$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: Gu7i4z4eevrqfeZnJ+HFDEBUz7MIHFUVUdra1pnu73g= Subject key identifier: 7C:24:4E:1D:4D:3E:98:53:63:13:E7:9A:B1:50:E6:12:A0:8D:0F:77 Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0C80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0C79 Signing time: Tue 04 Nov 2025 18:32:41 +0000 Manifest this update: Tue 04 Nov 2025 18:32:41 +0000 Manifest next update: Tue 11 Nov 2025 18:32:41 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: JrRDJzl0DuO2LPDPwtNHqqS+si22uYWuZn3ueghd/Wk=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: sizu4+OIZ/A8x9uQpAud/O4xnlom/Pk+/kkVVxPExzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: Nov 4 18:32:41 2025 GMT Not After : Nov 11 18:32:41 2025 GMT Subject: CN=690a46c9-3632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b4:f0:e4:08:f3:53:bc:56:71:25:da:7b:3d: c9:e0:44:f4:37:2a:f8:0f:79:3f:f1:54:a5:c4:74: 99:0f:59:db:4b:5a:3e:cf:50:87:ba:6f:99:18:8e: 96:ad:6f:33:07:a2:2f:14:be:3c:98:4c:5c:fd:6f: 10:04:80:09:1e:9a:d8:b2:2f:c3:25:04:6d:d3:16: 11:f4:dc:8f:21:27:50:b5:50:db:1e:2c:44:e9:46: ad:ee:24:cb:fd:18:4f:df:42:0d:a8:14:c9:6e:43: 28:b4:0a:61:19:2a:32:4d:68:75:a1:a3:74:73:8f: 7e:51:cc:92:0a:cf:d0:aa:c0:b9:dc:e0:04:db:22: c2:2a:a4:c4:22:51:fe:f0:b3:6d:6b:60:46:8d:3b: 1e:e3:7d:a0:05:e8:15:5a:6a:28:6f:d0:59:6b:9f: 9a:1b:b7:1b:3d:3d:67:fd:d4:8a:87:2b:9f:97:19: 17:d8:08:19:cf:36:82:02:77:0d:ba:7e:e0:9f:9a: 9a:5f:ad:7e:81:6f:da:b3:3a:6e:f4:fc:c2:5f:dc: c6:11:f9:5d:91:46:77:4a:1d:6f:e3:32:aa:3e:48: 3c:35:5a:f0:c5:1d:54:33:1c:0d:96:b0:0e:31:a0: e4:2e:0d:63:5f:04:8e:2e:79:4a:d4:6a:79:77:28: 9d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:24:4E:1D:4D:3E:98:53:63:13:E7:9A:B1:50:E6:12:A0:8D:0F:77 X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:88:2b:ba:33:0d:59:6e:03:bb:ad:bd:b9:7e:b9:03:2c:1f: d1:1c:e5:43:9a:eb:f7:22:bc:02:9a:14:41:4a:ff:c3:68:a1: 7f:8b:21:59:a2:51:2a:f8:61:1b:c2:47:de:4c:78:de:44:c7: 24:55:80:00:e2:79:c8:98:89:01:54:31:9e:08:49:ed:5f:f3: 0a:a8:58:d9:34:a2:1e:6c:9b:d3:28:4d:26:96:90:e4:8b:92: a2:ae:a7:cc:60:e0:46:4b:43:8c:67:00:1d:47:15:1a:9a:1b: 3a:e3:28:3c:0e:ac:f3:66:77:87:4f:e9:42:22:d5:f1:38:6a: 5b:0a:7a:8a:91:1f:48:8c:bb:58:7c:0e:f0:0a:bc:54:d6:1b: 48:9b:58:5d:e7:f6:b4:8f:07:26:08:ca:37:24:a1:ed:0f:ad: 78:5d:d7:43:fe:5b:2f:70:33:cc:25:ca:3f:35:a8:4f:89:29: 11:a5:ef:cd:e7:55:f0:7b:8b:24:ab:aa:0c:05:0e:f8:c9:52: 8e:fb:4d:66:fe:e6:a5:28:fa:f7:ec:c9:5e:a2:35:1d:b2:64: 4e:69:d7:9f:dd:8f:b9:29:c8:29:dc:c0:1e:a0:be:99:f4:7a: a4:04:44:38:6e:3d:31:4a:67:95:d7:11:64:84:c7:a7:87:f8: 9d:d2:89:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjUxMTA0MTgzMjQxWhcNMjUxMTExMTgzMjQxWjAYMRYwFAYD VQQDEw02OTBhNDZjOS0zNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rTw5AjzU7xWcSXaez3J4ET0Nyr4D3k/8VSlxHSZD1nbS1o+z1CHum+ZGI6W rW8zB6IvFL48mExc/W8QBIAJHprYsi/DJQRt0xYR9NyPISdQtVDbHixE6Uat7iTL /RhP30INqBTJbkMotAphGSoyTWh1oaN0c49+UcySCs/QqsC53OAE2yLCKqTEIlH+ 8LNta2BGjTse432gBegVWmoob9BZa5+aG7cbPT1n/dSKhyuflxkX2AgZzzaCAncN un7gn5qaX61+gW/aszpu9PzCX9zGEfldkUZ3Sh1v4zKqPkg8NVrwxR1UMxwNlrAO MaDkLg1jXwSOLnlK1Gp5dyid7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwkTh1N PphTYxPnmrFQ5hKgjQ93MB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhiCu6Mw1ZbgO7rb25frkDLB/RHOVDmuv3IrwCmhRBSv/DaKF/iyFZ olEq+GEbwkfeTHjeRMckVYAA4nnImIkBVDGeCEntX/MKqFjZNKIebJvTKE0mlpDk i5KirqfMYOBGS0OMZwAdRxUamhs64yg8DqzzZneHT+lCItXxOGpbCnqKkR9IjLtY fA7wCrxU1htIm1hd5/a0jwcmCMo3JKHtD614XddD/lsvcDPMJco/NahPiSkRpe/N 51Xwe4skq6oMBQ74yVKO+01m/ualKPr37MleojUdsmROadef3Y+5Kcgp3MAeoL6Z 9HqkBEQ4bj0xSmeV1xFkhMenh/id0oky -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:20 2025 by rpki-client