$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft File: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json) Hash identifier: Aetl6TAebJFWD7gzNrMRTBbYe/JBu7h/OPWE/EiUO7M= Subject key identifier: BC:17:04:9B:5A:4D:5A:23:51:EA:14:80:FC:E9:32:2F:9A:CD:C3:40 Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Certificate serial: 1EB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft Manifest number: 1E89 Signing time: Sun 02 Nov 2025 16:04:12 +0000 Manifest this update: Sun 02 Nov 2025 16:04:12 +0000 Manifest next update: Sun 09 Nov 2025 16:04:12 +0000 Files and hashes: 1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: YlTuHu+wJSOzzR6CpKhj0SOCEpQhsDVpTiKvGCx12qQ=) 2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: Kjjm0gZskFT6tVxY5Ur25GzEYJIZngsq5sGod6YlbMM=) 3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: w99/DAXuJPeoejD7jO/GwyxzGwiaUuCijwIrsTGlFkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7858 (0x1eb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Validity Not Before: Nov 2 16:04:12 2025 GMT Not After : Nov 9 16:04:12 2025 GMT Subject: CN=690780fc-54fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:65:9a:de:98:a7:1c:0a:14:9b:1b:b8:3a: 0c:ba:ea:2d:8f:fe:1e:ac:a5:0b:5d:e3:36:b2:17: 0c:78:97:e6:7f:80:cd:47:1f:81:dd:bf:02:71:71: 74:4c:36:cb:e6:fd:b1:2f:9a:1e:60:f6:05:b1:51: 42:11:bc:17:6f:15:a6:ca:c4:0b:aa:db:70:c2:41: de:aa:0d:9d:5a:4b:3d:dc:e6:1d:1b:18:41:56:7a: 47:76:93:25:a6:a9:82:7f:da:46:fe:b9:57:06:92: b7:ef:53:f2:aa:48:9d:6d:d5:99:48:70:cd:93:ce: 04:d8:32:b1:e8:a4:6e:23:a0:d4:98:ea:7f:a6:25: 15:d4:a9:09:d8:71:67:42:f7:b1:d6:69:fa:82:a9: 6c:0d:2e:fe:ca:31:8d:ea:0f:96:d2:52:14:83:dd: d6:6c:26:50:de:1c:90:3d:16:1d:76:25:93:cb:a7: 90:1b:29:db:87:12:0b:48:bb:c2:34:25:5b:4e:22: 0b:e8:06:71:ee:26:39:9a:b3:bd:98:89:b3:f8:dc: 9e:e1:14:d8:57:41:4a:6b:c0:81:21:41:f6:7e:1d: 87:a9:11:2f:c9:7e:ed:50:23:e9:0b:59:c4:08:b9: b7:8c:c3:85:3b:d8:00:52:cf:58:40:6a:49:11:24: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:17:04:9B:5A:4D:5A:23:51:EA:14:80:FC:E9:32:2F:9A:CD:C3:40 X509v3 Authority Key Identifier: keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:44:be:ac:a9:fb:ba:42:a2:38:fb:f0:c5:78:69:35:06:53: ea:e0:b3:b6:79:da:61:82:60:75:cf:94:3b:4a:6e:93:ab:9e: a9:31:4c:61:b4:b6:97:f5:09:bb:2a:3a:88:bb:57:f0:7e:16: 8d:82:70:02:d8:82:f3:a2:8a:24:9f:43:34:71:0b:e4:fc:57: 58:50:b3:a9:b5:3b:56:f3:57:57:4e:8c:62:05:6f:9c:47:59: a8:f6:ad:6c:20:49:9e:16:e0:f8:df:b0:36:d3:cc:14:40:0c: 44:03:85:4f:70:55:6f:3c:b1:bd:0a:1b:33:f4:26:29:77:3e: 96:e3:04:26:da:bc:e0:7d:6d:d9:f9:d1:40:f7:56:f9:a8:08: c4:90:59:b6:ef:6f:eb:8b:f7:0f:fa:93:4a:c6:82:db:47:d0: 90:cb:11:1b:88:99:6c:ef:f4:3a:17:9d:b8:84:3d:69:14:9b: 48:a5:d8:68:77:ee:14:4d:08:5e:d5:39:bf:a3:e8:04:b7:31: ad:fd:d6:c3:32:78:f5:fb:c4:4e:4f:84:48:c3:c2:75:73:f1: 2f:fc:ee:c3:de:49:38:9a:73:57:71:02:f8:3e:5a:e7:0e:84: 6a:91:03:d3:6f:83:87:b1:ae:50:9e:a1:6b:08:b6:ee:6b:ed: cf:b3:29:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NjExMTAvBgNVBAUTKEJENUYwODg4OTREOURBNzU2NUQ0NDM2MTQzRUUwMjZD MzIwRTRBMkEwHhcNMjUxMTAyMTYwNDEyWhcNMjUxMTA5MTYwNDEyWjAYMRYwFAYD VQQDEw02OTA3ODBmYy01NGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiNlmt6YpxwKFJsbuDoMuuotj/4erKULXeM2shcMeJfmf4DNRx+B3b8CcXF0 TDbL5v2xL5oeYPYFsVFCEbwXbxWmysQLqttwwkHeqg2dWks93OYdGxhBVnpHdpMl pqmCf9pG/rlXBpK371PyqkidbdWZSHDNk84E2DKx6KRuI6DUmOp/piUV1KkJ2HFn Qvex1mn6gqlsDS7+yjGN6g+W0lIUg93WbCZQ3hyQPRYddiWTy6eQGynbhxILSLvC NCVbTiIL6AZx7iY5mrO9mImz+Nye4RTYV0FKa8CBIUH2fh2HqREvyX7tUCPpC1nE CLm3jMOFO9gAUs9YQGpJESTfGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwXBJta TVojUeoUgPzpMi+azcNAMB8GA1UdIwQYMBaAFL1fCIiU2dp1ZdRDYUPuAmwyDkoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2MS8zNEQyNkM4ODg0 NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJuVmwxRU5oUS00Q2JESU9T aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZWOElpSlRaMm5WbDFFTmhRLTRDYkRJT1Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2MS8zNEQyNkM4ODg0NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJu VmwxRU5oUS00Q2JESU9TaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFRL6sqfu6QqI4+/DFeGk1BlPq4LO2edphgmB1z5Q7Sm6Tq56pMUxh tLaX9Qm7KjqIu1fwfhaNgnAC2ILzoookn0M0cQvk/FdYULOptTtW81dXToxiBW+c R1mo9q1sIEmeFuD437A208wUQAxEA4VPcFVvPLG9Chsz9CYpdz6W4wQm2rzgfW3Z +dFA91b5qAjEkFm272/ri/cP+pNKxoLbR9CQyxEbiJls7/Q6F524hD1pFJtIpdho d+4UTQhe1Tm/o+gEtzGt/dbDMnj1+8ROT4RIw8J1c/Ev/O7D3kk4mnNXcQL4Plrn DoRqkQPTb4OHsa5QnqFrCLbua+3Psyn5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:58 2025 by rpki-client