$ rpki-client -vvf rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft File: VaNt8khLtGWsMwGcBws5J0UkAic.mft (raw, json) Hash identifier: 9z5ZaB85pwtR0ku84eVx5zRBE+7tLKvIRVf8jyuAp+o= Subject key identifier: 02:79:89:00:30:20:59:C5:74:0C:E2:84:20:90:25:96:25:0C:FF:73 Authority key identifier: 55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27 Certificate issuer: /CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft Manifest number: F7 Signing time: Mon 03 Nov 2025 05:11:21 +0000 Manifest this update: Mon 03 Nov 2025 05:11:21 +0000 Manifest next update: Mon 10 Nov 2025 05:11:21 +0000 Files and hashes: 1: VaNt8khLtGWsMwGcBws5J0UkAic.crl (hash: ejLIMHg6nauafwLQ0+RGJ2pKkKVr9f6A3aFvbqlNAXE=) 2: A1A1946E3E8F11EF90A1D97EC4F9AE02.roa (hash: RjGhvtiZ99qV/uWgf+fYP1U5NceB1zdotuSd44m3FNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134167, serialNumber=55A36DF2484BB465AC33019C070B392745240227 Validity Not Before: Nov 3 05:11:21 2025 GMT Not After : Nov 10 05:11:21 2025 GMT Subject: CN=69083979-90b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:19:a2:66:c5:3d:20:2b:27:c1:82:6e:02: a6:77:bd:6a:5e:4d:6b:09:ad:21:c3:8f:89:30:6d: 4e:48:23:78:55:6a:66:8f:6d:0c:20:05:36:21:bd: 15:c2:6f:a4:90:94:9a:e5:41:76:a4:ee:83:d6:8c: 8f:dc:6c:6d:86:d7:96:90:fc:b9:19:11:94:8b:49: e9:67:4d:26:41:13:70:88:93:32:06:eb:4a:96:8a: b7:02:71:45:66:db:3c:8f:ce:cf:f9:37:ab:47:ac: fb:51:f4:51:6e:b5:a7:4e:3d:13:15:77:3e:25:a5: 1a:52:1e:06:4a:a4:23:57:28:24:bd:e2:2b:16:2c: 33:0a:bc:a2:03:44:df:bc:51:6e:31:a6:c6:6c:29: c2:89:c0:e6:b7:dd:8c:ba:c1:f3:6b:8a:15:e8:f3: e5:d9:d0:27:76:3f:e5:ab:b4:31:55:76:1d:bd:13: 05:2c:31:db:0a:25:91:93:c6:25:f0:d5:0d:02:dd: c6:23:c2:bc:fd:05:3c:02:f1:77:0e:56:e7:78:c8: 8e:be:0b:ba:2d:cc:70:1a:66:68:93:99:bf:bd:02: 5a:4e:6f:08:d2:39:8d:27:de:42:b2:7d:06:3c:cd: 42:e4:f0:cd:31:d1:68:14:ae:28:80:43:1e:a3:87: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:79:89:00:30:20:59:C5:74:0C:E2:84:20:90:25:96:25:0C:FF:73 X509v3 Authority Key Identifier: keyid:55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:59:2b:3c:d9:b0:9b:c4:cc:1a:27:53:b2:a4:3e:d8:8d:1c: 6d:33:75:4e:68:ca:af:eb:1d:b2:a6:89:1b:86:7d:88:f1:a1: b0:98:91:e5:23:c7:75:a4:16:ba:09:c1:b5:6e:50:6c:16:61: 45:ee:7a:75:32:de:f9:46:14:d2:4f:23:98:88:ab:b8:0b:c7: f4:25:5c:24:9a:4f:bf:e5:66:a4:90:db:4f:f4:76:71:4b:a7: 5d:c5:97:35:13:dc:88:16:ab:98:a4:59:4d:2c:61:3c:7b:9f: a9:47:41:3d:f7:d7:43:1f:a3:a0:1b:12:59:90:35:bb:ee:62: 0b:84:96:d9:10:ce:96:aa:13:c5:3f:a0:5f:b8:9d:26:75:b1: cf:12:06:6f:9b:a2:ef:30:94:65:26:63:19:04:03:df:17:60: 48:1f:aa:61:59:5f:34:48:f5:87:8c:b2:a5:eb:21:3d:ae:d4: 34:61:5b:ca:69:30:6c:30:8b:88:9f:bc:81:71:52:29:74:57: d4:7e:95:11:b2:8a:7d:78:f5:34:2d:99:6a:e4:cd:78:2b:bf: 8f:88:cc:f1:97:8b:a1:91:1e:da:f1:0f:9f:c4:22:74:19:1a: b9:6f:5a:ab:aa:a5:47:9d:05:6b:87:0f:d1:30:9d:92:a6:67: d0:1e:22:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNjcxMTAvBgNVBAUTKDU1QTM2REYyNDg0QkI0NjVBQzMzMDE5QzA3MEIzOTI3 NDUyNDAyMjcwHhcNMjUxMTAzMDUxMTIxWhcNMjUxMTEwMDUxMTIxWjAYMRYwFAYD VQQDEw02OTA4Mzk3OS05MGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZgZombFPSArJ8GCbgKmd71qXk1rCa0hw4+JMG1OSCN4VWpmj20MIAU2Ib0V wm+kkJSa5UF2pO6D1oyP3GxthteWkPy5GRGUi0npZ00mQRNwiJMyButKloq3AnFF Zts8j87P+TerR6z7UfRRbrWnTj0TFXc+JaUaUh4GSqQjVygkveIrFiwzCryiA0Tf vFFuMabGbCnCicDmt92MusHza4oV6PPl2dAndj/lq7QxVXYdvRMFLDHbCiWRk8Yl 8NUNAt3GI8K8/QU8AvF3DlbneMiOvgu6LcxwGmZok5m/vQJaTm8I0jmNJ95Csn0G PM1C5PDNMdFoFK4ogEMeo4cu+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJ5iQAw IFnFdAzihCCQJZYlDP9zMB8GA1UdIwQYMBaAFFWjbfJIS7RlrDMBnAcLOSdFJAIn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE2Ny9CNDIyNjdGNDNF OEUxMUVGOTdBODU1N0RDNEY5QUUwMi9WYU50OGtoTHRHV3NNd0djQndzNUowVWtB aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZhTnQ4a2hMdEdXc013R2NCd3M1SjBVa0FpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDE2Ny9CNDIyNjdGNDNFOEUxMUVGOTdBODU1N0RDNEY5QUUwMi9WYU50OGtoTHRH V3NNd0djQndzNUowVWtBaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIWSs82bCbxMwaJ1OypD7YjRxtM3VOaMqv6x2ypokbhn2I8aGwmJHl I8d1pBa6CcG1blBsFmFF7np1Mt75RhTSTyOYiKu4C8f0JVwkmk+/5WakkNtP9HZx S6ddxZc1E9yIFquYpFlNLGE8e5+pR0E999dDH6OgGxJZkDW77mILhJbZEM6WqhPF P6BfuJ0mdbHPEgZvm6LvMJRlJmMZBAPfF2BIH6phWV80SPWHjLKl6yE9rtQ0YVvK aTBsMIuIn7yBcVIpdFfUfpURsop9ePU0LZlq5M14K7+PiMzxl4uhkR7a8Q+fxCJ0 GRq5b1qrqqVHnQVrhw/RMJ2SpmfQHiKD -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:37 2025 by rpki-client