$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: 7LCC3pIr6k33GnQmUMVZS8+JucPte1TmrFREQDka1GI= Subject key identifier: 6E:5C:C9:A6:ED:D9:0A:83:64:D3:8F:7F:B4:BC:DD:6B:CD:D6:DB:FB Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 0832 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 07E7 Signing time: Sun 02 Nov 2025 21:29:27 +0000 Manifest this update: Sun 02 Nov 2025 21:29:26 +0000 Manifest next update: Sun 09 Nov 2025 21:29:26 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: /7byJjqoF4FYSZIgqv/13r8bOKHWPXu0gLYgJ5q3XYg=) 2: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: q4XD/AQqfkjB0bWd2cAwQj0LVcqgF9IjAclvpli5BAw=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 4: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: q7i3CsKTp0yL6iYZiFHlx/5hnnt+XvM120dMmxFLBaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Nov 2 21:29:26 2025 GMT Not After : Nov 9 21:29:26 2025 GMT Subject: CN=6907cd36-8d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:f9:1f:be:5b:71:51:03:fd:b6:24:31:fe: 83:d6:86:19:5a:c0:15:98:fe:31:23:30:70:90:af: 01:eb:c6:23:ae:29:14:a4:df:c4:21:e6:12:c7:ed: a5:98:c3:85:3b:4b:ef:eb:42:fc:ff:4c:08:89:e2: 8c:0d:a3:f1:ae:15:f8:8d:d4:8e:ce:2d:f9:33:bf: 04:f6:60:54:32:5c:56:a7:68:0a:b3:35:34:ab:0c: 42:c0:a8:fd:22:2f:a4:bc:d5:ed:20:74:c3:60:03: ef:cf:38:ba:f9:8b:a6:77:e3:3a:80:5f:10:39:ee: ae:94:53:d7:af:3e:97:de:d6:05:10:a4:6e:1a:8e: b7:3d:8f:4f:99:d0:c0:bf:e6:ca:e1:1b:18:5e:9f: c7:f5:74:7f:9c:0f:8d:45:45:62:9a:ab:65:09:b2: 7e:89:e4:4e:fb:fa:b5:b4:d9:f8:9e:1c:f9:1d:49: 84:cc:a1:97:1b:7c:11:54:c0:ee:6b:66:e8:b4:a3: 87:16:74:29:75:a8:96:d7:51:fc:f4:54:70:d8:08: fc:8d:0b:6c:07:31:f3:5b:01:eb:01:13:01:e4:36: 70:5e:8b:3a:8b:fa:9d:d3:9c:72:58:14:7d:86:a5: c6:b9:12:0c:f7:4f:aa:5c:7d:9a:79:c6:7c:28:8e: 5e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5C:C9:A6:ED:D9:0A:83:64:D3:8F:7F:B4:BC:DD:6B:CD:D6:DB:FB X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:e7:7b:a2:97:3c:76:aa:6b:e4:15:cb:b2:e1:c4:d1:75:fe: 4a:31:b9:6f:a0:32:d5:31:ae:2f:b2:03:f5:c9:fc:b8:a2:c9: c8:8e:01:10:b6:06:10:bd:71:c6:bc:23:16:4d:f8:6b:d1:df: 99:b9:6b:fd:23:ed:16:39:11:7b:34:0f:ea:73:51:30:c7:f3: b5:b8:a5:9b:73:38:34:c2:b8:e8:21:78:8a:37:60:54:f8:ff: 5e:9a:25:83:0a:3d:cf:12:46:e7:82:35:ba:f0:b6:86:a8:68: a9:12:08:39:98:72:08:a9:04:46:fa:2c:4c:d6:80:1b:bf:39: 95:bf:23:a9:9c:72:4f:75:64:77:18:c6:1b:f5:72:f3:f6:97: e3:37:ff:df:6b:e7:fe:2b:4b:18:db:fb:69:aa:1d:9c:0a:4f: 0f:52:8c:43:99:01:9d:dd:aa:d3:a9:93:9e:e1:54:a9:97:28: b8:88:ca:3c:ea:1d:5e:03:49:6c:ad:7d:a2:f5:99:77:31:0c: 0e:e3:86:80:63:08:fd:4a:ab:fa:98:60:4c:b6:64:29:20:e2: 0c:5b:f4:10:36:4e:08:b9:01:64:6c:4c:f3:96:4f:8d:55:83: 49:f9:d7:0e:72:12:11:31:70:69:77:cc:4f:7a:82:a6:27:54: aa:ef:e5:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUxMTAyMjEyOTI2WhcNMjUxMTA5MjEyOTI2WjAYMRYwFAYD VQQDEw02OTA3Y2QzNi04ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/z5H75bcVED/bYkMf6D1oYZWsAVmP4xIzBwkK8B68YjrikUpN/EIeYSx+2l mMOFO0vv60L8/0wIieKMDaPxrhX4jdSOzi35M78E9mBUMlxWp2gKszU0qwxCwKj9 Ii+kvNXtIHTDYAPvzzi6+Yumd+M6gF8QOe6ulFPXrz6X3tYFEKRuGo63PY9PmdDA v+bK4RsYXp/H9XR/nA+NRUVimqtlCbJ+ieRO+/q1tNn4nhz5HUmEzKGXG3wRVMDu a2botKOHFnQpdaiW11H89FRw2Aj8jQtsBzHzWwHrARMB5DZwXos6i/qd05xyWBR9 hqXGuRIM90+qXH2aecZ8KI5epwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5cyabt 2QqDZNOPf7S83WvN1tv7MB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL53uilzx2qmvkFcuy4cTRdf5KMblvoDLVMa4vsgP1yfy4osnIjgEQ tgYQvXHGvCMWTfhr0d+ZuWv9I+0WORF7NA/qc1Ewx/O1uKWbczg0wrjoIXiKN2BU +P9emiWDCj3PEkbngjW68LaGqGipEgg5mHIIqQRG+ixM1oAbvzmVvyOpnHJPdWR3 GMYb9XLz9pfjN//fa+f+K0sY2/tpqh2cCk8PUoxDmQGd3arTqZOe4VSplyi4iMo8 6h1eA0lsrX2i9Zl3MQwO44aAYwj9Sqv6mGBMtmQpIOIMW/QQNk4IuQFkbEzzlk+N VYNJ+dcOchIRMXBpd8xPeoKmJ1Sq7+UC -----END CERTIFICATE-----Generated at Mon Nov 3 16:00:51 2025 by rpki-client