$ rpki-client -vvf rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft File: VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft (raw, json) Hash identifier: ZyWNGHk5LQYNPrcIp7uPznsBhKrIXOTyxJlSbedr0Dg= Subject key identifier: 2F:A9:B5:5F:9E:77:A9:5F:8A:59:F8:06:53:6C:77:41:AD:C4:33:FC Authority key identifier: 54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3 Certificate issuer: /CN=A919F653/serialNumber=549093D2C161749E8C6F0E885627541089A54DC3 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft Manifest number: DA Signing time: Mon 03 Nov 2025 05:33:23 +0000 Manifest this update: Mon 03 Nov 2025 05:33:22 +0000 Manifest next update: Mon 10 Nov 2025 05:33:22 +0000 Files and hashes: 1: VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl (hash: lwdubOzunK5pah1lghdATkspZshl4pHoNVLFAosbAQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F653, serialNumber=549093D2C161749E8C6F0E885627541089A54DC3 Validity Not Before: Nov 3 05:33:22 2025 GMT Not After : Nov 10 05:33:22 2025 GMT Subject: CN=69083ea2-c442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:cf:b3:57:8f:7f:57:ee:4b:ef:7e:d6:c7: 0b:d0:9c:cd:43:12:18:8f:ca:af:65:64:7b:92:61: 1b:ed:81:1d:ad:d5:27:2c:51:15:9b:bf:64:88:ad: 27:10:53:63:16:a8:74:7f:c6:5a:75:e7:88:95:54: c0:96:31:1e:cf:26:89:4e:08:80:26:66:16:32:c1: 9a:f8:8b:99:5f:32:c2:9d:b0:35:e1:af:26:86:ae: c2:f7:65:e9:b6:31:79:93:95:f7:cd:3a:bf:3b:b0: 2a:82:a6:93:3c:36:71:3c:30:7a:fe:6a:ae:17:bd: 14:2a:c5:23:37:fa:81:15:69:71:b7:91:b8:e3:e2: 30:a7:04:3b:42:bc:ef:f2:57:f5:8a:d7:f8:af:7c: cb:4d:9e:15:dd:94:b7:3c:6d:3e:db:9d:a9:bf:6c: 4c:4d:f9:5a:05:e1:40:07:e1:7b:18:35:d6:f9:2e: a2:63:6e:04:25:ef:2e:32:0d:9c:55:58:4e:7f:06: af:16:0c:3c:e5:c7:ca:20:d3:8a:6c:cc:0f:60:53: fa:b0:bc:a0:3b:dd:59:10:e8:93:d0:98:e2:be:50: 82:a1:7e:63:cd:d6:1c:74:4a:46:93:e3:c1:0c:62: 47:dd:f5:99:39:7f:cb:89:fd:b5:f9:a8:09:50:1b: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:B5:5F:9E:77:A9:5F:8A:59:F8:06:53:6C:77:41:AD:C4:33:FC X509v3 Authority Key Identifier: keyid:54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f0:4f:f4:7b:e7:6d:99:ad:b5:1e:2f:34:a3:b9:70:eb:f0: 8f:ce:ba:33:4c:1b:49:44:b5:80:fa:71:06:2a:f9:29:44:d3: 14:6b:e6:2b:05:4c:e0:85:df:c6:7a:84:bf:45:e0:b8:83:6b: b7:3c:43:15:75:08:a3:f4:df:c4:18:5f:a3:ec:82:84:24:fa: 34:8b:ce:20:9c:a4:02:bf:20:59:4a:93:24:7e:d1:19:93:ca: 6c:79:0b:98:72:d8:22:d3:e2:97:fd:20:4b:aa:2b:8a:fb:12: 1d:3b:1d:2b:eb:30:ed:87:6d:e7:ca:1b:29:fa:f2:73:a9:da: c3:dd:35:5d:f1:10:8b:07:85:bf:a3:27:b8:c1:3c:63:f3:da: 3a:85:6d:31:1c:fd:d7:b9:05:1f:e8:95:cc:05:74:29:07:c3: 1b:46:ae:a6:9c:74:ef:21:b3:b2:20:2e:6e:72:d3:65:6f:ce: 94:f6:0f:58:a5:60:cc:10:05:10:20:df:66:39:26:f1:be:d7: 37:10:78:5d:f5:cc:3c:e7:a2:ac:4c:b9:bd:4a:96:53:6a:58: c8:0c:01:64:18:fc:2e:13:49:fe:5e:62:59:f1:ca:74:03:30: 9d:13:72:9e:2b:13:7a:a4:31:18:52:44:a0:4c:cd:8a:be:a3: 6e:f3:3a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY2NTMxMTAvBgNVBAUTKDU0OTA5M0QyQzE2MTc0OUU4QzZGMEU4ODU2Mjc1NDEw ODlBNTREQzMwHhcNMjUxMTAzMDUzMzIyWhcNMjUxMTEwMDUzMzIyWjAYMRYwFAYD VQQDEw02OTA4M2VhMi1jNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYHPs1ePf1fuS+9+1scL0JzNQxIYj8qvZWR7kmEb7YEdrdUnLFEVm79kiK0n EFNjFqh0f8ZadeeIlVTAljEezyaJTgiAJmYWMsGa+IuZXzLCnbA14a8mhq7C92Xp tjF5k5X3zTq/O7AqgqaTPDZxPDB6/mquF70UKsUjN/qBFWlxt5G44+IwpwQ7Qrzv 8lf1itf4r3zLTZ4V3ZS3PG0+252pv2xMTflaBeFAB+F7GDXW+S6iY24EJe8uMg2c VVhOfwavFgw85cfKINOKbMwPYFP6sLygO91ZEOiT0JjivlCCoX5jzdYcdEpGk+PB DGJH3fWZOX/Lif21+agJUBtnzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+ptV+e d6lfiln4BlNsd0GtxDP8MB8GA1UdIwQYMBaAFFSQk9LBYXSejG8OiFYnVBCJpU3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjY1My8wRDk0NEI4NDZB NjAxMUVGODMxRDE4NzhDNEY5QUUwMi9WSkNUMHNGaGRKNk1idzZJVmlkVUVJbWxU Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKQ1Qwc0ZoZEo2TWJ3NklWaWRVRUltbFRjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjY1My8wRDk0NEI4NDZBNjAxMUVGODMxRDE4NzhDNEY5QUUwMi9WSkNUMHNGaGRK Nk1idzZJVmlkVUVJbWxUY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa8E/0e+dtma21Hi80o7lw6/CPzrozTBtJRLWA+nEGKvkpRNMUa+Yr BUzghd/GeoS/ReC4g2u3PEMVdQij9N/EGF+j7IKEJPo0i84gnKQCvyBZSpMkftEZ k8pseQuYctgi0+KX/SBLqiuK+xIdOx0r6zDth23nyhsp+vJzqdrD3TVd8RCLB4W/ oye4wTxj89o6hW0xHP3XuQUf6JXMBXQpB8MbRq6mnHTvIbOyIC5uctNlb86U9g9Y pWDMEAUQIN9mOSbxvtc3EHhd9cw856KsTLm9SpZTaljIDAFkGPwuE0n+XmJZ8cp0 AzCdE3KeKxN6pDEYUkSgTM2KvqNu8zqm -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:24 2025 by rpki-client