$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json) Hash identifier: rG/V87FAYKoBX5LOE19o+Iy0QmTgh3w2D1/Q7EbFe/g= Subject key identifier: 64:E0:5C:06:4B:78:C4:DF:9C:67:A0:80:B5:50:C7:AD:F0:69:59:31 Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft Manifest number: 87 Signing time: Wed 05 Nov 2025 06:48:22 +0000 Manifest this update: Wed 05 Nov 2025 06:48:22 +0000 Manifest next update: Wed 12 Nov 2025 06:48:22 +0000 Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: Le/Dpnv+o0SnSNaoKK2ncfLr5ZU/FfrvmNdGUYJB/B4=) 2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: NgoL1gjr88ZdEn/6hgZXntqKOlCBVmw0eMD59yFjWlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Validity Not Before: Nov 5 06:48:22 2025 GMT Not After : Nov 12 06:48:22 2025 GMT Subject: CN=690af336-bbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:3d:c3:41:e0:44:7a:83:cf:59:ae:92:4d: 8a:6b:33:8d:cb:64:8f:22:26:bf:80:b7:da:8c:e9: f1:f7:9f:1c:41:fc:b5:8f:4b:5d:6d:18:e8:f2:2b: 46:e1:85:16:16:01:10:15:fc:ee:8c:fa:38:d9:93: 77:9f:a0:7c:40:7f:b7:aa:e4:94:4e:dd:75:cd:32: a1:81:9b:25:3d:2a:69:95:31:c9:2d:15:b0:d6:e3: 5e:12:70:eb:18:90:d7:dc:6c:62:a8:66:e5:63:38: 48:6f:e0:63:6a:3a:9a:8c:8f:5a:18:91:53:9c:3b: 90:57:38:a3:ba:5a:ed:91:d8:c4:cf:1e:2f:3d:b2: b7:f9:1d:fd:d0:36:d4:63:78:60:b2:36:7b:b2:1b: 51:14:c8:92:8e:fb:1f:58:0d:e2:c9:57:aa:9b:ab: 97:32:5c:40:8c:7b:c2:5d:b0:96:af:82:53:21:7d: ed:34:3f:f9:3f:2d:2a:ad:dc:4e:d3:2b:34:2b:51: 90:0e:32:29:86:8d:b8:38:35:d3:f2:5f:89:54:7a: 40:f6:1d:ce:23:4c:d7:cd:46:ed:ec:6c:f1:31:1d: c5:45:66:8c:c7:66:1c:fe:52:de:77:de:40:88:f6: 53:7f:90:44:04:a1:9a:80:63:1e:c0:69:cf:23:58: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E0:5C:06:4B:78:C4:DF:9C:67:A0:80:B5:50:C7:AD:F0:69:59:31 X509v3 Authority Key Identifier: keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:58:41:c6:bf:3d:63:c4:60:06:2d:2d:a4:7e:5e:49:23:bf: be:5d:43:a1:16:eb:d4:50:eb:29:6e:bc:1f:48:ef:83:bb:00: e9:eb:f6:b0:19:31:1d:d6:e1:9b:c0:cb:f4:a1:af:47:85:3e: e1:22:46:ba:96:43:c1:85:82:cd:00:87:4e:28:49:83:42:0a: 87:1f:6c:2d:8e:34:f8:37:97:1f:0d:a3:84:44:58:57:73:fa: 34:04:26:8e:27:ac:e7:b4:27:4d:e2:e7:d8:38:70:73:5a:7a: 7a:48:b3:c4:12:52:1f:87:22:15:57:64:4e:33:d2:86:e3:49: 5a:a4:c1:c9:aa:0c:d2:a7:e7:8b:ca:41:84:32:ba:90:c1:5d: 0b:f0:af:9b:5d:09:98:fe:76:ff:6e:aa:91:32:52:76:77:4f: f7:38:70:a4:2d:36:ab:8a:cb:39:22:d2:64:ad:97:be:0b:50: 84:17:81:6e:b4:d0:7a:a5:3c:7d:57:9c:73:0e:9c:e8:f7:6f: cb:db:84:3b:0e:f9:01:c6:5c:ae:73:69:73:b5:5b:d9:2d:cd: 6c:12:49:80:dd:0e:72:79:75:a1:69:a5:1f:d3:1b:8a:38:91: 3c:c5:2a:0d:02:2e:8c:07:40:6b:5b:5c:1f:78:e8:b2:c4:e1: 0e:92:07:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQ0IxMTAvBgNVBAUTKDU2NTIwRkExRDc2RTk1RjA4MTlCNkRERDQ5NjdCNDU1 MDQ2OTg2OUQwHhcNMjUxMTA1MDY0ODIyWhcNMjUxMTEyMDY0ODIyWjAYMRYwFAYD VQQDEw02OTBhZjMzNi1iYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLE9w0HgRHqDz1mukk2KazONy2SPIia/gLfajOnx958cQfy1j0tdbRjo8itG 4YUWFgEQFfzujPo42ZN3n6B8QH+3quSUTt11zTKhgZslPSpplTHJLRWw1uNeEnDr GJDX3GxiqGblYzhIb+BjajqajI9aGJFTnDuQVzijulrtkdjEzx4vPbK3+R390DbU Y3hgsjZ7shtRFMiSjvsfWA3iyVeqm6uXMlxAjHvCXbCWr4JTIX3tND/5Py0qrdxO 0ys0K1GQDjIpho24ODXT8l+JVHpA9h3OI0zXzUbt7GzxMR3FRWaMx2Yc/lLed95A iPZTf5BEBKGagGMewGnPI1iy/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTgXAZL eMTfnGeggLVQx63waVkxMB8GA1UdIwQYMBaAFFZSD6HXbpXwgZtt3UlntFUEaYad MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi81QjZGQTM2MEVB NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxmQ0JtMjNkU1dlMFZRUnBo cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFDQi81QjZGQTM2MEVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxm Q0JtMjNkU1dlMFZRUnBocDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEWEHGvz1jxGAGLS2kfl5JI7++XUOhFuvUUOspbrwfSO+DuwDp6/aw GTEd1uGbwMv0oa9HhT7hIka6lkPBhYLNAIdOKEmDQgqHH2wtjjT4N5cfDaOERFhX c/o0BCaOJ6zntCdN4ufYOHBzWnp6SLPEElIfhyIVV2ROM9KG40lapMHJqgzSp+eL ykGEMrqQwV0L8K+bXQmY/nb/bqqRMlJ2d0/3OHCkLTariss5ItJkrZe+C1CEF4Fu tNB6pTx9V5xzDpzo92/L24Q7DvkBxlyuc2lztVvZLc1sEkmA3Q5yeXWhaaUf0xuK OJE8xSoNAi6MB0BrW1wfeOiyxOEOkgdE -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:22 2025 by rpki-client