$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json) Hash identifier: mHVCkLbW4B5CCe+cJygrFZOK5kV7CWEegKX5/m6uoxM= Subject key identifier: 76:5A:16:C8:7E:81:F8:8F:0C:27:16:F1:7D:58:B3:19:8A:E7:00:E8 Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft Manifest number: 261F Signing time: Sun 02 Nov 2025 16:19:43 +0000 Manifest this update: Sun 02 Nov 2025 16:19:42 +0000 Manifest next update: Sun 09 Nov 2025 16:19:42 +0000 Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: +iCaZlWz58rfhA28+zHIk8eW4FIX4PrU26TnujnkmMw=) 2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: tee5qyYUeYtzVgY5XM9ROj+LoDAFDMjISaly7p7VUNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Validity Not Before: Nov 2 16:19:42 2025 GMT Not After : Nov 9 16:19:42 2025 GMT Subject: CN=6907849f-779a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:ef:56:92:38:fa:90:78:d4:5c:ac:e5:15: 79:93:13:25:63:01:48:18:7c:3c:de:2e:72:48:39: 2a:59:f2:47:c7:b7:68:e9:a6:cd:5d:ca:5d:0b:0c: 8d:05:a3:17:5a:af:30:c4:b3:7f:6f:81:95:dd:6a: 63:a7:4c:e0:0f:69:e5:38:5e:39:5b:a2:64:58:c0: e2:eb:e6:4c:ca:c7:bf:da:52:c7:d7:5b:21:76:f4: 52:36:3b:a6:28:a5:82:50:4b:d3:bc:d8:4d:ad:a2: 56:91:d1:a8:8d:c5:9b:fd:98:d5:0d:4a:60:60:e2: fb:d4:b2:94:65:e9:41:93:be:18:dd:a9:8f:99:3e: 9f:1c:c1:93:4b:71:1f:6a:b2:3f:42:fb:e7:41:a1: 8a:80:a0:a9:16:9b:de:d3:ad:f1:52:e6:ce:f0:19: 7f:7c:83:bb:f0:4a:70:c4:cf:51:f1:31:4e:56:83: 2b:84:e0:43:75:ea:d5:73:d1:66:94:7c:d5:69:a3: b8:3c:da:0b:52:f7:31:2f:e1:15:58:68:cc:84:f2: f3:20:62:0a:3b:0d:24:7e:e9:64:c7:13:fa:52:57: f3:04:92:a2:2a:48:02:45:77:53:91:b2:5f:33:7e: 2e:54:62:27:bd:a4:8e:1e:ab:79:23:2e:b9:ca:6a: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5A:16:C8:7E:81:F8:8F:0C:27:16:F1:7D:58:B3:19:8A:E7:00:E8 X509v3 Authority Key Identifier: keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d2:93:52:1b:f8:fd:6f:2f:df:b4:2c:d0:2d:3e:66:59:bf: 7b:4a:71:49:35:ec:be:5a:fe:af:b4:50:12:d9:86:e8:97:d7: d8:c6:19:af:34:dd:43:ac:20:16:34:b1:d0:6f:8e:7f:30:34: 2e:76:f9:67:63:cf:5e:ba:f8:83:ee:70:29:aa:e3:5c:8a:d3: b5:d3:26:3d:e6:95:e9:30:d6:ec:86:79:69:21:ec:bf:88:29: 4c:71:c1:36:ed:a8:6a:07:b4:b8:7f:f3:f6:15:dd:64:a9:bd: a0:8b:dc:5d:b9:18:77:cc:7e:fd:28:25:d5:de:8c:ca:72:e0: e4:bd:89:71:e8:e5:1a:6e:e1:61:1a:fd:9f:a2:9f:f1:96:56: 2c:94:dc:b1:32:43:e6:97:02:6c:a8:99:32:02:f8:8d:55:03: 95:90:f1:5b:7a:48:fc:48:3e:38:65:32:0d:e7:4d:44:53:18: 55:fb:ea:e7:da:20:68:49:b3:c1:cf:be:2d:d2:05:1d:30:cb: 6b:13:54:24:89:ae:36:9c:19:a2:30:9f:ab:09:93:fa:3a:0c: 1f:0e:94:a9:dc:26:3e:8c:1e:90:68:67:9c:a4:aa:d9:59:dd: 26:3e:4a:30:c6:60:1c:44:7d:d8:b2:0a:63:1c:67:72:ff:4c: cc:fe:6e:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoQkU3NjRFRkVGNTNEODY5QzQ0RjYwNzA5OTYxMTNFMEEx ODE4NDExQjAeFw0yNTExMDIxNjE5NDJaFw0yNTExMDkxNjE5NDJaMBgxFjAUBgNV BAMTDTY5MDc4NDlmLTc3OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUuu9Wkjj6kHjUXKzlFXmTEyVjAUgYfDzeLnJIOSpZ8kfHt2jpps1dyl0LDI0F oxdarzDEs39vgZXdamOnTOAPaeU4XjlbomRYwOLr5kzKx7/aUsfXWyF29FI2O6Yo pYJQS9O82E2tolaR0aiNxZv9mNUNSmBg4vvUspRl6UGTvhjdqY+ZPp8cwZNLcR9q sj9C++dBoYqAoKkWm97TrfFS5s7wGX98g7vwSnDEz1HxMU5WgyuE4EN16tVz0WaU fNVpo7g82gtS9zEv4RVYaMyE8vMgYgo7DSR+6WTHE/pSV/MEkqIqSAJFd1ORsl8z fi5UYie9pI4eq3kjLrnKaj5/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdloWyH6B +I8MJxbxfVizGYrnAOgwHwYDVR0jBBgwFoAUvnZO/vU9hpxE9gcJlhE+ChgYQRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4RTlnY0psaEUtQ2hnWVFS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm5aT192VTlocHhFOWdjSmxoRS1DaGdZUVJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4 RTlnY0psaEUtQ2hnWVFScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACnSk1Ib+P1vL9+0LNAtPmZZv3tKcUk17L5a/q+0UBLZhuiX19jGGa80 3UOsIBY0sdBvjn8wNC52+Wdjz166+IPucCmq41yK07XTJj3mlekw1uyGeWkh7L+I KUxxwTbtqGoHtLh/8/YV3WSpvaCL3F25GHfMfv0oJdXejMpy4OS9iXHo5Rpu4WEa /Z+in/GWViyU3LEyQ+aXAmyomTIC+I1VA5WQ8Vt6SPxIPjhlMg3nTURTGFX76ufa IGhJs8HPvi3SBR0wy2sTVCSJrjacGaIwn6sJk/o6DB8OlKncJj6MHpBoZ5ykqtlZ 3SY+SjDGYBxEfdiyCmMcZ3L/TMz+bmY= -----END CERTIFICATE-----Generated at Tue Nov 4 00:50:05 2025 by rpki-client