$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft File: VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json) Hash identifier: 0PnUv6nZ7QL004Bj7eMslpoLQ71Ywd0FikqsOqd6KRE= Subject key identifier: FD:D8:79:95:9E:EA:10:E3:A0:D7:50:B5:82:52:22:F0:10:6D:E1:3E Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft Manifest number: 3C Signing time: Mon 03 Nov 2025 07:28:22 +0000 Manifest this update: Mon 03 Nov 2025 07:28:22 +0000 Manifest next update: Mon 10 Nov 2025 07:28:22 +0000 Files and hashes: 1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: gx285Q2+GVDyLcTNkcXlFbFfzGgHBC+EUXAsgWPyTX0=) 2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: eyKHyX1nC8rcYA1x+etP21iE0ELwmQ5yf7hxtFXOuMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Validity Not Before: Nov 3 07:28:22 2025 GMT Not After : Nov 10 07:28:22 2025 GMT Subject: CN=69085996-abaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:4d:90:33:ea:c6:43:1d:9f:05:d2:20:5d: e7:a3:01:e9:1d:5c:1b:00:0d:14:99:60:b3:16:62: da:ff:05:54:ec:60:2b:8c:f4:37:c9:3e:20:15:eb: 14:2d:2d:5f:50:e0:e6:e1:65:fd:bd:12:a3:87:2b: fa:29:0b:d2:31:ce:e1:5f:18:67:a3:2a:a7:3f:f9: ca:3a:bd:e9:85:ae:0e:05:09:89:10:33:05:0c:cb: a5:17:e9:da:ae:84:ca:ac:45:c2:9e:37:8b:6f:f7: 36:7d:d8:fb:b5:55:b6:5c:e3:91:b6:cc:17:8b:0c: ee:71:09:cf:06:dd:c8:68:46:b0:e7:7e:e5:b7:02: 42:13:f7:0d:cc:6e:fb:ec:2d:2c:80:cc:06:0a:7d: 22:0c:68:60:bd:55:11:0b:d9:d9:d2:14:c4:13:4e: ac:bb:d6:1a:1c:b2:dd:9b:4b:cb:54:ca:87:da:3f: a2:d8:b6:fb:be:6a:c3:cf:be:88:39:26:b3:0b:34: c8:d7:d7:42:82:ae:fd:6e:7e:11:36:8a:0b:a1:d2: a2:4e:75:f4:4c:04:d8:9b:3e:46:ee:d1:12:33:00: 1f:6f:d7:ce:6a:d6:4e:24:69:e7:1d:59:b3:4c:1e: 3f:0c:e2:5f:25:f9:8a:c3:b1:e8:e2:c8:04:9a:3c: 94:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D8:79:95:9E:EA:10:E3:A0:D7:50:B5:82:52:22:F0:10:6D:E1:3E X509v3 Authority Key Identifier: keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:be:68:b4:b1:9b:8d:2a:40:06:d7:3e:7d:00:25:51:b9:1d: 75:e2:48:59:59:f0:22:7c:97:d8:e9:92:d4:5d:66:15:71:af: e9:2b:a1:1e:bb:a4:7e:c1:b1:ec:37:14:b6:37:b3:15:b6:03: 6d:d3:d9:7c:eb:4c:2c:e0:3f:16:78:cc:6d:ca:0c:e0:ab:5a: d4:3e:7d:2d:20:33:68:0c:c9:23:f5:9f:e9:b3:d1:7d:74:ce: 15:d0:e0:c5:14:fa:73:b0:59:20:69:45:a8:e4:ba:63:01:ef: 90:2d:06:cb:17:a1:8b:30:bc:be:d0:b0:1d:58:3c:f8:2d:74: 4b:d9:76:32:eb:d1:12:cb:e2:72:51:3f:18:d7:c8:aa:a8:52: 62:10:e5:9e:0c:d4:c4:10:9d:b8:93:c8:3c:e4:7d:d1:e9:65: c1:15:d5:68:c6:e1:4a:8b:d0:e6:53:a2:2b:e9:1d:f8:d0:3f: 84:60:ea:55:45:74:24:bb:a6:e6:a4:7d:51:ca:d6:6c:3a:56: 47:58:24:84:0d:ce:44:3c:8b:3a:05:46:7b:67:70:24:38:30: a1:d2:a4:e1:00:83:f6:bd:04:e5:09:05:d7:d1:42:0a:51:57: d3:c1:96:df:bf:9c:02:92:12:ac:5e:59:ec:1a:05:87:aa:f8: d7:d2:6e:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTlDNTExMC8GA1UEBRMoNTY0QjY5MTc4RjI2OUVGQjk2Qjc2OTE2Rjc4MTcwNzU0 RThGMEM4NzAeFw0yNTExMDMwNzI4MjJaFw0yNTExMTAwNzI4MjJaMBgxFjAUBgNV BAMTDTY5MDg1OTk2LWFiYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNNU2QM+rGQx2fBdIgXeejAekdXBsADRSZYLMWYtr/BVTsYCuM9DfJPiAV6xQt LV9Q4ObhZf29EqOHK/opC9IxzuFfGGejKqc/+co6vemFrg4FCYkQMwUMy6UX6dqu hMqsRcKeN4tv9zZ92Pu1VbZc45G2zBeLDO5xCc8G3choRrDnfuW3AkIT9w3Mbvvs LSyAzAYKfSIMaGC9VREL2dnSFMQTTqy71hocst2bS8tUyofaP6LYtvu+asPPvog5 JrMLNMjX10KCrv1ufhE2iguh0qJOdfRMBNibPkbu0RIzAB9v185q1k4kaecdWbNM Hj8M4l8l+YrDsejiyASaPJQ/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/dh5lZ7q EOOg11C1glIi8BBt4T4wHwYDVR0jBBgwFoAUVktpF48mnvuWt2kW94FwdU6PDIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OUM1L0ZDMDFFODdDNURC QjExRjA5QUExNzg1MEM0RjlBRTAyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmt0cEY0OG1udnVXdDJrVzk0RndkVTZQREljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OUM1L0ZDMDFFODdDNURCQjExRjA5QUExNzg1MEM0RjlBRTAyL1ZrdHBGNDhtbnZ1 V3Qya1c5NEZ3ZFU2UERJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAu+aLSxm40qQAbXPn0AJVG5HXXiSFlZ8CJ8l9jpktRdZhVxr+kroR67 pH7Bsew3FLY3sxW2A23T2XzrTCzgPxZ4zG3KDOCrWtQ+fS0gM2gMySP1n+mz0X10 zhXQ4MUU+nOwWSBpRajkumMB75AtBssXoYswvL7QsB1YPPgtdEvZdjLr0RLL4nJR PxjXyKqoUmIQ5Z4M1MQQnbiTyDzkfdHpZcEV1WjG4UqL0OZToivpHfjQP4Rg6lVF dCS7puakfVHK1mw6VkdYJIQNzkQ8izoFRntncCQ4MKHSpOEAg/a9BOUJBdfRQgpR V9PBlt+/nAKSEqxeWewaBYeq+NfSbp8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:23 2025 by rpki-client