$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: A0I/wKObzAa2j6P+Dhmy8EebvrYzwHIEdtC0bEht1mE= Subject key identifier: 10:50:D3:33:18:37:F3:97:56:AC:6E:82:07:3B:F9:32:02:3A:D6:B4 Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 0230 Signing time: Sun 02 Nov 2025 19:47:36 +0000 Manifest this update: Sun 02 Nov 2025 19:47:36 +0000 Manifest next update: Sun 09 Nov 2025 19:47:36 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: 88A7M7fK6xkjzVn/P+Lo2rNvz6+1SXwfA4JoghdQCsA=) 2: 8ED301D0782011F0BDB6E683C4F9AE02.roa (hash: qjBtyTQ/dYsRebIp6ZkwlHiVqfqKITocMEosdGcOqv0=) 3: 96C1C6A0782111F0A5880F87C4F9AE02.roa (hash: G2RSm0IwLRt/typGeA6hLdDQJj9eRF45VegOaQjSFIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Nov 2 19:47:36 2025 GMT Not After : Nov 9 19:47:36 2025 GMT Subject: CN=6907b558-5a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:e5:b9:3f:c9:ec:76:b9:bc:ce:9b:c1:12: 4e:10:98:a8:01:bd:98:38:81:87:4a:36:65:58:e3: c7:38:d3:0f:bc:95:b0:07:ca:ba:ba:2b:44:ee:f6: cb:85:c3:81:21:55:b2:0b:19:cd:31:00:45:fb:2a: 49:8b:f2:07:77:9a:a3:1a:f6:75:9e:23:60:9f:d2: 12:9d:79:dc:fb:98:c0:d8:16:84:a3:d9:a5:b7:c2: 3f:14:75:3a:5b:7a:e0:0a:99:0b:82:c1:4e:1a:39: 1d:09:7e:37:e0:d3:f1:67:e1:d7:d7:dc:5e:93:3d: f0:de:e6:51:ba:f8:fa:93:74:f9:e3:0e:59:3d:e6: d0:c9:2d:74:8c:b9:53:8f:1e:ea:36:d4:46:34:1e: 4f:a9:37:7d:70:4c:88:3c:7e:62:2d:69:c4:51:a8: 96:98:c6:a4:02:bb:86:65:c0:f2:b2:97:b9:e6:93: b0:de:8b:19:95:b1:41:d4:91:01:dd:8e:23:e4:c1: 16:d0:78:80:5f:98:d1:36:e1:4a:c4:29:06:38:f6: af:ee:51:77:84:f2:a5:c8:14:8a:5c:fb:23:36:3a: c4:8f:77:0e:ab:b0:86:70:a7:2f:50:a1:ec:06:be: 22:ed:b6:75:ad:ec:f2:e2:2b:c7:27:8f:9a:50:a4: 91:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:50:D3:33:18:37:F3:97:56:AC:6E:82:07:3B:F9:32:02:3A:D6:B4 X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:61:32:a8:18:54:c6:47:c5:4d:e8:23:9f:2a:2b:cc:8d:14: bc:37:13:dd:06:d4:9f:6e:1a:9c:0a:7c:7b:15:67:ec:eb:e8: c0:e7:80:21:66:0d:04:cc:13:5a:9f:6d:17:bc:9e:f5:56:de: 66:1f:04:24:25:45:d1:40:24:94:e0:26:f1:8f:74:3a:b6:63: af:f7:44:44:53:6b:12:bf:27:9c:09:ae:1f:64:d1:69:50:fc: d2:f9:a0:00:4c:f9:9d:60:8d:b6:5c:80:4e:41:66:fe:a8:49: 19:5f:9d:ac:33:23:03:4c:b9:aa:f5:1f:53:bd:d2:8e:c0:66: 5f:df:bc:e1:5d:65:dc:87:68:0e:f2:11:b0:d8:ff:06:a2:5f: 21:85:4c:ee:7c:f8:17:d1:d3:be:72:4f:da:0f:ec:f2:e9:98: ea:99:e6:4c:7f:68:1e:2b:e9:e6:2e:c4:43:f5:34:03:96:ab: d8:6c:14:0c:32:91:ef:98:2f:90:35:7b:40:65:3e:26:3d:7c: 96:e5:e0:0b:a3:b4:96:2b:a2:ba:e3:af:d1:43:46:bc:10:66: 25:9c:14:ed:83:15:66:cb:e4:4e:c2:ad:82:98:5e:54:e4:77: b2:51:cd:e6:7c:ff:db:01:f8:44:0f:05:db:cb:7d:5a:f8:4c: 13:9d:54:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUxMTAyMTk0NzM2WhcNMjUxMTA5MTk0NzM2WjAYMRYwFAYD VQQDEw02OTA3YjU1OC01YTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2HluT/J7Ha5vM6bwRJOEJioAb2YOIGHSjZlWOPHONMPvJWwB8q6uitE7vbL hcOBIVWyCxnNMQBF+ypJi/IHd5qjGvZ1niNgn9ISnXnc+5jA2BaEo9mlt8I/FHU6 W3rgCpkLgsFOGjkdCX434NPxZ+HX19xekz3w3uZRuvj6k3T54w5ZPebQyS10jLlT jx7qNtRGNB5PqTd9cEyIPH5iLWnEUaiWmMakAruGZcDyspe55pOw3osZlbFB1JEB 3Y4j5MEW0HiAX5jRNuFKxCkGOPav7lF3hPKlyBSKXPsjNjrEj3cOq7CGcKcvUKHs Br4i7bZ1rezy4ivHJ4+aUKSRhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBQ0zMY N/OXVqxuggc7+TICOta0MB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtYTKoGFTGR8VN6COfKivMjRS8NxPdBtSfbhqcCnx7FWfs6+jA54Ah Zg0EzBNan20XvJ71Vt5mHwQkJUXRQCSU4Cbxj3Q6tmOv90REU2sSvyecCa4fZNFp UPzS+aAATPmdYI22XIBOQWb+qEkZX52sMyMDTLmq9R9TvdKOwGZf37zhXWXch2gO 8hGw2P8Gol8hhUzufPgX0dO+ck/aD+zy6ZjqmeZMf2geK+nmLsRD9TQDlqvYbBQM MpHvmC+QNXtAZT4mPXyW5eALo7SWK6K646/RQ0a8EGYlnBTtgxVmy+ROwq2CmF5U 5HeyUc3mfP/bAfhEDwXby31a+EwTnVQD -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:33 2025 by rpki-client