$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json) Hash identifier: MPcFHSuyk4XAFxcG7D+E92MgmI0UUTa8TSWmSh3JXGE= Subject key identifier: FE:8B:CE:73:F5:38:E1:FE:5B:AB:E5:36:D2:B1:95:AD:A9:FC:03:5B Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Certificate serial: 0313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft Manifest number: 0305 Signing time: Wed 05 Nov 2025 01:17:35 +0000 Manifest this update: Wed 05 Nov 2025 01:17:35 +0000 Manifest next update: Wed 12 Nov 2025 01:17:35 +0000 Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: VHg/QLIvfRPl7UJ3czNE62cHcVlXBOU9jUpoLMwkjFc=) 2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: St1PTiOJ45PYVntF564HXDNo7H27/pRNunZfEvyoMiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Validity Not Before: Nov 5 01:17:35 2025 GMT Not After : Nov 12 01:17:35 2025 GMT Subject: CN=690aa5af-5226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:cd:25:ae:db:93:f5:39:3a:63:22:38:4f: 1e:a9:06:d4:73:67:6d:4a:c9:9b:cf:19:a6:df:bb: c6:fc:d7:a1:95:77:3f:0f:b9:32:43:bd:88:72:47: 89:1e:1e:23:f0:e4:fe:5d:cf:9c:5e:f7:5e:11:a5: 3d:8c:6d:33:de:64:6f:c6:59:b8:84:15:d2:65:6b: 06:55:95:0d:cd:fc:1f:a3:3a:42:fc:ae:6a:97:57: 68:f8:e0:d4:b9:66:4c:1d:7a:96:82:2e:d0:e8:aa: 83:49:b9:76:f7:c7:38:5e:0f:98:e2:e5:fd:03:fa: de:48:27:8a:24:3a:3a:3e:53:08:80:da:6c:43:40: 76:ca:0a:ad:66:47:21:88:7e:21:77:6e:fc:d5:2c: 93:eb:98:c1:41:7c:a2:83:b8:dc:21:14:e4:45:a7: 11:0b:ed:35:dc:35:d8:98:e0:e7:dc:b6:e5:0a:85: 4d:48:8b:1f:3b:da:c7:d5:33:a4:c1:fd:d7:45:9b: 54:8c:25:98:df:ef:27:37:b6:a2:fa:24:dc:14:d3: 6d:4e:3b:27:42:f7:5a:a9:66:db:31:94:fa:6a:d2: 68:93:7d:53:09:32:ac:0a:e3:63:be:81:77:f2:81: 69:b2:b5:94:7a:7c:2f:78:bc:19:6d:a3:4a:0d:f0: da:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8B:CE:73:F5:38:E1:FE:5B:AB:E5:36:D2:B1:95:AD:A9:FC:03:5B X509v3 Authority Key Identifier: keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6f:e3:77:6e:39:cf:3a:2c:71:1c:cb:90:c6:be:42:c3:5e: 58:92:12:cf:7d:97:1b:e7:8e:2a:4a:d9:a9:24:db:34:39:0a: de:57:fe:eb:7e:c9:b4:19:62:36:e4:cd:75:04:f5:ee:1f:3f: 5c:1c:d1:47:f2:f6:7c:b0:40:dc:6f:f5:70:aa:07:b5:d6:7b: b4:e5:27:cb:6c:39:39:d8:79:be:0b:aa:3b:c1:fc:46:c0:62: ba:69:e8:29:b8:f9:65:77:d6:38:6d:0f:c1:e4:a4:53:1c:93: 16:09:79:fc:ab:00:03:46:97:75:e9:42:58:94:12:31:95:c0: ed:27:11:b2:99:40:01:4c:07:99:ff:9e:ba:7f:e5:22:c7:0d: 32:62:1e:9b:71:54:a1:c4:58:32:91:38:45:5e:cd:f7:e0:66: d1:d9:ba:78:36:53:75:93:81:2c:4f:82:5e:8d:6b:c5:12:20: ad:56:48:bb:f6:f8:07:e6:f7:30:15:a4:1c:b4:03:97:05:96: 74:ba:dc:de:8f:87:0f:85:15:a8:1c:48:fd:f5:7c:01:3c:a8: 50:7d:ff:a5:64:1d:73:8a:58:76:52:e9:80:2b:d0:7f:20:69: f2:5d:3f:89:36:bb:c2:8a:8d:5c:78:57:12:4a:8b:71:6e:41: 31:8a:ec:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw RUZGMUQzOTIwHhcNMjUxMTA1MDExNzM1WhcNMjUxMTEyMDExNzM1WjAYMRYwFAYD VQQDEw02OTBhYTVhZi01MjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsebNJa7bk/U5OmMiOE8eqQbUc2dtSsmbzxmm37vG/NehlXc/D7kyQ72IckeJ Hh4j8OT+Xc+cXvdeEaU9jG0z3mRvxlm4hBXSZWsGVZUNzfwfozpC/K5ql1do+ODU uWZMHXqWgi7Q6KqDSbl298c4Xg+Y4uX9A/reSCeKJDo6PlMIgNpsQ0B2ygqtZkch iH4hd2781SyT65jBQXyig7jcIRTkRacRC+013DXYmODn3LblCoVNSIsfO9rH1TOk wf3XRZtUjCWY3+8nN7ai+iTcFNNtTjsnQvdaqWbbMZT6atJok31TCTKsCuNjvoF3 8oFpsrWUenwveLwZbaNKDfDaBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6LznP1 OOH+W6vlNtKxla2p/ANbMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK U1RJalNJS1htYkVPX3gwNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLb+N3bjnPOixxHMuQxr5Cw15YkhLPfZcb544qStmpJNs0OQreV/7r fsm0GWI25M11BPXuHz9cHNFH8vZ8sEDcb/Vwqge11nu05SfLbDk52Hm+C6o7wfxG wGK6aegpuPlld9Y4bQ/B5KRTHJMWCXn8qwADRpd16UJYlBIxlcDtJxGymUABTAeZ /566f+Uixw0yYh6bcVShxFgykThFXs334GbR2bp4NlN1k4EsT4JejWvFEiCtVki7 9vgH5vcwFaQctAOXBZZ0utzej4cPhRWoHEj99XwBPKhQff+lZB1zilh2UumAK9B/ IGnyXT+JNrvCio1ceFcSSotxbkExiuwy -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:08 2025 by rpki-client