$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: lkly+K47hf7PyLtryFHPSX+/KnvR3DpFWveeXGJEwS8= Subject key identifier: F9:EF:13:E4:D6:9E:E6:7D:09:07:57:61:CC:C7:A0:64:9B:73:80:7A Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 7E Signing time: Wed 05 Nov 2025 06:55:00 +0000 Manifest this update: Wed 05 Nov 2025 06:55:00 +0000 Manifest next update: Wed 12 Nov 2025 06:55:00 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: hZthxRxIrZ/Q3D+matlsF0ffFopQAZpxxyDMPdT5vRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Nov 5 06:55:00 2025 GMT Not After : Nov 12 06:55:00 2025 GMT Subject: CN=690af4c4-b77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:1a:df:4a:06:d4:33:fc:ea:07:9b:87:fb: 74:37:0c:b0:f2:8f:f2:70:63:aa:d8:4a:13:60:2c: 1f:39:ec:52:ef:a9:cb:96:34:8a:e5:62:97:52:5f: 9f:34:a7:68:4a:d1:df:e2:03:fc:8d:c1:28:58:2f: 8d:a0:09:54:25:8e:7d:8a:8f:b7:51:01:87:b1:5d: 7b:f3:d0:8d:cf:9d:8b:90:fb:cc:cc:5c:33:fa:8d: 79:3a:85:43:06:4a:89:9b:4b:e7:8e:d0:fa:51:bc: 46:44:f3:fd:62:e9:10:01:3e:29:3c:14:10:fe:91: 65:5d:5e:44:c7:ef:c6:6e:2c:59:e6:b8:24:85:31: 70:5b:36:5a:e5:81:7f:10:ef:52:54:8e:a3:f5:6c: 61:78:4e:46:92:77:12:63:35:0d:67:17:32:71:f3: ed:3e:48:53:73:09:c0:37:b8:56:f7:f0:b9:f6:d2: 5e:ef:cd:2c:99:14:ed:88:84:f9:d3:ec:11:eb:36: 5c:d6:e9:8e:4f:72:f5:db:95:18:71:fe:3e:b8:5a: 85:81:52:69:d6:2e:82:e1:7d:af:94:d0:81:f2:91: c0:ed:84:2a:ae:3f:60:5e:df:9a:be:b7:22:b4:3b: 93:b8:4c:1f:ed:04:4e:7f:7a:71:d1:ce:b3:10:5e: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EF:13:E4:D6:9E:E6:7D:09:07:57:61:CC:C7:A0:64:9B:73:80:7A X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:23:8d:a8:1e:52:03:28:2f:fe:b8:f8:62:4c:5e:2b:5a:e2: 23:36:07:09:4d:33:74:e4:ba:fd:db:b1:11:8e:b5:66:92:6f: 83:e1:ee:52:33:41:83:cf:3d:e0:0c:1f:49:37:98:6a:03:30: c0:f1:55:17:8d:7a:7b:94:40:ba:1b:e6:f4:b3:f9:11:28:f5: 57:e1:09:f6:48:e9:27:37:a3:69:3d:3a:0b:97:ff:f3:ff:9e: 67:c9:57:4d:47:bf:14:15:a0:5f:00:43:14:54:be:6d:49:68: d9:e8:da:9a:02:55:81:44:25:ea:da:fe:bd:04:01:c7:9e:ff: 46:44:0d:ea:25:31:31:a4:6b:52:9d:d0:ac:15:d6:5c:41:76: f7:52:46:f2:ed:70:24:71:65:c2:68:40:f7:cb:a9:bf:3a:2b: 32:ee:02:40:e6:8f:fc:b7:45:c3:3b:bf:13:9c:13:b4:73:4e: 9b:3a:8e:5f:09:85:d7:bc:cf:7d:c6:28:52:b3:b7:4a:44:c9: 54:5c:87:d4:e8:77:de:ab:58:34:df:29:35:02:43:f2:f3:89: f8:de:e5:35:b8:6b:46:20:78:dc:4b:41:64:09:20:b1:b0:96: ac:f3:23:9d:a6:73:77:4e:76:a7:c9:05:37:6d:b6:1d:17:5e: 4f:bf:02:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoQkRBM0U4QTgyMzFDNzg3RjZCN0YxOEJDMTQ2Qjk1RkI1 QzAzOEVEOTAeFw0yNTExMDUwNjU1MDBaFw0yNTExMTIwNjU1MDBaMBgxFjAUBgNV BAMTDTY5MGFmNGM0LWI3N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnsxrfSgbUM/zqB5uH+3Q3DLDyj/JwY6rYShNgLB857FLvqcuWNIrlYpdSX580 p2hK0d/iA/yNwShYL42gCVQljn2Kj7dRAYexXXvz0I3PnYuQ+8zMXDP6jXk6hUMG SombS+eO0PpRvEZE8/1i6RABPik8FBD+kWVdXkTH78ZuLFnmuCSFMXBbNlrlgX8Q 71JUjqP1bGF4TkaSdxJjNQ1nFzJx8+0+SFNzCcA3uFb38Ln20l7vzSyZFO2IhPnT 7BHrNlzW6Y5PcvXblRhx/j64WoWBUmnWLoLhfa+U0IHykcDthCquP2Be35q+tyK0 O5O4TB/tBE5/enHRzrMQXmBHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+e8T5Nae 5n0JB1dhzMegZJtzgHowHwYDVR0jBBgwFoAUvaPoqCMceH9rfxi8FGuV+1wDjtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzRCMDFDNEE2Rjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdmFQb3FDTWNlSDlyZnhpOEZHdVYtMXdEanRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzRCMDFDNEE2RjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5 cmZ4aThGR3VWLTF3RGp0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB4jjageUgMoL/64+GJMXita4iM2BwlNM3Tkuv3bsRGOtWaSb4Ph7lIz QYPPPeAMH0k3mGoDMMDxVReNenuUQLob5vSz+REo9VfhCfZI6Sc3o2k9OguX//P/ nmfJV01HvxQVoF8AQxRUvm1JaNno2poCVYFEJera/r0EAcee/0ZEDeolMTGka1Kd 0KwV1lxBdvdSRvLtcCRxZcJoQPfLqb86KzLuAkDmj/y3RcM7vxOcE7RzTps6jl8J hde8z33GKFKzt0pEyVRch9Tod96rWDTfKTUCQ/Lzifje5TW4a0YgeNxLQWQJILGw lqzzI52mc3dOdqfJBTdtth0XXk+/Agg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:06 2025 by rpki-client