$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft File: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft (raw, json) Hash identifier: ooIzz8eZBW0mAgCN9iuP0Dv0lOE2jlHfTvq4rRan07k= Subject key identifier: 29:EA:73:69:BF:FE:5C:FC:E0:E8:13:A1:FD:79:A6:54:8F:1C:1C:F1 Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52 Certificate issuer: /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft Manifest number: 0777 Signing time: Fri 24 Oct 2025 22:31:27 +0000 Manifest this update: Fri 24 Oct 2025 22:31:26 +0000 Manifest next update: Fri 31 Oct 2025 22:31:26 +0000 Files and hashes: 1: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl (hash: sQIKAVLD5ypRZiyKYFwzzmszTVQb5OO0DH+PAWX7ofc=) 2: 0ECDB4C65E7011EC8FE5F56DC4F9AE02.roa (hash: PgsReX4a/HcM3MuEijdLXSrLd7Vlscm+5dJmyynTyh0=) 3: 7D232E6033A611EB8B013530C4F9AE02.roa (hash: hDAuX39H3T612/n8lUzzs0AUGHN/iCv7TSdpcCPJeD8=) 4: 7C82C65A33A611EB8B013530C4F9AE02.roa (hash: XdLA28efVQQSfHK5ll0cvp5Im97+KOvTKJ73pGEogRs=) 5: 7B44296E33A611EB8B013530C4F9AE02.roa (hash: oDUZAaQl3lPYyTgIw4jAYKCdROz450OeSq3jTFkHMK8=) 6: 7ABF29BC33A611EB8B013530C4F9AE02.roa (hash: DkLMEslw0c7GL3UX6ZX4tSACXhQrny6AEc7AjFls8Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 22:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852 Validity Not Before: Oct 24 22:31:26 2025 GMT Not After : Oct 31 22:31:26 2025 GMT Subject: CN=68fbfe3e-e25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:2a:60:2b:4a:da:50:36:5d:7a:a1:14:2c: d3:ab:bc:fd:66:8c:fb:07:ee:77:2a:8c:93:a4:43: e7:39:6b:0d:83:ae:88:c0:02:b1:e9:6e:ad:bf:52: 68:58:b6:a5:3e:7c:34:76:62:38:9e:e9:0f:0c:bc: b2:a6:f7:ba:ca:87:e9:bd:66:31:15:e9:a3:c9:a9: a3:bc:7f:f5:03:1b:82:5f:db:b0:e7:70:b8:2c:db: 37:0e:84:99:1b:58:22:ed:83:a2:f3:9f:4e:34:16: 61:23:08:9f:df:33:80:20:ef:fe:e9:5e:1c:c3:91: 3c:f2:ca:21:c1:1d:9c:34:28:b8:fb:fa:b0:8b:82: 21:28:e5:95:f2:ef:eb:65:b7:5d:9c:04:73:ef:95: 03:af:e0:cf:63:a9:d2:aa:7b:39:62:48:bc:85:67: 87:f5:ec:8d:1e:14:da:10:2f:31:3e:80:de:d5:c3: 20:80:01:2a:11:bc:e0:f1:fe:64:e7:e2:be:14:44: 5a:1a:fb:34:42:2d:64:4f:50:b6:e5:92:12:57:d5: ce:7b:21:01:a2:8d:58:91:b1:47:c5:74:43:d2:de: 8e:c6:f4:66:c8:64:c8:42:db:20:67:09:7a:9b:94: a8:9c:4c:ec:aa:fe:9e:22:6e:d3:90:5c:74:a2:01: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EA:73:69:BF:FE:5C:FC:E0:E8:13:A1:FD:79:A6:54:8F:1C:1C:F1 X509v3 Authority Key Identifier: keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c9:c6:0a:02:93:1d:57:c0:75:92:38:e5:7f:d5:ab:02:a0: ba:31:01:49:cb:22:0e:0b:34:93:d6:5a:03:ab:d0:4c:96:32: e5:87:53:9c:eb:71:30:68:51:ed:bc:41:66:e3:e4:15:42:dc: 36:43:92:5d:89:94:5b:e7:46:74:dc:7d:f6:ac:e2:54:ea:7a: d0:77:3c:fe:2a:de:2c:42:4e:2f:60:bd:9f:5d:4f:52:1b:28: 71:d0:49:cb:01:80:ee:5e:a4:2f:f7:df:87:4e:0c:a2:7d:ff: 8e:40:28:2c:5d:40:01:b3:14:c6:26:1b:11:18:61:d5:9e:3f: 81:96:4f:e7:b4:89:f1:05:8e:c6:13:a4:f2:42:f0:17:be:94: 72:e0:79:d0:c1:1a:d9:c5:0f:60:ca:33:af:8b:0c:a3:7a:a9: 20:90:31:91:4b:44:a0:2c:5f:04:77:55:0f:f2:ff:3d:c1:54: 31:82:40:82:d0:7d:c6:f1:23:56:ec:26:a0:7f:d8:9e:38:e0: 28:db:2d:06:c7:ad:89:e8:3a:e2:7a:d2:67:dd:72:18:35:32: 0e:f9:49:c4:b5:2b:44:ef:a7:65:61:16:ee:9d:0c:3e:68:9c: b9:96:e0:34:dc:f8:1c:e2:40:25:8a:5e:ed:18:b9:56:45:1f: 63:54:b6:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKEJDQjgwREU0NDcwNUNGQzRGODM5Nzg1OTBDOUYzRkMy RTJDMkY4NTIwHhcNMjUxMDI0MjIzMTI2WhcNMjUxMDMxMjIzMTI2WjAYMRYwFAYD VQQDEw02OGZiZmUzZS1lMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQUqYCtK2lA2XXqhFCzTq7z9Zoz7B+53KoyTpEPnOWsNg66IwAKx6W6tv1Jo WLalPnw0dmI4nukPDLyypve6yofpvWYxFemjyamjvH/1AxuCX9uw53C4LNs3DoSZ G1gi7YOi859ONBZhIwif3zOAIO/+6V4cw5E88sohwR2cNCi4+/qwi4IhKOWV8u/r ZbddnARz75UDr+DPY6nSqns5Yki8hWeH9eyNHhTaEC8xPoDe1cMggAEqEbzg8f5k 5+K+FERaGvs0Qi1kT1C25ZISV9XOeyEBoo1YkbFHxXRD0t6OxvRmyGTIQtsgZwl6 m5SonEzsqv6eIm7TkFx0ogFJwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnqc2m/ /lz84OgTof15plSPHBzxMB8GA1UdIwQYMBaAFLy4DeRHBc/E+Dl4WQyfP8LiwvhS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GMUE5QkFCQzMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi92TGdONUVjRno4VDRPWGhaREo4X3d1TEMt RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZMZ041RWNGejhUNE9YaFpESjhfd3VMQy1GSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GMUE5QkFCQzMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi92TGdONUVjRno4 VDRPWGhaREo4X3d1TEMtRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACycYKApMdV8B1kjjlf9WrAqC6MQFJyyIOCzST1loDq9BMljLlh1Oc 63EwaFHtvEFm4+QVQtw2Q5JdiZRb50Z03H32rOJU6nrQdzz+Kt4sQk4vYL2fXU9S Gyhx0EnLAYDuXqQv99+HTgyiff+OQCgsXUABsxTGJhsRGGHVnj+Blk/ntInxBY7G E6TyQvAXvpRy4HnQwRrZxQ9gyjOviwyjeqkgkDGRS0SgLF8Ed1UP8v89wVQxgkCC 0H3G8SNW7Cagf9ieOOAo2y0Gx62J6DrietJn3XIYNTIO+UnEtStE76dlYRbunQw+ aJy5luA03Pgc4kAlil7tGLlWRR9jVLan -----END CERTIFICATE-----Generated at Sat Oct 25 22:52:53 2025 by rpki-client