$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: CwV5vclKyw8lePHVHT16pAvw3V9fdXPVBvc0/5sgTQE= Subject key identifier: 3D:8E:DD:48:C0:34:DA:EE:15:C0:9C:ED:30:C6:10:5E:A3:0B:0B:F3 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 07E8 Signing time: Tue 04 Nov 2025 21:35:44 +0000 Manifest this update: Tue 04 Nov 2025 21:35:44 +0000 Manifest next update: Tue 11 Nov 2025 21:35:44 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: CculKsOlTeAI/2mpHePIUYA0vRBQf1x3c/TcSvh2UiE=) 2: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: q4XD/AQqfkjB0bWd2cAwQj0LVcqgF9IjAclvpli5BAw=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 4: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: q7i3CsKTp0yL6iYZiFHlx/5hnnt+XvM120dMmxFLBaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Nov 4 21:35:44 2025 GMT Not After : Nov 11 21:35:44 2025 GMT Subject: CN=690a71b0-9808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:8f:65:6e:d0:d1:36:9d:77:2a:3c:ed:f5: 19:45:27:3b:87:07:eb:f3:62:46:64:54:65:53:fa: 37:86:61:bb:1c:df:b8:71:e8:05:20:3d:82:06:8f: 4e:e1:76:6f:3c:45:33:42:10:b9:a5:a8:5d:0e:ce: 35:ef:bd:31:1e:55:c5:dd:bd:26:a4:72:43:d3:7b: 48:7a:7a:0d:73:c6:bf:95:c8:a3:36:31:f6:94:57: d6:74:86:9e:37:22:1f:41:33:5c:29:b1:f5:9a:cc: 62:e7:6d:55:ae:93:08:f2:1d:1b:5d:90:c2:9a:9b: 03:6a:0e:d2:b0:f2:f9:e7:00:50:9e:f6:26:2b:3c: a0:cd:1a:82:3a:f9:55:7d:af:14:c3:fb:92:c4:bc: 7e:c1:8b:2d:97:a2:48:ca:84:aa:9e:00:b2:9f:98: db:32:e0:95:61:cb:55:3a:69:53:ac:e7:ed:0e:ce: e5:6e:cc:81:29:95:d9:7a:87:d9:34:77:b7:b1:66: 09:50:70:53:10:e6:3f:43:d2:fa:14:cb:fe:73:4c: 7c:43:1c:2c:47:13:ad:5a:da:0c:4c:73:75:48:28: e1:3e:fc:63:4c:69:c0:0e:0f:8a:3c:a8:0b:ca:85: fa:18:f5:11:b3:80:a2:03:84:85:23:a3:2e:a2:1b: fb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8E:DD:48:C0:34:DA:EE:15:C0:9C:ED:30:C6:10:5E:A3:0B:0B:F3 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:df:eb:70:5a:99:cf:1d:e8:97:d8:ce:de:4d:56:37:75:3c: d3:1c:77:96:c0:5c:c6:c0:87:36:95:f7:de:e6:19:d7:72:21: f1:b5:01:7c:a6:02:1e:f1:c5:9d:f5:fc:53:b6:e2:57:1b:e9: b3:22:91:4a:e4:05:0a:05:82:9a:26:19:71:95:a2:9f:fc:c9: 1a:ff:3f:e1:14:a5:05:ed:45:bd:c5:06:94:46:59:28:3b:85: e8:4d:63:a0:7e:97:1d:d9:75:55:18:c4:6a:c6:d1:90:fa:92: aa:2b:81:c3:68:c5:77:8c:f2:a2:7f:52:d2:e4:fc:65:a6:ef: 0b:24:8a:15:2c:7b:b3:44:a1:5d:df:f3:6f:cd:47:b1:1e:82: f8:48:1e:54:a8:01:39:85:95:94:06:46:17:33:6e:85:b3:1d: 90:df:69:2c:11:0e:63:db:b6:19:17:a4:44:5b:b6:5d:94:3d: 80:7a:6f:d4:05:33:9f:cf:cc:fc:a6:e0:1c:11:c1:a8:41:bb: 42:c0:ee:43:95:45:d3:1f:d5:c5:71:6c:06:a4:3c:84:4d:cb: 9f:41:65:ee:e0:3f:8b:c3:46:ca:f1:9f:82:37:81:73:46:ef: 64:f4:66:14:66:96:af:9e:47:44:0d:be:4d:5f:9b:3a:fc:e8: 0d:46:1d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUxMTA0MjEzNTQ0WhcNMjUxMTExMjEzNTQ0WjAYMRYwFAYD VQQDEw02OTBhNzFiMC05ODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMSPZW7Q0Taddyo87fUZRSc7hwfr82JGZFRlU/o3hmG7HN+4cegFID2CBo9O 4XZvPEUzQhC5pahdDs41770xHlXF3b0mpHJD03tIenoNc8a/lcijNjH2lFfWdIae NyIfQTNcKbH1msxi521VrpMI8h0bXZDCmpsDag7SsPL55wBQnvYmKzygzRqCOvlV fa8Uw/uSxLx+wYstl6JIyoSqngCyn5jbMuCVYctVOmlTrOftDs7lbsyBKZXZeofZ NHe3sWYJUHBTEOY/Q9L6FMv+c0x8QxwsRxOtWtoMTHN1SCjhPvxjTGnADg+KPKgL yoX6GPURs4CiA4SFI6Muohv7zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2O3UjA NNruFcCc7TDGEF6jCwvzMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA33+twWpnPHeiX2M7eTVY3dTzTHHeWwFzGwIc2lffe5hnXciHxtQF8 pgIe8cWd9fxTtuJXG+mzIpFK5AUKBYKaJhlxlaKf/Mka/z/hFKUF7UW9xQaURlko O4XoTWOgfpcd2XVVGMRqxtGQ+pKqK4HDaMV3jPKif1LS5Pxlpu8LJIoVLHuzRKFd 3/NvzUexHoL4SB5UqAE5hZWUBkYXM26Fsx2Q32ksEQ5j27YZF6REW7ZdlD2Aem/U BTOfz8z8puAcEcGoQbtCwO5DlUXTH9XFcWwGpDyETcufQWXu4D+Lw0bK8Z+CN4Fz Ru9k9GYUZpavnkdEDb5NX5s6/OgNRh00 -----END CERTIFICATE-----Generated at Wed Nov 5 05:16:08 2025 by rpki-client