$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json) Hash identifier: pqakjCcSSnMO22Ox5AYgsOr44cDrxgFjNUr6KcWox8A= Subject key identifier: 34:33:A2:21:F0:B0:B6:E3:4E:25:60:36:DA:FD:9B:16:BB:D1:FF:8B Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft Manifest number: 0858 Signing time: Sun 02 Nov 2025 20:40:48 +0000 Manifest this update: Sun 02 Nov 2025 20:40:47 +0000 Manifest next update: Sun 09 Nov 2025 20:40:47 +0000 Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: xwb6vIL8zek/WG3Z1vaQmY8s7Gc0fGx04HB1F0M1lU4=) 2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: F2ehSlNBpZVAOeI83NaC14EsDciABgTNrvpmZu4awNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Nov 2 20:40:47 2025 GMT Not After : Nov 9 20:40:47 2025 GMT Subject: CN=6907c1cf-3714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:be:91:32:a1:03:1b:67:ff:5d:e3:ca:af: 98:5b:13:4c:95:f1:3b:8f:18:83:f2:c5:ac:cf:be: 4a:a7:3c:5b:e2:b6:85:b7:43:48:1a:00:e9:37:36: 1c:39:05:06:c5:ba:a7:50:27:29:b4:cb:23:a0:c6: de:8d:89:bf:78:09:27:72:47:3b:75:5a:34:7f:f0: 09:2b:51:c9:0f:71:84:ad:d4:c2:f6:f3:be:e4:de: 0c:90:e9:ba:76:7a:3a:39:ed:cc:f7:7c:8b:55:45: 81:c6:bd:1d:da:9b:0b:23:a6:a2:9a:79:f4:11:51: 5f:aa:9f:85:13:f3:70:e4:14:48:1d:42:be:6a:f3: 5e:21:f5:a4:04:e1:30:fb:22:0e:9f:27:65:a5:de: 4a:bb:62:0c:c8:98:3c:21:d2:6a:f2:ee:70:f8:83: 22:24:4d:55:34:5d:84:2c:15:75:61:a1:10:85:c5: 44:c1:b0:82:6d:07:58:bd:21:54:84:1f:a6:fa:a6: 2d:6e:53:4f:b8:0d:33:b1:f2:64:02:f0:54:dd:ce: 12:19:07:f4:28:33:38:aa:cb:7d:c9:89:f1:80:5c: 2b:5f:0f:45:6f:b3:de:28:3b:53:d4:f2:c8:05:27: 1f:91:74:27:63:74:8b:9d:bd:e4:40:21:be:7a:cd: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:33:A2:21:F0:B0:B6:E3:4E:25:60:36:DA:FD:9B:16:BB:D1:FF:8B X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:92:88:b8:7c:6d:cf:df:60:53:f6:db:d3:cc:9e:4c:a0:a7: 14:1e:68:38:51:a0:fd:ac:a9:78:c0:17:e9:83:69:97:69:99: b2:15:d8:d0:78:3f:82:c9:3c:5d:b1:7a:93:45:a0:c6:93:8f: 3c:be:20:f9:a0:d2:f3:5e:e6:46:b8:7e:ec:16:03:75:b6:f1: 6a:4d:f3:e5:14:54:a9:67:cd:2d:9e:18:35:81:0e:a4:0d:85: 4b:3d:71:1b:9d:6b:31:70:33:41:30:da:b9:b9:24:4b:26:85: 86:ee:97:b1:da:9e:f8:76:80:eb:61:3d:36:14:42:12:4b:e9: b8:ed:f3:dd:c7:0d:24:b6:d9:89:1e:61:46:0e:8a:7b:85:2a: d9:15:c9:57:6b:40:b0:f8:d3:64:0e:0b:4c:a6:1c:17:ac:50: dd:a6:7e:a2:fe:0f:4d:de:d9:cf:12:3a:97:78:5c:4f:5e:0b: 57:e4:e0:75:fa:6a:57:fd:8e:06:8b:0b:60:dd:0b:f0:e0:12: 3a:69:d6:f6:46:2c:87:67:80:0c:8c:a1:a6:f2:d5:3d:ae:ad: 85:70:a9:31:78:e1:fb:77:a5:6d:d0:fd:bf:8c:01:d5:86:23: fc:c4:48:9b:15:20:cd:d7:9b:c6:b7:f8:4e:2e:aa:9b:41:25: 9d:63:09:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjUxMTAyMjA0MDQ3WhcNMjUxMTA5MjA0MDQ3WjAYMRYwFAYD VQQDEw02OTA3YzFjZi0zNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTm+kTKhAxtn/13jyq+YWxNMlfE7jxiD8sWsz75Kpzxb4raFt0NIGgDpNzYc OQUGxbqnUCcptMsjoMbejYm/eAknckc7dVo0f/AJK1HJD3GErdTC9vO+5N4MkOm6 dno6Oe3M93yLVUWBxr0d2psLI6aimnn0EVFfqp+FE/Nw5BRIHUK+avNeIfWkBOEw +yIOnydlpd5Ku2IMyJg8IdJq8u5w+IMiJE1VNF2ELBV1YaEQhcVEwbCCbQdYvSFU hB+m+qYtblNPuA0zsfJkAvBU3c4SGQf0KDM4qst9yYnxgFwrXw9Fb7PeKDtT1PLI BScfkXQnY3SLnb3kQCG+es2XaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQzoiHw sLbjTiVgNtr9mxa70f+LMB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhkoi4fG3P32BT9tvTzJ5MoKcUHmg4UaD9rKl4wBfpg2mXaZmyFdjQ eD+CyTxdsXqTRaDGk488viD5oNLzXuZGuH7sFgN1tvFqTfPlFFSpZ80tnhg1gQ6k DYVLPXEbnWsxcDNBMNq5uSRLJoWG7pex2p74doDrYT02FEISS+m47fPdxw0kttmJ HmFGDop7hSrZFclXa0Cw+NNkDgtMphwXrFDdpn6i/g9N3tnPEjqXeFxPXgtX5OB1 +mpX/Y4Giwtg3Qvw4BI6adb2RiyHZ4AMjKGm8tU9rq2FcKkxeOH7d6Vt0P2/jAHV hiP8xEibFSDN15vGt/hOLqqbQSWdYwl+ -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:15 2025 by rpki-client