$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json) Hash identifier: vHnDRlicE4S1EkW8p3kjYr9GPY1tk+F6/UmtXMFwGB0= Subject key identifier: 45:A6:B4:93:A7:66:6B:76:90:FE:84:E7:E2:B4:B8:05:96:48:49:30 Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft Manifest number: 93 Signing time: Mon 03 Nov 2025 06:45:21 +0000 Manifest this update: Mon 03 Nov 2025 06:45:20 +0000 Manifest next update: Mon 10 Nov 2025 06:45:20 +0000 Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: QVaGm5Kxc/PZpqev8U6b1kFEIr9j04MjG6qBc0oj084=) 2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: cqpKhHQ429f1vtQzVS9iSS/6yBn8Tr7cOiYSPyhXnqM=) 3: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: hsVU/mADy2OXX1cQt4x/FdSd52E8zN5hB6L5qVYRCOM=) 4: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: K72GRxN+2ab3JpFVQDE8rFQueI0JJ5aBZHWdLQsQchI=) 5: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=) 6: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 4EsnPXpvxqy3HJn3NlZW+cFTXRzXY3NCiOsR6rWCGCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Validity Not Before: Nov 3 06:45:20 2025 GMT Not After : Nov 10 06:45:20 2025 GMT Subject: CN=69084f80-b4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:61:31:60:1d:bb:70:d7:f8:7e:f1:11:f2: d8:28:e8:f0:33:51:40:e6:ed:cc:0d:6c:c4:72:ed: 24:c9:ff:81:cc:0a:1d:53:ec:07:58:88:e5:97:51: ff:34:2e:30:2a:41:f3:7b:72:9d:ba:56:47:04:58: 75:e2:07:dc:2a:ca:1a:fb:65:bd:18:6f:97:79:86: 5d:2a:52:c1:21:84:f0:c5:6b:76:99:da:9c:77:19: 53:d7:8d:72:c7:06:cf:28:f5:ff:6b:51:5a:6b:63: 2c:32:da:b2:07:bb:a9:2d:6b:e9:0d:d6:f6:5f:92: 0a:92:a6:e9:5f:eb:a8:89:44:73:27:d8:d0:1f:48: 11:d9:f6:1c:44:1d:1a:c3:f8:17:fc:ce:65:56:37: 55:8a:61:2e:46:a6:7d:b7:7b:75:da:12:5d:6c:4c: 2c:4b:4c:81:20:c2:ab:c8:11:5b:56:0b:65:d7:de: 55:03:25:cb:ea:38:83:30:29:fe:d9:ed:19:69:38: 17:0f:ca:de:40:ca:00:db:c7:9f:d9:4d:b1:de:96: fa:82:74:3e:e7:26:00:72:18:4e:80:ab:72:0f:00: 79:b4:4d:7c:5b:d8:55:ef:0e:07:8b:8d:26:cc:7c: 42:72:f4:9d:2a:47:dd:01:98:f7:3f:ec:1a:94:7f: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A6:B4:93:A7:66:6B:76:90:FE:84:E7:E2:B4:B8:05:96:48:49:30 X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:00:32:5a:18:b0:76:e5:fb:43:76:48:7f:4d:ba:b9:ae:d1: b0:a9:c5:d7:31:88:b1:e8:14:a0:ed:8d:a0:13:cb:cd:2b:94: 76:e7:5d:73:9d:46:10:5a:ad:19:5d:c8:f7:76:1b:21:b0:fd: 54:36:54:0b:35:dd:00:1c:b6:1b:00:79:39:6c:85:c9:9b:da: 0e:dc:4d:fa:01:1a:85:49:30:ad:74:18:1b:ee:0c:c2:40:db: d0:a8:0a:80:70:4e:cf:43:44:a6:17:0d:9e:11:14:29:22:2a: 54:40:7a:39:d7:58:fa:e8:fc:c6:9f:d6:54:f6:76:db:49:73: 28:b2:32:39:6b:e2:2a:32:bb:54:21:4e:3b:d2:38:d7:e6:5c: f5:32:b1:e1:5d:41:67:91:4a:f0:8c:0e:d0:66:6a:0f:7c:9f: bb:6b:d1:28:1f:1c:02:24:83:e2:64:e5:0b:d3:52:d8:ec:ad: 05:da:2b:6e:bd:44:ca:84:b2:0e:db:da:b7:fe:68:ef:d2:6f: 9c:a0:43:0e:07:57:50:32:6c:48:9b:bf:2f:19:05:68:7f:ab: 9c:d1:16:be:bf:72:66:cb:e2:0a:ca:1a:ad:b1:97:97:2a:36: e7:d5:ee:36:a1:cf:a0:36:24:8a:0d:d8:2c:e9:b6:5a:e3:f4: c2:c5:19:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy QjcwRTJGOTkwHhcNMjUxMTAzMDY0NTIwWhcNMjUxMTEwMDY0NTIwWjAYMRYwFAYD VQQDEw02OTA4NGY4MC1iNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLhhMWAdu3DX+H7xEfLYKOjwM1FA5u3MDWzEcu0kyf+BzAodU+wHWIjll1H/ NC4wKkHze3KdulZHBFh14gfcKsoa+2W9GG+XeYZdKlLBIYTwxWt2mdqcdxlT141y xwbPKPX/a1Faa2MsMtqyB7upLWvpDdb2X5IKkqbpX+uoiURzJ9jQH0gR2fYcRB0a w/gX/M5lVjdVimEuRqZ9t3t12hJdbEwsS0yBIMKryBFbVgtl195VAyXL6jiDMCn+ 2e0ZaTgXD8reQMoA28ef2U2x3pb6gnQ+5yYAchhOgKtyDwB5tE18W9hV7w4Hi40m zHxCcvSdKkfdAZj3P+walH9C4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWmtJOn Zmt2kP6E5+K0uAWWSEkwMB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZj UTF5TTlWd3BIeElyY09MNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjADJaGLB25ftDdkh/Tbq5rtGwqcXXMYix6BSg7Y2gE8vNK5R2511z nUYQWq0ZXcj3dhshsP1UNlQLNd0AHLYbAHk5bIXJm9oO3E36ARqFSTCtdBgb7gzC QNvQqAqAcE7PQ0SmFw2eERQpIipUQHo511j66PzGn9ZU9nbbSXMosjI5a+IqMrtU IU470jjX5lz1MrHhXUFnkUrwjA7QZmoPfJ+7a9EoHxwCJIPiZOUL01LY7K0F2itu vUTKhLIO29q3/mjv0m+coEMOB1dQMmxIm78vGQVof6uc0Ra+v3Jmy+IKyhqtsZeX Kjbn1e42oc+gNiSKDdgs6bZa4/TCxRlA -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:49 2025 by rpki-client