$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft File: VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json) Hash identifier: aKhM4Xjk57MqLutoMckipdmd5eidjtsTcTULJEUaqFU= Subject key identifier: 14:81:B3:52:CC:85:5D:83:23:E1:1B:6A:E2:9A:5A:57:2E:42:B7:6F Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D Certificate issuer: /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft Manifest number: 36 Signing time: Mon 03 Nov 2025 07:34:20 +0000 Manifest this update: Mon 03 Nov 2025 07:34:20 +0000 Manifest next update: Mon 10 Nov 2025 07:34:20 +0000 Files and hashes: 1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: A6NIPiXWGQ1iQrc3Wvs2UnbQiTkAUAS3506YMGIqIWQ=) 2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: qV69gg2P4bFihZzX2d7CSbRtDBRP/ma/ao4YNWgRlJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D Validity Not Before: Nov 3 07:34:20 2025 GMT Not After : Nov 10 07:34:20 2025 GMT Subject: CN=69085afc-68e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:db:1e:62:a0:90:6f:b8:49:df:f8:ee:96: 56:86:72:29:a1:2e:b8:68:4b:95:59:13:ef:6e:fc: 8b:2c:49:64:21:cc:29:39:19:84:9a:01:6f:d5:ec: a1:18:77:12:23:ef:52:79:4a:27:5a:c0:16:56:df: 07:04:94:6e:c8:69:64:3e:3d:8f:0c:50:8f:e6:96: a8:f4:d4:9a:52:21:66:3b:43:2b:d3:18:5c:27:2d: ef:48:90:5e:68:ff:f2:af:51:70:5a:9e:d8:af:d7: bb:a0:f0:09:65:71:3e:59:67:48:fd:78:75:f6:a0: 1c:9b:43:c8:fc:20:ec:3a:01:9b:73:0d:99:e4:2c: 3a:4e:57:71:5f:80:62:4d:ff:51:76:fe:fa:e1:d9: 25:d2:d1:b3:fb:9d:a7:65:5a:62:3b:1a:99:69:0b: 92:47:4a:70:b2:22:3a:9d:5f:41:cc:4b:9b:26:ec: c2:93:36:0d:ff:82:b0:db:fe:0d:30:8d:63:02:4e: 3e:39:fb:a3:b6:77:e9:1e:04:9f:55:de:83:a1:b4: 74:81:ab:51:1c:3e:95:04:36:75:1f:33:8e:ed:3e: c7:55:24:ef:a3:ac:bb:bb:3f:d9:5a:a7:12:af:c3: a8:e0:0c:f6:56:bf:5b:d8:7b:39:c5:c3:2f:ac:d8: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:81:B3:52:CC:85:5D:83:23:E1:1B:6A:E2:9A:5A:57:2E:42:B7:6F X509v3 Authority Key Identifier: keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:cd:12:78:d1:54:82:b6:85:5d:ba:71:11:ea:4d:e9:e9:80: 6d:b4:f3:9b:22:c4:13:8e:a0:18:05:bc:c0:fd:ed:79:27:d2: f3:2d:b1:34:8f:70:55:f8:87:21:e0:60:84:f4:97:a0:20:2f: 94:0d:09:3d:51:90:71:7e:bc:b7:bb:62:16:69:40:e6:41:38: 92:45:46:79:f1:c7:75:91:3c:e3:3b:e8:ec:7d:d8:91:49:83: 05:37:18:3d:5c:9c:1e:dc:bf:45:08:bb:23:67:ff:1f:c2:c4: 17:74:5e:48:a7:71:4b:7a:53:e0:c4:b5:14:44:40:80:00:e2: 85:57:54:1d:36:ae:6f:bd:66:63:e9:90:77:72:6a:62:42:bc: 72:8b:cc:53:1f:24:a6:83:bf:66:1d:5f:2e:05:43:95:1a:22: 37:a3:b7:df:36:c5:cc:49:22:1f:2a:1d:ef:8e:0f:39:35:20: 4f:98:03:ae:52:60:30:6e:7d:f6:5e:23:02:3e:52:9b:01:43: 6e:72:9f:e3:30:c6:1a:06:2b:56:24:82:a4:5b:e8:a0:b8:d6: a7:2c:37:b6:5e:56:f1:ad:d0:a2:29:5a:2e:65:e3:79:3a:d7: f7:d0:d5:ec:fa:c4:64:79:f7:21:90:99:95:5f:5a:6c:8b:13: 83:59:64:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0U0QTExMC8GA1UEBRMoNTQxREQxNUUxNTRFNTA4RkIwMEZEQjI0NUM0RTc2RjJB RDNEODgxRDAeFw0yNTExMDMwNzM0MjBaFw0yNTExMTAwNzM0MjBaMBgxFjAUBgNV BAMTDTY5MDg1YWZjLTY4ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw7tseYqCQb7hJ3/jullaGcimhLrhoS5VZE+9u/IssSWQhzCk5GYSaAW/V7KEY dxIj71J5SidawBZW3wcElG7IaWQ+PY8MUI/mlqj01JpSIWY7QyvTGFwnLe9IkF5o //KvUXBantiv17ug8AllcT5ZZ0j9eHX2oBybQ8j8IOw6AZtzDZnkLDpOV3FfgGJN /1F2/vrh2SXS0bP7nadlWmI7GplpC5JHSnCyIjqdX0HMS5sm7MKTNg3/grDb/g0w jWMCTj45+6O2d+keBJ9V3oOhtHSBq1EcPpUENnUfM47tPsdVJO+jrLu7P9lapxKv w6jgDPZWv1vYeznFwy+s2LPXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFIGzUsyF XYMj4Rtq4ppaVy5Ct28wHwYDVR0jBBgwFoAUVB3RXhVOUI+wD9skXE528q09iB0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDRTRBL0UxRUExOUY2Njcz ODExRjBBRDU2NkQ3RkM0RjlBRTAyL1ZCM1JYaFZPVUktd0Q5c2tYRTUyOHEwOWlC MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkIzUlhoVk9VSS13RDlza1hFNTI4cTA5aUIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD RTRBL0UxRUExOUY2NjczODExRjBBRDU2NkQ3RkM0RjlBRTAyL1ZCM1JYaFZPVUkt d0Q5c2tYRTUyOHEwOWlCMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAALNEnjRVIK2hV26cRHqTenpgG2085sixBOOoBgFvMD97Xkn0vMtsTSP cFX4hyHgYIT0l6AgL5QNCT1RkHF+vLe7YhZpQOZBOJJFRnnxx3WRPOM76Ox92JFJ gwU3GD1cnB7cv0UIuyNn/x/CxBd0XkincUt6U+DEtRREQIAA4oVXVB02rm+9ZmPp kHdyamJCvHKLzFMfJKaDv2YdXy4FQ5UaIjejt982xcxJIh8qHe+ODzk1IE+YA65S YDBuffZeIwI+UpsBQ25yn+MwxhoGK1YkgqRb6KC41qcsN7ZeVvGt0KIpWi5l43k6 1/fQ1ez6xGR59yGQmZVfWmyLE4NZZH8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:43 2025 by rpki-client