$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: 8xf7pySPKIaNxM8j66G03n/ch25qn2cuyLpeKnnLWdU= Subject key identifier: 6C:75:CA:80:30:00:4B:F1:AB:63:ED:D5:46:8E:A1:58:8A:F8:B9:DB Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 3528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 3502 Signing time: Tue 04 Nov 2025 14:41:40 +0000 Manifest this update: Tue 04 Nov 2025 14:41:39 +0000 Manifest next update: Tue 11 Nov 2025 14:41:39 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: Fr56AxPUX1XGpvgE5IQTBGkkyivVtD2h9pMYx7JtLOw=) 2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: unO0oTKhnor9ebnRuAfkAYkGc9LOIbi0DbBC0WH9UfY=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: AaHslNAvyFB1N0UKdtTkIgpVE4VBUIY1l01evtGLYPA=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: ovUWB4TX6WU7bMIId6kmk1otlxTDWLGwzoCQdj1vj34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Nov 4 14:41:39 2025 GMT Not After : Nov 11 14:41:39 2025 GMT Subject: CN=690a10a3-e667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:82:f5:85:94:90:f3:7e:b0:94:2c:cc:8d: 88:05:e5:73:12:bc:03:ef:e8:03:37:e1:fa:41:f5: 39:9d:93:44:63:dd:56:90:6b:09:a8:cd:8e:72:96: cb:1c:4d:a3:a8:9c:11:fc:05:64:19:11:09:94:ac: 2e:ab:6d:57:43:d8:2f:8b:4a:08:28:22:39:2f:98: 56:ae:f1:bb:43:ca:e3:0c:a6:df:b2:a3:9d:52:f4: 20:1f:92:23:27:59:0b:81:c7:fe:3e:cb:b5:fc:69: d6:19:74:3e:fa:3e:ab:b3:ae:61:9f:b6:6f:90:a2: cb:6b:d8:d3:87:04:2b:33:5c:4e:a4:fa:4f:16:f8: 8b:6d:07:3f:df:01:b7:99:1f:df:8e:67:4e:f0:3c: b7:03:41:8e:62:dc:82:21:63:60:89:64:40:b9:f5: e5:a2:da:72:fc:95:46:47:14:95:96:cc:45:13:6d: 52:5d:ba:58:90:ea:92:45:c5:0a:5f:84:28:86:c8: e9:2e:a0:5f:bf:e6:a9:17:cb:28:fa:26:61:91:e0: 64:3e:09:98:d3:a7:36:96:b5:96:c0:b5:a7:cf:2e: 27:60:42:8a:b2:73:d6:b3:da:32:40:e5:b7:46:4a: 9e:13:f4:77:fb:85:0c:ca:46:0e:73:51:43:0f:9e: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:75:CA:80:30:00:4B:F1:AB:63:ED:D5:46:8E:A1:58:8A:F8:B9:DB X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:8f:51:a8:44:ca:b4:c3:6b:c4:2c:e9:d9:5d:7f:65:e0:46: 27:61:88:bc:7f:4f:35:26:52:95:ad:2e:64:96:1a:cc:58:5c: 9e:c2:10:49:87:32:a2:71:27:81:3b:ce:e1:36:33:b6:83:48: 98:3a:4d:65:29:49:0e:b8:0d:ff:cf:d9:88:05:b6:76:7a:c0: 60:fa:44:4f:32:e6:bb:70:8e:f6:0b:cc:47:c8:0b:3a:4d:ef: 82:b8:1d:0f:80:91:ef:8f:42:bd:34:a4:af:ba:f3:b7:aa:eb: 58:8c:c9:72:45:19:4b:c0:66:c6:e6:e5:f9:68:17:8b:d9:29: 9a:32:05:05:c4:f6:0f:66:4c:d9:fd:05:55:b1:f1:62:49:aa: a4:55:25:74:c5:32:0d:9e:a2:30:1a:60:78:0f:ff:c3:56:da: 3c:05:31:65:70:41:5b:7b:5b:9d:ee:7a:ef:27:0e:ed:23:26: 9e:8f:b3:99:d1:6e:9d:b2:fc:b3:a2:42:4b:23:4a:e4:ad:80: 15:bd:f0:de:7f:84:87:b2:74:67:2e:b8:1b:69:f7:c4:f2:2a: 0c:59:d2:90:98:df:32:0a:73:04:00:c8:5f:00:e2:36:e8:a5: 40:ba:61:01:ce:7a:d8:bc:ce:c1:17:36:62:ea:16:3a:00:bb: 32:c9:6d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUxMTA0MTQ0MTM5WhcNMjUxMTExMTQ0MTM5WjAYMRYwFAYD VQQDEw02OTBhMTBhMy1lNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviuC9YWUkPN+sJQszI2IBeVzErwD7+gDN+H6QfU5nZNEY91WkGsJqM2OcpbL HE2jqJwR/AVkGREJlKwuq21XQ9gvi0oIKCI5L5hWrvG7Q8rjDKbfsqOdUvQgH5Ij J1kLgcf+Psu1/GnWGXQ++j6rs65hn7ZvkKLLa9jThwQrM1xOpPpPFviLbQc/3wG3 mR/fjmdO8Dy3A0GOYtyCIWNgiWRAufXlotpy/JVGRxSVlsxFE21SXbpYkOqSRcUK X4QohsjpLqBfv+apF8so+iZhkeBkPgmY06c2lrWWwLWnzy4nYEKKsnPWs9oyQOW3 RkqeE/R3+4UMykYOc1FDD5754wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx1yoAw AEvxq2Pt1UaOoViK+LnbMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHj1GoRMq0w2vELOnZXX9l4EYnYYi8f081JlKVrS5klhrMWFyewhBJ hzKicSeBO87hNjO2g0iYOk1lKUkOuA3/z9mIBbZ2esBg+kRPMua7cI72C8xHyAs6 Te+CuB0PgJHvj0K9NKSvuvO3qutYjMlyRRlLwGbG5uX5aBeL2SmaMgUFxPYPZkzZ /QVVsfFiSaqkVSV0xTINnqIwGmB4D//DVto8BTFlcEFbe1ud7nrvJw7tIyaej7OZ 0W6dsvyzokJLI0rkrYAVvfDef4SHsnRnLrgbaffE8ioMWdKQmN8yCnMEAMhfAOI2 6KVAumEBznrYvM7BFzZi6hY6ALsyyW3o -----END CERTIFICATE-----Generated at Wed Nov 5 13:12:06 2025 by rpki-client