$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json) Hash identifier: 2qRYlZYE4dm1Be08YdY4piGknFQzaL6hYEPECSk/G0M= Subject key identifier: 6D:F4:86:7A:8C:8A:C1:58:48:FE:EE:74:40:68:4F:4F:64:CC:3E:68 Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft Manifest number: 53 Signing time: Mon 03 Nov 2025 07:14:41 +0000 Manifest this update: Mon 03 Nov 2025 07:14:41 +0000 Manifest next update: Mon 10 Nov 2025 07:14:41 +0000 Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: p5wvuKx4fQG05yXCF37XJkRsnEoEKTZKxNIV4DYSnno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Validity Not Before: Nov 3 07:14:41 2025 GMT Not After : Nov 10 07:14:41 2025 GMT Subject: CN=69085661-8715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:b2:b9:1c:25:3d:eb:42:55:b0:d0:bc:2a: 0d:cb:38:b7:54:96:6c:7a:ca:57:60:ae:b0:c6:56: 63:57:8f:84:da:b9:8c:35:34:7f:93:d2:0b:76:48: e4:51:18:5d:ed:9a:72:da:72:d9:b7:1f:e3:f3:4c: 9f:11:e8:d0:f4:68:6e:17:e8:f5:16:3d:12:b4:c1: 8c:00:eb:ff:c0:0c:a3:0c:61:a5:00:65:03:4f:44: 0e:27:f8:09:b8:35:84:55:6b:91:9e:6a:1b:6a:ff: 2c:3b:97:a5:3f:91:e6:90:4a:6a:b8:39:16:be:ce: d6:16:bb:f1:e7:cf:64:a3:cc:8d:b3:a4:fc:ba:5f: 49:9e:55:bb:28:69:4a:c4:4b:5e:86:30:72:85:9f: 31:d2:93:58:1c:36:b9:2d:d2:f8:3f:8c:d3:6e:38: 38:6b:99:bb:0b:f4:a6:3e:f0:1a:2a:e6:d4:c8:8d: 84:50:b8:19:a0:8f:70:f8:27:c1:51:17:dd:b3:06: 7b:c5:aa:94:31:71:2d:a1:0d:9d:33:3f:1c:7b:49: 0d:cf:8b:b3:7c:00:d1:20:a4:f8:0b:f8:24:28:16: c3:28:4a:3a:f0:b1:de:47:70:d7:a7:45:ba:b8:e6: c4:eb:81:10:20:13:54:a6:70:40:cb:d9:f9:24:74: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F4:86:7A:8C:8A:C1:58:48:FE:EE:74:40:68:4F:4F:64:CC:3E:68 X509v3 Authority Key Identifier: keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e1:2f:e6:c5:4a:03:ef:66:4a:04:bf:9c:f4:b6:0e:a5:af: 3e:24:62:aa:1c:d5:52:95:b3:fc:bc:6b:f3:a1:21:10:1c:fe: 2e:60:f9:40:90:9d:fc:0e:e4:24:e6:91:5c:d9:a9:f8:6e:03: 51:3c:96:93:d6:6d:51:de:91:37:d0:69:b5:f3:b5:14:63:9c: 9a:63:21:a4:1d:ed:0a:f5:a3:47:45:05:3e:47:58:30:48:10: 6b:0d:e6:db:c3:c0:ba:50:ee:83:a5:05:9d:44:fb:19:7d:02: 2d:d3:a5:3b:be:65:38:5d:7e:b3:62:fa:f3:5c:3d:d1:21:05: ad:45:83:50:58:07:d3:07:bd:d8:8a:f2:2c:3e:a7:8f:43:5f: c9:f2:8e:d1:e1:17:14:b6:62:03:3f:65:16:de:c8:8b:05:56: 52:8a:81:e9:40:2d:b5:72:09:3f:ee:9b:31:4e:53:12:5c:4d: f9:a2:9a:b7:08:a3:f2:e1:12:2f:03:b5:b2:75:81:a9:2a:c1: a0:71:48:7f:bd:32:4c:ea:4a:2f:2c:e5:7a:93:5d:6c:5b:10: dd:9c:37:24:f4:6d:d3:a0:26:32:ef:b8:87:dc:75:e7:8d:3b: 62:91:51:0f:d2:10:d7:9f:d8:61:ae:95:7c:b9:c6:4d:e2:c7: 06:96:9e:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoNTY3RTMyMURBRjRBRjc0NDNCMEQ3OUUzMkFDMDMwNzk3 NTI3RjFEOTAeFw0yNTExMDMwNzE0NDFaFw0yNTExMTAwNzE0NDFaMBgxFjAUBgNV BAMTDTY5MDg1NjYxLTg3MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNArK5HCU960JVsNC8Kg3LOLdUlmx6yldgrrDGVmNXj4TauYw1NH+T0gt2SORR GF3tmnLactm3H+PzTJ8R6ND0aG4X6PUWPRK0wYwA6//ADKMMYaUAZQNPRA4n+Am4 NYRVa5Geahtq/yw7l6U/keaQSmq4ORa+ztYWu/Hnz2SjzI2zpPy6X0meVbsoaUrE S16GMHKFnzHSk1gcNrkt0vg/jNNuODhrmbsL9KY+8Boq5tTIjYRQuBmgj3D4J8FR F92zBnvFqpQxcS2hDZ0zPxx7SQ3Pi7N8ANEgpPgL+CQoFsMoSjrwsd5HcNenRbq4 5sTrgRAgE1SmcEDL2fkkdHKDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbfSGeoyK wVhI/u50QGhPT2TMPmgwHwYDVR0jBBgwFoAUVn4yHa9K90Q7DXnjKsAweXUn8dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0YxQzVDOTUyM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBRN0RYbmpLc0F3ZVhVbjhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVm40eUhhOUs5MFE3RFhuaktzQXdlWFVuOGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0YxQzVDOTUyM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBR N0RYbmpLc0F3ZVhVbjhkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACHhL+bFSgPvZkoEv5z0tg6lrz4kYqoc1VKVs/y8a/OhIRAc/i5g+UCQ nfwO5CTmkVzZqfhuA1E8lpPWbVHekTfQabXztRRjnJpjIaQd7Qr1o0dFBT5HWDBI EGsN5tvDwLpQ7oOlBZ1E+xl9Ai3TpTu+ZThdfrNi+vNcPdEhBa1Fg1BYB9MHvdiK 8iw+p49DX8nyjtHhFxS2YgM/ZRbeyIsFVlKKgelALbVyCT/umzFOUxJcTfmimrcI o/LhEi8DtbJ1gakqwaBxSH+9MkzqSi8s5XqTXWxbEN2cNyT0bdOgJjLvuIfcdeeN O2KRUQ/SENef2GGulXy5xk3ixwaWnhU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:03 2025 by rpki-client