$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json) Hash identifier: Jd1O9oieGNFa4962NQexjR6m6t4NmoBYO3vXFv3rtUk= Subject key identifier: F8:02:39:14:22:95:96:B8:2F:EF:B2:B4:4A:4B:60:9B:FE:5D:27:07 Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft Manifest number: 9F Signing time: Wed 05 Nov 2025 06:29:40 +0000 Manifest this update: Wed 05 Nov 2025 06:29:40 +0000 Manifest next update: Wed 12 Nov 2025 06:29:40 +0000 Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: G+aciF+F3uJ03XskGgXItPQA2DhEIVn2nAYp28JPnh0=) 2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Validity Not Before: Nov 5 06:29:40 2025 GMT Not After : Nov 12 06:29:40 2025 GMT Subject: CN=690aeed4-75c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:fc:ce:2b:65:5a:00:02:6f:26:9c:08:0d: 95:fc:9a:88:17:11:a9:a7:06:2a:fa:72:b7:51:e5: b9:f8:e3:db:54:f0:04:6c:34:29:2f:3f:43:46:d5: 0e:65:6d:71:7e:41:2c:ed:fd:07:25:ee:8c:60:72: 18:22:0e:4a:4b:30:a3:44:c0:65:c1:ba:04:f0:df: 86:0a:d5:2e:c0:9e:dc:2a:0e:39:4b:b0:d2:bb:af: bb:83:c3:48:38:ce:16:cf:90:46:3c:18:21:1f:eb: 71:79:4d:f8:a4:58:ad:9e:66:74:bd:cc:33:ce:3e: 60:e6:88:a0:5a:3a:06:0a:7e:25:84:c8:d9:55:3a: 17:a7:74:a3:e3:48:65:22:8a:4b:e5:0e:94:ee:b4: 4b:bc:86:5e:7a:cd:2d:2d:51:74:d5:57:49:cf:2e: a9:97:b5:3e:33:52:e0:dc:3b:d0:d8:f1:ec:88:7d: a3:e1:c2:e1:c6:9e:25:8a:83:f0:37:af:81:fc:b0: 8a:e9:16:32:ff:63:71:f7:4f:39:c0:4d:68:19:8d: 18:94:9a:20:87:2c:37:2f:e4:fe:7c:5f:e8:d6:e1: 68:ad:f4:cd:49:f5:e7:9e:d7:96:58:14:c8:18:9f: 86:d2:6d:89:de:f3:f8:c3:89:3e:57:bd:34:9c:0e: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:02:39:14:22:95:96:B8:2F:EF:B2:B4:4A:4B:60:9B:FE:5D:27:07 X509v3 Authority Key Identifier: keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a8:05:88:30:7d:c7:e9:b8:ed:0c:52:a6:00:82:5b:c3:23: bf:e0:ed:9c:97:08:e9:57:b2:84:c9:3c:ac:84:d8:54:dc:64: 19:e3:d8:1b:70:fb:f7:3b:c3:9a:c8:b1:de:e4:17:df:4f:38: 4d:b0:bf:a8:b1:fb:09:37:50:75:78:61:85:62:89:85:d1:01: 76:4c:03:8e:f9:e9:a8:e2:91:aa:b2:21:e3:64:6d:1f:f5:d0: 07:a7:77:52:3e:1d:e5:e6:cf:48:77:18:5c:c4:d3:bc:dc:71: c7:02:f2:63:a9:08:24:88:6e:3a:b1:4f:7f:84:89:c8:74:8b: f7:ce:85:79:d3:ee:f7:2f:d7:28:bd:90:7c:06:c5:77:41:2f: 4b:5b:30:08:6b:b4:e4:b8:60:56:3f:db:45:c2:b7:50:b4:7e: f9:09:4d:89:9c:89:93:fc:f1:38:bc:99:53:24:db:a6:9e:bd: 71:85:42:f8:b3:f3:b8:b0:02:26:26:52:e6:dd:62:ea:dd:09: 7c:34:ca:89:01:36:8f:49:3b:6a:20:a3:f9:28:60:a2:4e:f1: 3b:58:60:0a:f5:13:59:91:64:d9:22:87:a1:69:4a:53:71:29: 76:d9:31:09:1d:9a:bd:3e:1a:e3:f7:02:91:1b:62:8e:72:08: 32:5d:9f:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyODExMTAvBgNVBAUTKEJDRDVBQkQ5QzkxQ0ExRTdGMkM0NTU1NzA1QjI5NDA0 RjUwNUJEQzUwHhcNMjUxMTA1MDYyOTQwWhcNMjUxMTEyMDYyOTQwWjAYMRYwFAYD VQQDEw02OTBhZWVkNC03NWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7X8zitlWgACbyacCA2V/JqIFxGppwYq+nK3UeW5+OPbVPAEbDQpLz9DRtUO ZW1xfkEs7f0HJe6MYHIYIg5KSzCjRMBlwboE8N+GCtUuwJ7cKg45S7DSu6+7g8NI OM4Wz5BGPBghH+txeU34pFitnmZ0vcwzzj5g5oigWjoGCn4lhMjZVToXp3Sj40hl IopL5Q6U7rRLvIZees0tLVF01VdJzy6pl7U+M1Lg3DvQ2PHsiH2j4cLhxp4lioPw N6+B/LCK6RYy/2Nx9085wE1oGY0YlJoghyw3L+T+fF/o1uForfTNSfXnnteWWBTI GJ+G0m2J3vP4w4k+V700nA7rXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgCORQi lZa4L++ytEpLYJv+XScHMB8GA1UdIwQYMBaAFLzVq9nJHKHn8sRVVwWylAT1Bb3F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xMkRFOEE1RUM2 NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi92TldyMmNrY29lZnl4RlZYQmJLVUJQVUZ2 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjI4MS8xMkRFOEE1RUM2NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi92TldyMmNrY29l Znl4RlZYQmJLVUJQVUZ2Y1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChqAWIMH3H6bjtDFKmAIJbwyO/4O2clwjpV7KEyTyshNhU3GQZ49gb cPv3O8OayLHe5BffTzhNsL+osfsJN1B1eGGFYomF0QF2TAOO+emo4pGqsiHjZG0f 9dAHp3dSPh3l5s9IdxhcxNO83HHHAvJjqQgkiG46sU9/hInIdIv3zoV50+73L9co vZB8BsV3QS9LWzAIa7TkuGBWP9tFwrdQtH75CU2JnImT/PE4vJlTJNumnr1xhUL4 s/O4sAImJlLm3WLq3Ql8NMqJATaPSTtqIKP5KGCiTvE7WGAK9RNZkWTZIoehaUpT cSl22TEJHZq9Phrj9wKRG2KOcggyXZ+V -----END CERTIFICATE-----Generated at Wed Nov 5 22:49:02 2025 by rpki-client