$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft File: vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json) Hash identifier: /j8mVLF+/tU4FnRsWbUM5nR8kqDIwM4Fu+4afHGG2zI= Subject key identifier: FE:D5:C2:4E:75:76:53:3C:E0:D1:4D:98:F4:E0:88:30:F1:12:74:50 Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft Manifest number: D7 Signing time: Wed 05 Nov 2025 05:48:08 +0000 Manifest this update: Wed 05 Nov 2025 05:48:08 +0000 Manifest next update: Wed 12 Nov 2025 05:48:08 +0000 Files and hashes: 1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: 03Ju1qTTOnZM2pg5+n/c2t1physnEyn7WOMHobwpok8=) 2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: Yfem0ULzhAFhugiZ6EqgmTLw2PppG/xG3d5GVT5T2K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: Nov 5 05:48:08 2025 GMT Not After : Nov 12 05:48:08 2025 GMT Subject: CN=690ae518-a2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:45:1a:f2:2a:19:45:15:da:ad:e1:cb:cc:39: 38:90:02:66:e9:1e:fa:c9:8f:6f:7b:8a:f6:1c:5b: de:16:d9:37:b8:c5:7d:e7:2b:fe:77:b9:e5:5b:85: a4:39:0a:8e:ba:9d:01:da:2f:7a:be:3f:35:a4:3b: 86:1b:be:8f:20:15:bc:1e:b6:d8:73:69:0c:ee:99: 26:f1:ea:39:d3:c0:6b:a5:fa:80:d5:77:2e:5f:d0: bc:b9:83:6c:5b:37:96:f0:0f:3b:8f:47:86:f8:9f: ce:2f:9d:2d:d5:2d:41:f6:77:61:9e:d3:03:4e:04: 2e:b7:3f:82:8a:b9:e2:78:7e:51:f8:77:a3:3c:80: cd:da:83:a9:23:e1:89:2f:73:f1:36:1e:5b:c5:67: fe:91:56:ad:c9:ac:31:39:80:9b:da:5e:4e:57:8f: 06:20:7f:aa:71:69:65:ea:c5:1e:dc:b4:96:08:9a: 16:ed:01:eb:88:81:02:6a:b2:e2:ae:76:8e:80:58: 24:50:2a:58:89:0f:e6:84:c3:18:f7:ff:9a:09:e4: 81:22:63:89:a8:8f:2a:d9:f4:50:dc:85:45:c9:b2: cf:3c:8c:a9:e3:47:3b:1a:2d:86:a8:8d:81:33:b8: ab:0c:38:ef:d6:a7:68:9c:c0:54:a8:ec:22:6a:4d: 84:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D5:C2:4E:75:76:53:3C:E0:D1:4D:98:F4:E0:88:30:F1:12:74:50 X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:36:b1:bc:f9:ee:44:76:46:f7:ec:be:2b:95:32:1b:48:c5: 19:14:2e:07:7b:cf:eb:e5:b4:e9:5a:19:eb:a4:64:d2:e1:a0: c4:10:f0:72:01:42:8a:84:b8:44:cd:ef:38:38:88:a3:fd:f7: 8d:71:2e:c4:f8:d4:f8:b0:ba:ec:ba:41:02:f4:d2:08:1a:f3: b5:95:fd:01:c3:d7:a4:a9:ad:da:fa:70:ff:81:e9:58:32:ea: 33:08:58:68:99:b6:01:20:dd:07:1f:f8:30:d8:60:ed:30:26: 8b:4b:dd:82:a6:68:1e:ea:8e:df:11:8d:87:ff:ac:eb:0b:d7: a1:75:c3:a8:91:28:eb:2a:b4:88:2c:43:d8:16:31:49:fe:a0: 6c:bf:0e:db:ee:fe:b0:16:a9:c2:59:56:b9:d2:3a:ee:81:cc: f4:95:39:36:4b:87:40:1a:19:98:8c:fd:b9:a0:65:9a:bb:36: 9a:2c:a1:43:03:2c:26:75:21:4a:7d:11:75:82:b1:65:c2:61: 61:6f:b8:a6:ba:93:fe:9d:ad:27:e8:2d:b1:c6:23:44:95:e8: f3:fb:e9:f4:5a:8a:f1:23:66:a8:f1:aa:1f:1a:3c:74:73:47: c7:12:03:12:3a:0b:8c:0a:5b:9d:02:0f:4e:5b:d8:23:4e:08: 72:19:cc:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEMTQxMTAvBgNVBAUTKEJDNDJDM0JDODc1QzA2NzZCMjlGRDdBQkM5RjgxQjRB OTFGRDhBODkwHhcNMjUxMTA1MDU0ODA4WhcNMjUxMTEyMDU0ODA4WjAYMRYwFAYD VQQDEw02OTBhZTUxOC1hMmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EUa8ioZRRXareHLzDk4kAJm6R76yY9ve4r2HFveFtk3uMV95yv+d7nlW4Wk OQqOup0B2i96vj81pDuGG76PIBW8HrbYc2kM7pkm8eo508BrpfqA1XcuX9C8uYNs WzeW8A87j0eG+J/OL50t1S1B9ndhntMDTgQutz+CirnieH5R+HejPIDN2oOpI+GJ L3PxNh5bxWf+kVatyawxOYCb2l5OV48GIH+qcWll6sUe3LSWCJoW7QHriIECarLi rnaOgFgkUCpYiQ/mhMMY9/+aCeSBImOJqI8q2fRQ3IVFybLPPIyp40c7Gi2GqI2B M7irDDjv1qdonMBUqOwiak2E8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7Vwk51 dlM84NFNmPTgiDDxEnRQMB8GA1UdIwQYMBaAFLxCw7yHXAZ2sp/Xq8n4G0qR/YqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QxNC9DREIzQjlBQTc0 QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0JuYXluOWVyeWZnYlNwSDlp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QxNC9DREIzQjlBQTc0QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0Ju YXluOWVyeWZnYlNwSDlpb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByNrG8+e5Edkb37L4rlTIbSMUZFC4He8/r5bTpWhnrpGTS4aDEEPBy AUKKhLhEze84OIij/feNcS7E+NT4sLrsukEC9NIIGvO1lf0Bw9ekqa3a+nD/gelY MuozCFhombYBIN0HH/gw2GDtMCaLS92Cpmge6o7fEY2H/6zrC9ehdcOokSjrKrSI LEPYFjFJ/qBsvw7b7v6wFqnCWVa50jrugcz0lTk2S4dAGhmYjP25oGWauzaaLKFD AywmdSFKfRF1grFlwmFhb7imupP+na0n6C2xxiNElejz++n0WorxI2ao8aofGjx0 c0fHEgMSOguMCludAg9OW9gjTghyGcwB -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:34 2025 by rpki-client