$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft File: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json) Hash identifier: u8l9hxl4Lk94RT+zdtf8PgaVqpWqPjIZlbi7xS4VWh4= Subject key identifier: 2E:90:FC:A1:CC:6A:36:ED:9A:D5:EC:72:E5:AF:47:04:B0:78:51:A3 Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft Manifest number: D9 Signing time: Thu 23 Oct 2025 07:40:52 +0000 Manifest this update: Thu 23 Oct 2025 07:40:51 +0000 Manifest next update: Thu 30 Oct 2025 07:40:51 +0000 Files and hashes: 1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: 45qxmijLW0sLEAaFpVOZy7mFN3kFy4eN3IVNEIoB3WI=) 2: B538B552701211EFB6868329C4F9AE02.roa (hash: 5dSL8DOy/WJ/deJlqUIkaVszqeWmawzFbSAiDop9ztg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F Validity Not Before: Oct 23 07:40:51 2025 GMT Not After : Oct 30 07:40:51 2025 GMT Subject: CN=68f9dc04-8fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:61:70:08:96:e6:70:88:c5:60:bd:0b:b1:e6: 77:26:57:72:a3:ce:8d:32:8b:35:b7:34:1d:ad:29: 6c:11:86:47:1b:01:c0:b5:82:e7:88:75:e6:1c:8b: 4a:0f:94:b8:31:32:a2:98:ed:bb:4e:fb:24:03:51: bc:7f:f2:8f:db:ca:43:92:bc:27:6e:98:a3:81:66: d6:d5:f0:a1:80:2d:95:49:d2:c3:96:73:26:9b:4e: 77:ca:5a:ab:2b:37:74:35:ac:b0:1b:7d:dc:e9:58: 86:6f:80:17:97:b4:a9:3b:4b:cf:5d:21:60:b5:de: 23:f6:eb:38:5a:99:c4:ac:fc:67:87:66:df:99:1e: 9e:ca:9b:4c:b6:fb:4f:92:aa:99:95:06:fa:2c:58: 5a:3a:bd:07:42:e3:7c:5d:93:a2:8a:3a:09:ad:06: c7:b3:4f:52:fc:95:91:02:42:30:1d:33:07:a1:ba: e6:df:8e:39:31:62:f3:a8:9d:48:68:74:2d:0d:44: d9:34:6b:0b:1f:5d:af:05:25:3d:ee:28:d9:3a:1e: fd:fa:92:4e:b4:b4:4e:22:60:f4:6b:c3:24:e9:e0: 5d:b2:4e:27:78:41:4f:1e:30:6a:3d:bd:df:1c:c9: bf:33:5c:9b:83:ac:8b:bc:00:cc:e7:99:3a:90:80: 70:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:90:FC:A1:CC:6A:36:ED:9A:D5:EC:72:E5:AF:47:04:B0:78:51:A3 X509v3 Authority Key Identifier: keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f2:73:f0:dc:ad:54:39:a4:1d:1c:49:af:a8:6f:bc:a5:ea: d2:a6:7b:c9:b4:e7:ee:69:03:7e:2b:11:49:b9:a8:9c:d5:6b: cb:17:8b:8e:90:37:f5:90:ba:f5:e2:11:94:bc:b7:ca:d3:18: 85:4d:b8:a2:6c:9c:10:cb:b9:5f:40:93:14:65:c1:8c:db:94: 84:f9:4a:48:b5:86:b3:e1:e1:52:4c:1a:fc:a2:01:43:37:e0: 24:f1:a3:28:11:4e:d6:48:17:ac:e7:54:56:d2:0e:ce:a1:ec: 5f:37:5c:b4:3a:ec:16:98:b5:b8:37:af:7d:c8:db:d1:da:36: bb:46:4b:83:47:8d:40:f2:fd:d3:3e:54:f2:b6:9a:a3:e3:07: 6b:1d:1a:e5:3c:ff:ea:e4:44:02:7a:a3:56:55:d4:5a:da:95: d2:28:db:29:5d:16:2a:ef:12:40:d0:60:8a:e1:f9:4f:49:3b: b6:88:3d:be:e9:87:7d:9c:20:f3:4a:34:c1:c3:f5:58:1f:87: d1:af:e6:b9:9b:e3:5f:58:08:e7:94:fd:9e:b5:28:9a:2c:e6: db:ff:6b:86:de:3c:83:6d:8d:41:63:0e:f4:0a:67:ed:31:7f: 34:9c:93:bf:19:0e:6a:3e:f9:b1:04:d0:7d:15:70:ac:70:2c: e3:07:e9:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFDRjUxMTAvBgNVBAUTKEZENUEzRjVBMUYzMzU3NDRDMEMxNDJBQzQyMTdFQ0JD M0QyMENBMEYwHhcNMjUxMDIzMDc0MDUxWhcNMjUxMDMwMDc0MDUxWjAYMRYwFAYD VQQDEw02OGY5ZGMwNC04ZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mFwCJbmcIjFYL0LseZ3Jldyo86NMos1tzQdrSlsEYZHGwHAtYLniHXmHItK D5S4MTKimO27TvskA1G8f/KP28pDkrwnbpijgWbW1fChgC2VSdLDlnMmm053ylqr Kzd0NaywG33c6ViGb4AXl7SpO0vPXSFgtd4j9us4WpnErPxnh2bfmR6eyptMtvtP kqqZlQb6LFhaOr0HQuN8XZOiijoJrQbHs09S/JWRAkIwHTMHobrm3445MWLzqJ1I aHQtDUTZNGsLH12vBSU97ijZOh79+pJOtLROImD0a8Mk6eBdsk4neEFPHjBqPb3f HMm/M1ybg6yLvADM55k6kIBwEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6Q/KHM ajbtmtXscuWvRwSweFGjMB8GA1UdIwQYMBaAFP1aP1ofM1dEwMFCrEIX7Lw9IMoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUNGNS81QjMwQzQ5QTZG M0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYwVEF3VUtzUWhmc3ZEMGd5 ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Wb19XaDh6VjBUQXdVS3NRaGZzdkQwZ3lnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUNGNS81QjMwQzQ5QTZGM0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYw VEF3VUtzUWhmc3ZEMGd5ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN8nPw3K1UOaQdHEmvqG+8perSpnvJtOfuaQN+KxFJuaic1WvLF4uO kDf1kLr14hGUvLfK0xiFTbiibJwQy7lfQJMUZcGM25SE+UpItYaz4eFSTBr8ogFD N+Ak8aMoEU7WSBes51RW0g7OoexfN1y0OuwWmLW4N699yNvR2ja7RkuDR41A8v3T PlTytpqj4wdrHRrlPP/q5EQCeqNWVdRa2pXSKNspXRYq7xJA0GCK4flPSTu2iD2+ 6Yd9nCDzSjTBw/VYH4fRr+a5m+NfWAjnlP2etSiaLObb/2uG3jyDbY1BYw70Cmft MX80nJO/GQ5qPvmxBNB9FXCscCzjB+lp -----END CERTIFICATE-----Generated at Fri Oct 24 13:32:57 2025 by rpki-client