$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: 9WAF84XWQPEJ6LH0wafe6US9UC+2pOFKROTKiWsfRps= Subject key identifier: AD:1F:DD:D0:47:5A:5A:C3:6A:A8:9F:43:E1:2B:F0:2C:46:35:34:81 Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: 01C9 Signing time: Mon 03 Nov 2025 02:51:37 +0000 Manifest this update: Mon 03 Nov 2025 02:51:36 +0000 Manifest next update: Mon 10 Nov 2025 02:51:36 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: NSjhJ0/h9y+5pHQVU1rV7ie8ToRmzKjKBJe6KN10Olw=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: jnuMHWmzh0Mkxo/UqfQiHQK9zwVM6oBly72+HKRXMlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: Nov 3 02:51:36 2025 GMT Not After : Nov 10 02:51:36 2025 GMT Subject: CN=690818b8-4333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2d:00:3f:4e:37:03:3f:1e:55:35:d1:ae:f3: 27:b8:e7:ae:90:b8:fd:57:4d:c1:b8:5c:9c:1e:1c: 23:df:41:ba:04:82:68:bd:58:c5:55:7a:d3:a0:4d: 70:44:78:86:39:92:e3:01:fa:55:15:10:8c:26:23: fe:a9:7f:ea:41:97:63:d0:c4:6e:b9:89:5f:00:40: e1:32:1c:3e:e6:c2:ad:40:e6:5b:4c:be:e0:05:b7: 5e:a5:ef:fb:99:ce:75:d8:68:20:d8:6f:50:45:27: 18:ff:ba:2c:f1:e8:9b:c8:72:b2:40:b1:aa:d5:86: 0a:91:cc:c4:b9:45:40:59:88:2f:4c:90:ac:ee:9f: ef:1e:57:ee:ec:63:90:54:52:b5:ed:dc:f0:3f:94: b7:36:95:5c:d5:d6:01:61:85:9f:91:92:77:65:d2: 60:4c:ca:f3:34:89:97:0d:e7:1d:c6:2e:91:40:ec: 3a:7a:2f:ae:a1:75:cc:46:9c:29:6f:fe:4e:a1:1d: 2f:ff:16:4c:cb:e4:58:66:ac:01:35:b6:5f:e2:ae: a3:2b:ee:4e:e5:87:8b:4c:36:1c:46:00:fd:8b:ae: 44:db:68:61:fd:88:3f:ed:64:68:ee:c8:76:9a:3f: e2:b3:9c:e0:98:2f:a3:80:37:31:b6:ab:72:15:fe: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1F:DD:D0:47:5A:5A:C3:6A:A8:9F:43:E1:2B:F0:2C:46:35:34:81 X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:30:ad:39:d3:a6:e1:1f:d9:0e:85:5a:e4:31:f3:0d:5f:db: 88:74:34:1e:4c:75:f5:85:b1:e6:66:0b:8e:7b:63:30:3a:5d: b4:54:d7:44:68:65:d5:7e:b4:08:7c:43:ad:c7:1d:16:2d:f4: 79:79:0b:40:38:8e:89:ee:8d:23:d1:b5:48:e4:19:4b:7c:76: ed:ff:0a:7d:6a:4a:85:5a:90:fc:f3:74:52:69:0c:34:bc:e9: 64:9a:8f:bf:66:35:88:ff:99:66:9c:ac:5c:a4:dd:7c:00:54: 77:41:19:bb:5f:29:e3:9b:33:3c:a2:07:ff:4a:f7:55:66:b0: d0:92:46:03:23:56:25:9b:b5:f2:5e:8a:72:66:32:11:75:0d: 30:41:1b:db:ed:2f:7a:63:18:3a:c1:30:63:13:40:fb:a6:e2: 22:ab:68:a6:db:09:0e:c8:08:7c:b4:cc:f8:08:eb:40:48:85: 19:27:0a:c7:6e:f8:66:a0:1b:3e:72:37:49:bc:f7:53:fc:33: 33:cd:a8:f1:03:fa:ba:44:3a:9f:fd:a3:98:f5:11:65:f8:ce: 2a:41:91:fb:ab:92:dc:5c:3f:af:08:47:a1:8b:ee:82:0e:62: 0b:96:28:e5:55:ea:23:31:b8:a1:1e:b0:61:4f:08:df:b9:b8: ca:05:54:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjUxMTAzMDI1MTM2WhcNMjUxMTEwMDI1MTM2WjAYMRYwFAYD VQQDEw02OTA4MThiOC00MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0C0AP043Az8eVTXRrvMnuOeukLj9V03BuFycHhwj30G6BIJovVjFVXrToE1w RHiGOZLjAfpVFRCMJiP+qX/qQZdj0MRuuYlfAEDhMhw+5sKtQOZbTL7gBbdepe/7 mc512Ggg2G9QRScY/7os8eibyHKyQLGq1YYKkczEuUVAWYgvTJCs7p/vHlfu7GOQ VFK17dzwP5S3NpVc1dYBYYWfkZJ3ZdJgTMrzNImXDecdxi6RQOw6ei+uoXXMRpwp b/5OoR0v/xZMy+RYZqwBNbZf4q6jK+5O5YeLTDYcRgD9i65E22hh/Yg/7WRo7sh2 mj/is5zgmC+jgDcxtqtyFf45mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0f3dBH WlrDaqifQ+Er8CxGNTSBMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDMK0506bhH9kOhVrkMfMNX9uIdDQeTHX1hbHmZguOe2MwOl20VNdE aGXVfrQIfEOtxx0WLfR5eQtAOI6J7o0j0bVI5BlLfHbt/wp9akqFWpD883RSaQw0 vOlkmo+/ZjWI/5lmnKxcpN18AFR3QRm7XynjmzM8ogf/SvdVZrDQkkYDI1Ylm7Xy XopyZjIRdQ0wQRvb7S96Yxg6wTBjE0D7puIiq2im2wkOyAh8tMz4COtASIUZJwrH bvhmoBs+cjdJvPdT/DMzzajxA/q6RDqf/aOY9RFl+M4qQZH7q5LcXD+vCEehi+6C DmILlijlVeojMbihHrBhTwjfubjKBVSO -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:11 2025 by rpki-client