$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json) Hash identifier: DH0k2RRLuZyVhFGUyH/w0//IBWil7D4O0PsDKcsAlfA= Subject key identifier: F3:37:7D:18:D8:D8:A6:F2:51:A9:5E:B4:40:FA:E6:87:5D:FE:E9:91 Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft Manifest number: 7F Signing time: Mon 27 Oct 2025 09:09:57 +0000 Manifest this update: Mon 27 Oct 2025 09:09:56 +0000 Manifest next update: Mon 03 Nov 2025 09:09:56 +0000 Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: EgrEa96wIavTe0nIdvzZrb6XM0hBGxXDJgzZ8k7r8/c=) 2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: pXA/nNICBjxxRUXdfG7Iajai0avdelFN1HiA2VJOvYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 09:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Validity Not Before: Oct 27 09:09:56 2025 GMT Not After : Nov 3 09:09:56 2025 GMT Subject: CN=68ff36e4-7146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:98:1d:48:48:c7:eb:84:4f:b7:5d:22:10: 74:2e:0c:09:cd:c4:ac:b3:19:49:e5:f3:ae:b5:c2: 99:cb:be:15:b2:78:94:e3:88:ad:4c:e5:1f:92:b1: 9c:35:79:1e:d8:cc:ae:97:4b:0f:a5:bd:b7:d2:16: 9a:e7:0e:2f:7d:a7:83:f3:dd:bb:42:ef:59:43:65: 0d:97:94:65:45:9c:54:f2:60:fd:1e:32:47:26:3d: f1:c5:41:a4:af:86:99:6c:99:14:4a:e1:e4:7c:75: 97:4e:e3:25:2a:a9:c9:22:30:30:69:07:6f:a6:9c: bf:c5:39:ba:03:11:be:aa:0d:31:66:e5:dd:9a:85: 2f:60:bd:93:82:97:e7:a8:f5:fe:ee:8a:64:d3:b2: 44:3a:c2:f6:e3:7f:ee:b8:e3:cf:9a:26:d9:6e:f9: e8:86:2e:15:fb:b8:b7:f4:4f:b5:c7:25:26:6f:05: 23:c7:6f:87:d8:4c:ea:a3:d6:a6:b0:9b:a4:6d:24: 28:f5:90:41:23:50:09:13:20:d0:39:b2:71:c5:4f: 51:ea:0a:d8:33:36:ea:fa:88:ee:f9:4c:92:65:50: f0:4e:b4:6f:2e:34:26:c0:65:8c:88:fc:af:ac:2a: bb:9a:eb:ee:1b:db:1e:9e:82:ea:20:9e:72:b0:33: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:37:7D:18:D8:D8:A6:F2:51:A9:5E:B4:40:FA:E6:87:5D:FE:E9:91 X509v3 Authority Key Identifier: keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6a:70:1f:22:d2:82:ef:92:69:0a:dd:57:39:0d:27:9f:02: 86:30:26:13:85:1c:67:75:6c:d4:0b:e5:47:43:3c:27:fd:ad: b1:d6:47:e7:a5:04:bc:c5:97:4b:60:0c:b7:35:0b:e2:58:49: 17:3d:82:f2:c8:4d:2b:8d:35:25:48:e1:c5:16:c5:91:16:a4: e9:04:ff:32:ba:82:d6:fe:e6:37:a6:31:5f:dc:ac:18:25:7a: db:ba:32:a3:10:af:ee:8b:70:5c:bf:d2:e2:66:43:90:36:bc: 58:f3:f1:67:98:80:d1:7a:0f:51:7a:fe:90:03:c8:52:6a:c0: 7d:11:99:cd:06:13:c6:7d:42:1d:ca:f0:b4:03:26:f7:f1:35: b4:d0:73:ac:b2:2c:ab:f6:7a:10:37:04:88:e4:c5:51:54:16: 54:de:d8:6e:44:5c:3a:1d:9e:61:62:13:ae:00:0d:13:81:39: fa:8d:a8:68:c8:1a:16:aa:d5:9b:a8:fb:f7:81:ee:c5:cb:3a: 64:88:f4:a1:38:54:8e:79:c7:f1:7d:30:73:0c:46:bb:76:b4: 67:f9:00:50:2f:ed:ca:a9:20:66:c6:96:6c:9d:27:5b:15:28: 30:b9:a1:9b:ad:c0:3e:19:d6:c7:db:20:28:b2:cc:8e:85:51: 6b:1f:bf:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDEyNzQxMTAvBgNVBAUTKDY5NThBMUFCM0FDRjdGOTVFREE1QUQ5QzlFNDFFNDQ5 QjZEMTE3RjIwHhcNMjUxMDI3MDkwOTU2WhcNMjUxMTAzMDkwOTU2WjAYMRYwFAYD VQQDEw02OGZmMzZlNC03MTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuCYHUhIx+uET7ddIhB0LgwJzcSssxlJ5fOutcKZy74VsniU44itTOUfkrGc NXke2Myul0sPpb230haa5w4vfaeD8927Qu9ZQ2UNl5RlRZxU8mD9HjJHJj3xxUGk r4aZbJkUSuHkfHWXTuMlKqnJIjAwaQdvppy/xTm6AxG+qg0xZuXdmoUvYL2Tgpfn qPX+7opk07JEOsL243/uuOPPmibZbvnohi4V+7i39E+1xyUmbwUjx2+H2Ezqo9am sJukbSQo9ZBBI1AJEyDQObJxxU9R6grYMzbq+oju+UySZVDwTrRvLjQmwGWMiPyv rCq7muvuG9senoLqIJ5ysDNhNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM3fRjY 2KbyUaletED65odd/umRMB8GA1UdIwQYMBaAFGlYoas6z3+V7aWtnJ5B5Em20Rfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTI3NC9EOTlGM0FGQUZC MjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1WHRwYTJjbmtIa1NiYlJG X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTI3NC9EOTlGM0FGQUZCMjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1 WHRwYTJjbmtIa1NiYlJGX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBranAfItKC75JpCt1XOQ0nnwKGMCYThRxndWzUC+VHQzwn/a2x1kfn pQS8xZdLYAy3NQviWEkXPYLyyE0rjTUlSOHFFsWRFqTpBP8yuoLW/uY3pjFf3KwY JXrbujKjEK/ui3Bcv9LiZkOQNrxY8/FnmIDReg9Rev6QA8hSasB9EZnNBhPGfUId yvC0Ayb38TW00HOssiyr9noQNwSI5MVRVBZU3thuRFw6HZ5hYhOuAA0TgTn6jaho yBoWqtWbqPv3ge7FyzpkiPShOFSOecfxfTBzDEa7drRn+QBQL+3KqSBmxpZsnSdb FSgwuaGbrcA+GdbH2yAossyOhVFrH797 -----END CERTIFICATE-----Generated at Tue Oct 28 12:38:15 2025 by rpki-client