$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: Sy3qgG0RMEr+IvGOUbBSY0YzZNbSRwlJRkbs7+Zs2Jo= Subject key identifier: AE:A9:70:40:8B:9E:85:7B:AA:6F:40:CC:35:55:7B:28:76:15:36:24 Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0CBE Signing time: Tue 04 Nov 2025 18:16:37 +0000 Manifest this update: Tue 04 Nov 2025 18:16:37 +0000 Manifest next update: Tue 11 Nov 2025 18:16:37 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: fqr43qWMsS0jpS+Lkh2ZSKuNHLWW7XVgLEv3JcxSzm0=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: ZXJMtYkkqA7hHeKOhLlOV4cY6XESDyR/pKiToP5eSgg=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: pSxfk0FHnFoiI4DMtbpzZ2ySSBds/zGBYa4EKLwgCes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Nov 4 18:16:37 2025 GMT Not After : Nov 11 18:16:37 2025 GMT Subject: CN=690a4305-71b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:0f:53:64:2a:8c:36:b2:6a:63:f6:35:80: 6d:68:55:b9:b8:cf:83:7a:f3:79:86:1d:b5:27:6e: ae:37:bb:ab:f9:dc:a7:d0:e7:0d:80:4c:d8:24:d9: ef:53:7c:1e:a7:ae:ba:a1:50:78:7c:92:9e:b7:a7: bd:21:a0:f4:58:6f:ce:bf:a0:fd:48:65:a7:06:d7: 91:99:80:cb:14:45:15:02:cf:fd:df:d4:7e:75:99: b1:3f:91:33:08:13:3f:9b:9c:43:7d:62:26:38:19: e6:8b:de:5b:1d:91:1f:59:a9:10:97:a4:21:71:8f: c3:a8:7a:36:14:6b:6c:27:e4:f7:55:2d:df:bc:a5: 40:34:c1:c5:2a:9d:93:55:e0:af:fc:a6:5c:e2:d9: 08:ff:f5:ff:28:99:20:11:0e:7d:19:1b:6a:7f:a7: 80:65:fe:21:7b:32:4c:fa:53:d3:b2:43:eb:4a:88: 3a:6f:95:fa:c6:aa:c9:1b:e1:26:a4:3b:75:21:8c: 26:8b:ef:97:d9:e9:40:93:1b:97:af:c1:9e:ed:13: 0b:eb:bc:0e:ec:c4:98:dd:0c:c2:54:41:62:9f:e0: 43:c0:77:b5:45:d9:c2:4b:57:d0:71:36:8a:70:88: 9b:24:82:54:7e:a7:ab:fd:5c:88:f6:ca:2e:9d:39: cd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A9:70:40:8B:9E:85:7B:AA:6F:40:CC:35:55:7B:28:76:15:36:24 X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dd:b6:f2:91:d1:fa:c2:bf:d2:e8:d4:9f:d6:c6:6d:0c:e6: 6a:55:82:35:d7:01:c6:b4:bc:09:b9:5c:f2:6b:b5:98:eb:f4: e9:df:a9:03:06:b5:ff:52:1e:67:61:68:6d:45:e5:3c:da:5c: bc:1e:f2:c8:57:a7:60:36:db:b3:04:81:94:41:c9:19:13:d1: dd:cf:e6:ae:cc:ba:11:94:1c:01:6a:a1:40:2b:3f:e7:e6:d6: a6:cf:26:5d:43:48:63:8b:f1:ad:13:78:bc:7b:2b:ce:05:0b: cc:c3:ed:b4:96:83:57:fd:d8:28:5e:df:34:52:36:f1:cc:67: dc:06:88:fb:75:09:83:01:a5:24:01:f9:70:f0:79:b4:9f:24: 84:4b:53:89:40:d9:86:ae:ff:88:cd:94:3f:64:84:55:45:54: ce:04:de:65:86:2b:92:a1:a5:44:f2:0d:bb:17:ab:5a:a2:e4: 20:53:fb:d5:5b:0c:26:81:79:0a:21:32:89:e1:fc:14:f4:77: f2:94:10:ee:bc:a7:55:e4:d7:1a:16:a9:07:d9:19:1f:0f:c5: db:b8:cb:05:e6:64:51:fb:c5:b9:04:4c:da:78:64:1a:30:c9: c0:f5:81:5a:a6:b7:1f:cf:7c:ad:e5:57:50:9a:08:cf:67:a3: 0f:ab:c0:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjUxMTA0MTgxNjM3WhcNMjUxMTExMTgxNjM3WjAYMRYwFAYD VQQDEw02OTBhNDMwNS03MWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RsPU2QqjDayamP2NYBtaFW5uM+DevN5hh21J26uN7ur+dyn0OcNgEzYJNnv U3wep666oVB4fJKet6e9IaD0WG/Ov6D9SGWnBteRmYDLFEUVAs/939R+dZmxP5Ez CBM/m5xDfWImOBnmi95bHZEfWakQl6QhcY/DqHo2FGtsJ+T3VS3fvKVANMHFKp2T VeCv/KZc4tkI//X/KJkgEQ59GRtqf6eAZf4hezJM+lPTskPrSog6b5X6xqrJG+Em pDt1IYwmi++X2elAkxuXr8Ge7RML67wO7MSY3QzCVEFin+BDwHe1RdnCS1fQcTaK cIibJIJUfqer/VyI9sounTnN9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6pcECL noV7qm9AzDVVeyh2FTYkMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd3bbykdH6wr/S6NSf1sZtDOZqVYI11wHGtLwJuVzya7WY6/Tp36kD BrX/Uh5nYWhtReU82ly8HvLIV6dgNtuzBIGUQckZE9Hdz+auzLoRlBwBaqFAKz/n 5tamzyZdQ0hji/GtE3i8eyvOBQvMw+20loNX/dgoXt80UjbxzGfcBoj7dQmDAaUk Aflw8Hm0nySES1OJQNmGrv+IzZQ/ZIRVRVTOBN5lhiuSoaVE8g27F6taouQgU/vV WwwmgXkKITKJ4fwU9HfylBDuvKdV5NcaFqkH2RkfD8XbuMsF5mRR+8W5BEzaeGQa MMnA9YFaprcfz3yt5VdQmgjPZ6MPq8AV -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:39 2025 by rpki-client