$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: 5fbUwJSLHHNfPevWVJW7ERt3KXM8i2GIyVzitgxBUNY= Subject key identifier: C5:8B:F1:43:04:B0:B9:35:E1:FC:51:50:48:73:1F:9F:6C:38:A4:91 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 0211 Signing time: Wed 17 Sep 2025 02:41:06 +0000 Manifest this update: Wed 17 Sep 2025 02:41:05 +0000 Manifest next update: Wed 24 Sep 2025 02:41:05 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: KLB3wWWF0oABMMWQyoDSOan++Hi4B8f7qkcZUA9vXjU=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Sep 17 02:41:05 2025 GMT Not After : Sep 24 02:41:05 2025 GMT Subject: CN=68ca1fc1-e86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:a0:ae:08:14:70:14:2d:2a:6c:da:b7:50: 0e:07:46:ab:0f:21:10:29:7b:7f:7e:55:6a:7d:5f: 13:ee:8b:c7:e1:76:12:f1:1f:2b:ee:d1:31:0b:a9: b2:27:22:e3:b0:c7:ba:37:af:7f:13:51:c7:72:45: 14:af:13:b1:9c:bd:1c:c6:a5:f4:95:08:48:b3:35: 40:4f:81:2e:6e:c8:15:46:f2:b5:57:63:8b:c7:61: a6:a6:71:80:b2:65:fc:5e:0d:ad:b6:e1:74:a1:e5: fe:a7:66:c2:c8:79:60:3f:3e:46:80:0b:a0:d9:b9: d7:cf:f6:cd:ee:4d:30:0e:e6:d4:25:1f:33:73:c1: 7e:80:62:71:82:40:4a:82:38:78:e2:b3:19:01:7b: 01:82:8d:6b:d5:d1:4d:59:10:e9:9d:f2:83:16:6c: a4:76:bd:ee:87:0d:e0:8a:38:1e:da:e5:87:15:9f: 25:7d:49:c8:b0:87:df:5e:d0:e1:b8:e0:b2:39:bb: 5c:89:bb:d4:03:6c:bc:42:66:74:04:a5:0e:d1:14: ca:28:00:33:58:14:43:aa:a6:aa:8d:d3:3b:65:1a: 90:7d:19:89:e5:e0:39:09:23:1e:75:aa:06:22:f7: 68:61:b5:fa:a4:dc:cf:10:ce:e2:bd:a5:98:44:94: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8B:F1:43:04:B0:B9:35:E1:FC:51:50:48:73:1F:9F:6C:38:A4:91 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7d:f0:e3:87:13:5a:89:b2:30:5b:92:94:64:50:c0:c2:26: e3:0e:a2:3c:4a:6d:88:3e:6d:bf:71:da:33:f7:6c:87:91:30: 80:9d:3e:6f:1c:0a:5b:b9:44:f3:fb:cf:89:93:6d:bf:d1:15: 97:85:7a:68:79:af:84:88:3b:d7:a6:ec:e4:d6:af:80:94:3d: 6d:45:64:f4:bf:98:e8:7a:4a:35:a3:ef:10:d3:75:e7:c5:b1: 5b:f6:f0:e1:28:60:8a:4d:c2:80:38:1b:db:91:ad:39:ce:ff: 3b:d4:04:f3:ca:be:71:fa:c6:74:48:ff:86:dd:4e:a7:de:78: 11:b5:02:dd:d0:c6:07:4a:9a:5b:f4:b8:d1:6c:13:ab:e1:23: fb:73:e5:14:c4:7e:05:52:fc:7c:69:4b:0b:82:6b:69:12:59: 58:98:dc:af:ca:3a:0a:e8:72:86:52:64:d9:48:14:e2:83:42: ab:f1:09:56:01:a9:1c:7b:5b:a6:23:e0:8f:50:19:f5:fa:82: 6d:7f:10:14:fa:df:d0:d4:6a:7c:5e:ef:a9:02:b0:8b:a7:34: d6:15:06:a1:e6:9a:31:1b:83:1a:5d:6d:a7:20:66:6b:b7:cd: 06:20:7e:bb:74:a1:1a:f6:6d:d4:13:93:e2:5d:e7:fb:8a:29: 02:d9:8c:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjUwOTE3MDI0MTA1WhcNMjUwOTI0MDI0MTA1WjAYMRYwFAYD VQQDEw02OGNhMWZjMS1lODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHigrggUcBQtKmzat1AOB0arDyEQKXt/flVqfV8T7ovH4XYS8R8r7tExC6my JyLjsMe6N69/E1HHckUUrxOxnL0cxqX0lQhIszVAT4EubsgVRvK1V2OLx2GmpnGA smX8Xg2ttuF0oeX+p2bCyHlgPz5GgAug2bnXz/bN7k0wDubUJR8zc8F+gGJxgkBK gjh44rMZAXsBgo1r1dFNWRDpnfKDFmykdr3uhw3gijge2uWHFZ8lfUnIsIffXtDh uOCyObtcibvUA2y8QmZ0BKUO0RTKKAAzWBRDqqaqjdM7ZRqQfRmJ5eA5CSMedaoG IvdoYbX6pNzPEM7ivaWYRJR6JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWL8UME sLk14fxRUEhzH59sOKSRMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ffDjhxNaibIwW5KUZFDAwibjDqI8Sm2IPm2/cdoz92yHkTCAnT5v HApbuUTz+8+Jk22/0RWXhXpoea+EiDvXpuzk1q+AlD1tRWT0v5joeko1o+8Q03Xn xbFb9vDhKGCKTcKAOBvbka05zv871ATzyr5x+sZ0SP+G3U6n3ngRtQLd0MYHSppb 9LjRbBOr4SP7c+UUxH4FUvx8aUsLgmtpEllYmNyvyjoK6HKGUmTZSBTig0Kr8QlW Aakce1umI+CPUBn1+oJtfxAU+t/Q1Gp8Xu+pArCLpzTWFQah5poxG4MaXW2nIGZr t80GIH67dKEa9m3UE5PiXef7iikC2YyP -----END CERTIFICATE-----Generated at Fri Sep 19 00:44:04 2025 by rpki-client