$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json) Hash identifier: 93ntAehXZEeTXPLF50uvObsXGGisTT8oN6ovfdI8ux0= Subject key identifier: F4:A5:AB:F6:6F:C3:01:B1:05:7F:4D:31:1F:36:6D:D6:39:C2:0E:1D Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft Manifest number: 3E Signing time: Wed 05 Nov 2025 07:39:06 +0000 Manifest this update: Wed 05 Nov 2025 07:39:05 +0000 Manifest next update: Wed 12 Nov 2025 07:39:05 +0000 Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: 6Q51zJPDo6pFLOeZCtYarOB5/uy31yCMnrrARRNyFtQ=) 2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: /uTCkM+7T3MX4CR0F7TNTBgsSs4yKxKjHNmhUVycHRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Validity Not Before: Nov 5 07:39:05 2025 GMT Not After : Nov 12 07:39:05 2025 GMT Subject: CN=690aff1a-3072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:a1:e7:5d:08:75:3e:71:ff:5f:1d:f1:54: 6b:71:f6:48:7a:e7:f8:00:06:34:01:86:cc:ba:73: c9:4b:ef:07:b5:95:98:87:0d:03:28:b1:1f:45:a5: ae:a1:5d:ae:a5:91:b3:a2:f3:73:2a:5d:5f:74:35: d5:49:e3:62:bc:da:b3:4d:9b:1a:d3:f5:c0:79:fc: 3c:6c:c5:78:30:3b:47:02:7b:fa:16:98:55:41:3c: df:d2:b7:cf:20:7e:5a:5e:d0:7c:6b:56:36:81:62: e1:9b:3d:8d:ba:91:2a:ab:5d:84:de:b8:1f:07:15: 69:95:e8:09:82:0b:2a:0b:5e:7b:8d:6e:1f:cc:f5: 83:71:9f:1e:10:8b:5f:5a:4c:a1:9e:05:ad:0f:2c: e0:d2:72:e7:dc:5b:82:a6:38:e4:fe:42:0f:da:9a: f4:a6:60:89:b6:de:ed:2a:95:3a:45:a2:9b:8f:c8: 99:9f:a9:09:d3:45:1b:a1:63:e0:f5:f9:96:34:15: 60:fc:b6:34:90:37:22:65:11:5a:3d:b3:ce:60:80: b1:66:6c:29:8e:2e:ea:ae:34:6e:14:ba:2c:82:c3: ff:40:e4:67:39:df:b0:74:c9:0b:85:41:3a:b3:9b: 5f:3e:a9:a5:90:16:8a:2d:68:3a:19:de:69:77:e4: ef:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A5:AB:F6:6F:C3:01:B1:05:7F:4D:31:1F:36:6D:D6:39:C2:0E:1D X509v3 Authority Key Identifier: keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d8:d8:9a:ad:b2:f5:94:38:4c:92:45:cd:40:b8:64:b7:fa: 9d:22:31:b0:df:5d:e2:c2:d3:b2:83:59:3a:93:ac:d5:0f:8b: 7b:76:52:89:e3:42:51:23:e9:d0:ea:39:b7:f3:5c:c4:10:3b: df:fb:1b:7d:42:ed:dc:f5:3b:81:4e:d6:4a:fb:ed:c6:7e:f6: 1e:23:b3:66:74:c3:81:2f:c2:e3:bb:97:e1:4e:6a:fa:97:b9: 91:bc:18:e2:1a:ef:de:4a:59:1b:99:29:f3:e8:2c:a8:76:ae: a7:a6:6f:b2:44:11:fa:ad:e3:83:e4:5a:9a:c4:a0:05:d4:d4: b9:3a:fd:49:9c:fc:4c:4b:1e:72:3d:a0:7e:fe:42:28:5b:b5: da:97:9b:5b:08:d0:23:61:9a:6f:72:8a:08:3d:d7:6f:61:46: 80:00:da:f1:fa:6b:dc:b3:15:3a:8c:27:e1:d7:8a:3b:4f:f2: 2c:06:09:ef:41:17:f1:2c:e6:0e:dd:8d:19:14:15:77:1e:3c: 8d:9a:87:35:42:bc:0c:d2:3c:55:ea:d1:5e:a1:84:6e:4c:25: af:dc:dd:d3:f3:6b:97:c8:64:dd:40:c2:b8:e1:38:ba:9e:b3: a7:c8:f1:6d:9a:ed:6a:42:58:b7:0b:7a:33:ce:13:5c:87:7e: d8:30:81:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4 NDAwQzMwRjAeFw0yNTExMDUwNzM5MDVaFw0yNTExMTIwNzM5MDVaMBgxFjAUBgNV BAMTDTY5MGFmZjFhLTMwNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLTqHnXQh1PnH/Xx3xVGtx9kh65/gABjQBhsy6c8lL7we1lZiHDQMosR9Fpa6h Xa6lkbOi83MqXV90NdVJ42K82rNNmxrT9cB5/DxsxXgwO0cCe/oWmFVBPN/St88g flpe0HxrVjaBYuGbPY26kSqrXYTeuB8HFWmV6AmCCyoLXnuNbh/M9YNxnx4Qi19a TKGeBa0PLODScufcW4KmOOT+Qg/amvSmYIm23u0qlTpFopuPyJmfqQnTRRuhY+D1 +ZY0FWD8tjSQNyJlEVo9s85ggLFmbCmOLuquNG4UuiyCw/9A5Gc537B0yQuFQTqz m18+qaWQFootaDoZ3ml35O9vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9KWr9m/D AbEFf00xHzZt1jnCDh0wHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5 OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MkVCL0RGNTQ1Q0M4NUM5OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1 N3NfOFBOcmVPLUlRQXd3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGTY2JqtsvWUOEySRc1AuGS3+p0iMbDfXeLC07KDWTqTrNUPi3t2Uonj QlEj6dDqObfzXMQQO9/7G31C7dz1O4FO1kr77cZ+9h4js2Z0w4EvwuO7l+FOavqX uZG8GOIa795KWRuZKfPoLKh2rqemb7JEEfqt44PkWprEoAXU1Lk6/Umc/ExLHnI9 oH7+QihbtdqXm1sI0CNhmm9yigg9129hRoAA2vH6a9yzFTqMJ+HXijtP8iwGCe9B F/Es5g7djRkUFXcePI2ahzVCvAzSPFXq0V6hhG5MJa/c3dPza5fIZN1AwrjhOLqe s6fI8W2a7WpCWLcLejPOE1yHftgwgYk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:13 2025 by rpki-client