$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft File: vNvXHXuijevFk59cynZuyp91YxA.mft (raw, json) Hash identifier: 0IWkHKGsN9uWqYgymKYlREPW7DeI5ZaGH8Lo+wc2GhA= Subject key identifier: 4C:F0:57:BE:23:BB:89:FA:26:C0:90:30:C7:B4:0A:75:C2:F1:22:11 Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Certificate serial: 2789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft Manifest number: 2771 Signing time: Sun 02 Nov 2025 15:39:58 +0000 Manifest this update: Sun 02 Nov 2025 15:39:57 +0000 Manifest next update: Sun 09 Nov 2025 15:39:57 +0000 Files and hashes: 1: vNvXHXuijevFk59cynZuyp91YxA.crl (hash: BksCy4dmdUXkNWjbbZl9jgllI2g8/5kkSGDJeXeT2is=) 2: 962B0D98B14111E5A3B46B15C4F9AE02.roa (hash: yQHlkxuzz99/7kQgioJqP7ffoLiy5kq1xOtP6xkgYXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10121 (0x2789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126285, serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Validity Not Before: Nov 2 15:39:57 2025 GMT Not After : Nov 9 15:39:57 2025 GMT Subject: CN=69077b4d-744e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:db:b8:08:96:2d:c5:73:0b:47:d9:a8:61: ce:ea:87:5b:43:27:fc:ed:4d:11:33:ce:03:ab:d4: 52:0d:78:33:0d:48:45:80:3d:7b:46:ba:3d:04:f9: 9f:47:29:c6:05:ba:7b:94:70:7d:52:0c:2e:6e:78: cc:7b:49:40:97:20:b5:5e:32:dd:d9:10:29:ed:19: 0b:6f:b4:89:40:f5:14:6c:50:22:e1:09:d5:aa:94: 7e:c0:7d:d4:2f:d3:5e:11:af:16:c6:a8:3f:1a:a3: 5c:7b:c7:3f:77:97:da:93:17:7c:cd:cb:19:3e:82: 8c:05:95:4f:fd:2b:87:40:b3:b1:fc:9a:df:c6:7e: 57:9c:fe:ca:66:a7:91:4d:e2:f7:23:f5:94:a6:08: cf:67:58:fa:39:03:7d:32:39:62:54:9d:b8:80:09: 60:ca:24:27:61:9f:82:f3:ee:b7:62:f5:9c:27:82: f4:e7:e1:2e:00:2f:79:40:da:fa:2b:20:98:ae:6f: 62:4f:ac:73:ed:e3:d9:8b:94:45:0a:44:3f:16:d3: 3d:ea:09:71:b5:fb:17:b3:d9:f5:e7:d3:8a:df:8f: db:e4:9a:89:a5:9c:78:43:58:ab:32:77:86:1d:a7: 3d:3c:52:11:91:e1:81:51:60:00:24:5c:ef:8c:db: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:57:BE:23:BB:89:FA:26:C0:90:30:C7:B4:0A:75:C2:F1:22:11 X509v3 Authority Key Identifier: keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:b2:e2:35:d2:bd:d4:74:75:8d:a7:2c:04:23:49:36:38:02: f1:e8:99:02:54:43:f9:26:c5:d4:e0:2f:24:7b:22:5a:e1:d4: 0b:42:e0:68:4e:b5:97:70:20:ff:d7:ce:9f:5c:fa:d0:50:50: 88:e9:01:25:dd:f1:ba:e6:11:8d:db:ad:95:c9:af:c4:15:2f: e5:a8:75:6a:57:31:11:af:67:69:27:1d:90:60:44:65:2d:4d: df:7b:03:01:26:5f:36:01:7b:92:c5:cd:57:63:2d:6f:8b:5f: e7:33:83:75:c7:b0:f9:79:22:df:7a:a7:16:c9:14:c7:2a:cc: f3:10:33:d7:9b:56:55:68:bb:f1:5f:9c:8e:4a:28:e3:d8:b0: 9a:12:71:95:8f:ee:70:69:3e:f7:c3:c6:43:83:65:00:14:08: b6:6e:ae:f2:80:77:fb:3f:45:69:5b:8c:e8:c7:af:6c:24:6b: e3:74:67:f2:27:4a:a5:7d:44:8d:3d:5d:a2:c4:84:f3:eb:e9: e1:41:a9:4f:ac:89:a2:84:37:4b:e0:24:e6:be:24:36:80:27: fd:fb:c9:01:9b:68:b8:92:eb:6d:63:b9:e3:25:f2:6e:69:7a: 86:74:ab:b1:64:12:99:30:8c:6b:85:69:63:0b:26:cd:d8:0a: a6:2c:fc:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB OUY3NTYzMTAwHhcNMjUxMTAyMTUzOTU3WhcNMjUxMTA5MTUzOTU3WjAYMRYwFAYD VQQDEw02OTA3N2I0ZC03NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymrbuAiWLcVzC0fZqGHO6odbQyf87U0RM84Dq9RSDXgzDUhFgD17Rro9BPmf RynGBbp7lHB9UgwubnjMe0lAlyC1XjLd2RAp7RkLb7SJQPUUbFAi4QnVqpR+wH3U L9NeEa8Wxqg/GqNce8c/d5fakxd8zcsZPoKMBZVP/SuHQLOx/Jrfxn5XnP7KZqeR TeL3I/WUpgjPZ1j6OQN9MjliVJ24gAlgyiQnYZ+C8+63YvWcJ4L05+EuAC95QNr6 KyCYrm9iT6xz7ePZi5RFCkQ/FtM96glxtfsXs9n159OK34/b5JqJpZx4Q1irMneG Hac9PFIRkeGBUWAAJFzvjNuz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzwV74j u4n6JsCQMMe0CnXC8SIRMB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI4NS9CMjYxMEI1OEMzRjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpl dkZrNTljeW5adXlwOTFZeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmsuI10r3UdHWNpywEI0k2OALx6JkCVEP5JsXU4C8keyJa4dQLQuBo TrWXcCD/186fXPrQUFCI6QEl3fG65hGN262Vya/EFS/lqHVqVzERr2dpJx2QYERl LU3fewMBJl82AXuSxc1XYy1vi1/nM4N1x7D5eSLfeqcWyRTHKszzEDPXm1ZVaLvx X5yOSijj2LCaEnGVj+5waT73w8ZDg2UAFAi2bq7ygHf7P0VpW4zox69sJGvjdGfy J0qlfUSNPV2ixITz6+nhQalPrImihDdL4CTmviQ2gCf9+8kBm2i4kuttY7njJfJu aXqGdKuxZBKZMIxrhWljCybN2AqmLPwL -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:42 2025 by rpki-client