$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json) Hash identifier: 8nVYawWVgF1GXl2oEcRcAGlHWWso4Z/SpNHc6uwSvQw= Subject key identifier: 27:9B:F1:D1:49:35:E4:60:90:02:49:D6:A9:32:86:CC:AD:F8:D9:CA Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft Manifest number: 0125 Signing time: Wed 05 Nov 2025 04:50:11 +0000 Manifest this update: Wed 05 Nov 2025 04:50:10 +0000 Manifest next update: Wed 12 Nov 2025 04:50:10 +0000 Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: MBah2b47tsQltMnZ2OIK3iNYfXdGi+Bm7C7hMB9OdFU=) 2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: xdCJJSBmKRi6P083PXPoHsI4LKPSNh2nAQa1KhgQI3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Validity Not Before: Nov 5 04:50:10 2025 GMT Not After : Nov 12 04:50:10 2025 GMT Subject: CN=690ad783-b91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:5a:4a:93:6b:78:0f:45:3e:96:0a:cf:b0: fc:af:a0:07:89:f8:42:8d:92:2b:9c:fd:aa:30:e4: fe:d9:18:01:66:cb:c7:e5:67:0a:ce:f2:3f:68:05: ea:9e:ac:c3:02:a3:3c:91:47:75:fa:a6:fa:f6:25: eb:18:47:57:b7:1d:4a:10:50:41:ab:6d:cd:2e:a5: 91:68:ae:e8:6c:1b:42:fb:9d:49:4e:3c:00:aa:6e: 73:b3:6e:23:18:29:dc:54:96:82:39:7f:68:b3:32: a2:6d:5e:6c:24:ae:1f:74:34:4b:28:67:60:f4:5a: f6:cd:66:a3:5e:5d:53:8a:e8:23:a3:99:c9:a9:63: f8:39:6a:c8:c3:52:e5:cf:d4:23:9a:c7:1b:c1:b2: 2e:35:20:ee:44:dc:3a:70:c9:8d:b7:69:fd:ff:17: 29:34:ee:28:9c:c3:dd:b4:fe:e3:42:f1:fa:86:33: db:14:fa:1f:ca:65:5c:72:45:82:d5:89:cc:11:45: 14:36:10:ec:d1:6a:d1:87:e3:13:b2:9e:91:69:b0: 6d:2c:64:bc:bc:eb:cb:1f:7d:a6:1b:96:24:dd:2a: 81:10:f4:66:dd:8f:31:9a:ba:b5:6a:77:96:f6:50: 63:2d:e7:de:46:ca:2d:cf:38:78:41:6e:b2:d5:4d: 8c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9B:F1:D1:49:35:E4:60:90:02:49:D6:A9:32:86:CC:AD:F8:D9:CA X509v3 Authority Key Identifier: keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:db:7a:09:d4:3a:7b:04:4a:90:97:9b:52:51:79:19:ee:ba: ac:50:f8:0a:ef:10:4a:ff:bd:2f:34:34:39:3a:7c:54:de:a6: 27:b5:ff:50:c3:78:7c:b4:55:c4:37:02:af:60:2c:c5:1c:e9: b0:5e:05:31:76:d9:c6:26:ec:df:0d:8a:a4:12:b4:d4:37:db: 62:74:d8:e0:bf:e0:8e:71:24:59:e4:40:6d:8f:2c:68:ae:61: 0c:a3:2d:1c:fe:49:9f:b8:de:cd:c1:bd:8d:03:d3:c3:e2:a9: 16:d5:3b:4b:40:cd:13:13:5c:e2:d2:f0:75:3a:dd:d2:e4:3e: 62:01:1e:6a:75:98:1e:51:18:8e:7c:a7:da:e6:a4:10:87:49: b8:8a:2f:77:d5:a1:a6:15:fc:5b:30:2c:45:d5:fb:4d:08:81: 76:9b:70:3f:a7:59:71:0b:ef:2d:6e:d9:d0:06:38:f2:70:1a: cb:b1:ae:f8:aa:1e:83:43:8e:96:98:b2:a0:d6:eb:b5:03:90: 4c:ca:52:e5:35:60:41:36:4e:c8:83:1d:68:b1:0a:7b:f3:cf: 21:54:28:a0:c5:62:84:ee:0e:e8:c2:c6:38:a4:d0:77:9a:0f: 5f:21:0f:72:73:d7:92:62:7a:b3:4f:db:05:43:97:aa:cb:f6: 59:e8:28:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKEJFQzI4MjQ4NkYzN0UzMTZGMTdCNTIwQjQ1NTI4N0JD MzA3Rjg5RTgwHhcNMjUxMTA1MDQ1MDEwWhcNMjUxMTEyMDQ1MDEwWjAYMRYwFAYD VQQDEw02OTBhZDc4My1iOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1haSpNreA9FPpYKz7D8r6AHifhCjZIrnP2qMOT+2RgBZsvH5WcKzvI/aAXq nqzDAqM8kUd1+qb69iXrGEdXtx1KEFBBq23NLqWRaK7obBtC+51JTjwAqm5zs24j GCncVJaCOX9oszKibV5sJK4fdDRLKGdg9Fr2zWajXl1Tiugjo5nJqWP4OWrIw1Ll z9QjmscbwbIuNSDuRNw6cMmNt2n9/xcpNO4onMPdtP7jQvH6hjPbFPofymVcckWC 1YnMEUUUNhDs0WrRh+MTsp6RabBtLGS8vOvLH32mG5Yk3SqBEPRm3Y8xmrq1aneW 9lBjLefeRsotzzh4QW6y1U2MnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeb8dFJ NeRgkAJJ1qkyhsyt+NnKMB8GA1UdIwQYMBaAFL7CgkhvN+MW8XtSC0VSh7wwf4no MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GNTg0MzhGRUY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4YnhlMUlMUlZLSHZEQl9p ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2llZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GNTg0MzhGRUY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4 YnhlMUlMUlZLSHZEQl9pZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS23oJ1Dp7BEqQl5tSUXkZ7rqsUPgK7xBK/70vNDQ5OnxU3qYntf9Q w3h8tFXENwKvYCzFHOmwXgUxdtnGJuzfDYqkErTUN9tidNjgv+COcSRZ5EBtjyxo rmEMoy0c/kmfuN7Nwb2NA9PD4qkW1TtLQM0TE1zi0vB1Ot3S5D5iAR5qdZgeURiO fKfa5qQQh0m4ii931aGmFfxbMCxF1ftNCIF2m3A/p1lxC+8tbtnQBjjycBrLsa74 qh6DQ46WmLKg1uu1A5BMylLlNWBBNk7Igx1osQp7888hVCigxWKE7g7owsY4pNB3 mg9fIQ9yc9eSYnqzT9sFQ5eqy/ZZ6Cgq -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:30 2025 by rpki-client