$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft File: VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json) Hash identifier: M8wV0m4hFy/OK9A8AsUfip7Qe26LOw3zjSIXozIGLC0= Subject key identifier: 84:2B:4B:2F:BA:48:59:74:14:54:E4:F1:61:24:94:90:9F:BC:00:B9 Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft Manifest number: 0108 Signing time: Mon 03 Nov 2025 05:05:15 +0000 Manifest this update: Mon 03 Nov 2025 05:05:15 +0000 Manifest next update: Mon 10 Nov 2025 05:05:15 +0000 Files and hashes: 1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: FTjT2p9VnMtl0w7gQ7+q+kSx+vHNwX8RZU7ZslXZ8OM=) 2: 7B6E133A61D911F0822B8C0CC4F9AE02.roa (hash: ezXxJLwoPcgk4MWna/9ZB6q7u9eauHRSVysibGU4wOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Validity Not Before: Nov 3 05:05:15 2025 GMT Not After : Nov 10 05:05:15 2025 GMT Subject: CN=6908380b-c8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:20:38:2b:bf:c1:d7:1d:df:74:2a:a2:c8: f5:cb:de:04:99:4d:18:ea:91:09:4d:a1:af:98:69: 67:04:10:fc:74:98:1e:f5:02:99:1d:22:d6:45:c5: 07:1e:67:03:0a:2e:b3:3a:4c:f1:3f:98:de:6e:d8: 63:af:9d:e3:dc:a5:59:63:1d:7e:ac:c1:92:52:80: e9:46:e8:80:35:20:fa:14:23:8d:af:87:9e:a4:c0: 8b:3f:99:d2:dd:2c:a6:68:6b:31:0e:24:b0:fb:34: 5c:64:60:fe:ea:ab:5c:87:b1:35:a3:ce:a7:5f:42: d8:a9:97:e8:73:ce:43:d1:33:2b:d9:16:5b:3e:e7: a8:85:ab:43:86:b4:15:23:3f:ee:82:ce:65:90:45: 76:c0:d6:fb:bf:c6:6e:cb:21:84:79:81:07:94:87: a2:05:56:70:e1:e0:3c:3a:50:33:3f:bb:4a:67:47: ed:9d:cf:75:bc:d4:6a:cc:8c:54:d5:13:4a:28:cb: 4e:59:f6:0b:dd:70:8d:22:bc:74:d0:0e:ba:09:76: 7b:32:b7:6d:74:13:96:20:f9:ce:66:16:c5:e5:5e: 30:34:a6:87:ba:ff:8c:b3:b7:99:09:0f:8a:61:a9: 94:a1:83:50:27:73:0c:ad:0d:f0:00:c2:e1:32:d0: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2B:4B:2F:BA:48:59:74:14:54:E4:F1:61:24:94:90:9F:BC:00:B9 X509v3 Authority Key Identifier: keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a1:4e:4e:dd:9c:b6:ce:17:53:49:97:d9:08:bd:da:c0:35: 5f:db:fc:b6:04:85:bd:06:85:df:7a:26:af:5d:a8:ea:24:38: 61:26:67:1a:a4:3f:0d:09:2a:58:6f:41:6d:9d:f2:a3:73:3a: 62:c0:95:d1:03:e2:b1:03:e5:63:54:34:13:55:f7:e2:cf:70: cb:a7:32:9c:ec:a8:97:f4:79:8b:37:73:f4:b0:32:e1:99:ce: d3:cb:e3:47:45:f0:d6:a8:39:cc:ab:f1:0d:5c:23:f6:3c:4e: 44:e9:ff:4a:6a:2b:a5:51:75:34:78:5a:43:9a:2a:18:61:72: bc:de:e0:e8:0f:a6:a9:32:64:46:a0:ab:53:70:8c:30:47:c3: 31:e2:5f:79:f7:9d:f5:40:61:dc:66:37:d4:38:49:8a:bf:8d: 37:24:43:09:72:6e:fd:fc:ac:5d:de:61:d4:79:7c:87:d9:aa: 6e:f3:07:b4:5b:08:fc:3a:29:63:e4:21:0f:a9:ca:b3:ef:1d: af:e4:cc:26:7c:46:ae:06:ad:1e:e5:d6:a3:19:6f:be:aa:b4: d2:bd:07:81:06:77:df:b7:57:3f:8a:ac:ba:95:de:69:f6:e3: c4:d2:dc:76:cc:35:8d:83:a0:f4:13:2a:a2:33:aa:db:32:24: d2:29:b0:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKDU1OUJFRkNGMzQ5ODY5NzNEM0JFNDU5MzUxNjE3OEU0 QzNBQ0UyOEIwHhcNMjUxMTAzMDUwNTE1WhcNMjUxMTEwMDUwNTE1WjAYMRYwFAYD VQQDEw02OTA4MzgwYi1jOGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApscgOCu/wdcd33Qqosj1y94EmU0Y6pEJTaGvmGlnBBD8dJge9QKZHSLWRcUH HmcDCi6zOkzxP5jebthjr53j3KVZYx1+rMGSUoDpRuiANSD6FCONr4eepMCLP5nS 3SymaGsxDiSw+zRcZGD+6qtch7E1o86nX0LYqZfoc85D0TMr2RZbPueohatDhrQV Iz/ugs5lkEV2wNb7v8ZuyyGEeYEHlIeiBVZw4eA8OlAzP7tKZ0ftnc91vNRqzIxU 1RNKKMtOWfYL3XCNIrx00A66CXZ7MrdtdBOWIPnOZhbF5V4wNKaHuv+Ms7eZCQ+K YamUoYNQJ3MMrQ3wAMLhMtCaHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQrSy+6 SFl0FFTk8WEklJCfvAC5MB8GA1UdIwQYMBaAFFWb7880mGlz075Fk1FheOTDrOKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yRjkzRjVDQzMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFYUFR2a1dUVVdGNDVNT3M0 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZadnZ6elNZYVhQVHZrV1RVV0Y0NU1PczRvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yRjkzRjVDQzMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFY UFR2a1dUVVdGNDVNT3M0b3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAoU5O3Zy2zhdTSZfZCL3awDVf2/y2BIW9BoXfeiavXajqJDhhJmca pD8NCSpYb0FtnfKjczpiwJXRA+KxA+VjVDQTVffiz3DLpzKc7KiX9HmLN3P0sDLh mc7Ty+NHRfDWqDnMq/ENXCP2PE5E6f9KaiulUXU0eFpDmioYYXK83uDoD6apMmRG oKtTcIwwR8Mx4l959531QGHcZjfUOEmKv403JEMJcm79/Kxd3mHUeXyH2apu8we0 Wwj8Oilj5CEPqcqz7x2v5MwmfEauBq0e5dajGW++qrTSvQeBBnfft1c/iqy6ld5p 9uPE0tx2zDWNg6D0EyqiM6rbMiTSKbDR -----END CERTIFICATE-----Generated at Tue Nov 4 12:19:49 2025 by rpki-client