$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: dXTBIv/DEDXOsBgcOz46NzY5OFB786tbW10zoT2xeFY= Subject key identifier: BD:A4:F7:6F:EA:D9:D7:58:33:E1:4F:B2:EE:6B:C2:F9:23:4E:67:C4 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 057D Signing time: Mon 03 Nov 2025 00:14:34 +0000 Manifest this update: Mon 03 Nov 2025 00:14:34 +0000 Manifest next update: Mon 10 Nov 2025 00:14:34 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: T38fTk3jdsILGtZEqVjazVWG/y2HFyGABsayK9W9oks=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: cPYnpI3kGQmxwwOOv5mKKhlzOW7rqIA0gQdI/cqCGyc=) 3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: L65I+FybEPptOXOi9Q669YnFolpt3Th7Afz2/fiIdIo=) 4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: 3oz010kHjy9f1SrDCo+LpVpuyACU2GvRan7CsQDERQg=) 5: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: 2NyEKJSCwUAGZQzUhF2YYT4U78l0MVoAhaMFYTV0TBw=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: lryulomcME0BsK3AXyNXRm2nMBB1IJZ7jhxbXIWaJ7w=) 7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: ujpDZE0rtz85q7uwV7sU5TuMp06iiTTbccCeJk/Lbuo=) 8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: Ftoqw626ZuXPioWRGs+rylGl6w2encEy5Q2oIVggy+I=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: L8fFp1GNqrB1VLNNuxBNH85jKR1qJODwGH9ZhgL+ee0=) 10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: FgiQknGsf7DRcnndmAuVGpIsF8nK2t/XgRUgQEEavfs=) 11: D359E238716B11ED9F349A49C4F9AE02.roa (hash: lnq1z/NNgaBazNdC/lR3zzZc0jlCI7UTz3YNSOjlUMs=) 12: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: gxwJGQjNK24Kfrx14GCyCUGKoF19GApk4WQmC3/gOtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Nov 3 00:14:34 2025 GMT Not After : Nov 10 00:14:34 2025 GMT Subject: CN=6907f3ea-d54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:80:25:fe:00:48:0a:cc:4c:3b:6a:a7:a4: 5e:01:48:e8:90:0e:60:58:08:05:1d:ff:22:7b:c6: 2c:97:77:d3:90:4d:87:ae:7c:f1:7d:8f:81:fb:82: ce:08:18:86:47:a8:53:2c:da:f6:67:61:b3:0d:1f: 6e:a2:ae:5a:60:95:5e:74:33:cd:76:93:9f:2e:82: 3f:63:de:f8:d9:42:c2:09:36:c3:ca:79:4e:7f:dc: d1:cd:4d:8d:5e:59:0b:f5:8f:a0:2b:47:35:12:79: 8e:f2:88:ec:ea:1a:74:3a:c2:45:84:2c:2d:36:4b: 5a:6a:f8:c4:1a:b0:55:a4:f8:55:85:5f:9e:2a:5b: 88:74:54:01:1b:5b:91:2e:05:6b:e7:6d:9c:45:dd: ee:3b:ed:03:6f:e4:20:b0:62:6e:b6:5b:07:25:6f: 94:d7:08:27:1e:ab:bc:c6:78:0d:c3:0a:ca:40:3b: 2d:ab:a6:e9:70:07:84:05:75:ad:73:46:f8:ed:b8: 5f:6c:66:53:d2:9c:8a:3e:26:63:83:59:d7:b4:b9: e4:ea:4b:2a:f2:bb:6b:67:12:d2:fc:97:f9:f3:55: 58:64:7f:4c:be:50:41:f0:30:97:5c:48:a6:16:e1: 31:59:c7:77:b4:d3:83:cf:f3:23:ff:58:55:e0:15: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A4:F7:6F:EA:D9:D7:58:33:E1:4F:B2:EE:6B:C2:F9:23:4E:67:C4 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8f:be:f2:c3:29:ee:7a:2c:7c:ed:67:ee:da:df:24:1c:b3: b4:6e:a2:2a:07:a8:3e:47:18:92:1d:0e:37:56:c3:3a:52:b1: 03:88:59:63:6b:34:8b:56:c8:00:aa:dc:5e:2a:fd:56:c4:ae: 1b:bf:19:c9:1e:9c:d4:26:5f:1d:c6:2f:2d:11:f6:9a:49:0a: 26:83:50:31:2f:3b:ac:74:33:a9:ba:af:70:86:54:f9:62:7b: 8f:7d:cf:08:eb:83:01:2f:39:31:f3:6f:00:bf:7f:83:e6:8e: d6:fd:5f:e1:1e:8a:7c:55:f3:f3:84:93:6d:be:1b:19:92:8f: b5:28:60:a5:95:98:02:31:66:04:c0:bc:82:9a:20:24:1d:15: 87:46:c4:a1:85:e7:09:03:b3:59:b8:2f:df:e4:af:1b:6d:15: 5b:87:b3:0b:1a:68:9b:c0:e5:73:d4:f8:29:ed:b2:ac:cb:d8: f0:df:24:9e:a8:92:f6:ed:75:42:36:53:25:bd:0d:4d:5d:73: c1:dc:18:50:a9:ce:ef:7e:90:38:4d:11:12:2b:93:16:1f:25: ec:73:d3:e2:5a:8a:5a:45:e7:6f:66:97:e8:02:21:59:73:46: e4:b9:0b:db:09:15:ad:f1:55:fd:49:d7:90:9d:2d:5b:a0:80: c2:01:c5:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUxMTAzMDAxNDM0WhcNMjUxMTEwMDAxNDM0WjAYMRYwFAYD VQQDEw02OTA3ZjNlYS1kNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB2AJf4ASArMTDtqp6ReAUjokA5gWAgFHf8ie8Ysl3fTkE2HrnzxfY+B+4LO CBiGR6hTLNr2Z2GzDR9uoq5aYJVedDPNdpOfLoI/Y9742ULCCTbDynlOf9zRzU2N XlkL9Y+gK0c1EnmO8ojs6hp0OsJFhCwtNktaavjEGrBVpPhVhV+eKluIdFQBG1uR LgVr522cRd3uO+0Db+QgsGJutlsHJW+U1wgnHqu8xngNwwrKQDstq6bpcAeEBXWt c0b47bhfbGZT0pyKPiZjg1nXtLnk6ksq8rtrZxLS/Jf581VYZH9MvlBB8DCXXEim FuExWcd3tNODz/Mj/1hV4BVXnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2k92/q 2ddYM+FPsu5rwvkjTmfEMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzj77ywynueix87Wfu2t8kHLO0bqIqB6g+RxiSHQ43VsM6UrEDiFlj azSLVsgAqtxeKv1WxK4bvxnJHpzUJl8dxi8tEfaaSQomg1AxLzusdDOpuq9whlT5 YnuPfc8I64MBLzkx828Av3+D5o7W/V/hHop8VfPzhJNtvhsZko+1KGCllZgCMWYE wLyCmiAkHRWHRsShhecJA7NZuC/f5K8bbRVbh7MLGmibwOVz1Pgp7bKsy9jw3ySe qJL27XVCNlMlvQ1NXXPB3BhQqc7vfpA4TRESK5MWHyXsc9PiWopaRedvZpfoAiFZ c0bkuQvbCRWt8VX9SdeQnS1boIDCAcUM -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:00 2025 by rpki-client