$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json) Hash identifier: E+NrGh0ksMNXUkdQTuBrbpgb9nBIMy2PQ1J18G+5aBA= Subject key identifier: 9A:FC:C4:55:1F:1B:1F:6D:C3:3C:54:D4:B7:9B:9E:67:0A:A9:8C:6A Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Certificate serial: 036F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft Manifest number: 0367 Signing time: Mon 03 Nov 2025 00:54:11 +0000 Manifest this update: Mon 03 Nov 2025 00:54:10 +0000 Manifest next update: Mon 10 Nov 2025 00:54:10 +0000 Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: RIJ83uIfZvHJcHP74qP2N0g52TQIyNS/VlGFSO/bvoE=) 2: A05195B4633011ED9122442CC4F9AE02.roa (hash: j7aoei+ek1gcLQq8wVfrfWk2y1zauvGzuHEFdrbSbVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Validity Not Before: Nov 3 00:54:10 2025 GMT Not After : Nov 10 00:54:10 2025 GMT Subject: CN=6907fd32-4179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:e9:0d:3b:fb:d2:1e:e4:4c:3a:fb:5e:e0: 0d:44:a8:35:40:36:91:1f:80:c0:ec:13:56:ae:63: 0c:68:6a:a2:ae:b4:61:0d:8a:5b:0b:c6:25:79:68: af:07:87:f7:d3:c4:bd:e2:fe:3c:8f:82:79:ff:0c: 7d:7a:fe:af:89:a3:bd:b1:69:77:d8:8d:43:90:bd: 07:5c:e9:80:14:a1:57:a1:c6:14:ca:70:76:a7:15: 01:f3:0d:2a:4d:49:66:97:d7:51:b9:0c:55:02:d4: 59:bc:b8:6b:99:30:3f:08:ad:be:b2:5d:3c:fe:31: 96:26:5e:80:a9:71:81:0d:e9:ce:0a:a0:cd:36:3b: ba:f7:f9:79:50:43:0f:8c:b6:31:52:94:19:6b:0f: 4c:5f:6f:a4:8a:07:55:2c:9d:6e:08:2f:1f:2a:9e: 50:1e:ea:fe:a8:99:f7:a4:1c:d7:a1:d9:90:81:f2: c1:51:7e:99:8f:4a:f5:b0:1b:1a:f3:8b:80:d8:9c: 10:ba:f1:9f:f4:e9:c3:83:15:89:90:3e:d2:7b:19: 74:85:52:cb:3c:af:19:3b:2b:38:12:c8:76:46:af: 1f:03:d2:40:d2:61:f7:5b:12:5b:96:c8:b9:62:db: f5:61:4b:c0:2b:f1:9f:3c:e8:79:d3:80:ca:15:c5: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FC:C4:55:1F:1B:1F:6D:C3:3C:54:D4:B7:9B:9E:67:0A:A9:8C:6A X509v3 Authority Key Identifier: keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5f:94:d5:86:38:f9:2b:0e:a4:be:4a:b3:0d:12:c4:0f:eb: 16:40:82:50:a8:00:1b:1f:78:cb:9d:b7:7e:3d:06:ce:72:26: d1:5e:3f:19:dc:80:0d:64:8f:86:a2:60:5b:c7:e4:fd:0f:70: af:ec:ac:60:8c:38:46:26:22:97:1a:a6:af:29:1f:de:47:9b: ea:6f:0d:9b:3c:17:0a:87:43:44:0f:8f:cc:76:16:f5:e7:f3: ff:dc:9a:57:31:99:06:b9:5b:27:b5:f0:de:bb:af:8e:0f:12: fb:94:fd:25:29:e4:b2:01:0a:b1:cb:91:64:06:94:86:e5:b7: f6:95:bb:25:8d:61:2e:18:60:3a:33:81:65:79:5c:28:ef:a4: ae:31:0e:d3:a1:49:ef:cf:0a:fc:82:94:24:87:66:66:a0:bd: f2:80:e1:cb:66:1d:f5:33:9a:4b:24:83:1c:22:1c:97:b6:80: 01:f7:98:d6:3e:ff:75:0f:f8:04:2b:86:50:fa:ce:80:31:0e: b0:80:68:f6:14:99:fe:0b:f8:03:7a:91:95:1f:a3:3b:74:29: ab:04:ed:37:61:92:1e:93:a2:06:21:a9:0a:de:e9:af:c6:d5: 71:7e:6b:9f:98:fb:fb:c5:2e:f6:0e:eb:28:6c:f2:02:f6:8b: 07:f1:01:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1 NDNCMzFFNjIwHhcNMjUxMTAzMDA1NDEwWhcNMjUxMTEwMDA1NDEwWjAYMRYwFAYD VQQDEw02OTA3ZmQzMi00MTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylbpDTv70h7kTDr7XuANRKg1QDaRH4DA7BNWrmMMaGqirrRhDYpbC8YleWiv B4f308S94v48j4J5/wx9ev6viaO9sWl32I1DkL0HXOmAFKFXocYUynB2pxUB8w0q TUlml9dRuQxVAtRZvLhrmTA/CK2+sl08/jGWJl6AqXGBDenOCqDNNju69/l5UEMP jLYxUpQZaw9MX2+kigdVLJ1uCC8fKp5QHur+qJn3pBzXodmQgfLBUX6Zj0r1sBsa 84uA2JwQuvGf9OnDgxWJkD7Sexl0hVLLPK8ZOys4Esh2Rq8fA9JA0mH3WxJblsi5 Ytv1YUvAK/GfPOh504DKFcUXPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr8xFUf Gx9twzxU1LebnmcKqYxqMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMX5TVhjj5Kw6kvkqzDRLED+sWQIJQqAAbH3jLnbd+PQbOcibRXj8Z 3IANZI+GomBbx+T9D3Cv7KxgjDhGJiKXGqavKR/eR5vqbw2bPBcKh0NED4/Mdhb1 5/P/3JpXMZkGuVsntfDeu6+ODxL7lP0lKeSyAQqxy5FkBpSG5bf2lbsljWEuGGA6 M4FleVwo76SuMQ7ToUnvzwr8gpQkh2ZmoL3ygOHLZh31M5pLJIMcIhyXtoAB95jW Pv91D/gEK4ZQ+s6AMQ6wgGj2FJn+C/gDepGVH6M7dCmrBO03YZIek6IGIakK3umv xtVxfmufmPv7xS72DusobPIC9osH8QEb -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:54 2025 by rpki-client