$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: D2DOxMRUetnoUlmjBXZzB3Zb7xooUQZQi/c5mkmlNPI= Subject key identifier: 5D:34:B6:38:72:F2:9E:B0:0B:BE:43:4B:17:F2:96:21:29:40:91:CB Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 21D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 21CA Signing time: Tue 04 Nov 2025 15:59:20 +0000 Manifest this update: Tue 04 Nov 2025 15:59:20 +0000 Manifest next update: Tue 11 Nov 2025 15:59:20 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: 1kKK5DnS/e+FX1RVfSVmSuOTZyJx8ySQ6AB3kSnBZkE=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: dCLTxe5AeU3EWuhpQGl4ZlWRgK483ALuIyneqH0vPGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8662 (0x21d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: Nov 4 15:59:20 2025 GMT Not After : Nov 11 15:59:20 2025 GMT Subject: CN=690a22d8-4470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6a:3a:dd:60:00:3e:0e:e1:7d:ad:32:2d:81: d1:5d:da:f8:f6:c1:4a:31:a0:32:4d:55:7e:a0:a9: 1a:1a:2d:13:af:12:89:38:c3:9d:bf:4f:0a:e3:cc: fc:70:0d:86:ae:c5:21:14:d6:6b:38:c5:f4:80:47: 45:3d:85:d4:22:0c:2a:07:ce:35:90:9a:49:02:32: 36:f2:65:e1:51:ff:c1:ac:0f:4c:eb:05:13:71:76: 25:5b:e8:cc:e8:21:ab:1d:28:4a:3a:1d:33:3d:e1: 78:31:ed:1a:db:a4:fb:d9:b1:46:dd:da:d7:c6:f0: f7:15:c2:8c:9a:6d:e1:ad:2b:ed:78:6b:54:ac:59: 69:32:0e:a9:54:c9:a8:61:5d:5a:8f:53:e2:8a:59: 33:a7:42:79:36:a5:2d:dd:15:e6:0c:93:e6:bc:8d: e5:6c:c9:df:49:dc:83:a9:90:d6:17:a6:72:1b:53: b8:dc:a2:52:c0:59:0a:b7:ad:c5:2f:a5:3f:3d:27: 9f:7b:0e:44:a3:06:bc:8b:b7:b5:70:f9:01:4f:c7: 71:7f:4b:85:85:94:de:e8:c7:92:09:92:da:6e:43: 5f:09:c4:46:5b:9f:0a:f5:81:f0:4a:b8:14:7d:98: 38:82:f6:60:23:69:ac:49:98:b9:1a:83:1f:85:dc: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:B6:38:72:F2:9E:B0:0B:BE:43:4B:17:F2:96:21:29:40:91:CB X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:bb:bb:ee:9c:84:a1:e6:32:37:08:db:2f:a1:65:a5:3a:fc: e0:16:09:93:5f:a0:76:b5:0d:16:6b:11:db:70:de:14:96:5e: 29:c5:0f:9e:89:2f:dc:8f:60:60:e6:1d:39:5a:a2:32:28:e6: fe:0b:37:6b:0a:a7:56:dc:e8:bc:40:6a:61:3a:c8:aa:24:51: 05:8d:89:ca:a5:a3:3b:45:97:14:58:3c:26:2b:7c:aa:82:9f: 33:e1:57:67:49:a5:4c:8a:36:a7:a2:74:1f:7f:3c:e3:97:0e: c1:0c:30:26:3c:53:9e:65:75:0b:c6:95:44:24:08:7f:8e:05: 01:af:a0:b6:1d:07:59:fe:63:12:89:7e:2a:7d:eb:a8:2b:4b: 2c:cd:0f:50:40:ed:56:52:ae:63:fe:d4:94:39:07:b2:13:94: 33:c5:e3:58:23:74:10:6f:e4:12:c6:23:c5:74:3f:3b:f6:b9: df:32:e6:26:95:cc:b5:45:af:fd:fc:bd:38:70:06:79:00:bb: 79:e6:20:45:66:60:dd:56:52:07:0d:4a:04:be:1e:a4:d2:70: 85:de:fb:74:a8:de:e0:9b:b8:4a:c9:93:c9:d2:70:8b:b1:44: f1:30:b4:38:13:1c:df:af:9a:38:2c:18:c0:2c:7f:b5:1c:ff: fd:38:f9:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjUxMTA0MTU1OTIwWhcNMjUxMTExMTU1OTIwWjAYMRYwFAYD VQQDEw02OTBhMjJkOC00NDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Wo63WAAPg7hfa0yLYHRXdr49sFKMaAyTVV+oKkaGi0TrxKJOMOdv08K48z8 cA2GrsUhFNZrOMX0gEdFPYXUIgwqB841kJpJAjI28mXhUf/BrA9M6wUTcXYlW+jM 6CGrHShKOh0zPeF4Me0a26T72bFG3drXxvD3FcKMmm3hrSvteGtUrFlpMg6pVMmo YV1aj1Piilkzp0J5NqUt3RXmDJPmvI3lbMnfSdyDqZDWF6ZyG1O43KJSwFkKt63F L6U/PSefew5Eowa8i7e1cPkBT8dxf0uFhZTe6MeSCZLabkNfCcRGW58K9YHwSrgU fZg4gvZgI2msSZi5GoMfhdxjYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF00tjhy 8p6wC75DSxfyliEpQJHLMB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRu7vunISh5jI3CNsvoWWlOvzgFgmTX6B2tQ0WaxHbcN4Ull4pxQ+e iS/cj2Bg5h05WqIyKOb+CzdrCqdW3Oi8QGphOsiqJFEFjYnKpaM7RZcUWDwmK3yq gp8z4VdnSaVMijanonQffzzjlw7BDDAmPFOeZXULxpVEJAh/jgUBr6C2HQdZ/mMS iX4qfeuoK0sszQ9QQO1WUq5j/tSUOQeyE5QzxeNYI3QQb+QSxiPFdD879rnfMuYm lcy1Ra/9/L04cAZ5ALt55iBFZmDdVlIHDUoEvh6k0nCF3vt0qN7gm7hKyZPJ0nCL sUTxMLQ4Exzfr5o4LBjALH+1HP/9OPmP -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:44 2025 by rpki-client