$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft File: vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json) Hash identifier: lPRjg3aIy+yR1zQD/VnF7j7nCXmfK/Ml645Si0fRLKM= Subject key identifier: 1D:5F:FA:E9:CB:EA:D4:15:6A:21:BC:2E:8D:B8:A8:BA:78:DC:4E:FE Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3 Certificate issuer: /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft Manifest number: 0B37 Signing time: Tue 04 Nov 2025 20:22:36 +0000 Manifest this update: Tue 04 Nov 2025 20:22:36 +0000 Manifest next update: Tue 11 Nov 2025 20:22:36 +0000 Files and hashes: 1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: 3LjrLOxhsJMHYkBeYZK6IVESCgpT2NP2dgZxxCgHa/c=) 2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: A1jEmvYmaWLQVLC3lKrKCjgOEWn5/laaNWB/FSQRMc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3 Validity Not Before: Nov 4 20:22:36 2025 GMT Not After : Nov 11 20:22:36 2025 GMT Subject: CN=690a608c-b958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:5c:11:e7:08:26:68:87:3a:73:e9:e6:90: 69:ea:97:4e:e0:ce:22:92:e6:a2:74:72:b0:ff:47: 39:2b:a9:0b:10:82:ce:74:d9:fa:c0:45:53:19:d7: 66:b9:51:64:a1:3a:c9:dd:78:8c:28:20:d2:c7:5c: f4:2b:61:df:6f:02:b4:db:fe:2c:d9:5c:c9:a8:96: 83:94:49:68:5d:5f:cc:7f:a9:a1:f3:c7:37:ad:56: 3b:af:86:01:d9:78:0a:29:29:b9:fb:9d:08:fd:c8: 71:ba:35:ec:d5:4e:4a:07:b7:03:56:13:10:7d:88: 54:bf:f8:5b:a1:60:a7:4c:a0:ee:d5:7e:e9:36:90: af:ba:2f:34:19:de:36:f9:2c:a1:92:db:98:da:86: 31:57:7d:ba:9a:a4:80:e6:90:e3:59:ce:74:fb:41: 7e:74:ec:67:34:e9:a9:93:41:0f:44:40:16:6e:d1: 1c:3e:9a:c8:09:66:9c:a2:fb:53:4c:6d:21:06:4c: 03:73:42:b0:11:8b:00:d6:f6:ae:4e:57:40:75:41: c2:82:a7:8e:e4:5f:0f:43:43:f2:12:6e:ed:47:77: 4d:f3:b4:7b:14:f1:83:3b:3d:98:8e:19:6b:83:53: 09:ed:f8:12:2e:33:8e:fe:15:73:58:41:88:f4:f5: b1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5F:FA:E9:CB:EA:D4:15:6A:21:BC:2E:8D:B8:A8:BA:78:DC:4E:FE X509v3 Authority Key Identifier: keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c2:c6:e5:d5:dd:ed:3a:63:03:3d:3f:a8:b5:fe:52:74:51: 8c:0d:20:22:c4:ff:06:25:dc:7a:7b:07:d4:16:76:5b:6a:88: e8:cf:93:62:26:dc:27:66:cf:0a:95:4a:41:4a:91:38:d5:2f: 6c:38:fb:ed:0a:fb:f1:ed:55:7d:6f:e6:8a:27:6f:b6:f3:2f: de:96:01:01:ea:0a:24:d8:99:8f:40:7c:98:9a:ae:3b:95:50: f8:65:84:e9:a6:d1:23:01:ae:cb:bd:97:94:b4:a8:34:cf:72: 3a:e4:30:7b:d9:b3:e5:4d:a0:29:89:9a:85:28:ef:c3:94:bc: 69:ad:39:a9:f7:dd:8d:6c:d7:5f:fc:f3:d2:d2:32:14:29:3d: e9:6d:55:7c:9f:2a:da:bd:48:85:18:03:43:e9:8f:ed:eb:f2: cb:e6:d5:34:f3:7e:b5:52:4a:90:4b:ba:16:61:83:48:0f:93: 1d:78:e6:fc:ed:df:e6:1a:56:20:e5:95:17:05:8a:23:2e:3b: 32:0d:fd:9d:dd:2b:74:2e:05:11:b9:e7:86:7c:68:dc:ab:38: dc:49:db:06:73:ef:14:84:f8:e0:c2:c2:89:52:35:06:a9:72: 74:75:52:df:ec:92:30:36:c1:1e:b6:a1:e4:e6:00:d9:6a:d8: cc:88:f6:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKEJEMzdGMUQ0MDc0N0JFNkM1RjVDNkJBMzMwN0RGNjU2 MEFCNjgxQTMwHhcNMjUxMTA0MjAyMjM2WhcNMjUxMTExMjAyMjM2WjAYMRYwFAYD VQQDEw02OTBhNjA4Yy1iOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OdcEecIJmiHOnPp5pBp6pdO4M4ikuaidHKw/0c5K6kLEILOdNn6wEVTGddm uVFkoTrJ3XiMKCDSx1z0K2HfbwK02/4s2VzJqJaDlEloXV/Mf6mh88c3rVY7r4YB 2XgKKSm5+50I/chxujXs1U5KB7cDVhMQfYhUv/hboWCnTKDu1X7pNpCvui80Gd42 +SyhktuY2oYxV326mqSA5pDjWc50+0F+dOxnNOmpk0EPREAWbtEcPprICWacovtT TG0hBkwDc0KwEYsA1vauTldAdUHCgqeO5F8PQ0PyEm7tR3dN87R7FPGDOz2Yjhlr g1MJ7fgSLjOO/hVzWEGI9PWx8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1f+unL 6tQVaiG8Lo24qLp43E7+MB8GA1UdIwQYMBaAFL038dQHR75sX1xrozB99lYKtoGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi92VGZ4MUFkSHZteGZYR3VqTUgzMlZncTJn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZUZngxQWRIdm14ZlhHdWpNSDMyVmdxMmdhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi92VGZ4MUFkSHZt eGZYR3VqTUgzMlZncTJnYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRwsbl1d3tOmMDPT+otf5SdFGMDSAixP8GJdx6ewfUFnZbaojoz5Ni JtwnZs8KlUpBSpE41S9sOPvtCvvx7VV9b+aKJ2+28y/elgEB6gok2JmPQHyYmq47 lVD4ZYTpptEjAa7LvZeUtKg0z3I65DB72bPlTaApiZqFKO/DlLxprTmp992NbNdf /PPS0jIUKT3pbVV8nyravUiFGAND6Y/t6/LL5tU08361UkqQS7oWYYNID5MdeOb8 7d/mGlYg5ZUXBYojLjsyDf2d3St0LgURueeGfGjcqzjcSdsGc+8UhPjgwsKJUjUG qXJ0dVLf7JIwNsEetqHk5gDZatjMiPZZ -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:21 2025 by rpki-client