$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: AAgOXhmLrVX8xkuaUmwoFgP89GhHfHBWC64YiOV8Nrk= Subject key identifier: 0E:16:B8:9C:8A:94:C1:1A:7B:37:59:FE:DF:18:23:B3:BD:BC:48:65 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 0222 Signing time: Mon 03 Nov 2025 02:43:37 +0000 Manifest this update: Mon 03 Nov 2025 02:43:36 +0000 Manifest next update: Mon 10 Nov 2025 02:43:36 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: mQRc/a3oYxZeW46sccjNuFIj7Xbj63W1tLeaJ3Hcx+I=) 2: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: Im9wfZuP6zDy1h0Hl9Jq0NXIaM8u/vuOASHLbchH8jE=) 3: 020607A2498711EFBB260663C4F9AE02.roa (hash: T6rwUDI540K7kNvAic9olkLe7ckJW9yi5Gt2J/Ejnw0=) 4: D13FCAEAA62E11EFBC284C42C4F9AE02.roa (hash: K8NnxbaCBJETQFsMtKq3Bzg51wGMgmnozQ6OqtNXVto=) 5: 05F505961AA311F0A475D464C4F9AE02.roa (hash: DJ6ceD+nzuCFrSpyZtlueLHrerXM29TFRnLIJO8v0Cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Nov 3 02:43:36 2025 GMT Not After : Nov 10 02:43:36 2025 GMT Subject: CN=690816d9-eb13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:a3:0c:f0:76:6b:b3:35:62:12:58:e2:29: 16:55:53:86:03:84:c8:62:98:31:76:76:ba:3f:6f: 43:6a:33:36:ef:f9:0e:dd:38:1e:4b:c7:5f:9f:22: aa:1d:44:40:17:25:2c:8d:42:0d:1f:ba:f7:03:cd: c5:a8:8b:a4:91:fa:8a:40:97:45:81:60:86:d3:28: e6:b4:af:af:89:33:e8:6d:ff:bb:6d:93:68:bf:30: 5d:cc:2b:c0:a2:5f:a5:e3:68:1d:5a:6b:ed:51:df: f2:15:83:56:c3:10:66:ae:24:3b:56:7b:21:db:87: be:55:af:6a:f5:ab:69:09:7e:e7:2e:7d:09:81:02: 9a:38:df:ce:8a:10:a8:c1:c9:06:ed:35:9b:94:b4: e9:03:e9:fc:e7:d9:b8:6e:9a:4b:3c:00:2f:43:ef: f0:52:f3:be:b2:51:17:8e:31:42:bc:04:c7:e9:a1: 2a:d8:20:c6:f6:59:a4:23:52:6d:83:7b:bd:fa:85: ce:a1:53:b3:63:38:b6:e9:97:07:f8:6f:97:e9:5a: 83:c3:2b:a3:1c:ba:75:05:48:26:04:f5:a4:23:13: 6f:d1:ef:03:a6:a3:e3:1c:ff:8c:fe:69:a5:55:9d: 5b:ec:3f:37:2c:46:72:f8:26:2c:e9:51:a5:97:8d: 50:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:16:B8:9C:8A:94:C1:1A:7B:37:59:FE:DF:18:23:B3:BD:BC:48:65 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:85:6d:27:79:2b:6c:f1:5e:98:d2:4c:f5:16:3f:d3:73:29: 6f:39:59:14:39:7f:cb:30:ca:b0:5a:c0:b9:02:1b:2d:76:20: 11:e7:33:61:1d:6b:65:76:c3:74:11:7d:0d:a5:b8:f5:8e:0e: 1c:13:7a:81:c6:18:7c:2d:ef:e5:45:5a:64:f6:ef:29:10:1f: 32:e5:ac:80:96:00:f9:ca:05:55:01:4a:9e:9e:57:43:fb:10: 57:dd:65:4e:74:83:15:ed:26:cd:ee:46:96:47:1e:37:aa:7a: e5:d1:c6:e8:2e:74:d8:25:1e:66:eb:1b:78:0d:95:4d:1b:f0: e4:cd:56:87:db:cf:90:8e:a3:af:3f:e2:95:14:c5:d0:41:5c: 0a:b8:1e:c4:f3:c7:13:82:2b:30:1f:32:93:a3:6a:6e:c4:f2: 06:ec:b6:28:95:71:4e:ff:7c:95:1c:e1:b6:96:6e:31:67:57: dd:53:c2:60:5f:f0:a0:d6:cf:6f:ea:97:c5:05:d0:4c:c5:06: fb:bc:62:a4:5c:6c:ef:33:db:7b:f9:db:66:d9:cf:c5:3f:51: 3d:52:aa:bc:dd:88:99:8d:65:5d:1c:6f:b4:e3:c1:dc:96:81: 24:01:e0:fa:66:26:f2:1e:4c:98:3b:7d:7c:0c:65:18:08:64: e5:d0:a4:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjUxMTAzMDI0MzM2WhcNMjUxMTEwMDI0MzM2WjAYMRYwFAYD VQQDEw02OTA4MTZkOS1lYjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx82jDPB2a7M1YhJY4ikWVVOGA4TIYpgxdna6P29DajM27/kO3TgeS8dfnyKq HURAFyUsjUINH7r3A83FqIukkfqKQJdFgWCG0yjmtK+viTPobf+7bZNovzBdzCvA ol+l42gdWmvtUd/yFYNWwxBmriQ7Vnsh24e+Va9q9atpCX7nLn0JgQKaON/OihCo wckG7TWblLTpA+n859m4bppLPAAvQ+/wUvO+slEXjjFCvATH6aEq2CDG9lmkI1Jt g3u9+oXOoVOzYzi26ZcH+G+X6VqDwyujHLp1BUgmBPWkIxNv0e8DpqPjHP+M/mml VZ1b7D83LEZy+CYs6VGll41QowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4WuJyK lMEaezdZ/t8YI7O9vEhlMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvhW0neSts8V6Y0kz1Fj/TcylvOVkUOX/LMMqwWsC5AhstdiAR5zNh HWtldsN0EX0Npbj1jg4cE3qBxhh8Le/lRVpk9u8pEB8y5ayAlgD5ygVVAUqenldD +xBX3WVOdIMV7SbN7kaWRx43qnrl0cboLnTYJR5m6xt4DZVNG/DkzVaH28+QjqOv P+KVFMXQQVwKuB7E88cTgiswHzKTo2puxPIG7LYolXFO/3yVHOG2lm4xZ1fdU8Jg X/Cg1s9v6pfFBdBMxQb7vGKkXGzvM9t7+dtm2c/FP1E9Uqq83YiZjWVdHG+048Hc loEkAeD6ZibyHkyYO318DGUYCGTl0KTY -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:11 2025 by rpki-client