$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: IfN8CAJrI9mSVzUHk9toXhFV6rmTFgzbVD58684DGF8= Subject key identifier: 1E:11:C6:56:C0:B7:8B:E7:FB:E3:40:0E:4F:91:49:07:01:37:D1:9C Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 0231 Signing time: Mon 03 Nov 2025 01:51:37 +0000 Manifest this update: Mon 03 Nov 2025 01:51:37 +0000 Manifest next update: Mon 10 Nov 2025 01:51:37 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: 9zmVX+B++f+xN58KpxM+eb/XuZpavzSB55YXkgQZnBk=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: kKgc9mKeybgGGMkDQ58sZzpe326cVTFWWZKCKZ6tXgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Validity Not Before: Nov 3 01:51:37 2025 GMT Not After : Nov 10 01:51:37 2025 GMT Subject: CN=69080aa9-cde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:fa:ea:96:17:e1:10:cc:6d:22:b3:20:02: c1:9b:92:47:69:90:e5:b6:6a:c0:99:db:3c:8c:4d: ea:8d:55:e5:24:ff:b7:cd:58:16:44:d7:73:76:6a: 07:ce:44:0e:86:99:ea:85:20:bb:02:22:9c:43:64: cd:19:ec:10:82:a7:da:14:8f:81:d3:df:25:d2:d3: 16:f7:9f:0f:43:78:b8:69:dc:7f:d2:9b:5d:e3:68: 94:89:ad:07:aa:e1:49:23:95:3e:50:38:fe:5f:17: ba:6a:63:35:cd:65:94:7e:bc:31:f0:9b:f3:8c:44: cc:8b:4c:db:72:de:01:81:48:95:06:d9:2f:d1:48: c9:1d:18:cf:52:92:7f:7e:dc:30:c4:b0:14:5f:01: 28:96:df:e7:dc:76:24:19:5b:89:e7:2e:1d:1f:e7: b5:24:9a:1a:68:90:b0:15:64:23:f2:c3:b5:bd:80: 18:05:83:7b:0a:ab:b1:90:4e:9e:a7:82:7d:fd:10: 8d:e9:7b:d9:40:fc:7c:05:eb:30:62:13:e0:b0:9c: 03:d0:62:5d:95:d1:0b:48:c8:d4:d7:6f:d3:8d:5f: 6a:30:a1:e5:c0:d3:2d:dd:0b:52:e9:30:67:fc:ec: ae:2d:f7:27:bd:96:ed:e7:3d:f9:16:a7:f4:c9:f0: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:11:C6:56:C0:B7:8B:E7:FB:E3:40:0E:4F:91:49:07:01:37:D1:9C X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:66:34:e2:ef:e4:ca:90:4c:7e:ef:b4:9d:aa:d0:11:bd:f4: 74:80:29:05:d2:07:e4:b3:d0:77:12:87:e8:29:8d:b2:47:8b: 43:7a:f0:74:73:30:c2:43:d4:e9:5d:bc:07:34:27:67:fe:f4: 7d:30:13:dd:93:1c:f2:39:d8:ee:40:ee:0b:2d:8e:ce:01:3a: cd:bf:c5:67:2f:3f:f3:82:6c:53:ed:72:eb:ad:bd:91:ab:10: 08:53:7e:5a:b4:f1:8b:f9:8a:79:ba:f7:99:bb:db:74:9f:2b: 1a:70:12:c4:b1:05:00:d9:e6:3b:e6:04:8e:e7:ab:25:ed:ed: 78:26:90:d6:ba:5b:0c:5d:18:ee:89:b1:b2:32:35:1f:69:50: 93:30:86:62:1e:16:6b:02:ec:51:a9:43:52:87:67:db:70:77: f4:d4:93:e8:69:d3:af:3b:7c:a7:2e:32:22:b7:83:a9:ce:cd: 4b:5d:fa:9e:a8:38:18:c4:cf:7c:14:d7:d9:87:ba:48:e1:1f: ac:72:08:a0:ba:66:6c:a5:51:a1:af:9c:d6:67:8f:32:2c:03: f7:4e:0e:10:fd:4f:c3:0b:a6:d4:e4:8a:d9:3c:ea:a9:13:a9: b4:d4:45:00:a8:ed:b4:f7:1d:c1:ba:fa:98:d1:49:12:fe:cb: 68:63:05:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjUxMTAzMDE1MTM3WhcNMjUxMTEwMDE1MTM3WjAYMRYwFAYD VQQDEw02OTA4MGFhOS1jZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4X66pYX4RDMbSKzIALBm5JHaZDltmrAmds8jE3qjVXlJP+3zVgWRNdzdmoH zkQOhpnqhSC7AiKcQ2TNGewQgqfaFI+B098l0tMW958PQ3i4adx/0ptd42iUia0H quFJI5U+UDj+Xxe6amM1zWWUfrwx8JvzjETMi0zbct4BgUiVBtkv0UjJHRjPUpJ/ ftwwxLAUXwEolt/n3HYkGVuJ5y4dH+e1JJoaaJCwFWQj8sO1vYAYBYN7CquxkE6e p4J9/RCN6XvZQPx8BeswYhPgsJwD0GJdldELSMjU12/TjV9qMKHlwNMt3QtS6TBn /OyuLfcnvZbt5z35Fqf0yfCpUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4RxlbA t4vn++NADk+RSQcBN9GcMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmZjTi7+TKkEx+77SdqtARvfR0gCkF0gfks9B3EofoKY2yR4tDevB0 czDCQ9TpXbwHNCdn/vR9MBPdkxzyOdjuQO4LLY7OATrNv8VnLz/zgmxT7XLrrb2R qxAIU35atPGL+Yp5uveZu9t0nysacBLEsQUA2eY75gSO56sl7e14JpDWulsMXRju ibGyMjUfaVCTMIZiHhZrAuxRqUNSh2fbcHf01JPoadOvO3ynLjIit4Opzs1LXfqe qDgYxM98FNfZh7pI4R+scgigumZspVGhr5zWZ48yLAP3Tg4Q/U/DC6bU5IrZPOqp E6m01EUAqO209x3BuvqY0UkS/stoYwV4 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:39 2025 by rpki-client