$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft File: vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json) Hash identifier: 6Qn3R/8O7EN5Y1hGB6B3sQlX8uULih+Of9Qw0CboQL4= Subject key identifier: 24:1D:E4:4D:E9:66:B4:7F:94:57:74:C7:6D:9F:FC:C4:99:47:32:33 Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 Certificate issuer: /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft Manifest number: D3 Signing time: Mon 03 Nov 2025 05:38:39 +0000 Manifest this update: Mon 03 Nov 2025 05:38:38 +0000 Manifest next update: Mon 10 Nov 2025 05:38:38 +0000 Files and hashes: 1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: NkUzpS4dX/0tufJJJ9Ox6kHfA1ShcB+S6JP976BU6Ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Validity Not Before: Nov 3 05:38:38 2025 GMT Not After : Nov 10 05:38:38 2025 GMT Subject: CN=69083fde-0081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4f:f6:5b:a7:2a:96:8a:6c:b4:e5:47:3a:5e: e2:ab:43:6b:c8:39:a7:5a:9b:69:6b:2c:7a:ec:64: 12:30:1e:fa:4a:c1:ff:00:66:2e:b2:41:e2:aa:a3: b4:46:f7:32:37:14:78:0f:3b:ff:59:c8:06:a4:2d: 7b:45:b0:c5:90:16:ae:92:4f:06:3c:0f:45:3f:bb: f8:62:be:96:30:7c:a6:ec:79:b5:ca:4d:ae:5b:4a: 03:6f:06:aa:36:de:a1:26:95:5b:3e:f9:b2:0e:dc: e1:6c:8a:cc:ec:ea:73:53:96:43:3f:58:66:22:c1: 01:da:1e:70:5f:fa:87:64:5f:ee:c4:c9:a2:48:62: 2d:46:71:dd:e8:9c:56:c2:4b:16:9d:cc:91:02:e8: 15:9f:ea:be:46:dc:5c:96:cb:d2:e4:75:64:98:6f: 83:47:d0:3c:d3:c4:69:c2:7d:06:03:cf:e3:d6:6e: 1e:26:8c:9e:d7:b5:3c:9c:7f:f8:9f:b2:48:24:14: e1:fb:73:99:bc:c5:49:19:b9:93:3a:4a:8f:42:18: e1:c4:37:73:a8:5a:87:1d:bc:aa:d5:66:f9:da:6c: 1f:af:66:43:a2:e7:61:51:c1:45:66:23:77:ca:a2: f2:68:c4:76:3f:7b:0e:9b:ed:a0:9b:2a:ae:a0:97: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1D:E4:4D:E9:66:B4:7F:94:57:74:C7:6D:9F:FC:C4:99:47:32:33 X509v3 Authority Key Identifier: keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:db:9b:7e:b1:d6:b8:64:eb:04:6c:64:a6:f5:cd:bf:0d:e9: f9:33:77:d6:bc:46:a7:cc:36:51:78:09:0f:2d:64:71:5c:8a: 33:23:85:fc:07:f3:5e:d7:a8:3f:19:5c:98:28:e9:11:0d:38: 3c:b1:bc:b9:d9:c4:12:6a:e0:0c:f3:a7:bd:59:2d:44:c0:4c: 04:9c:4e:5f:54:4f:18:c1:2e:e4:a9:7e:14:fb:2f:21:a9:ec: 0a:4f:d2:f0:a8:52:09:3e:9a:a5:09:04:a1:aa:79:df:5c:6e: fe:98:65:c5:b3:ed:e4:77:68:ea:62:f2:b0:82:af:c9:a7:db: ec:0b:69:63:2e:4b:94:ca:89:af:8d:46:ef:c8:ec:14:6f:0a: 3c:40:ca:36:d1:71:51:fa:e3:82:6b:4d:0d:8a:1a:4e:88:82: 54:60:3d:6f:65:c1:0d:5e:53:fd:28:8c:0a:84:0d:17:db:bd: e7:66:3b:05:08:97:ae:e0:8e:6f:7b:06:7f:aa:79:8d:6e:27: 91:8a:2b:96:fc:86:0e:1c:7a:8c:41:60:70:44:b0:f2:08:a3: 8c:b4:01:c9:6d:d3:78:99:ee:3a:40:15:3a:24:2e:25:00:60: d9:95:26:f8:c1:3d:52:6a:87:6a:2e:dc:f4:df:6a:76:08:02: 41:27:28:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzRjAxMTAvBgNVBAUTKEJEOTI2MjZCNDAwQkIxNERFNDFBNTA1MzlEOTYwRkM1 REQ2MURDMzcwHhcNMjUxMTAzMDUzODM4WhcNMjUxMTEwMDUzODM4WjAYMRYwFAYD VQQDEw02OTA4M2ZkZS0wMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxU/2W6cqlopstOVHOl7iq0NryDmnWptpayx67GQSMB76SsH/AGYuskHiqqO0 RvcyNxR4Dzv/WcgGpC17RbDFkBaukk8GPA9FP7v4Yr6WMHym7Hm1yk2uW0oDbwaq Nt6hJpVbPvmyDtzhbIrM7OpzU5ZDP1hmIsEB2h5wX/qHZF/uxMmiSGItRnHd6JxW wksWncyRAugVn+q+RtxclsvS5HVkmG+DR9A808Rpwn0GA8/j1m4eJoye17U8nH/4 n7JIJBTh+3OZvMVJGbmTOkqPQhjhxDdzqFqHHbyq1Wb52mwfr2ZDoudhUcFFZiN3 yqLyaMR2P3sOm+2gmyquoJfhiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQd5E3p ZrR/lFd0x22f/MSZRzIzMB8GA1UdIwQYMBaAFL2SYmtAC7FN5BpQU52WD8XdYdw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDNGMC9DQTZCOTRDQzc0 RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNVM2tHbEJUblpZUHhkMWgz RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaSmlhMEFMc1Uza0dsQlRuWllQeGQxaDNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDNGMC9DQTZCOTRDQzc0RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNV M2tHbEJUblpZUHhkMWgzRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs25t+sda4ZOsEbGSm9c2/Den5M3fWvEanzDZReAkPLWRxXIozI4X8 B/Ne16g/GVyYKOkRDTg8sby52cQSauAM86e9WS1EwEwEnE5fVE8YwS7kqX4U+y8h qewKT9LwqFIJPpqlCQShqnnfXG7+mGXFs+3kd2jqYvKwgq/Jp9vsC2ljLkuUyomv jUbvyOwUbwo8QMo20XFR+uOCa00NihpOiIJUYD1vZcENXlP9KIwKhA0X273nZjsF CJeu4I5vewZ/qnmNbieRiiuW/IYOHHqMQWBwRLDyCKOMtAHJbdN4me46QBU6JC4l AGDZlSb4wT1SaodqLtz032p2CAJBJyhK -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:28 2025 by rpki-client