$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json) Hash identifier: WXQWrcwMSaCHpXrrkIf5UeDfxyoCpfu7PrAOfD3/AqQ= Subject key identifier: 7E:73:27:2C:07:C7:50:11:96:6C:EE:C7:90:C0:8E:7C:8B:DE:13:04 Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft Manifest number: E2 Signing time: Wed 05 Nov 2025 05:40:24 +0000 Manifest this update: Wed 05 Nov 2025 05:40:24 +0000 Manifest next update: Wed 12 Nov 2025 05:40:24 +0000 Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: U27jYKsidr5FJsDHJGzNJuIEiXiTqt0OIL4GESgD1CM=) 2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: dqu1pobFvfzlLwg/sGBEkfm71ncOuw3ix0UQH+itn8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Validity Not Before: Nov 5 05:40:24 2025 GMT Not After : Nov 12 05:40:24 2025 GMT Subject: CN=690ae348-4c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:91:1e:22:9e:21:ec:bc:ef:f9:dc:7c:64:c1: fb:70:da:e0:a5:75:fc:35:0b:42:43:1f:1d:f5:ed: 76:fd:d6:e3:24:07:2d:01:d4:a9:e5:44:19:2f:21: 90:f5:f1:ff:b5:fe:a6:52:9b:77:18:e0:03:af:e2: d0:22:68:0d:71:62:fb:88:50:fb:c8:92:f3:e8:ef: ae:c2:fe:c3:8d:df:fc:42:62:9d:26:26:0f:8b:ad: b3:d1:7d:74:cf:9d:29:64:29:af:68:5b:d9:d8:e0: 81:6d:d8:b9:2e:7a:63:d8:f9:da:a4:b1:20:cd:73: 69:ca:9d:b2:f3:d6:44:ae:91:65:df:51:38:20:6e: 60:e4:c9:57:db:f0:70:b8:83:bd:08:f5:0d:b3:e1: 05:36:d1:de:b4:c9:90:74:b3:dc:ca:4f:25:88:01: 21:0b:48:61:c9:ff:73:19:34:01:13:bc:37:28:a4: 6d:05:04:36:00:3f:70:54:97:e4:9f:14:a0:dd:20: 83:d5:f5:6e:0d:e1:be:25:11:0e:cc:3d:de:53:f2: 58:29:d7:e6:79:00:e8:df:8c:e0:ae:f0:48:ab:ac: 9e:95:fd:43:bd:6d:b0:8b:9f:2e:7c:d3:57:34:11: a9:b0:b1:03:19:34:d6:df:e1:17:ff:5f:74:41:0f: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:73:27:2C:07:C7:50:11:96:6C:EE:C7:90:C0:8E:7C:8B:DE:13:04 X509v3 Authority Key Identifier: keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:47:fa:12:2d:b4:0d:7c:f1:3f:0d:bd:26:2a:ca:da:24:84: a3:a2:04:49:6d:ab:20:4d:27:2c:c4:9d:f3:17:62:1c:bb:21: 24:7b:cf:ce:c4:3d:fd:f0:c2:b1:e7:ab:a7:07:59:47:45:8e: 1e:3c:7c:0c:a1:31:1d:f4:38:50:69:56:70:5a:59:67:dd:13: 23:a3:1f:a5:d4:f0:3b:81:6a:11:6b:de:d4:a4:1a:67:e3:f7: e1:ae:94:6e:8d:89:d8:ad:23:03:4b:94:15:f1:d4:e9:c0:24: b2:e5:80:93:dc:84:0c:b4:7f:4f:d4:85:61:b6:04:6a:d7:48: 28:6a:da:82:e9:8a:8e:67:40:a0:c6:f9:65:b1:77:b7:10:7c: e4:91:59:c8:37:59:1b:e2:51:2c:e0:1b:59:79:55:a8:4f:e7: 2f:a0:9d:cf:9c:90:d5:c4:9a:7b:ca:d5:bc:5a:f9:1f:06:27: 65:35:8f:34:c0:da:6b:b6:19:21:e1:dd:2d:6b:76:18:66:b1: 1c:7c:7a:4d:a8:40:2e:01:c0:01:7c:d8:dd:68:7b:34:bd:35: cd:76:69:02:03:0a:aa:c8:c0:08:7c:e6:78:4d:dd:e1:2f:77: c1:ad:2f:fb:a2:6a:7a:fb:11:44:14:04:54:b1:a8:b3:02:17: c3:48:52:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDU1MDVBMUEyODc2NkRCMzE4MjJDNDYxNTg2RTY4RURE RjJBNzkzRkEwHhcNMjUxMTA1MDU0MDI0WhcNMjUxMTEyMDU0MDI0WjAYMRYwFAYD VQQDEw02OTBhZTM0OC00YzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJEeIp4h7Lzv+dx8ZMH7cNrgpXX8NQtCQx8d9e12/dbjJActAdSp5UQZLyGQ 9fH/tf6mUpt3GOADr+LQImgNcWL7iFD7yJLz6O+uwv7Djd/8QmKdJiYPi62z0X10 z50pZCmvaFvZ2OCBbdi5Lnpj2PnapLEgzXNpyp2y89ZErpFl31E4IG5g5MlX2/Bw uIO9CPUNs+EFNtHetMmQdLPcyk8liAEhC0hhyf9zGTQBE7w3KKRtBQQ2AD9wVJfk nxSg3SCD1fVuDeG+JREOzD3eU/JYKdfmeQDo34zgrvBIq6yelf1DvW2wi58ufNNX NBGpsLEDGTTW3+EX/190QQ+2xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5zJywH x1ARlmzux5DAjnyL3hMEMB8GA1UdIwQYMBaAFFUFoaKHZtsxgixGFYbmjt3yp5P6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82QTBBQzgwMjY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6R0NMRVlWaHVhTzNmS25r X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRV2hvb2RtMnpHQ0xFWVZodWFPM2ZLbmtfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82QTBBQzgwMjY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6 R0NMRVlWaHVhTzNmS25rX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrR/oSLbQNfPE/Db0mKsraJISjogRJbasgTScsxJ3zF2IcuyEke8/O xD398MKx56unB1lHRY4ePHwMoTEd9DhQaVZwWlln3RMjox+l1PA7gWoRa97UpBpn 4/fhrpRujYnYrSMDS5QV8dTpwCSy5YCT3IQMtH9P1IVhtgRq10goatqC6YqOZ0Cg xvllsXe3EHzkkVnIN1kb4lEs4BtZeVWoT+cvoJ3PnJDVxJp7ytW8WvkfBidlNY80 wNprthkh4d0ta3YYZrEcfHpNqEAuAcABfNjdaHs0vTXNdmkCAwqqyMAIfOZ4Td3h L3fBrS/7omp6+xFEFARUsaizAhfDSFKQ -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:01 2025 by rpki-client