$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft File: VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json) Hash identifier: 842ivWm7wg7NCQ8BHpujt0DQvIHGeK3yBTuLpUL+MNE= Subject key identifier: B1:83:74:5E:34:F6:5E:89:BF:A2:4E:66:3F:01:CE:65:39:24:8D:30 Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA Certificate issuer: /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Certificate serial: 0AB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft Manifest number: 0AB1 Signing time: Tue 04 Nov 2025 19:35:24 +0000 Manifest this update: Tue 04 Nov 2025 19:35:23 +0000 Manifest next update: Tue 11 Nov 2025 19:35:23 +0000 Files and hashes: 1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: rUoBlXU4ujCoKF2pmtIF3GxSZcXuO5tpuOW6+aM30XY=) 2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: 0G9HtTLZBqQUwE8UGiq72iqUjTtI4Gz6+fEdMQN9vkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2744 (0xab8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183EB3, serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Validity Not Before: Nov 4 19:35:23 2025 GMT Not After : Nov 11 19:35:23 2025 GMT Subject: CN=690a557b-3e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:ea:4f:4d:02:21:36:f6:26:c1:3c:9b:06: 01:7c:17:6c:9f:38:ee:28:72:cb:d4:ac:0d:52:ea: 3c:36:3e:f3:b6:fd:68:53:3e:ee:22:f1:96:ce:c6: 8f:0c:4d:87:45:c5:ba:38:76:34:1b:aa:c1:01:6b: 35:d6:bd:94:91:8e:25:a0:2f:60:91:76:3b:36:bc: a5:a6:ff:4f:5d:17:37:0e:44:79:49:13:08:5b:4a: 40:43:52:c5:66:da:5b:e5:60:a6:69:26:29:9d:2b: c4:48:93:59:12:e5:7a:41:e0:bf:a1:eb:83:e2:b3: 34:77:59:3b:34:77:c3:43:0c:62:88:de:d9:d2:b5: 89:38:2f:f2:e5:17:34:6c:71:4d:d5:57:1f:5c:64: 34:20:7b:30:ee:d3:34:e6:6b:99:78:e1:3a:c0:13: d3:2a:9d:10:46:78:1d:f9:2e:88:47:6e:74:0d:07: 04:44:ed:bd:ab:1e:64:a0:ee:5f:d8:99:3e:cf:d3: 68:e8:d9:93:87:e3:ab:ea:6b:89:a7:36:0b:1e:7b: 48:77:c7:23:28:01:1c:22:00:76:ef:f2:e4:d0:cc: 53:e4:86:0e:15:d1:14:04:98:0c:eb:36:d4:c0:9a: f4:f5:74:3b:42:7b:78:db:26:90:23:64:c6:27:89: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:74:5E:34:F6:5E:89:BF:A2:4E:66:3F:01:CE:65:39:24:8D:30 X509v3 Authority Key Identifier: keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:74:31:ff:fb:57:95:9b:8e:52:1f:1d:72:ff:0f:25:1d:a4: c1:98:21:ea:c4:ab:86:50:1b:08:58:76:3a:07:a6:a8:9d:ce: de:38:88:5a:47:27:8d:c9:ba:23:d2:20:f4:cb:67:fc:5a:ef: 80:83:6b:03:84:92:03:11:71:13:ff:cb:9d:81:7a:97:5d:4e: e8:f7:92:22:3c:7f:20:f9:96:e0:43:33:da:b8:d5:29:17:ad: ed:11:03:e3:21:3e:bf:b6:34:b9:aa:30:61:2f:8e:72:7c:5c: aa:c8:0a:11:8b:bd:65:c3:00:18:ad:6c:c2:4c:7e:c0:ac:a5: 7c:2d:c3:8d:bc:76:89:9a:ef:06:bf:19:7f:53:b7:c7:e1:aa: 32:bd:ba:b0:12:ec:d2:67:21:49:26:dd:6f:4b:aa:b7:ed:6a: f2:31:18:e8:ab:ed:e5:0f:3d:5a:d6:d6:96:c6:ea:9c:1a:b4: a4:0c:a9:b4:eb:4b:bc:2b:bb:9e:27:97:9c:88:0c:6e:ab:af: b6:57:bd:3c:98:62:68:a7:b6:62:d2:2e:d8:f5:df:07:54:89: 45:98:78:d1:f2:25:dc:08:3b:bb:78:5a:76:fd:79:71:2b:2b: a1:f8:a1:dd:8e:f3:33:a5:3a:53:8f:95:25:ba:65:cb:6f:80: 17:c9:8c:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNFQjMxMTAvBgNVBAUTKDU3MDNCNTVDRDhFMjgwMjI5NjA0QTEwQkM4Q0Y1QjM4 MDExMTYzRkEwHhcNMjUxMTA0MTkzNTIzWhcNMjUxMTExMTkzNTIzWjAYMRYwFAYD VQQDEw02OTBhNTU3Yi0zZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pfqT00CITb2JsE8mwYBfBdsnzjuKHLL1KwNUuo8Nj7ztv1oUz7uIvGWzsaP DE2HRcW6OHY0G6rBAWs11r2UkY4loC9gkXY7Nrylpv9PXRc3DkR5SRMIW0pAQ1LF Ztpb5WCmaSYpnSvESJNZEuV6QeC/oeuD4rM0d1k7NHfDQwxiiN7Z0rWJOC/y5Rc0 bHFN1VcfXGQ0IHsw7tM05muZeOE6wBPTKp0QRngd+S6IR250DQcERO29qx5koO5f 2Jk+z9No6NmTh+Or6muJpzYLHntId8cjKAEcIgB27/Lk0MxT5IYOFdEUBJgM6zbU wJr09XQ7Qnt42yaQI2TGJ4lzxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGDdF40 9l6Jv6JOZj8BzmU5JI0wMB8GA1UdIwQYMBaAFFcDtVzY4oAilgShC8jPWzgBEWP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0VCMy8zREI2QTM2MjYz NzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdDS1dCS0VMeU05Yk9BRVJZ X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z3TzFYTmppZ0NLV0JLRUx5TTliT0FFUllfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0VCMy8zREI2QTM2MjYzNzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdD S1dCS0VMeU05Yk9BRVJZX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkdDH/+1eVm45SHx1y/w8lHaTBmCHqxKuGUBsIWHY6B6aonc7eOIha RyeNyboj0iD0y2f8Wu+Ag2sDhJIDEXET/8udgXqXXU7o95IiPH8g+ZbgQzPauNUp F63tEQPjIT6/tjS5qjBhL45yfFyqyAoRi71lwwAYrWzCTH7ArKV8LcONvHaJmu8G vxl/U7fH4aoyvbqwEuzSZyFJJt1vS6q37WryMRjoq+3lDz1a1taWxuqcGrSkDKm0 60u8K7ueJ5eciAxuq6+2V708mGJop7Zi0i7Y9d8HVIlFmHjR8iXcCDu7eFp2/Xlx Kyuh+KHdjvMzpTpTj5UlumXLb4AXyYz7 -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:21 2025 by rpki-client