$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: 1f4YJcal13jdINXl9HinxM9NHvqaf0EXHFyRb0q9fDo= Subject key identifier: CB:CD:D8:02:35:37:77:F1:F5:87:FA:C9:F0:AE:91:BB:A4:E7:DE:81 Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0DE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0DD3 Signing time: Tue 04 Nov 2025 17:58:37 +0000 Manifest this update: Tue 04 Nov 2025 17:58:37 +0000 Manifest next update: Tue 11 Nov 2025 17:58:37 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: zp1hxYxfSatZoN9OvKmTJnXVa7x8gqwzp1Mi+hvEW7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3556 (0xde4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: Nov 4 17:58:37 2025 GMT Not After : Nov 11 17:58:37 2025 GMT Subject: CN=690a3ecd-c71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:6a:ed:20:12:99:75:32:e4:28:0a:92:66: 52:93:e6:0d:74:75:e9:8d:e1:eb:b5:93:d0:05:7f: 1b:17:3b:a4:b7:0f:b8:04:c3:d6:f0:1c:30:b9:8b: 65:50:84:19:61:cf:e5:0d:52:81:cc:f7:9b:36:6b: f8:5f:4f:b2:70:3a:8a:7c:ca:e2:32:e1:2f:0a:7d: 44:3a:8e:53:87:0c:2a:a9:07:2f:4b:a3:84:02:90: d1:94:6c:26:32:5c:1a:62:46:24:2f:ac:cb:86:01: ff:d6:7d:6b:3d:16:d7:00:c1:1b:06:47:96:e9:15: d9:9c:86:2e:ae:8e:d2:21:94:09:9e:ee:95:78:e1: 1a:0a:48:30:42:de:73:2a:24:66:82:6a:42:d7:80: 6d:59:27:36:e8:f5:66:96:0f:8e:69:f1:9e:11:af: 87:00:4d:ef:ed:97:92:3f:a1:ae:19:62:bc:f5:48: 71:35:7d:84:09:fb:b2:37:07:20:c9:c1:94:67:41: 4f:c7:a9:7e:81:2c:58:44:2a:54:f6:e2:de:d6:9a: 87:49:93:47:cc:49:1e:c1:a3:42:fd:71:e4:82:4f: f8:11:23:42:6a:22:30:ca:e4:c9:ee:52:d2:98:66: 6f:02:cb:dd:23:76:81:48:ab:3b:45:93:87:50:3d: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CD:D8:02:35:37:77:F1:F5:87:FA:C9:F0:AE:91:BB:A4:E7:DE:81 X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b9:36:27:ff:e5:ac:4c:3f:41:46:ee:7b:ea:6c:75:bf:2a: 84:88:86:52:87:d3:dc:b3:b0:6d:66:d8:8e:c9:d2:00:cd:02: a1:4a:23:5d:00:71:04:d5:8c:82:88:e8:3b:1f:4d:4e:6c:1e: 08:04:86:b2:76:eb:7d:e7:96:be:0c:5a:3e:34:8f:ca:86:36: 8b:24:6f:f5:68:d7:11:41:04:85:31:77:2c:fe:6e:18:00:aa: 56:31:cc:8f:d5:5d:f7:cc:1e:b6:fd:ab:61:80:e7:46:5b:cb: ad:6b:80:fc:4a:07:92:d0:c2:b5:19:96:c5:f1:5d:78:63:8e: 90:38:c0:38:84:a8:6d:86:fb:16:74:61:79:aa:d0:45:d9:ed: 0f:23:e3:3f:d8:ce:d6:91:e2:32:59:2f:d6:84:a8:0d:88:c6: 77:e6:20:e8:7a:1a:4b:3b:5e:4f:e2:80:2b:ca:4f:fc:87:31: 3a:32:29:2f:bf:01:59:d2:6e:c0:81:cc:d2:29:f5:f3:d3:d4: fb:0e:41:2a:f2:10:7e:d8:20:99:74:7b:60:97:07:85:b8:fe: c7:f9:63:1e:ff:d6:00:a4:4b:5b:8d:52:af:a3:a2:20:70:b3: 67:8c:64:f4:bb:e7:b2:66:f0:fe:29:38:03:ee:ea:7c:34:a2: 43:13:96:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjUxMTA0MTc1ODM3WhcNMjUxMTExMTc1ODM3WjAYMRYwFAYD VQQDEw02OTBhM2VjZC1jNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQtq7SASmXUy5CgKkmZSk+YNdHXpjeHrtZPQBX8bFzuktw+4BMPW8BwwuYtl UIQZYc/lDVKBzPebNmv4X0+ycDqKfMriMuEvCn1EOo5ThwwqqQcvS6OEApDRlGwm MlwaYkYkL6zLhgH/1n1rPRbXAMEbBkeW6RXZnIYuro7SIZQJnu6VeOEaCkgwQt5z KiRmgmpC14BtWSc26PVmlg+OafGeEa+HAE3v7ZeSP6GuGWK89UhxNX2ECfuyNwcg ycGUZ0FPx6l+gSxYRCpU9uLe1pqHSZNHzEkewaNC/XHkgk/4ESNCaiIwyuTJ7lLS mGZvAsvdI3aBSKs7RZOHUD2qNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvN2AI1 N3fx9Yf6yfCukbuk596BMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCruTYn/+WsTD9BRu576mx1vyqEiIZSh9Pcs7BtZtiOydIAzQKhSiNd AHEE1YyCiOg7H01ObB4IBIaydut955a+DFo+NI/KhjaLJG/1aNcRQQSFMXcs/m4Y AKpWMcyP1V33zB62/athgOdGW8uta4D8SgeS0MK1GZbF8V14Y46QOMA4hKhthvsW dGF5qtBF2e0PI+M/2M7WkeIyWS/WhKgNiMZ35iDoehpLO15P4oAryk/8hzE6Mikv vwFZ0m7AgczSKfXz09T7DkEq8hB+2CCZdHtglweFuP7H+WMe/9YApEtbjVKvo6Ig cLNnjGT0u+eyZvD+KTgD7up8NKJDE5Y6 -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:31 2025 by rpki-client