$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: nTcmWatePOVs0bhzX6dCOCCNPqWIoIyNAC2tkimaato= Subject key identifier: 61:48:F2:EC:71:F2:53:86:B6:60:F8:F0:88:45:E4:4F:B3:B7:19:3B Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0B90 Signing time: Tue 04 Nov 2025 19:06:59 +0000 Manifest this update: Tue 04 Nov 2025 19:06:59 +0000 Manifest next update: Tue 11 Nov 2025 19:06:59 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: 2yl7MBJbrWiwZGUtdWao+KEuoGEkxxa/XpecU8WNAp8=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: MAWDNXgpu9PgJn7Gnnkwa2ICesKD1B+IPcDJf1k8UoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: Nov 4 19:06:59 2025 GMT Not After : Nov 11 19:06:59 2025 GMT Subject: CN=690a4ed3-cd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:11:0f:4c:81:64:cc:f1:44:43:ec:0c:fd: 08:61:da:61:e9:9a:61:27:f9:b5:38:00:cc:e2:19: 9b:07:47:5c:c6:52:f1:7b:89:0f:88:a6:f3:8a:96: 30:7d:a7:4b:85:5c:53:12:46:01:b6:be:a5:d7:1c: da:cc:45:a9:07:83:fc:1a:5c:71:c4:84:71:54:c5: 15:8b:0b:9f:ba:6a:28:2d:3c:e3:fe:17:8b:51:07: e5:2c:36:17:41:ba:dc:09:ec:5e:35:c5:aa:3b:d5: 95:34:dc:2e:e5:fc:5f:ba:e8:2b:a4:4c:d9:f5:18: 17:bb:05:e2:0b:5b:e2:e0:0e:64:3d:65:21:fd:dc: 34:eb:e6:33:69:2c:e3:2b:72:67:a8:a9:0b:91:26: 5c:ef:9a:ec:b1:50:98:f9:dd:b6:fb:77:25:dd:91: 5d:c8:2a:97:30:6e:cd:25:95:e0:49:64:ea:f9:f6: ac:de:4f:a2:f4:38:dd:df:c3:d0:ce:8a:9e:43:5a: 72:e6:14:4c:4f:06:59:34:dd:f0:bb:1d:54:6c:c7: cb:04:c1:51:a4:4a:4c:11:98:da:df:f0:f0:ea:ca: 27:88:d3:af:69:33:bc:24:18:6a:a7:cc:4c:db:6b: 49:ea:6f:cb:3f:c5:0a:dc:e6:87:5b:84:00:d1:a1: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:48:F2:EC:71:F2:53:86:B6:60:F8:F0:88:45:E4:4F:B3:B7:19:3B X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:08:a7:25:a5:54:7b:63:09:e2:b8:02:2d:24:14:1e:de:01: 9d:c2:26:35:eb:70:37:3e:44:7c:0d:63:22:d1:c0:0f:67:47: a3:a7:e7:b7:45:5e:1d:b5:8c:76:67:5f:32:41:0a:5b:d6:88: ac:63:24:80:f8:55:2b:4f:aa:7b:dd:a4:6d:ec:d6:6a:a8:0c: 54:9d:07:31:2d:fa:a8:01:6b:75:d9:8d:b1:ea:16:cf:20:07: e3:5c:c8:3a:32:2d:5e:7f:f6:85:04:fb:35:9c:7d:9e:f3:df: 75:84:e5:5b:4d:20:39:a2:32:ca:fe:e8:88:9d:b0:02:42:11: 3c:21:0d:62:ac:b8:25:f2:c9:9a:67:af:df:0b:59:8b:00:7a: 7d:18:9a:96:09:d0:9b:7f:63:e5:65:1b:43:28:27:b2:3a:5d: 5d:33:bb:01:12:17:c4:b8:08:57:f1:b7:1b:f6:7f:9c:c2:6c: 91:a4:39:ac:83:b7:47:75:74:54:7a:3f:28:6a:8c:f6:55:b6: f8:68:f6:c7:d6:96:1d:97:67:df:be:9b:19:64:f5:8d:42:24: e4:6d:a3:01:ca:50:c4:61:34:a4:e2:ef:c8:e6:51:e9:26:23: 64:c9:59:bd:4c:b7:89:a7:30:6b:80:3b:7d:48:7b:a6:04:38: 97:5c:91:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjUxMTA0MTkwNjU5WhcNMjUxMTExMTkwNjU5WjAYMRYwFAYD VQQDEw02OTBhNGVkMy1jZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytURD0yBZMzxREPsDP0IYdph6ZphJ/m1OADM4hmbB0dcxlLxe4kPiKbzipYw fadLhVxTEkYBtr6l1xzazEWpB4P8GlxxxIRxVMUViwufumooLTzj/heLUQflLDYX QbrcCexeNcWqO9WVNNwu5fxfuugrpEzZ9RgXuwXiC1vi4A5kPWUh/dw06+YzaSzj K3JnqKkLkSZc75rssVCY+d22+3cl3ZFdyCqXMG7NJZXgSWTq+fas3k+i9Djd38PQ zoqeQ1py5hRMTwZZNN3wux1UbMfLBMFRpEpMEZja3/Dw6soniNOvaTO8JBhqp8xM 22tJ6m/LP8UK3OaHW4QA0aG5zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFI8uxx 8lOGtmD48IhF5E+ztxk7MB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfCKclpVR7YwniuAItJBQe3gGdwiY163A3PkR8DWMi0cAPZ0ejp+e3 RV4dtYx2Z18yQQpb1oisYySA+FUrT6p73aRt7NZqqAxUnQcxLfqoAWt12Y2x6hbP IAfjXMg6Mi1ef/aFBPs1nH2e8991hOVbTSA5ojLK/uiInbACQhE8IQ1irLgl8sma Z6/fC1mLAHp9GJqWCdCbf2PlZRtDKCeyOl1dM7sBEhfEuAhX8bcb9n+cwmyRpDms g7dHdXRUej8oaoz2Vbb4aPbH1pYdl2ffvpsZZPWNQiTkbaMBylDEYTSk4u/I5lHp JiNkyVm9TLeJpzBrgDt9SHumBDiXXJE6 -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:00 2025 by rpki-client