$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: fV/IyM+kovbxo+UCFe/EQ89Zmyv4+Gkfk925cYK4Als= Subject key identifier: 3C:3C:DE:30:03:B9:4B:3D:10:1E:F7:F7:58:39:DD:32:39:DC:86:63 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 136C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 1312 Signing time: Mon 20 Oct 2025 17:29:22 +0000 Manifest this update: Mon 20 Oct 2025 17:29:21 +0000 Manifest next update: Mon 27 Oct 2025 17:29:21 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: MhfoT0Ro6py+n4L9n6VbLuzKkoES6PPtOjsUuyY4xf8=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: pmGjv9e4kJuui8gahJeniJTVkFZxLqAkqBkutIyaUmM=) 3: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: JtAyYvcjsSIbHjMavRbf74w0IIhNg4IBABZJn0wcwzQ=) 4: 2227B66CF97B11EFA2B83631C4F9AE02.roa (hash: x6GId7866GEm2yx9Alj41gMxCnlfSK7cwtQgE9xlFPo=) 5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: vz1JkowcSPPocIJM8LY5Tc1J1IEwQwHTAm7ad6CcM1k=) 6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: 3fdnPO7nIXug6dYvzk2siFXVuDYGDIdJas3DCvUTWPA=) 7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: DOUd4Ct4uA10KaiPoOZjeWOyNrfXwTZYgvv/v0X/i0Y=) 8: DEF977A6E53611EB81682769C4F9AE02.roa (hash: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4972 (0x136c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Oct 20 17:29:21 2025 GMT Not After : Oct 27 17:29:21 2025 GMT Subject: CN=68f67172-48b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:5f:cb:f8:80:b4:5a:99:01:1f:2e:31:6a: ec:f9:85:ad:f4:22:c0:2d:e0:be:ce:45:77:7a:56: 40:48:df:49:c5:c5:0c:ea:fe:66:92:0d:a6:e3:e9: 93:47:b8:4d:42:1b:81:3f:9f:eb:da:6f:9d:af:1c: 0a:df:7b:00:ce:0c:da:71:df:88:b5:27:29:10:ce: 7e:9c:37:db:11:f2:d0:3c:b6:a4:86:29:4b:67:06: 0f:14:9c:fd:2f:57:e5:c7:18:5c:b6:88:f9:3b:e4: 01:31:39:f9:86:43:8c:ad:2f:ef:03:fb:40:aa:32: 70:54:ee:5d:74:04:92:93:a7:c8:39:4a:c7:f4:b4: d3:31:37:ce:26:f3:a2:d9:42:69:b5:51:6e:bc:4f: b9:d0:75:3d:9c:f1:41:6f:64:e4:59:a7:d8:20:05: aa:5e:7d:23:c9:a2:e7:a8:e3:a6:ba:e8:0e:be:6f: 09:d1:f0:c6:bc:1a:dd:cb:37:b7:97:7e:3c:2b:e7: 04:75:e9:5f:74:d7:cb:90:3b:93:09:c4:92:69:cb: c6:42:1f:61:2b:13:76:f4:7c:2a:10:28:d9:a6:e3: c4:41:63:0c:ed:4a:94:c3:68:f9:9f:ec:a7:96:1c: b3:ab:66:c5:f2:fd:d3:c0:44:a3:89:28:66:de:d6: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3C:DE:30:03:B9:4B:3D:10:1E:F7:F7:58:39:DD:32:39:DC:86:63 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:6e:5b:c3:e9:3a:2e:71:a8:bd:64:86:ed:a0:ab:fb:25:99: 66:83:d7:c2:4f:fa:db:d6:bc:3b:1f:63:ba:ef:0e:18:7a:21: 02:5e:ca:9f:28:b2:19:03:f7:d0:a3:88:91:e5:d4:6c:35:f5: 91:20:f1:e3:a4:94:1f:ae:4f:fe:87:94:5e:a4:a1:35:f8:68: 8d:f9:6e:17:00:f9:9d:c6:c9:96:f7:1c:37:4e:58:1b:27:7e: f6:15:76:a3:4b:9e:c2:eb:66:b8:2a:d8:c8:f9:8c:98:a1:a7: e3:d5:e1:6e:fa:25:fa:73:8d:00:00:2f:20:24:52:f7:f0:7a: 53:cf:98:ec:e9:f2:6c:6f:69:b2:a8:de:4f:9d:9f:5e:50:8d: 84:7d:b9:e6:7e:4f:e3:00:81:e2:92:ea:68:2a:52:cc:ca:0f: 54:38:c8:06:3d:70:bf:b5:52:b4:c2:45:67:0c:c4:9f:a5:91: 16:69:6f:17:83:35:ab:16:34:d7:08:96:da:f2:a8:bc:fa:e8: c0:be:6f:c1:4e:9e:12:8d:c7:c7:37:f7:62:3f:6e:9e:62:f7: 85:ba:1c:c9:06:44:09:37:77:bc:6c:71:60:5b:c7:7d:8e:23: 69:91:bd:ca:3c:3b:87:fe:64:8a:55:68:5e:63:5c:0b:21:4b: 0d:23:80:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUxMDIwMTcyOTIxWhcNMjUxMDI3MTcyOTIxWjAYMRYwFAYD VQQDEw02OGY2NzE3Mi00OGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMBfy/iAtFqZAR8uMWrs+YWt9CLALeC+zkV3elZASN9JxcUM6v5mkg2m4+mT R7hNQhuBP5/r2m+drxwK33sAzgzacd+ItScpEM5+nDfbEfLQPLakhilLZwYPFJz9 L1flxxhctoj5O+QBMTn5hkOMrS/vA/tAqjJwVO5ddASSk6fIOUrH9LTTMTfOJvOi 2UJptVFuvE+50HU9nPFBb2TkWafYIAWqXn0jyaLnqOOmuugOvm8J0fDGvBrdyze3 l348K+cEdelfdNfLkDuTCcSSacvGQh9hKxN29HwqECjZpuPEQWMM7UqUw2j5n+yn lhyzq2bF8v3TwESjiShm3tYYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDw83jAD uUs9EB7391g53TI53IZjMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSblvD6Toucai9ZIbtoKv7JZlmg9fCT/rb1rw7H2O67w4YeiECXsqf KLIZA/fQo4iR5dRsNfWRIPHjpJQfrk/+h5RepKE1+GiN+W4XAPmdxsmW9xw3Tlgb J372FXajS57C62a4KtjI+YyYoafj1eFu+iX6c40AAC8gJFL38HpTz5js6fJsb2my qN5PnZ9eUI2Efbnmfk/jAIHikupoKlLMyg9UOMgGPXC/tVK0wkVnDMSfpZEWaW8X gzWrFjTXCJba8qi8+ujAvm/BTp4SjcfHN/diP26eYveFuhzJBkQJN3e8bHFgW8d9 jiNpkb3KPDuH/mSKVWheY1wLIUsNI4Br -----END CERTIFICATE-----Generated at Tue Oct 21 17:25:20 2025 by rpki-client