$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: Fn8Q8di0B+9QC/4bZNXsPVGebOaxPkJ94V84wmlGFNg= Subject key identifier: BE:35:CC:B4:39:90:1B:1B:59:B5:53:0C:41:41:AB:8A:63:44:14:69 Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: 0164 Signing time: Mon 03 Nov 2025 04:01:55 +0000 Manifest this update: Mon 03 Nov 2025 04:01:54 +0000 Manifest next update: Mon 10 Nov 2025 04:01:54 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: oq6g6WhZt41VuVNaPrQWVcUohlLdeQSny61gj6ffkBo=) 2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Validity Not Before: Nov 3 04:01:54 2025 GMT Not After : Nov 10 04:01:54 2025 GMT Subject: CN=69082932-77b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:bf:61:59:02:fd:42:84:46:b0:e9:8b:60: ab:95:49:21:35:71:9b:96:03:5a:b6:83:8a:a5:51: 5d:38:c6:65:61:09:34:eb:bf:1d:bd:0d:98:a7:48: 39:24:d6:10:4c:15:32:a8:c9:2d:26:70:1b:e4:78: 30:5a:96:f1:4a:9b:b3:89:3a:36:f1:ec:f7:2c:ea: a0:88:e4:7f:9e:38:9e:89:54:06:9b:67:8b:55:d3: ae:b5:3d:4d:46:23:2d:8f:c7:19:bf:39:94:8c:09: 7f:30:8a:f5:54:fa:da:1c:0f:b1:f4:2e:94:cf:62: ac:6c:60:4f:bc:f4:8e:98:27:2e:65:fe:c5:34:a0: bb:2f:6d:b3:79:1d:02:59:da:75:13:77:27:93:bb: b7:76:ba:22:22:7a:63:09:42:9a:b7:d5:72:19:d7: ca:9d:84:02:8b:12:6d:15:8b:d2:f8:b5:63:77:31: 67:8f:7e:8f:44:45:49:ac:6e:52:e3:05:4d:b3:d5: b7:2b:d8:84:1e:bd:80:b0:55:ec:55:d2:36:16:17: 76:d3:d8:f7:6f:a3:91:0f:d4:8c:89:3f:bf:4a:4a: a7:59:6c:6a:b2:65:12:32:8c:6f:ef:99:f2:8d:59: bc:b1:d8:83:e3:40:6e:a6:7b:d0:93:fc:63:e9:0b: 03:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:35:CC:B4:39:90:1B:1B:59:B5:53:0C:41:41:AB:8A:63:44:14:69 X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:27:f1:d5:0a:8c:7b:6c:d6:8f:8e:cd:97:8b:e5:db:5d:00: c3:7b:4d:57:46:10:8a:7c:75:06:4d:ea:26:44:9d:5f:54:02: 4f:79:0b:92:09:58:d2:75:36:11:d4:c6:30:52:7a:f9:11:9e: d4:d0:a9:52:2f:7d:9e:05:06:f7:85:d7:fa:bb:b0:87:c4:ef: 84:7e:1d:ca:52:45:92:82:be:51:05:7a:35:bd:3e:70:ab:19: 8d:ba:95:37:b2:f4:57:de:4f:68:87:07:c9:1f:47:45:a2:9d: 1b:14:5f:f3:8c:73:85:c8:ba:e8:e6:66:73:70:62:21:89:c0: ed:7e:2f:76:76:12:b0:b6:b4:99:c0:3e:e3:94:ed:35:60:3c: 93:9d:22:01:dd:35:6b:32:0f:79:14:84:32:44:bb:78:fb:29: 1f:96:f6:3d:14:0b:8f:ff:05:6c:e2:b4:db:90:70:79:90:68: 98:b4:05:ac:a8:08:c4:8f:09:ce:09:24:45:5d:6d:e2:3d:24: e0:ae:31:51:7a:8a:31:cd:1f:eb:17:05:96:55:18:19:ca:bd: 06:67:71:d4:ff:0f:91:73:dc:c4:17:9a:f5:07:5d:ef:c8:10: 57:ef:a9:68:8d:48:2b:07:5c:30:ad:49:e8:a4:85:bb:05:8c: 1c:5c:78:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4 Nzc0RUVCQ0QwHhcNMjUxMTAzMDQwMTU0WhcNMjUxMTEwMDQwMTU0WjAYMRYwFAYD VQQDEw02OTA4MjkzMi03N2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApV+/YVkC/UKERrDpi2CrlUkhNXGblgNatoOKpVFdOMZlYQk0678dvQ2Yp0g5 JNYQTBUyqMktJnAb5HgwWpbxSpuziTo28ez3LOqgiOR/njieiVQGm2eLVdOutT1N RiMtj8cZvzmUjAl/MIr1VPraHA+x9C6Uz2KsbGBPvPSOmCcuZf7FNKC7L22zeR0C Wdp1E3cnk7u3droiInpjCUKat9VyGdfKnYQCixJtFYvS+LVjdzFnj36PREVJrG5S 4wVNs9W3K9iEHr2AsFXsVdI2Fhd209j3b6ORD9SMiT+/SkqnWWxqsmUSMoxv75ny jVm8sdiD40BupnvQk/xj6QsDRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL41zLQ5 kBsbWbVTDEFBq4pjRBRpMB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5 QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VCRC9DQ0Q4MTQyODk5QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdH UTM4OXRiSVVJSXlIZE82ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcJ/HVCox7bNaPjs2Xi+XbXQDDe01XRhCKfHUGTeomRJ1fVAJPeQuS CVjSdTYR1MYwUnr5EZ7U0KlSL32eBQb3hdf6u7CHxO+Efh3KUkWSgr5RBXo1vT5w qxmNupU3svRX3k9ohwfJH0dFop0bFF/zjHOFyLro5mZzcGIhicDtfi92dhKwtrSZ wD7jlO01YDyTnSIB3TVrMg95FIQyRLt4+ykflvY9FAuP/wVs4rTbkHB5kGiYtAWs qAjEjwnOCSRFXW3iPSTgrjFReooxzR/rFwWWVRgZyr0GZ3HU/w+Rc9zEF5r1B13v yBBX76lojUgrB1wwrUnopIW7BYwcXHhR -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:14 2025 by rpki-client