$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: fVrElNjJ9re/KPSZykcEwkYpNPuSiRDbUe/XtnxUqc8= Subject key identifier: 22:F8:B2:53:B5:8F:88:C6:DD:FF:24:20:6E:06:E1:2F:E2:B4:84:1C Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 283F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 2824 Signing time: Tue 04 Nov 2025 15:41:41 +0000 Manifest this update: Tue 04 Nov 2025 15:41:41 +0000 Manifest next update: Tue 11 Nov 2025 15:41:41 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: B5/0tOm8TXk9AxecZvT9D+mTGrdDbgHgHpCn6wzWKr0=) 2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: qyTxkkSSZz/mEPJmCPmO4drOsBAzqss/jEsEWzyS7n4=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: IqEsazWsEikd3PbwO1Zi4SKIR5/W/ukREa4rnvdDPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10303 (0x283f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Nov 4 15:41:41 2025 GMT Not After : Nov 11 15:41:41 2025 GMT Subject: CN=690a1eb5-56ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:23:60:f0:ab:0a:ae:96:b4:08:c9:e3:9a: 55:c7:07:87:b2:93:64:e5:4d:1f:37:4a:b4:61:d8: 87:cb:8c:6f:5b:d8:76:4a:ff:d5:26:5d:8c:6e:c4: 94:22:a7:d4:14:97:32:48:01:d3:08:79:11:16:29: e1:32:f5:35:6d:5a:77:c0:30:4c:c1:e9:0a:9c:67: 88:ce:e5:b4:26:01:6b:ab:93:88:75:46:7b:1f:93: 30:9c:50:5e:8d:a4:23:50:2e:08:77:63:95:84:20: ab:53:b3:69:8b:f3:92:8e:d0:81:5a:9a:88:2b:28: b7:ef:27:70:f5:2c:7e:c8:bd:9b:18:fa:62:4d:0a: f3:ae:9e:f6:3e:b2:6b:11:2f:0c:f6:f4:44:7f:20: 3c:2b:a7:09:9f:c6:2d:9b:8b:d4:9a:66:4d:2d:f9: 03:4d:d5:f9:8d:1a:45:2c:dc:41:b3:22:7e:3e:82: 94:55:b5:0c:c6:62:93:50:92:04:f1:93:2d:75:4d: 3a:90:6a:03:06:69:30:87:1e:5b:85:80:bd:a1:dd: 46:43:83:80:f2:ad:68:6b:3c:df:b9:57:c8:85:df: 17:5b:3c:01:04:3c:74:b7:27:36:ec:81:b7:d3:ad: 13:11:52:1e:8e:69:f3:97:c8:bb:46:f3:ad:be:84: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F8:B2:53:B5:8F:88:C6:DD:FF:24:20:6E:06:E1:2F:E2:B4:84:1C X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:09:0a:58:73:83:86:58:68:99:5c:73:e0:59:78:fb:a8:c8: f9:aa:4a:86:ee:82:cf:fc:32:d2:0b:b4:21:4b:cf:d9:40:80: df:ec:a6:b8:0f:45:6e:6a:09:59:6f:83:81:83:54:d7:24:35: 51:79:31:83:d7:5f:e6:32:42:0a:44:a3:1d:41:ff:0e:ff:61: a6:52:d1:d3:c0:d9:bf:76:c2:6b:04:5c:20:86:b7:db:00:4f: b1:74:a0:b7:a1:be:d8:fe:f2:00:2f:8a:81:b6:8b:6e:1f:20: 95:04:cb:a0:37:86:5f:b0:2c:39:fb:e7:8a:40:ee:67:53:78: 75:02:97:b8:37:59:93:c0:f4:19:c9:50:21:72:1b:ca:1c:8b: af:a7:83:7c:97:10:79:ad:e1:14:3c:85:49:ca:9a:18:fd:44: cf:82:5b:a4:7f:31:97:de:27:8a:68:27:b0:e7:26:56:63:e7: 78:62:e1:ae:9e:45:28:46:7b:ee:c0:ea:35:01:19:86:d9:d4: fe:89:2e:d3:fe:8e:90:b3:f4:b3:2c:70:4c:7b:9f:70:9a:2e: 5a:bd:5f:23:f6:e9:4b:0d:6f:0f:0e:98:1c:d3:86:72:37:2d: 5e:01:a9:9b:44:ef:84:4d:fa:1e:56:71:9a:55:82:3b:ff:e0: a6:e2:20:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjUxMTA0MTU0MTQxWhcNMjUxMTExMTU0MTQxWjAYMRYwFAYD VQQDEw02OTBhMWViNS01NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHojYPCrCq6WtAjJ45pVxweHspNk5U0fN0q0YdiHy4xvW9h2Sv/VJl2MbsSU IqfUFJcySAHTCHkRFinhMvU1bVp3wDBMwekKnGeIzuW0JgFrq5OIdUZ7H5MwnFBe jaQjUC4Id2OVhCCrU7Npi/OSjtCBWpqIKyi37ydw9Sx+yL2bGPpiTQrzrp72PrJr ES8M9vREfyA8K6cJn8Ytm4vUmmZNLfkDTdX5jRpFLNxBsyJ+PoKUVbUMxmKTUJIE 8ZMtdU06kGoDBmkwhx5bhYC9od1GQ4OA8q1oazzfuVfIhd8XWzwBBDx0tyc27IG3 060TEVIejmnzl8i7RvOtvoRIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL4slO1 j4jG3f8kIG4G4S/itIQcMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXCQpYc4OGWGiZXHPgWXj7qMj5qkqG7oLP/DLSC7QhS8/ZQIDf7Ka4 D0VuaglZb4OBg1TXJDVReTGD11/mMkIKRKMdQf8O/2GmUtHTwNm/dsJrBFwghrfb AE+xdKC3ob7Y/vIAL4qBtotuHyCVBMugN4ZfsCw5++eKQO5nU3h1Ape4N1mTwPQZ yVAhchvKHIuvp4N8lxB5reEUPIVJypoY/UTPglukfzGX3ieKaCew5yZWY+d4YuGu nkUoRnvuwOo1ARmG2dT+iS7T/o6Qs/SzLHBMe59wmi5avV8j9ulLDW8PDpgc04Zy Ny1eAambRO+ETfoeVnGaVYI7/+Cm4iCE -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:17 2025 by rpki-client