$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: bqkZ0E5U9h3S1ZX7NtDZ1zQ7fyaNGSS71BPepxXrPr8= Subject key identifier: 0D:EC:25:A4:F1:41:CF:46:3C:84:4B:B2:F3:6B:FC:FA:64:D9:62:F2 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 0228 Signing time: Mon 03 Nov 2025 02:00:02 +0000 Manifest this update: Mon 03 Nov 2025 02:00:02 +0000 Manifest next update: Mon 10 Nov 2025 02:00:02 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: Pe9x3WXMeCpsD9JLwSBEC7T3S+1WOsXplZK5KaBiDCs=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Nov 3 02:00:02 2025 GMT Not After : Nov 10 02:00:02 2025 GMT Subject: CN=69080ca2-1df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5a:b9:ed:c2:26:0c:31:b6:62:0c:52:f8:71: ed:56:e8:a1:e2:c0:41:a8:4d:9a:97:58:6f:66:52: 02:6a:3b:11:9a:1f:2d:d8:77:b5:76:57:65:f5:3b: 34:a6:96:8c:f5:24:1a:65:7e:14:3e:51:c7:2c:bc: 89:bf:81:cf:93:47:cb:54:89:53:bc:a9:05:13:83: 0f:1c:82:38:9d:37:f6:62:37:7c:ad:a2:78:ef:b3: ab:e4:4c:4b:6e:16:b2:59:d4:ed:b0:fb:04:85:5d: c5:eb:fe:42:42:eb:f9:0b:ad:9d:02:d8:c7:00:d8: 8f:ea:2f:8d:61:b5:9f:ce:8d:be:99:2f:b2:ce:d2: 64:f5:9b:c8:76:2c:a2:e5:81:2e:50:62:e8:bf:05: 4e:c4:cb:de:e0:40:c1:0f:bf:ec:38:95:50:4e:aa: b3:a3:44:fa:5f:e1:95:0c:71:be:1a:3e:33:a6:d4: e1:3c:0d:1e:cc:6e:5c:24:05:4d:cd:d8:eb:7e:7f: 11:bb:d8:af:f2:a0:fa:a9:6b:ed:32:bd:f2:ef:0f: d5:4c:c3:e8:7f:33:a3:02:b9:24:30:bc:3e:d3:d0: f6:51:48:0f:2b:30:c4:13:1b:b9:cc:17:dd:27:12: 9a:b7:8e:50:21:88:cc:08:63:36:25:36:da:79:6c: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EC:25:A4:F1:41:CF:46:3C:84:4B:B2:F3:6B:FC:FA:64:D9:62:F2 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:fd:3e:7b:4d:fd:d3:56:d7:e0:6f:12:62:e5:10:44:ad:39: b5:b7:51:8b:c6:45:56:f4:37:20:9d:09:91:c1:3f:22:8d:0b: 56:e2:fd:e3:62:25:8c:b4:6c:c9:40:81:98:2d:fb:c5:ba:16: 8d:f4:d5:5a:02:0d:8f:6d:51:a0:17:cf:c4:37:10:d1:33:8c: 9e:a0:24:22:56:03:7b:45:c5:1f:9b:f4:ee:57:86:c6:4a:d0: ac:c4:be:d0:40:af:44:62:9f:d3:ff:55:86:1c:73:1a:d1:33: 50:8d:c9:3d:ef:20:2c:4b:82:44:0d:4f:88:5d:73:81:7f:b6: c7:93:ff:fe:85:06:c0:0b:4b:f0:45:40:48:af:28:ba:75:a1: ba:0e:a1:f5:cd:a9:83:d0:9e:ce:24:fe:9f:70:59:5f:6f:4c: 8e:6f:02:e0:44:d2:cc:4c:a1:f0:d2:19:a7:a8:d2:36:40:6b: 31:76:9b:38:80:81:9a:72:b2:03:36:0b:fa:dd:33:1a:f2:73: 6b:80:a1:a3:15:d0:08:bc:d1:4f:03:d4:f2:9c:29:73:84:6c: 76:e8:14:9c:9d:52:93:52:c9:e6:07:1d:37:7c:cd:0c:6a:be: eb:e6:22:93:4f:a2:7d:69:91:71:8b:af:a7:ab:71:d9:cf:32: c8:b3:69:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjUxMTAzMDIwMDAyWhcNMjUxMTEwMDIwMDAyWjAYMRYwFAYD VQQDEw02OTA4MGNhMi0xZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Fq57cImDDG2YgxS+HHtVuih4sBBqE2al1hvZlICajsRmh8t2He1dldl9Ts0 ppaM9SQaZX4UPlHHLLyJv4HPk0fLVIlTvKkFE4MPHII4nTf2Yjd8raJ477Or5ExL bhayWdTtsPsEhV3F6/5CQuv5C62dAtjHANiP6i+NYbWfzo2+mS+yztJk9ZvIdiyi 5YEuUGLovwVOxMve4EDBD7/sOJVQTqqzo0T6X+GVDHG+Gj4zptThPA0ezG5cJAVN zdjrfn8Ru9iv8qD6qWvtMr3y7w/VTMPofzOjArkkMLw+09D2UUgPKzDEExu5zBfd JxKat45QIYjMCGM2JTbaeWwt3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3sJaTx Qc9GPIRLsvNr/Ppk2WLyMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz/T57Tf3TVtfgbxJi5RBErTm1t1GLxkVW9DcgnQmRwT8ijQtW4v3j YiWMtGzJQIGYLfvFuhaN9NVaAg2PbVGgF8/ENxDRM4yeoCQiVgN7RcUfm/TuV4bG StCsxL7QQK9EYp/T/1WGHHMa0TNQjck97yAsS4JEDU+IXXOBf7bHk//+hQbAC0vw RUBIryi6daG6DqH1zamD0J7OJP6fcFlfb0yObwLgRNLMTKHw0hmnqNI2QGsxdps4 gIGacrIDNgv63TMa8nNrgKGjFdAIvNFPA9TynClzhGx26BScnVKTUsnmBx03fM0M ar7r5iKTT6J9aZFxi6+nq3HZzzLIs2lx -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:39 2025 by rpki-client