$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json) Hash identifier: SLg1WOIKsgNFJzeCZ3Z4Uct7Vejd3gNGq9RvdqPGAQ4= Subject key identifier: C1:C2:84:1F:F3:CD:42:44:27:C8:6D:24:F7:1D:EE:26:1F:DC:37:63 Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft Manifest number: 0155 Signing time: Mon 03 Nov 2025 04:06:58 +0000 Manifest this update: Mon 03 Nov 2025 04:06:57 +0000 Manifest next update: Mon 10 Nov 2025 04:06:57 +0000 Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: 0GYgQKGktD4ZlR3TbxRlt+u8Y0FwJY9l2SpFxjE5ptw=) 2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: LRgZIPAfyXWSZXYxQKmagPCwrYM4gPhtoJaJVDq8z0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: Nov 3 04:06:57 2025 GMT Not After : Nov 10 04:06:57 2025 GMT Subject: CN=69082a61-473a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a5:ea:c3:49:e8:3b:c8:d6:cd:11:c8:48:71: de:73:7e:7f:72:ea:6f:67:54:4f:4a:51:07:c1:4c: d2:d7:38:02:63:a3:13:1e:30:84:70:16:fe:2f:d6: dd:3c:c3:1b:5a:99:b7:03:fc:13:6d:63:d3:ed:af: e4:90:5a:f1:8c:7b:bc:25:bd:81:9f:cd:1a:fa:fd: eb:ed:01:6b:ee:c9:4c:13:c8:7d:10:dd:14:08:7b: 3c:b7:cb:56:81:64:95:38:23:43:c8:eb:2d:75:64: 1c:32:8d:75:b6:5b:eb:33:8f:f5:71:02:21:4c:2a: e6:12:48:dd:6a:eb:22:4c:1a:21:3f:2a:82:94:24: ed:ac:c7:ff:3a:ba:1a:d0:14:34:f9:e5:97:74:78: 8c:67:00:aa:25:41:d5:30:04:ce:04:5f:f3:e6:1f: 23:9f:5d:a1:1d:87:a1:a3:01:38:88:4e:1a:e6:ad: 14:7e:a0:3b:8a:f9:73:47:e3:3b:14:b5:a0:0f:54: 78:c8:9f:b0:42:69:12:04:4e:8e:83:cc:7c:5b:11: b5:db:4d:58:f0:85:26:03:be:9a:e6:08:4c:7d:ae: 1d:67:83:36:07:13:33:6b:dd:3b:b8:dc:9e:d6:5d: 51:c9:bc:29:60:72:9f:a7:37:2c:e4:66:3d:ee:52: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C2:84:1F:F3:CD:42:44:27:C8:6D:24:F7:1D:EE:26:1F:DC:37:63 X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:44:02:d0:68:92:03:9a:d5:02:59:b9:e5:70:f1:43:17:e8: cf:bd:d4:f9:a0:06:39:e3:00:a0:3b:5c:82:88:5a:f1:48:0c: 63:11:a0:54:0c:82:f9:d6:bd:ea:7c:ea:5d:47:79:61:f4:aa: 94:1c:05:51:63:cd:39:87:93:c9:ca:1e:fb:d4:09:f9:9e:6d: fe:a3:1e:02:01:d3:f0:11:2d:18:ad:bf:5b:9d:97:cc:3c:54: 22:36:2f:0c:22:c9:3f:9a:2a:4d:a8:0d:14:42:c1:9b:38:0f: f7:82:24:10:7a:dd:e0:64:8f:a9:74:58:30:b7:65:e6:e8:3d: 21:13:f0:02:00:84:bf:f2:a0:14:39:ca:4c:ff:d3:df:10:39: 49:63:72:31:26:fd:5c:58:fd:e5:b2:67:c2:8d:19:72:4e:4f: 92:36:22:27:e1:13:a6:a2:25:f6:80:8f:0b:0d:32:12:61:53: d2:b1:47:1e:ab:20:db:bd:02:76:f3:82:75:88:b2:f1:be:96: 2e:fc:58:9e:a9:69:19:82:37:26:e1:35:4e:41:8a:3c:1e:ed: cf:f2:bb:77:00:18:5d:5c:b4:4c:58:8c:1f:55:ab:3f:99:72: 39:56:49:f3:74:01:3d:05:a6:d3:d2:e2:d3:6e:94:e4:cb:5e: f9:e0:ba:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy Mzc4NDQ1Q0IwHhcNMjUxMTAzMDQwNjU3WhcNMjUxMTEwMDQwNjU3WjAYMRYwFAYD VQQDEw02OTA4MmE2MS00NzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aXqw0noO8jWzRHISHHec35/cupvZ1RPSlEHwUzS1zgCY6MTHjCEcBb+L9bd PMMbWpm3A/wTbWPT7a/kkFrxjHu8Jb2Bn80a+v3r7QFr7slME8h9EN0UCHs8t8tW gWSVOCNDyOstdWQcMo11tlvrM4/1cQIhTCrmEkjdausiTBohPyqClCTtrMf/Oroa 0BQ0+eWXdHiMZwCqJUHVMATOBF/z5h8jn12hHYehowE4iE4a5q0UfqA7ivlzR+M7 FLWgD1R4yJ+wQmkSBE6Og8x8WxG1201Y8IUmA76a5ghMfa4dZ4M2BxMza907uNye 1l1RybwpYHKfpzcs5GY97lLmpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHChB/z zUJEJ8htJPcd7iYf3DdjMB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERC WnoyMmFabUZJTmNqZUVSY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0RALQaJIDmtUCWbnlcPFDF+jPvdT5oAY54wCgO1yCiFrxSAxjEaBU DIL51r3qfOpdR3lh9KqUHAVRY805h5PJyh771An5nm3+ox4CAdPwES0Yrb9bnZfM PFQiNi8MIsk/mipNqA0UQsGbOA/3giQQet3gZI+pdFgwt2Xm6D0hE/ACAIS/8qAU OcpM/9PfEDlJY3IxJv1cWP3lsmfCjRlyTk+SNiIn4ROmoiX2gI8LDTISYVPSsUce qyDbvQJ284J1iLLxvpYu/FieqWkZgjcm4TVOQYo8Hu3P8rt3ABhdXLRMWIwfVas/ mXI5VknzdAE9BabT0uLTbpTky1754LoO -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:07 2025 by rpki-client