$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: 5sfW58ao0o7yiUDoj25+IJDbUpHgTbzRHBlgC/uBmGA= Subject key identifier: 96:CB:04:16:DF:E3:1D:EB:3B:DD:40:1C:59:76:74:D5:C7:F5:88:25 Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 0647 Signing time: Sun 02 Nov 2025 22:39:39 +0000 Manifest this update: Sun 02 Nov 2025 22:39:38 +0000 Manifest next update: Sun 09 Nov 2025 22:39:38 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: QmzeblHv1GzokrVqYeZvYAz2+w8dgwpQ6lh6Tbi4yVg=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: Nov 2 22:39:38 2025 GMT Not After : Nov 9 22:39:38 2025 GMT Subject: CN=6907ddab-a569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:0a:7b:fd:04:d2:5c:05:5a:6e:2b:9e:21: 20:c2:60:83:6d:4f:67:f1:ff:9b:87:17:d4:7b:9d: da:fe:7c:87:c3:4d:6e:7c:74:82:47:7e:87:5c:a4: 72:3d:7c:e3:1f:5d:f0:fe:64:8e:6c:ab:00:92:f4: f0:3b:a8:64:05:0a:8b:25:0e:a1:08:0a:3d:e4:20: fe:f5:aa:b3:20:c5:e4:65:3f:7f:e5:28:8f:ed:de: b6:c5:de:a7:63:71:25:fc:ae:cd:a0:29:2e:6f:ee: 9a:35:ea:2c:89:13:6d:86:87:7e:a5:85:55:aa:b0: ea:f6:53:b7:62:cf:e0:72:b9:ec:7f:5a:c3:09:03: a1:0d:35:11:6a:fa:aa:48:91:7d:a1:33:4f:ae:df: c0:d6:be:dd:79:c3:ea:1c:7c:9c:44:63:14:d1:d7: e3:dc:ca:e9:5a:7b:03:58:9f:3a:a0:42:c8:f1:01: 78:33:b0:22:eb:b7:0c:d2:36:a3:db:5e:6d:81:d0: d2:20:2b:b8:50:9a:99:72:f6:58:bd:00:8c:6b:ee: 1d:6c:6e:68:70:18:2c:5f:57:2c:06:65:43:a2:fa: 3a:5b:5e:30:d4:ee:52:30:eb:4d:4a:93:2e:5f:8f: b5:9c:d9:e0:f0:71:86:09:f2:5f:85:b4:e7:ca:57: 47:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CB:04:16:DF:E3:1D:EB:3B:DD:40:1C:59:76:74:D5:C7:F5:88:25 X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:e1:8f:9a:2b:ad:7a:bc:45:19:2d:46:8d:a9:9e:21:8b: 4b:d0:43:b5:7f:72:8e:7c:6b:da:3e:f9:c2:92:8d:6c:a4:18: 23:53:25:5a:65:41:3a:4f:c1:db:fc:70:ad:45:8b:38:0b:cf: a5:96:b9:00:d9:2d:f2:d4:c3:5e:2f:db:59:ef:94:f0:1d:3d: 29:87:02:b8:83:62:7c:96:af:f2:7c:71:66:64:29:12:2e:d5: 4b:69:5e:1d:ae:cd:e2:7c:f2:8f:09:f1:2d:9d:5e:28:93:2b: 45:c2:d5:51:fc:65:c5:3c:58:9d:4b:29:51:5e:5d:05:f0:5f: 50:26:30:00:e0:a3:f8:24:2f:c5:dd:57:62:6d:85:d8:28:b4: 48:c0:f5:28:7d:af:f4:49:72:b8:2c:69:b7:c7:a8:3d:9b:54: 10:97:8d:88:0a:4d:c6:05:f4:84:b8:34:79:c0:c2:42:12:0c: 71:73:62:22:d0:8d:1e:09:fd:8c:05:0a:d1:dd:57:ea:97:ac: 98:5d:1d:4d:12:65:e0:3e:15:66:5f:8b:18:c3:ec:21:b9:3c: c3:29:52:2a:05:0c:c9:9f:f1:5c:e7:2e:b8:89:29:c1:b2:7b: d1:12:37:bf:6c:0b:ab:12:cb:c3:34:7a:dc:c6:22:51:42:b1: da:e2:16:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUxMTAyMjIzOTM4WhcNMjUxMTA5MjIzOTM4WjAYMRYwFAYD VQQDEw02OTA3ZGRhYi1hNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb8Ke/0E0lwFWm4rniEgwmCDbU9n8f+bhxfUe53a/nyHw01ufHSCR36HXKRy PXzjH13w/mSObKsAkvTwO6hkBQqLJQ6hCAo95CD+9aqzIMXkZT9/5SiP7d62xd6n Y3El/K7NoCkub+6aNeosiRNthod+pYVVqrDq9lO3Ys/gcrnsf1rDCQOhDTURavqq SJF9oTNPrt/A1r7decPqHHycRGMU0dfj3MrpWnsDWJ86oELI8QF4M7Ai67cM0jaj 215tgdDSICu4UJqZcvZYvQCMa+4dbG5ocBgsX1csBmVDovo6W14w1O5SMOtNSpMu X4+1nNng8HGGCfJfhbTnyldHfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbLBBbf 4x3rO91AHFl2dNXH9YglMB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbLeGPmiuterxFGS1GjameIYtL0EO1f3KOfGvaPvnCko1spBgjUyVa ZUE6T8Hb/HCtRYs4C8+llrkA2S3y1MNeL9tZ75TwHT0phwK4g2J8lq/yfHFmZCkS LtVLaV4drs3ifPKPCfEtnV4okytFwtVR/GXFPFidSylRXl0F8F9QJjAA4KP4JC/F 3VdibYXYKLRIwPUofa/0SXK4LGm3x6g9m1QQl42ICk3GBfSEuDR5wMJCEgxxc2Ii 0I0eCf2MBQrR3Vfql6yYXR1NEmXgPhVmX4sYw+whuTzDKVIqBQzJn/Fc5y64iSnB snvREje/bAurEsvDNHrcxiJRQrHa4hZ0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:21 2025 by rpki-client