$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft File: vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json) Hash identifier: wz6v0i+qyMbCCt2sy961Pbla3JAUR7Y91mfCK4bLyy0= Subject key identifier: EC:73:02:3C:8F:70:6B:3D:9D:41:92:70:88:7D:DF:76:8D:D6:BA:A2 Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A Certificate issuer: /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A Certificate serial: 2A16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft Manifest number: 2A01 Signing time: Wed 22 Oct 2025 15:44:24 +0000 Manifest this update: Wed 22 Oct 2025 15:44:24 +0000 Manifest next update: Wed 29 Oct 2025 15:44:24 +0000 Files and hashes: 1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: RAH8SG9XXSbiqvzBpSm3CNk/il7W8x3/OTza4o6jq9s=) 2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: tpW2hEp1WUinGORU3b4Fa8fzBLaeCCXQIdHVixzwtfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10774 (0x2a16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A Validity Not Before: Oct 22 15:44:24 2025 GMT Not After : Oct 29 15:44:24 2025 GMT Subject: CN=68f8fbd8-5d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:b9:e1:1b:05:6c:46:4c:c0:e1:96:fb:8a: 73:b1:a7:11:2f:cf:d9:dd:30:0c:ee:a7:d7:55:0b: 2f:3f:9c:1f:32:a2:79:4e:6d:dd:99:e2:c1:34:24: ac:fb:16:bf:de:c7:81:5a:5c:79:12:9a:73:5e:83: b8:61:1c:12:36:4d:24:11:ba:47:94:5a:0e:fe:4f: ae:f6:26:96:c4:b4:bf:3f:a3:02:e5:68:7f:c2:4b: 8e:bf:ea:89:a1:7f:1e:4e:ac:8a:30:31:bc:f1:70: 1d:d2:ce:e8:c1:1e:a2:0d:19:94:b5:9e:2e:be:96: ee:fc:60:af:64:d8:8c:3f:ed:f2:0d:c1:e5:83:66: ef:19:15:c7:61:08:8e:7e:61:33:cc:73:44:f3:4f: 51:7e:12:c2:60:75:39:2c:a1:5f:f8:40:a7:a0:79: f2:7d:8d:7c:7b:b9:49:48:a4:3a:29:55:79:cd:55: 7e:2a:bb:18:6b:cd:6a:a2:22:5a:85:36:08:79:05: 3c:ed:81:eb:12:06:f9:bb:7b:37:ef:e7:af:87:cd: 99:37:f0:b5:fc:72:be:d7:02:61:f2:44:7d:ed:35: cd:85:d4:82:74:36:c4:81:c9:0c:d1:b1:bb:36:7a: 0a:9b:56:af:67:9b:77:85:09:0a:4b:0e:b2:fa:cd: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:02:3C:8F:70:6B:3D:9D:41:92:70:88:7D:DF:76:8D:D6:BA:A2 X509v3 Authority Key Identifier: keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ef:ef:58:6e:97:d8:58:b9:3f:85:ea:fb:b1:fe:d8:10:d8: 86:e4:9e:b3:4a:fa:ed:35:b1:d1:f3:95:9e:a3:a8:75:46:07: e2:00:5f:28:bd:85:7b:3f:06:61:88:61:de:92:b3:e1:72:a7: 98:02:ba:e0:6c:e5:67:cd:bd:52:2c:5c:3f:91:2a:2c:ac:9f: 59:21:33:a7:db:83:5b:a1:ed:1b:16:e8:fd:a8:76:36:8a:3f: 6d:ba:85:ff:47:84:48:bd:6f:c7:58:30:a0:2a:64:b1:8f:62: f5:f7:6c:42:da:73:63:b4:dd:a2:38:32:af:30:2a:e9:5f:ae: 35:91:2f:ff:c2:93:a2:89:1e:25:c7:8a:6e:05:c9:c8:f2:ee: 9d:07:b3:a4:b4:e5:93:58:0d:88:fd:50:2d:a9:cb:71:c2:9f: ad:19:6d:0a:13:fc:83:6c:61:c0:35:b1:9f:93:9a:b8:3b:34: 04:f2:27:0f:90:1d:b5:a1:5d:95:18:00:fd:d7:27:2b:65:50: 3f:b3:9a:49:53:6a:8f:3b:96:c6:84:83:2b:58:39:92:6c:32: 12:c6:6e:f2:00:d7:35:98:4f:f9:b0:06:89:32:6e:1d:29:e7: a7:9a:21:ee:aa:7e:86:06:9d:20:b8:a5:16:5d:c7:78:53:18: fb:8c:2a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMTkxMTAvBgNVBAUTKEJFOTg1NEI5ODQ5OTM2NjQzRTBENDAxNUEzQjM3QjVF NDQ4NEFENUEwHhcNMjUxMDIyMTU0NDI0WhcNMjUxMDI5MTU0NDI0WjAYMRYwFAYD VQQDEw02OGY4ZmJkOC01ZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9u54RsFbEZMwOGW+4pzsacRL8/Z3TAM7qfXVQsvP5wfMqJ5Tm3dmeLBNCSs +xa/3seBWlx5EppzXoO4YRwSNk0kEbpHlFoO/k+u9iaWxLS/P6MC5Wh/wkuOv+qJ oX8eTqyKMDG88XAd0s7owR6iDRmUtZ4uvpbu/GCvZNiMP+3yDcHlg2bvGRXHYQiO fmEzzHNE809RfhLCYHU5LKFf+ECnoHnyfY18e7lJSKQ6KVV5zVV+KrsYa81qoiJa hTYIeQU87YHrEgb5u3s37+evh82ZN/C1/HK+1wJh8kR97TXNhdSCdDbEgckM0bG7 NnoKm1avZ5t3hQkKSw6y+s30OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxzAjyP cGs9nUGScIh933aN1rqiMB8GA1UdIwQYMBaAFL6YVLmEmTZkPg1AFaOze15EhK1a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QxOS80MEVEODAyMDQy OUYxMUU0ODZCNDRENzJDNEY5QUUwMi92cGhVdVlTWk5tUS1EVUFWbzdON1hrU0Vy Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwaFV1WVNaTm1RLURVQVZvN043WGtTRXJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0QxOS80MEVEODAyMDQyOUYxMUU0ODZCNDRENzJDNEY5QUUwMi92cGhVdVlTWk5t US1EVUFWbzdON1hrU0VyVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR7+9YbpfYWLk/her7sf7YENiG5J6zSvrtNbHR85Weo6h1RgfiAF8o vYV7PwZhiGHekrPhcqeYArrgbOVnzb1SLFw/kSosrJ9ZITOn24Nboe0bFuj9qHY2 ij9tuoX/R4RIvW/HWDCgKmSxj2L192xC2nNjtN2iODKvMCrpX641kS//wpOiiR4l x4puBcnI8u6dB7OktOWTWA2I/VAtqctxwp+tGW0KE/yDbGHANbGfk5q4OzQE8icP kB21oV2VGAD91ycrZVA/s5pJU2qPO5bGhIMrWDmSbDISxm7yANc1mE/5sAaJMm4d KeenmiHuqn6GBp0guKUWXcd4Uxj7jCrA -----END CERTIFICATE-----Generated at Thu Oct 23 05:55:53 2025 by rpki-client