$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json) Hash identifier: 5eRdjtC0qTR06JvkYhqa8KTUwSjz66VPf07A2ZUAao4= Subject key identifier: 8D:13:9C:66:E5:7D:3D:9F:F6:08:FB:50:53:C2:84:F1:C1:DA:6A:F4 Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Certificate serial: 0447 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft Manifest number: 0443 Signing time: Wed 17 Sep 2025 00:40:53 +0000 Manifest this update: Wed 17 Sep 2025 00:40:53 +0000 Manifest next update: Wed 24 Sep 2025 00:40:53 +0000 Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: DaJt86TBh2kFboAdFs9YM9zH0stYYGQwOrersuN5+k0=) 2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: +VP5NY/+4Z/8NphSit3psl/B3s8Rh2QC3KRRxPvmIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Validity Not Before: Sep 17 00:40:53 2025 GMT Not After : Sep 24 00:40:53 2025 GMT Subject: CN=68ca0395-306c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:7d:11:4d:07:b5:6b:b6:72:4b:af:ab:9d: aa:1c:13:67:f8:f6:09:38:7b:c9:f7:ae:b0:d1:81: 9c:fa:c5:4e:30:47:33:d9:eb:4d:c6:cf:b3:cc:06: bf:b1:00:04:f3:3c:e5:72:f8:a5:b9:26:97:ea:75: 63:56:4b:a7:0f:e2:fd:34:cc:13:93:cd:10:09:6f: 06:1d:f2:a1:d1:61:9f:1a:74:99:0e:cc:ff:6c:6c: da:97:02:a8:94:ac:6d:6b:c0:c5:39:01:10:28:94: bd:0c:03:97:4e:14:81:30:77:cd:a6:00:09:fe:b2: 17:96:84:7b:66:be:c9:68:9d:e2:a2:82:25:79:44: 2c:37:e9:32:65:0e:72:b8:3c:c9:42:08:7a:48:f5: 4e:cd:4a:d4:09:93:40:03:9b:4c:7e:33:98:45:06: a8:d2:39:62:5e:49:74:6c:63:6c:85:bc:cc:fc:cc: 14:0f:62:cb:6a:b3:9e:48:b5:fb:0d:db:03:f8:30: 97:8b:24:5d:08:5d:43:9d:90:84:6e:6f:8b:f9:a9: d2:10:48:41:cb:99:db:07:83:11:02:28:de:71:bf: 35:5b:4a:17:2c:d6:d3:ec:d8:34:40:27:99:62:3f: e9:17:47:4c:3f:b9:83:61:79:18:60:17:94:13:e4: 3d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:13:9C:66:E5:7D:3D:9F:F6:08:FB:50:53:C2:84:F1:C1:DA:6A:F4 X509v3 Authority Key Identifier: keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:f2:a5:3e:49:f5:4d:b6:b7:fd:81:98:67:c5:22:26:d2:de: de:97:f1:1e:46:db:1d:b6:18:06:ea:95:f8:19:26:61:0c:d9: 82:e6:c6:bb:27:2c:73:93:3f:62:db:50:ba:41:3d:da:57:4e: 19:16:73:4a:cf:af:d0:a6:33:67:e3:4a:35:59:28:19:84:be: 8f:98:9a:06:0c:f4:fe:a5:59:a3:d9:73:15:1b:c4:62:1e:88: 06:64:58:37:e1:9a:bf:3f:7f:7e:fe:a4:f0:8f:0c:cf:da:ef: 3b:35:14:ce:42:b6:89:b4:f9:05:ff:c0:07:c7:b8:e4:b4:d7: 21:5f:7a:0a:d9:22:1a:54:fa:99:e7:25:6e:cd:f2:d4:bc:76: a6:13:09:1a:ee:c3:35:38:fd:38:7e:a7:dd:f4:50:4b:32:3b: bb:b3:90:d7:3d:95:6a:b3:07:d7:9d:26:f6:2d:04:77:54:97: 37:d7:6a:c7:b2:c9:9a:28:d9:60:fb:d6:37:73:60:93:6a:42: ce:0b:3f:8c:db:ec:05:30:a2:29:dc:72:e1:40:6c:14:6e:0f: 96:43:cf:ba:55:0b:23:31:2c:8f:70:00:6d:84:7d:f3:42:a2: b5:d9:10:39:30:c6:b2:c7:3e:74:22:ed:e4:1c:74:59:79:7c: 11:f4:ee:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy NzIxQzk4Q0UwHhcNMjUwOTE3MDA0MDUzWhcNMjUwOTI0MDA0MDUzWjAYMRYwFAYD VQQDEw02OGNhMDM5NS0zMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKZ9EU0HtWu2ckuvq52qHBNn+PYJOHvJ966w0YGc+sVOMEcz2etNxs+zzAa/ sQAE8zzlcviluSaX6nVjVkunD+L9NMwTk80QCW8GHfKh0WGfGnSZDsz/bGzalwKo lKxta8DFOQEQKJS9DAOXThSBMHfNpgAJ/rIXloR7Zr7JaJ3iooIleUQsN+kyZQ5y uDzJQgh6SPVOzUrUCZNAA5tMfjOYRQao0jliXkl0bGNshbzM/MwUD2LLarOeSLX7 DdsD+DCXiyRdCF1DnZCEbm+L+anSEEhBy5nbB4MRAijecb81W0oXLNbT7Ng0QCeZ Yj/pF0dMP7mDYXkYYBeUE+Q97wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0TnGbl fT2f9gj7UFPChPHB2mr0MB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T NGt5RFJjbDd3MFluSWNtTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH8qU+SfVNtrf9gZhnxSIm0t7el/EeRtsdthgG6pX4GSZhDNmC5sa7 Jyxzkz9i21C6QT3aV04ZFnNKz6/QpjNn40o1WSgZhL6PmJoGDPT+pVmj2XMVG8Ri HogGZFg34Zq/P39+/qTwjwzP2u87NRTOQraJtPkF/8AHx7jktNchX3oK2SIaVPqZ 5yVuzfLUvHamEwka7sM1OP04fqfd9FBLMju7s5DXPZVqswfXnSb2LQR3VJc312rH ssmaKNlg+9Y3c2CTakLOCz+M2+wFMKIp3HLhQGwUbg+WQ8+6VQsjMSyPcABthH3z QqK12RA5MMayxz50Iu3kHHRZeXwR9O4G -----END CERTIFICATE-----Generated at Thu Sep 18 20:36:12 2025 by rpki-client