$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json) Hash identifier: XJ5JQzy+7i/EpBx5oBjxgsYcj0sO8dZzVIE3r2y1sEo= Subject key identifier: 54:F0:D3:CE:53:2D:16:FF:27:9D:22:CA:CD:B0:55:38:F9:BD:E4:40 Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft Manifest number: 0543 Signing time: Tue 04 Nov 2025 23:32:20 +0000 Manifest this update: Tue 04 Nov 2025 23:32:19 +0000 Manifest next update: Tue 11 Nov 2025 23:32:19 +0000 Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: 6s8Paxz39LrIWCg8Ciz3q2gli0tRw1PU4TPmDRXu+tc=) 2: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: 8XhJkYfZtUkquYR5u12lUnek3pRnxzxHWIehQP2S0wo=) 3: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: 90ZyS4U6Q1wf7JXIDQayibihHgxjqDGULjXEwxSwLJo=) 4: D575368892D011F0B767031EC4F9AE02.roa (hash: kzLaaICHZkVtnjNMrsdH4mcf3ZHwNLMcESdDt6YjBQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Validity Not Before: Nov 4 23:32:19 2025 GMT Not After : Nov 11 23:32:19 2025 GMT Subject: CN=690a8d03-885f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:8a:e2:92:26:3b:a1:71:6d:41:e5:40:d7: 90:ce:4f:08:9c:ba:15:9f:2c:ce:fb:f7:28:89:90: 04:21:11:9b:9c:fb:39:7b:22:3b:96:66:e5:6b:9f: 0f:e7:da:a7:70:35:bc:f2:a7:60:75:63:19:f7:c5: 4c:54:46:48:89:08:d5:34:f6:54:d4:3f:24:79:33: d6:87:7f:0d:ea:97:1e:e9:33:fc:70:65:6b:fa:e6: 07:a0:bd:7b:99:fa:9c:18:89:dc:84:4f:3a:05:9a: a7:54:63:2b:6d:2f:71:ac:0c:20:2d:75:b3:44:98: ab:31:92:99:c6:ac:5f:23:df:e7:95:39:3f:16:0b: 90:8c:fa:2e:ba:fc:67:1d:15:cd:47:00:43:3d:23: d5:dd:19:93:36:e1:46:91:16:3a:1d:5c:c2:02:7e: 22:6e:4b:80:c8:19:ec:ae:37:6e:93:4a:5d:d3:6c: c8:13:b8:fa:fe:fd:83:f6:f6:33:5c:ad:3b:01:9b: 25:0a:19:0b:d6:db:da:8b:57:3e:13:be:9f:28:d7: cc:1c:62:d4:26:4d:22:08:48:05:ca:ee:18:2f:9d: 56:21:0e:cd:d7:1a:1a:a5:e5:50:2e:fe:da:14:ca: f4:e2:2c:3d:fe:ec:22:8f:bf:db:eb:83:d9:6c:1f: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F0:D3:CE:53:2D:16:FF:27:9D:22:CA:CD:B0:55:38:F9:BD:E4:40 X509v3 Authority Key Identifier: keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2c:c7:de:07:bd:75:29:a9:c8:c5:75:d7:52:b6:e2:ad:67: bc:3b:72:85:75:89:db:31:1d:a4:08:4e:29:cc:5e:6d:3b:2a: c1:1b:18:f9:23:07:a6:61:a4:26:7b:cf:9e:1c:a5:62:e4:6e: b8:aa:c8:1d:a2:9f:96:c5:bf:5a:b1:83:a9:19:7d:ec:b9:1b: e3:a7:83:93:40:e5:01:34:8c:b6:72:fc:53:a0:01:eb:74:b1: 52:5d:3f:43:e5:57:79:5d:d7:61:10:5d:c1:51:d2:96:68:60: 0f:1f:31:d1:9f:08:e3:5c:f3:bf:01:c0:eb:00:07:9d:39:9d: 3c:31:b2:40:d2:ee:1b:76:61:15:4b:e6:13:95:ec:03:c0:f3: 46:37:a2:e9:1a:84:3f:b3:80:df:83:eb:89:b7:50:2a:d8:c0: 2b:dd:83:ed:c0:45:f2:ce:0d:49:9d:f5:6d:a9:f6:2e:50:b7: 8e:fe:47:26:6a:7b:f2:b3:b2:67:86:f8:50:3e:15:bd:d3:2b: 4d:b8:8e:c4:d6:66:a1:b4:62:a0:d4:72:48:48:65:ea:9e:4e: ac:e0:08:ba:89:cc:d1:ae:b2:b1:d0:0b:cb:d7:b6:0c:d5:7e: 66:5f:42:d1:ac:ad:e8:0c:26:92:84:6b:52:c5:37:89:56:5f: 4e:dd:41:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy MzA2QTI4RTcwHhcNMjUxMTA0MjMzMjE5WhcNMjUxMTExMjMzMjE5WjAYMRYwFAYD VQQDEw02OTBhOGQwMy04ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8mK4pImO6FxbUHlQNeQzk8InLoVnyzO+/coiZAEIRGbnPs5eyI7lmbla58P 59qncDW88qdgdWMZ98VMVEZIiQjVNPZU1D8keTPWh38N6pce6TP8cGVr+uYHoL17 mfqcGInchE86BZqnVGMrbS9xrAwgLXWzRJirMZKZxqxfI9/nlTk/FguQjPouuvxn HRXNRwBDPSPV3RmTNuFGkRY6HVzCAn4ibkuAyBnsrjduk0pd02zIE7j6/v2D9vYz XK07AZslChkL1tvai1c+E76fKNfMHGLUJk0iCEgFyu4YL51WIQ7N1xoapeVQLv7a FMr04iw9/uwij7/b64PZbB8BwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTw085T LRb/J50iys2wVTj5veRAMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0 RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK c1Y4QzFST2JvR3NqQnFLT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmLMfeB711KanIxXXXUrbirWe8O3KFdYnbMR2kCE4pzF5tOyrBGxj5 IwemYaQme8+eHKVi5G64qsgdop+Wxb9asYOpGX3suRvjp4OTQOUBNIy2cvxToAHr dLFSXT9D5Vd5XddhEF3BUdKWaGAPHzHRnwjjXPO/AcDrAAedOZ08MbJA0u4bdmEV S+YTlewDwPNGN6LpGoQ/s4Dfg+uJt1Aq2MAr3YPtwEXyzg1JnfVtqfYuULeO/kcm anvys7JnhvhQPhW90ytNuI7E1mahtGKg1HJISGXqnk6s4Ai6iczRrrKx0AvL17YM 1X5mX0LRrK3oDCaShGtSxTeJVl9O3UFC -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:10 2025 by rpki-client