$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json) Hash identifier: Bsn/YFH2IOqHAfLXdt1QiKEKz+2hht24S0Loz+JOxuo= Subject key identifier: EC:E2:A7:4D:61:02:B5:B6:E6:2A:63:B0:FE:2A:D7:E4:0E:76:FA:0F Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft Manifest number: 0242 Signing time: Wed 05 Nov 2025 01:52:14 +0000 Manifest this update: Wed 05 Nov 2025 01:52:14 +0000 Manifest next update: Wed 12 Nov 2025 01:52:14 +0000 Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: J48af1aTcljkU7OdWgO95TqCBhSbyfipQOrDbH9p+oA=) 2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: L4gwhY7icNtGh4Pw0dLfgymKZ1S0Ut+p6qHkiovinK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Validity Not Before: Nov 5 01:52:14 2025 GMT Not After : Nov 12 01:52:14 2025 GMT Subject: CN=690aadce-cf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:02:41:12:17:96:10:c1:b1:7d:97:72:d6: fe:26:50:d2:dd:8f:1e:50:a4:cb:f7:e2:04:14:fd: 68:a7:01:83:6f:64:32:58:cc:cb:f7:c0:fe:17:9a: a4:8f:0b:35:06:58:b9:c8:91:9d:20:9d:43:03:41: d4:d2:12:22:90:7d:b6:85:00:8b:ab:7e:d1:1d:13: 63:77:a1:61:f4:69:3e:73:8e:fd:f9:95:00:47:06: 86:9b:b4:a1:65:e6:9b:6f:8a:13:47:77:58:2b:42: 4d:c7:e0:d2:ad:22:4f:12:fe:6b:20:ed:f9:66:2d: e2:f3:ba:09:24:12:13:37:40:c9:76:a4:5e:ba:41: d9:05:85:41:17:31:89:6c:39:31:7f:d5:b4:26:56: d7:0d:17:6a:e0:35:0f:f8:9c:90:fb:02:85:aa:a8: f1:11:0a:b6:db:7a:fc:23:9d:e2:80:73:97:4f:07: e5:92:53:5c:70:a8:43:c9:1e:1e:46:47:99:78:e9: 6a:91:c9:98:15:e9:b6:52:d1:f9:e4:c0:5e:0d:18: 67:4b:e6:23:a1:d7:dd:c4:a5:eb:a8:e1:e0:37:1e: 13:d1:ca:98:fb:22:0c:54:b2:74:7b:e5:9c:4f:c7: c6:b9:89:5f:ab:1c:e1:4e:a5:1c:5f:e6:cb:36:ed: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:A7:4D:61:02:B5:B6:E6:2A:63:B0:FE:2A:D7:E4:0E:76:FA:0F X509v3 Authority Key Identifier: keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e3:e3:2e:68:74:e2:d7:d9:54:ae:4e:03:56:c3:7c:c9:24: 5e:4f:41:68:9d:48:44:08:36:13:ae:b4:b0:8e:07:ae:42:db: c1:5d:0f:06:54:f9:73:21:66:ad:14:f6:81:2a:c2:53:6b:69: 1f:13:47:dc:3f:62:f3:94:07:cb:d6:cc:27:64:8e:95:b4:64: 53:55:ed:4d:ba:97:3e:c7:60:2d:6c:66:20:2f:d0:99:c4:1f: 86:b7:31:7c:87:7b:74:61:00:d9:68:fe:d3:f5:53:83:37:fb: 32:a8:00:49:74:41:c3:ea:44:d8:6d:19:87:ff:1a:51:fa:33: 83:3d:51:10:65:e0:36:b4:e1:7d:d9:cb:25:c6:26:4f:d0:80: fd:8f:4e:c1:76:b0:4d:31:d0:a1:9d:1d:d0:dd:73:29:b8:82: d6:78:45:88:18:f8:cb:98:62:f9:cb:88:6f:5e:62:fe:a2:22: fb:64:6a:2c:c5:2d:01:21:5c:c2:34:dc:38:12:09:96:3d:1b: c0:1b:1c:75:bb:00:8e:f6:ac:e1:e6:53:82:1e:8a:57:3b:cc: bf:d6:dd:af:5a:b0:97:ad:22:14:d3:c3:51:e7:b2:ac:48:9d: 33:3c:a6:ad:09:8e:e4:f1:16:ed:4d:a2:d5:13:0e:33:6e:ec: 2d:9c:ae:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MTUxMTAvBgNVBAUTKEJDQjE2QTg4NzNCMUJFMTMyNkVCNUNEQjkwQjE4NjEx NURBNzRENjcwHhcNMjUxMTA1MDE1MjE0WhcNMjUxMTEyMDE1MjE0WjAYMRYwFAYD VQQDEw02OTBhYWRjZS1jZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwECQRIXlhDBsX2Xctb+JlDS3Y8eUKTL9+IEFP1opwGDb2QyWMzL98D+F5qk jws1Bli5yJGdIJ1DA0HU0hIikH22hQCLq37RHRNjd6Fh9Gk+c479+ZUARwaGm7Sh Zeabb4oTR3dYK0JNx+DSrSJPEv5rIO35Zi3i87oJJBITN0DJdqReukHZBYVBFzGJ bDkxf9W0JlbXDRdq4DUP+JyQ+wKFqqjxEQq223r8I53igHOXTwflklNccKhDyR4e RkeZeOlqkcmYFem2UtH55MBeDRhnS+YjodfdxKXrqOHgNx4T0cqY+yIMVLJ0e+Wc T8fGuYlfqxzhTqUcX+bLNu38ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzip01h ArW25ipjsP4q1+QOdvoPMB8GA1UdIwQYMBaAFLyxaohzsb4TJutc25CxhhFdp01n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcxNS82OThCOTYzQTQy OTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZoTW02MXpia0xHR0VWMm5U V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMRnFpSE94dmhNbTYxemJrTEdHRVYyblRXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcxNS82OThCOTYzQTQyOTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZo TW02MXpia0xHR0VWMm5UV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ4+MuaHTi19lUrk4DVsN8ySReT0FonUhECDYTrrSwjgeuQtvBXQ8G VPlzIWatFPaBKsJTa2kfE0fcP2LzlAfL1swnZI6VtGRTVe1Nupc+x2AtbGYgL9CZ xB+GtzF8h3t0YQDZaP7T9VODN/syqABJdEHD6kTYbRmH/xpR+jODPVEQZeA2tOF9 2cslxiZP0ID9j07BdrBNMdChnR3Q3XMpuILWeEWIGPjLmGL5y4hvXmL+oiL7ZGos xS0BIVzCNNw4EgmWPRvAGxx1uwCO9qzh5lOCHopXO8y/1t2vWrCXrSIU08NR57Ks SJ0zPKatCY7k8RbtTaLVEw4zbuwtnK7B -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:32 2025 by rpki-client