$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json) Hash identifier: AdQtjycbPs6HupRaKP/HTj6TNP8nxXUostQUNF6PfVc= Subject key identifier: 47:62:48:3F:E8:65:AF:A0:80:90:E7:4D:5D:20:5B:6A:D9:E5:46:4D Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft Manifest number: 34D7 Signing time: Tue 04 Nov 2025 15:03:42 +0000 Manifest this update: Tue 04 Nov 2025 15:03:41 +0000 Manifest next update: Tue 11 Nov 2025 15:03:41 +0000 Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: MJIbhlD7QQObIfHZ/Z7AEovBDXFfEfmN0khtAcAsHt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Validity Not Before: Nov 4 15:03:41 2025 GMT Not After : Nov 11 15:03:41 2025 GMT Subject: CN=690a15cd-ef62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:6b:e0:43:6b:97:41:9f:44:7e:c5:8b:46: 8b:fc:08:2d:74:bd:63:1d:78:2e:83:42:3a:76:61: 7e:6f:22:41:e8:6e:b4:bf:bb:72:67:d2:99:00:10: 4a:8d:27:e7:4e:fc:e2:df:0e:31:1b:47:1b:ec:9a: f3:0d:ff:8c:b9:af:f4:fb:f6:fe:35:1e:5a:a8:07: ab:40:51:8e:51:08:e7:f6:ab:65:c7:73:76:8a:be: 7c:de:aa:6e:9e:a9:37:1e:16:11:5a:fe:0b:f7:95: 92:9c:f7:fa:7d:7a:59:7a:90:58:a5:94:3d:d4:cd: 25:19:49:bf:8a:99:ed:fa:12:35:3d:06:14:56:df: 32:d6:98:47:1d:a4:c9:e5:2e:59:3b:20:18:30:96: 6a:49:9f:0b:66:e1:f3:f8:b5:1e:4d:42:78:a8:f8: a1:32:d1:c1:dc:68:85:4f:36:ab:61:7f:d3:54:41: ac:ce:7d:c1:69:8e:96:e5:47:4d:b2:3f:0d:9a:6a: 48:7b:cf:b0:2a:5d:ae:35:ea:d2:b7:cd:8b:d3:95: 18:49:c9:56:6c:eb:eb:45:13:47:f6:4b:36:a9:a9: ea:af:8a:2c:36:eb:fb:ee:4b:fd:db:f3:fe:53:7c: 07:44:55:29:eb:eb:7f:4b:fd:4e:15:df:a6:29:08: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:62:48:3F:E8:65:AF:A0:80:90:E7:4D:5D:20:5B:6A:D9:E5:46:4D X509v3 Authority Key Identifier: keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:27:0b:6a:9d:34:62:cf:75:75:87:d6:b3:d4:95:9c:59:ac: 15:05:f9:77:11:eb:de:7b:1b:bb:c9:34:5a:de:7c:3a:c4:d6: 36:56:2f:46:bc:31:1f:7a:a9:81:12:b4:b9:e3:47:38:ab:d3: db:d8:f0:09:26:6d:89:00:89:18:f2:6f:a4:97:04:7b:25:49: 9f:ad:43:c6:4e:9e:99:24:da:54:b4:b6:77:22:45:3e:28:e7: d5:cd:12:eb:19:ca:93:d0:ba:63:0a:4f:6d:fb:56:21:27:a9: 59:50:ff:1b:73:4e:2a:89:7a:08:b5:2c:aa:42:7d:74:9d:ab: 21:d2:bd:cb:9c:67:35:c6:06:4e:2a:1a:35:19:21:23:c8:d9: ea:4b:a2:a9:22:08:76:53:66:74:e0:5f:df:88:5c:c9:f9:52: 51:15:6f:eb:7f:a1:5c:73:e3:b1:0c:06:ac:ca:fb:94:49:fd: 66:7c:81:76:bf:70:83:a6:cf:62:0e:ef:eb:e7:7e:b7:65:22: 68:9f:22:25:4d:5d:c9:2d:0c:17:99:0b:88:e5:8b:de:b5:73: d5:74:78:cf:46:91:68:3e:e1:56:a1:40:05:be:09:ac:69:eb: 4b:84:28:14:6b:d6:7f:60:e9:2b:c4:72:16:c6:23:b0:69:05: 2c:db:36:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF MzBEMDFGNjQwHhcNMjUxMTA0MTUwMzQxWhcNMjUxMTExMTUwMzQxWjAYMRYwFAYD VQQDEw02OTBhMTVjZC1lZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpxr4ENrl0GfRH7Fi0aL/AgtdL1jHXgug0I6dmF+byJB6G60v7tyZ9KZABBK jSfnTvzi3w4xG0cb7JrzDf+Mua/0+/b+NR5aqAerQFGOUQjn9qtlx3N2ir583qpu nqk3HhYRWv4L95WSnPf6fXpZepBYpZQ91M0lGUm/ipnt+hI1PQYUVt8y1phHHaTJ 5S5ZOyAYMJZqSZ8LZuHz+LUeTUJ4qPihMtHB3GiFTzarYX/TVEGszn3BaY6W5UdN sj8NmmpIe8+wKl2uNerSt82L05UYSclWbOvrRRNH9ks2qanqr4osNuv77kv92/P+ U3wHRFUp6+t/S/1OFd+mKQgV0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdiSD/o Za+ggJDnTV0gW2rZ5UZNMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0 MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfJwtqnTRiz3V1h9az1JWcWawVBfl3Eeveexu7yTRa3nw6xNY2Vi9G vDEfeqmBErS540c4q9Pb2PAJJm2JAIkY8m+klwR7JUmfrUPGTp6ZJNpUtLZ3IkU+ KOfVzRLrGcqT0LpjCk9t+1YhJ6lZUP8bc04qiXoItSyqQn10nash0r3LnGc1xgZO Kho1GSEjyNnqS6KpIgh2U2Z04F/fiFzJ+VJRFW/rf6Fcc+OxDAasyvuUSf1mfIF2 v3CDps9iDu/r5363ZSJonyIlTV3JLQwXmQuI5YvetXPVdHjPRpFoPuFWoUAFvgms aetLhCgUa9Z/YOkrxHIWxiOwaQUs2zYo -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:19 2025 by rpki-client