$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: 75/sbWyMZKqb53Gn40e69rp0dPjGklcCpaEhCHo92aM= Subject key identifier: 73:94:B9:F1:D3:0E:B9:D8:A0:A2:C7:D6:63:CE:A4:58:9A:7C:30:D7 Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0C8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 14AF Signing time: Sun 02 Nov 2025 18:22:30 +0000 Manifest this update: Sun 02 Nov 2025 18:22:29 +0000 Manifest next update: Sun 09 Nov 2025 18:22:29 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: WuEMX3wgDTdHnY49epq5fsd/8Ej8CTNuSr/cicP633w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3210 (0xc8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: Nov 2 18:22:29 2025 GMT Not After : Nov 9 18:22:29 2025 GMT Subject: CN=6907a165-a06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:99:2b:87:b8:8e:d3:26:96:9c:c7:6c:72: 8e:8b:7b:0c:ab:85:7d:a5:2d:72:6e:ea:6f:22:53: 3d:b1:b0:46:30:c3:a3:fc:06:d6:1d:43:2d:73:01: 0a:f3:28:91:97:e8:9f:d5:cb:6d:ea:4d:78:a2:97: 82:94:1c:c2:95:7b:b0:3c:aa:46:3a:39:2f:97:72: 3a:17:03:c8:68:b3:8b:7a:99:3d:08:1b:18:43:1a: ea:b4:ae:d1:80:c1:f6:47:d2:79:b4:22:d6:89:a2: 57:20:bc:a0:18:5a:fb:a9:e4:fb:b2:9d:2d:9f:c5: bd:64:90:99:94:02:a9:02:86:88:ca:31:61:ff:c8: cc:66:03:88:da:ff:b2:80:ac:7a:c4:53:46:cc:24: 90:7c:5c:b5:32:41:51:bf:11:9b:7a:1f:f9:d7:40: d8:da:bd:03:e9:fc:94:9b:ad:cd:d0:c7:27:4d:05: 58:1e:2d:76:4d:8e:3a:57:cf:99:84:ec:db:f7:85: d7:e1:87:c1:0d:91:a8:e1:a4:c2:53:4c:c3:9b:d2: 52:54:2e:f0:aa:e6:ef:9b:f9:ea:cc:ce:71:8e:b0: cd:8f:8b:b2:6b:fd:06:63:fd:7e:c9:52:dd:ba:30: 4b:82:2d:f1:fb:3c:98:eb:da:08:49:e7:db:02:25: d3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:94:B9:F1:D3:0E:B9:D8:A0:A2:C7:D6:63:CE:A4:58:9A:7C:30:D7 X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:da:f2:94:f8:55:d8:d8:fb:4c:da:10:29:39:ec:cc:b1:fc: c6:31:60:fa:5b:5e:bf:d1:7d:bb:d4:bb:21:6c:99:b5:c7:80: df:bc:4d:db:d3:db:97:a2:f3:46:04:01:32:16:50:82:2c:68: a2:67:38:be:a0:e3:7f:c6:ae:31:e6:6b:37:84:0f:57:17:6c: 8f:17:30:55:9f:b5:5d:33:22:74:a7:00:0e:96:41:8f:c2:52: 2f:9c:8d:27:eb:a6:8d:03:5f:98:af:21:f2:85:3f:82:5a:14: b2:0e:95:9c:5e:aa:32:78:56:3e:ec:d2:00:14:1e:8a:0c:d5: e8:e1:da:70:cf:fd:7e:01:9b:20:0d:72:d8:fc:b9:9b:83:8a: fa:73:22:9a:fd:de:d4:53:09:1b:53:c8:2d:6f:f7:e4:2b:20: 8e:6d:ed:80:28:6b:ad:ee:7c:a6:23:37:87:83:4b:71:10:3c: 94:01:e7:79:c4:dc:51:21:15:d9:38:d4:2b:3f:18:4f:90:71: 55:a7:ae:83:40:05:74:d9:64:ee:15:01:a4:f2:22:eb:56:79: 20:6a:7d:2e:81:52:e5:11:48:51:0a:72:00:c5:ab:17:b8:ce: 69:30:79:82:a0:b8:c4:c3:50:d1:14:3c:4a:60:c1:49:3c:fb: b5:18:7a:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjUxMTAyMTgyMjI5WhcNMjUxMTA5MTgyMjI5WjAYMRYwFAYD VQQDEw02OTA3YTE2NS1hMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyh2ZK4e4jtMmlpzHbHKOi3sMq4V9pS1ybupvIlM9sbBGMMOj/AbWHUMtcwEK 8yiRl+if1ctt6k14opeClBzClXuwPKpGOjkvl3I6FwPIaLOLepk9CBsYQxrqtK7R gMH2R9J5tCLWiaJXILygGFr7qeT7sp0tn8W9ZJCZlAKpAoaIyjFh/8jMZgOI2v+y gKx6xFNGzCSQfFy1MkFRvxGbeh/510DY2r0D6fyUm63N0McnTQVYHi12TY46V8+Z hOzb94XX4YfBDZGo4aTCU0zDm9JSVC7wqubvm/nqzM5xjrDNj4uya/0GY/1+yVLd ujBLgi3x+zyY69oISefbAiXT7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOUufHT DrnYoKLH1mPOpFiafDDXMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd2vKU+FXY2PtM2hApOezMsfzGMWD6W16/0X271LshbJm1x4DfvE3b 09uXovNGBAEyFlCCLGiiZzi+oON/xq4x5ms3hA9XF2yPFzBVn7VdMyJ0pwAOlkGP wlIvnI0n66aNA1+YryHyhT+CWhSyDpWcXqoyeFY+7NIAFB6KDNXo4dpwz/1+AZsg DXLY/Lmbg4r6cyKa/d7UUwkbU8gtb/fkKyCObe2AKGut7nymIzeHg0txEDyUAed5 xNxRIRXZONQrPxhPkHFVp66DQAV02WTuFQGk8iLrVnkgan0ugVLlEUhRCnIAxasX uM5pMHmCoLjEw1DRFDxKYMFJPPu1GHoq -----END CERTIFICATE-----Generated at Tue Nov 4 07:21:27 2025 by rpki-client