$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json) Hash identifier: /FxTIAzwiOOcbKOYJl5FhmJlbgJHPeXPhBz8mkpchX4= Subject key identifier: 6D:3A:44:65:58:29:49:78:A5:20:37:82:AB:DB:14:30:AA:A8:91:65 Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft Manifest number: 59 Signing time: Mon 03 Nov 2025 07:09:08 +0000 Manifest this update: Mon 03 Nov 2025 07:09:08 +0000 Manifest next update: Mon 10 Nov 2025 07:09:08 +0000 Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: O1DdXdYa09LR+SfE14i36ngDqCU9p33WJLBhyGdnLOc=) 2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: 65bo4JvkKG1LiWSEJwhJil93bHGvwvvTBpuZe2kaGMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: Nov 3 07:09:08 2025 GMT Not After : Nov 10 07:09:08 2025 GMT Subject: CN=69085514-d488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:d3:99:45:34:aa:be:86:ac:d2:02:24:e0: 68:fa:49:86:48:1d:01:24:ef:0d:c8:52:b6:8b:a5: 17:b0:5a:b1:81:e8:15:a3:e0:af:26:ae:c3:6c:20: 52:b7:04:e7:48:a1:84:85:5b:64:d2:09:73:4b:4d: 64:c1:c5:d9:06:5b:51:e6:e6:f2:ba:38:e7:b4:0a: 07:2e:64:9f:de:bc:7d:67:7c:d0:d2:10:8b:ae:05: 00:26:9f:6c:ce:75:e7:1d:88:4c:73:7e:6b:44:ba: 01:77:d0:7a:4b:24:47:6e:71:c0:b1:83:28:dd:45: 36:27:17:70:0d:e0:ac:da:a0:1a:17:65:51:53:8f: db:55:8e:4e:48:e4:30:14:d2:8d:7b:aa:fa:64:b2: 00:07:56:ef:2a:12:fe:fb:55:c8:39:b9:48:81:9b: 38:5c:3c:2e:2c:eb:fe:63:d3:e0:d2:82:bd:d9:86: 09:9d:42:08:db:19:fe:29:8d:49:aa:23:cc:f6:ad: 7b:c8:16:dd:ca:a7:63:ee:ee:d2:79:8f:8f:58:60: 10:5e:93:48:81:8a:3f:37:b7:7b:a2:5b:c7:e0:0f: c0:c3:5f:d1:0c:78:32:46:d8:93:8e:c1:2a:0d:cf: 87:8e:02:22:65:e3:53:da:a8:16:23:09:73:f6:c3: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3A:44:65:58:29:49:78:A5:20:37:82:AB:DB:14:30:AA:A8:91:65 X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c8:32:e7:32:38:36:2b:5c:9f:53:9e:45:43:c2:aa:36:7c: 9a:bf:34:d4:f9:e8:41:e5:be:42:5e:a6:b4:94:91:7f:3e:a9: 5a:ec:8b:b9:5e:24:6d:bc:e1:ae:4e:7f:7f:26:fd:43:b7:a6: 83:6a:9e:3a:8d:85:87:e3:e6:23:bf:da:ae:4c:ab:1e:35:5e: 55:d9:fe:51:d1:c6:54:24:97:a4:79:60:3c:3f:5f:35:41:c7: e3:f5:67:1e:40:67:89:bb:32:de:6c:9e:27:fd:6b:d0:ff:fc: 4a:48:18:20:88:30:9a:b4:bd:b2:78:7b:5d:88:e5:90:35:32: 39:85:28:bc:aa:69:2e:a8:8d:c1:89:d8:93:4c:8f:94:bf:c5: c9:c2:a2:3e:d3:1e:44:17:5d:b6:1d:15:85:82:8b:b3:74:af: 88:2f:42:00:58:2e:47:14:b2:2f:59:2c:85:08:7b:3e:14:dc: 06:c2:4a:bf:34:20:7c:e0:d7:d0:da:9b:13:a7:97:8d:b0:00: 39:7d:3a:31:66:72:da:00:dd:d6:f5:ea:1e:2c:8e:96:35:9a: c8:15:35:02:fa:5e:6e:da:f4:51:12:7f:2c:5c:af:07:ee:07: 9c:10:95:46:38:ae:e1:e2:d6:97:02:5c:07:69:de:0a:c2:db: 7e:06:f0:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4 RjM1Q0RDMzAeFw0yNTExMDMwNzA5MDhaFw0yNTExMTAwNzA5MDhaMBgxFjAUBgNV BAMTDTY5MDg1NTE0LWQ0ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqG9OZRTSqvoas0gIk4Gj6SYZIHQEk7w3IUraLpRewWrGB6BWj4K8mrsNsIFK3 BOdIoYSFW2TSCXNLTWTBxdkGW1Hm5vK6OOe0CgcuZJ/evH1nfNDSEIuuBQAmn2zO decdiExzfmtEugF30HpLJEduccCxgyjdRTYnF3AN4KzaoBoXZVFTj9tVjk5I5DAU 0o17qvpksgAHVu8qEv77Vcg5uUiBmzhcPC4s6/5j0+DSgr3ZhgmdQgjbGf4pjUmq I8z2rXvIFt3Kp2Pu7tJ5j49YYBBek0iBij83t3uiW8fgD8DDX9EMeDJG2JOOwSoN z4eOAiJl41PaqBYjCXP2w+d/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbTpEZVgp SXilIDeCq9sUMKqokWUwHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzFFQzcyRjIyMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZn ZjZLeVdIemUzaVk4MXpjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIrIMucyODYrXJ9TnkVDwqo2fJq/NNT56EHlvkJeprSUkX8+qVrsi7le JG284a5Of38m/UO3poNqnjqNhYfj5iO/2q5Mqx41XlXZ/lHRxlQkl6R5YDw/XzVB x+P1Zx5AZ4m7Mt5snif9a9D//EpIGCCIMJq0vbJ4e12I5ZA1MjmFKLyqaS6ojcGJ 2JNMj5S/xcnCoj7THkQXXbYdFYWCi7N0r4gvQgBYLkcUsi9ZLIUIez4U3AbCSr80 IHzg19DamxOnl42wADl9OjFmctoA3db16h4sjpY1msgVNQL6Xm7a9FESfyxcrwfu B5wQlUY4ruHi1pcCXAdp3grC234G8LQ= -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:24 2025 by rpki-client