$ rpki-client -vvf rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft File: a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft (raw, json) Hash identifier: Q5b9kUKCX9ehMYEUYGvmmgmUCyRwACaPbkdvVRZG598= Subject key identifier: D6:7E:80:42:7E:02:B0:D6:1E:84:69:3C:12:BF:A5:1D:3D:FC:75:04 Authority key identifier: 6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C Certificate issuer: /CN=A9152705/serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft Manifest number: 1B Signing time: Wed 05 Nov 2025 08:01:38 +0000 Manifest this update: Wed 05 Nov 2025 08:01:38 +0000 Manifest next update: Wed 12 Nov 2025 08:01:38 +0000 Files and hashes: 1: a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl (hash: EskRNPmA7ztGajlk5EAFzzFacMc6+VzjelXblwRQlGk=) 2: D5E5F60E92BF11F0BA90D823C4F9AE02.roa (hash: r5MD1RHeYrmwx+4qL0Z/lL7AllWPwSQqqeUriNLY+mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152705, serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Validity Not Before: Nov 5 08:01:38 2025 GMT Not After : Nov 12 08:01:38 2025 GMT Subject: CN=690b0462-fe19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:3c:95:05:a8:88:a5:d7:8c:0f:07:b4:4a: 42:0f:2b:b9:00:80:ea:96:75:ab:cd:59:1c:78:d0: 1a:97:f0:8b:96:4a:5e:c6:37:46:19:13:77:39:3e: 61:98:e7:cc:7e:ca:27:af:9f:b6:43:c3:32:ea:4a: 83:9e:63:4e:c5:dc:63:df:e0:02:8a:26:99:3d:d5: 42:9a:a3:63:a8:aa:20:57:9f:08:8e:15:da:bb:8d: 7e:e4:43:12:9d:1c:ba:ea:9e:07:d4:4b:8d:9c:10: 46:4b:2f:59:40:f8:61:97:66:c0:17:c6:80:2d:52: cf:5d:c8:a8:f5:96:41:4b:7c:96:a1:fd:31:b5:d6: 45:5c:e1:87:78:84:b9:6d:01:4c:1a:d1:82:36:9d: a8:71:d5:6e:27:5d:75:ad:b9:48:d2:2d:68:3e:4c: 3b:c9:7e:62:0f:83:7b:b0:cd:b6:16:a9:fc:5b:27: 94:29:79:87:69:8e:74:c7:ea:54:1f:53:66:ae:b6: 87:04:24:8f:41:e7:75:d8:04:7e:76:d9:66:75:2d: 1a:11:e9:bf:db:c0:c7:ba:31:24:3b:2a:08:87:ee: 11:e2:dd:95:b2:34:3a:15:0e:a0:93:34:5b:d9:bf: 3e:2b:ba:e5:dd:a2:27:01:ee:48:7c:9b:49:1c:b3: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7E:80:42:7E:02:B0:D6:1E:84:69:3C:12:BF:A5:1D:3D:FC:75:04 X509v3 Authority Key Identifier: keyid:6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b5:3b:66:3a:38:d0:f7:f4:16:ee:62:eb:9c:ca:1f:40:b2: 79:0a:7c:d8:b4:3e:0d:ed:4d:de:ca:4f:96:36:d2:f8:99:6a: 71:97:c4:99:e8:6b:9c:1f:a4:65:da:0b:ab:ec:6a:e0:02:fe: 8a:6e:0a:89:24:9a:28:0f:5c:cb:9f:8d:3c:02:40:f9:09:6a: 9d:e4:43:88:0e:36:4e:6d:bc:ab:87:c1:8d:49:dd:b3:f0:17: bf:a4:5b:94:dd:4f:73:d4:ae:e0:2d:bf:f0:b2:b9:d7:7b:86: af:4b:8b:63:43:2a:15:21:d9:97:ab:15:25:64:d6:93:8a:fb: 03:6c:7b:3b:5f:7c:86:c3:a6:ab:07:a5:f5:ea:f6:a2:f0:2f: 5d:e4:7e:59:6e:a7:f2:c8:a1:41:89:b7:79:72:05:92:c8:4b: f4:4d:0e:a7:b8:65:ce:7d:c3:d1:11:04:f3:a1:d2:ef:3c:29: 67:a3:f5:5f:2a:1d:81:4a:f2:a2:11:3f:54:0f:c8:41:58:15: f0:43:f6:92:b8:27:a8:13:db:8d:1c:87:17:aa:29:1c:d7:e5: 97:b0:39:1f:60:98:48:57:44:a7:ad:ba:3c:65:9b:93:33:d3: c1:2f:8f:59:59:79:2c:e1:96:42:0e:a5:7b:9f:30:ab:4e:27: 4f:9a:05:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjcwNTExMC8GA1UEBRMoNkJFQkMwMjEyRDZGRUQ4MzIxQzhENkYwQzVDOUM0QTY2 RUQ3MTE3QzAeFw0yNTExMDUwODAxMzhaFw0yNTExMTIwODAxMzhaMBgxFjAUBgNV BAMTDTY5MGIwNDYyLWZlMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVezyVBaiIpdeMDwe0SkIPK7kAgOqWdavNWRx40BqX8IuWSl7GN0YZE3c5PmGY 58x+yievn7ZDwzLqSoOeY07F3GPf4AKKJpk91UKao2OoqiBXnwiOFdq7jX7kQxKd HLrqngfUS42cEEZLL1lA+GGXZsAXxoAtUs9dyKj1lkFLfJah/TG11kVc4Yd4hLlt AUwa0YI2nahx1W4nXXWtuUjSLWg+TDvJfmIPg3uwzbYWqfxbJ5QpeYdpjnTH6lQf U2autocEJI9B53XYBH522WZ1LRoR6b/bwMe6MSQ7KgiH7hHi3ZWyNDoVDqCTNFvZ vz4ruuXdoicB7kh8m0kcs/uVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1n6AQn4C sNYehGk8Er+lHT38dQQwHwYDVR0jBBgwFoAUa+vAIS1v7YMhyNbwxcnEpm7XEXww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyNzA1LzYyNzYwRDI2OTJC RjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lNaHlOYnd4Y25FcG03WEVY dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYS12QUlTMXY3WU1oeU5id3hjbkVwbTdYRVh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy NzA1LzYyNzYwRDI2OTJCRjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lN aHlOYnd4Y25FcG03WEVYdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAES1O2Y6OND39BbuYuucyh9AsnkKfNi0Pg3tTd7KT5Y20viZanGXxJno a5wfpGXaC6vsauAC/opuCokkmigPXMufjTwCQPkJap3kQ4gONk5tvKuHwY1J3bPw F7+kW5TdT3PUruAtv/Cyudd7hq9Li2NDKhUh2ZerFSVk1pOK+wNseztffIbDpqsH pfXq9qLwL13kfllup/LIoUGJt3lyBZLIS/RNDqe4Zc59w9ERBPOh0u88KWej9V8q HYFK8qIRP1QPyEFYFfBD9pK4J6gT240chxeqKRzX5ZewOR9gmEhXRKetujxlm5Mz 08Evj1lZeSzhlkIOpXufMKtOJ0+aBWY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:28 2025 by rpki-client