$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft File: vHDzdLcox7cRwkpoJ_dHekKyKk0.mft (raw, json) Hash identifier: XP18dVfrNtuioKNewQHK64oAhpkSNC8xGP/XyKMatks= Subject key identifier: 22:19:1F:BB:63:67:22:7B:EB:E7:0D:18:D1:9A:D5:B7:21:5F:EA:49 Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D Certificate issuer: /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft Manifest number: 7C Signing time: Mon 27 Oct 2025 09:06:06 +0000 Manifest this update: Mon 27 Oct 2025 09:06:06 +0000 Manifest next update: Mon 03 Nov 2025 09:06:06 +0000 Files and hashes: 1: vHDzdLcox7cRwkpoJ_dHekKyKk0.crl (hash: nEoiKpOJ6XkkwdP84wM3Hfj8P35SPNMv1ZUuNNjtHPk=) 2: 3B69BCFAF53A11EF907A433EC4F9AE02.roa (hash: g53LMcn3iRdJAKtGtiImyfZixGirZg93i3IYIo94JAU=) 3: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (hash: XvWuI1YoEga2y2ypcrjG1/r0tc+yszPXr1W996sUaXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 09:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Validity Not Before: Oct 27 09:06:06 2025 GMT Not After : Nov 3 09:06:06 2025 GMT Subject: CN=68ff35fe-d735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:03:2f:19:71:5d:01:5b:3a:17:09:2f:5b: e2:67:9c:8c:bf:9a:8c:34:5b:f7:35:cc:0c:87:5e: 2c:e7:d1:4b:ed:54:69:73:04:17:22:83:51:b3:f5: 21:86:85:63:53:c4:78:b7:6a:32:e4:03:dd:64:1d: f9:e8:0e:be:6a:2f:3e:bb:cf:71:6b:0f:2f:9d:f9: e5:e0:84:23:98:2b:60:1d:48:c7:9d:e9:a4:e2:49: b6:41:1b:e4:d4:a6:a6:12:6a:7d:68:29:5c:a5:8f: d0:86:b0:39:ec:9f:fa:af:53:5f:b7:cc:03:d6:51: 25:2d:32:b2:54:0e:1a:1b:80:6a:c8:65:73:a7:03: 06:87:cd:28:15:72:e1:1b:e0:ba:64:35:e7:e1:d5: cf:e1:ec:3b:94:e8:27:bd:48:7b:5f:ee:82:aa:a7: 37:92:66:2b:31:ce:f9:c3:da:c9:d7:d7:31:05:d1: 8f:19:07:69:85:18:60:a5:34:4e:00:ca:a7:c0:d9: ff:8b:ce:b6:a0:02:a6:7e:e8:4c:bd:d6:48:ed:dd: d8:de:9b:77:e1:22:bb:fd:df:f5:93:d4:36:a9:6e: 65:20:1d:67:12:4b:c0:81:5c:0f:5e:eb:b0:f0:63: 64:0c:1f:b1:e6:e3:32:8d:93:d2:77:e3:46:b0:3a: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:19:1F:BB:63:67:22:7B:EB:E7:0D:18:D1:9A:D5:B7:21:5F:EA:49 X509v3 Authority Key Identifier: keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:2f:d1:69:91:f3:e0:2e:6a:c0:1b:4a:83:0d:39:5b:f1:ff: 33:c6:32:84:6a:b9:0b:03:10:e1:b5:9d:a4:0f:9e:01:ac:3f: 3d:af:c8:f2:92:68:78:fa:4b:b9:72:c9:ea:ac:1b:17:a9:a0: e0:18:6d:d2:7b:88:f2:37:33:11:9c:b8:0a:b7:92:7d:46:bb: 5a:52:b0:5d:8b:56:52:6d:a8:cd:b3:ff:be:db:5d:d8:56:6d: ea:80:e4:5d:d7:95:5e:5e:5f:51:db:a6:4f:1d:a2:71:8d:26: 40:f3:f5:83:de:ee:43:5e:a4:87:db:f3:8f:70:aa:f2:69:74: 05:d9:dd:33:bb:01:86:87:b2:10:6a:04:51:7c:71:82:e9:c1: f8:13:c1:86:5b:96:da:a8:63:80:e3:7e:35:4f:82:ff:26:8e: 73:33:16:55:86:3d:73:ae:38:a2:2e:56:f4:81:69:75:f1:6f: ba:be:a7:52:5f:34:fd:fc:7b:8a:1e:eb:0d:35:69:f5:b8:8a: dc:eb:c7:73:46:9a:55:af:92:8c:42:dd:9e:e5:ab:db:e1:b6: 1b:4a:34:69:76:28:22:39:11:c0:53:6d:c2:8c:be:4a:b1:fe: de:f0:17:d4:e3:b1:18:1a:05:ba:44:d6:d3:8c:14:2a:73:47: da:58:99:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkE3NTExMC8GA1UEBRMoQkM3MEYzNzRCNzI4QzdCNzExQzI0QTY4MjdGNzQ3N0E0 MkIyMkE0RDAeFw0yNTEwMjcwOTA2MDZaFw0yNTExMDMwOTA2MDZaMBgxFjAUBgNV BAMTDTY4ZmYzNWZlLWQ3MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe1QMvGXFdAVs6FwkvW+JnnIy/mow0W/c1zAyHXizn0UvtVGlzBBcig1Gz9SGG hWNTxHi3ajLkA91kHfnoDr5qLz67z3FrDy+d+eXghCOYK2AdSMed6aTiSbZBG+TU pqYSan1oKVylj9CGsDnsn/qvU1+3zAPWUSUtMrJUDhobgGrIZXOnAwaHzSgVcuEb 4LpkNefh1c/h7DuU6Ce9SHtf7oKqpzeSZisxzvnD2snX1zEF0Y8ZB2mFGGClNE4A yqfA2f+LzragAqZ+6Ey91kjt3djem3fhIrv93/WT1DapbmUgHWcSS8CBXA9e67Dw Y2QMH7Hm4zKNk9J340awOvrVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIhkfu2Nn Invr5w0Y0ZrVtyFf6kkwHwYDVR0jBBgwFoAUvHDzdLcox7cRwkpoJ/dHekKyKk0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQTc1L0VGNUNENkRBRjUz OTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdjUndrcG9KX2RIZWtLeUtr MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkhEemRMY294N2NSd2twb0pfZEhla0t5S2swLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QTc1L0VGNUNENkRBRjUzOTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdj UndrcG9KX2RIZWtLeUtrMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACEv0WmR8+AuasAbSoMNOVvx/zPGMoRquQsDEOG1naQPngGsPz2vyPKS aHj6S7lyyeqsGxepoOAYbdJ7iPI3MxGcuAq3kn1Gu1pSsF2LVlJtqM2z/77bXdhW beqA5F3XlV5eX1Hbpk8donGNJkDz9YPe7kNepIfb849wqvJpdAXZ3TO7AYaHshBq BFF8cYLpwfgTwYZbltqoY4DjfjVPgv8mjnMzFlWGPXOuOKIuVvSBaXXxb7q+p1Jf NP38e4oe6w01afW4itzrx3NGmlWvkoxC3Z7lq9vhthtKNGl2KCI5EcBTbcKMvkqx /t7wF9TjsRgaBbpE1tOMFCpzR9pYmXk= -----END CERTIFICATE-----Generated at Tue Oct 28 14:09:56 2025 by rpki-client