$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft File: VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json) Hash identifier: gXHMq7n3bZx971gKt+g7C/J1waMedIcw6G46MQ8wgf4= Subject key identifier: 75:40:1B:F8:57:E4:86:F3:77:FC:3A:80:23:79:24:BA:C9:46:57:45 Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft Manifest number: 8A Signing time: Wed 05 Nov 2025 06:48:39 +0000 Manifest this update: Wed 05 Nov 2025 06:48:39 +0000 Manifest next update: Wed 12 Nov 2025 06:48:38 +0000 Files and hashes: 1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: xO2yZrFBaOecHewfXGE5Eva7kdK+Gy1XaCLlBZEJcGY=) 2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: RGby5CWUvljyTQmbtKXFF+09T5sv2LL/jpj1mhUT/QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Validity Not Before: Nov 5 06:48:39 2025 GMT Not After : Nov 12 06:48:38 2025 GMT Subject: CN=690af347-f42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:ed:91:35:c1:f8:5a:31:87:64:48:e9:1d: 08:f4:49:de:0d:53:04:e3:5c:2d:4c:a0:1b:76:b0: 68:24:8f:68:01:32:54:64:67:8a:68:48:0f:02:a4: e3:86:8f:7d:f0:84:d2:6c:8e:36:39:ae:6f:34:a4: 95:60:1f:89:f0:3b:b6:66:0a:f5:37:6a:aa:d0:2a: 6a:0a:e0:a3:bd:c6:bb:31:e9:49:d7:98:9d:27:23: 60:92:2f:ff:e0:8a:75:3b:82:91:98:0e:e8:15:75: a6:5e:36:9c:0a:54:ef:f6:08:0e:7b:07:63:0a:a3: 97:86:eb:aa:e9:3b:19:f3:a7:d2:bc:43:52:55:9e: de:b6:be:38:2f:10:73:cb:53:63:62:73:b6:86:ad: c0:2e:3a:b7:13:22:ba:02:e9:ac:7e:cb:01:63:86: a0:89:a1:7b:94:a7:8d:5a:b1:97:32:29:96:bb:e7: 46:9c:19:30:34:82:74:24:17:f1:11:57:93:81:13: 8e:5c:28:dd:97:d2:bd:1f:8b:2a:aa:52:2d:8e:03: 81:57:8c:c9:dc:cc:a2:24:fc:b7:89:60:b7:d2:9a: 2b:4f:9e:7b:04:06:7e:b7:99:f8:46:87:1a:40:63: 88:54:88:da:b3:14:70:1c:87:9e:0f:60:20:49:8c: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:40:1B:F8:57:E4:86:F3:77:FC:3A:80:23:79:24:BA:C9:46:57:45 X509v3 Authority Key Identifier: keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3b:85:02:ce:7d:5e:39:38:1e:76:00:d2:90:78:a3:61:e4: ec:5c:3a:ac:54:55:15:79:28:a5:9a:1e:c2:c4:14:06:2c:b4: 60:8c:fb:58:10:28:6c:9a:bd:1e:f6:24:18:1f:95:78:da:cd: 93:e7:cd:38:6c:b4:e0:2e:ea:11:dd:b2:c8:e6:91:17:f9:5e: ac:12:7e:5f:97:81:b4:4a:7e:27:27:4b:06:e9:72:34:e9:32: 94:e9:bf:0d:37:75:a1:c4:6b:64:7d:74:e3:03:69:c6:36:56: 2b:fb:ac:21:27:65:08:85:1a:cf:b6:72:e7:25:e8:f8:95:51: 67:ce:04:96:93:9e:91:a6:12:dd:b8:69:01:86:d5:76:8f:13: df:85:40:1f:09:7c:e2:93:a0:24:4c:ce:62:39:19:0a:79:6a: 73:34:e8:79:66:7a:49:1e:57:bd:ff:08:73:ff:64:52:03:a3: 61:24:ba:15:13:a9:f7:5c:5d:82:93:cf:9a:7e:0c:81:05:e2: c3:ca:29:6f:eb:e0:60:6e:b3:e8:a3:55:a8:ce:16:6f:1e:0b: c6:2a:09:86:84:4d:d6:71:a6:cc:f3:c3:f4:28:8f:67:99:c9: c4:16:b4:ab:26:3f:ec:40:e4:f0:2d:cb:ed:c7:2e:3d:48:96: 72:98:54:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY2MkQxMTAvBgNVBAUTKDU0OTI0NjIxMDVDRUIwNTJEQkE5REFFOEJCNjM1RjA1 Rjc3NzE2MUQwHhcNMjUxMTA1MDY0ODM5WhcNMjUxMTEyMDY0ODM4WjAYMRYwFAYD VQQDEw02OTBhZjM0Ny1mNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKPtkTXB+Foxh2RI6R0I9EneDVME41wtTKAbdrBoJI9oATJUZGeKaEgPAqTj ho998ITSbI42Oa5vNKSVYB+J8Du2Zgr1N2qq0CpqCuCjvca7MelJ15idJyNgki// 4Ip1O4KRmA7oFXWmXjacClTv9ggOewdjCqOXhuuq6TsZ86fSvENSVZ7etr44LxBz y1NjYnO2hq3ALjq3EyK6AumsfssBY4agiaF7lKeNWrGXMimWu+dGnBkwNIJ0JBfx EVeTgROOXCjdl9K9H4sqqlItjgOBV4zJ3MyiJPy3iWC30porT557BAZ+t5n4Roca QGOIVIjasxRwHIeeD2AgSYy6fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVAG/hX 5Ibzd/w6gCN5JLrJRldFMB8GA1UdIwQYMBaAFFSSRiEFzrBS26na6LtjXwX3dxYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjYyRC8yREE1N0MzQ0VB NzAxMUVGODE1NEMzNkJDNEY5QUUwMi9WSkpHSVFYT3NGTGJxZHJvdTJOZkJmZDNG aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0ZoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjYyRC8yREE1N0MzQ0VBNzAxMUVGODE1NEMzNkJDNEY5QUUwMi9WSkpHSVFYT3NG TGJxZHJvdTJOZkJmZDNGaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmO4UCzn1eOTgedgDSkHijYeTsXDqsVFUVeSilmh7CxBQGLLRgjPtY EChsmr0e9iQYH5V42s2T5804bLTgLuoR3bLI5pEX+V6sEn5fl4G0Sn4nJ0sG6XI0 6TKU6b8NN3WhxGtkfXTjA2nGNlYr+6whJ2UIhRrPtnLnJej4lVFnzgSWk56RphLd uGkBhtV2jxPfhUAfCXzik6AkTM5iORkKeWpzNOh5ZnpJHle9/whz/2RSA6NhJLoV E6n3XF2Ck8+afgyBBeLDyilv6+BgbrPoo1WozhZvHgvGKgmGhE3WcabM88P0KI9n mcnEFrSrJj/sQOTwLcvtxy49SJZymFQy -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:50 2025 by rpki-client