$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json) Hash identifier: yxEwMJCTwlVlSWbJlekrLsvChoX6vtNe4K4VPQSyTO4= Subject key identifier: 0F:56:07:54:9F:8B:02:E9:5B:8A:54:88:A5:4A:25:F7:A2:25:32:0C Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft Manifest number: 0124 Signing time: Mon 03 Nov 2025 04:41:26 +0000 Manifest this update: Mon 03 Nov 2025 04:41:25 +0000 Manifest next update: Mon 10 Nov 2025 04:41:25 +0000 Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: yPyrpLSba1Cwt6LDwX3hBmku+W+E8OWwzo1QpR685bk=) 2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: xdCJJSBmKRi6P083PXPoHsI4LKPSNh2nAQa1KhgQI3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Validity Not Before: Nov 3 04:41:25 2025 GMT Not After : Nov 10 04:41:25 2025 GMT Subject: CN=69083276-a4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fe:b0:19:fb:1b:85:ec:3c:99:7c:5e:80:47: 1b:79:2a:d1:4a:e9:6e:84:18:4d:b7:1a:5b:a7:cb: 07:dc:ac:01:4a:b2:9d:82:45:76:97:82:c4:5d:5c: de:ce:9a:2d:48:c7:7c:d8:19:a9:ea:a6:c6:ac:71: 09:c8:72:99:76:77:31:6b:43:88:bd:8c:22:50:8a: cb:e6:d2:cc:69:74:3f:97:a2:38:c4:44:d2:d2:6b: c9:4a:93:43:dd:49:64:99:b4:54:81:a4:8c:5c:57: c4:b8:27:89:20:7b:d6:4a:a6:8b:7c:13:03:2c:44: 91:4a:62:4d:0e:dc:0a:51:13:1c:35:49:8d:58:76: 22:43:c1:f3:16:98:da:41:fe:1d:3c:ce:b4:24:78: de:69:a4:c8:67:41:eb:06:44:35:be:5b:cd:a3:34: be:24:cb:17:0c:07:c2:26:fc:50:ce:20:8e:25:6f: 12:34:27:0f:be:17:95:46:cb:9a:2d:40:dc:ef:e2: 97:1a:57:45:34:fb:fc:33:25:1a:e6:b3:05:9b:b0: 65:78:58:ce:ed:c2:b8:01:c3:a9:a7:0f:4f:61:36: 88:f6:1c:28:e9:af:cc:d8:c9:4f:b1:d6:ac:d6:b0: 2c:cb:c7:88:64:b9:7e:cc:e4:f0:8f:a8:62:c5:02: 77:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:56:07:54:9F:8B:02:E9:5B:8A:54:88:A5:4A:25:F7:A2:25:32:0C X509v3 Authority Key Identifier: keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:8d:0e:e1:c4:cb:eb:8c:b7:9e:86:85:45:38:60:f1:66:df: 33:f7:e1:ae:8c:c2:ef:99:2c:a6:d2:fd:66:9a:d0:68:d4:b3: a3:47:15:98:fb:54:47:a0:ed:92:c0:07:76:50:30:79:ae:de: c9:fc:00:e0:19:82:32:9b:4f:cb:20:eb:77:ad:47:66:f7:b0: bb:15:2a:07:b1:89:88:3b:52:fd:af:7c:dc:2a:76:eb:ef:7f: f1:26:98:69:1e:7c:bf:46:0a:60:09:63:12:b5:20:c0:88:8f: d2:50:61:22:31:75:02:b3:74:09:dc:46:02:d6:62:76:aa:59: 4f:7a:8c:10:48:46:9c:78:7f:58:40:75:24:d7:62:1f:7b:9d: 50:ca:6a:34:ec:b0:5a:71:c2:78:8d:ae:b7:68:93:37:b2:f8: 6d:25:6f:55:97:37:63:9b:bf:e8:56:df:98:85:e8:01:7a:da: c5:e0:df:76:b9:c1:4b:68:8e:34:ed:b4:4c:de:6a:12:34:23: 81:e5:4c:dc:10:75:e4:71:3e:40:14:eb:64:23:21:b5:59:09: 41:6a:74:9b:5f:48:86:55:d0:d9:9b:df:a2:8c:a6:6e:f2:35: 27:17:be:dd:88:37:46:8e:78:4f:03:d7:5f:1e:69:8f:e5:0f: 77:b3:53:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKEJFQzI4MjQ4NkYzN0UzMTZGMTdCNTIwQjQ1NTI4N0JD MzA3Rjg5RTgwHhcNMjUxMTAzMDQ0MTI1WhcNMjUxMTEwMDQ0MTI1WjAYMRYwFAYD VQQDEw02OTA4MzI3Ni1hNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7f6wGfsbhew8mXxegEcbeSrRSuluhBhNtxpbp8sH3KwBSrKdgkV2l4LEXVze zpotSMd82Bmp6qbGrHEJyHKZdncxa0OIvYwiUIrL5tLMaXQ/l6I4xETS0mvJSpND 3UlkmbRUgaSMXFfEuCeJIHvWSqaLfBMDLESRSmJNDtwKURMcNUmNWHYiQ8HzFpja Qf4dPM60JHjeaaTIZ0HrBkQ1vlvNozS+JMsXDAfCJvxQziCOJW8SNCcPvheVRsua LUDc7+KXGldFNPv8MyUa5rMFm7BleFjO7cK4AcOppw9PYTaI9hwo6a/M2MlPsdas 1rAsy8eIZLl+zOTwj6hixQJ3AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9WB1Sf iwLpW4pUiKVKJfeiJTIMMB8GA1UdIwQYMBaAFL7CgkhvN+MW8XtSC0VSh7wwf4no MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GNTg0MzhGRUY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4YnhlMUlMUlZLSHZEQl9p ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2llZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GNTg0MzhGRUY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4 YnhlMUlMUlZLSHZEQl9pZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADjQ7hxMvrjLeehoVFOGDxZt8z9+GujMLvmSym0v1mmtBo1LOjRxWY +1RHoO2SwAd2UDB5rt7J/ADgGYIym0/LIOt3rUdm97C7FSoHsYmIO1L9r3zcKnbr 73/xJphpHny/RgpgCWMStSDAiI/SUGEiMXUCs3QJ3EYC1mJ2qllPeowQSEaceH9Y QHUk12Ife51Qymo07LBaccJ4ja63aJM3svhtJW9Vlzdjm7/oVt+YhegBetrF4N92 ucFLaI407bRM3moSNCOB5UzcEHXkcT5AFOtkIyG1WQlBanSbX0iGVdDZm9+ijKZu 8jUnF77diDdGjnhPA9dfHmmP5Q93s1Oc -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:06 2025 by rpki-client