR2c/1M/ohlTq0KzVnrH1aHNAeebfkkJPRAA9/RU DCNW+urW7hCY0w+FpfZzAHEU6aZ5Vl+3bwcSB5gpPTIF0I5WB/71O+2txWhiYuIM YyJ661bvJsG7EimB5RXl7Vcc1UXkxT+9AD/iU0DIWROolUIGSN3Umlgfry0gBhe2 vb9fQPZBESWVdgiFbzqHjsPflJGrwV6MC8NTPyUe7Y3GdYVa5E5bXptz0D0ykZJD /4ayHTrEiQLDFJ6fRa+hK+GrsN7gpmycpcBEvvzXsvgYZEkQzPpMguLvyXEBAWGO ZDmNQwKpVlo8Jh/6fyclcMjCMLEi5Otr -----END CERTIFICATE-----Generated at Wed Nov 5 15:21:09 2025 by rpki-client