$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: TV4PSqHdIP1ZCm0t81aBnPcbTqhQfluMBtmtVDcrd7U= Subject key identifier: 6D:04:17:62:55:D7:6E:10:F7:BF:41:46:60:38:21:35:3C:4D:C3:C6 Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0FAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0FA0 Signing time: Sun 02 Nov 2025 17:32:46 +0000 Manifest this update: Sun 02 Nov 2025 17:32:45 +0000 Manifest next update: Sun 09 Nov 2025 17:32:45 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: xsb9SKeLblCJAYWvL4qkNTkHpjlZXP6M4BI44ADuOFo=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: PC0yewcBGOHCUfaxZkh95BTHNrPHiXnNi3ncb6P6Ep4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4012 (0xfac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Nov 2 17:32:45 2025 GMT Not After : Nov 9 17:32:45 2025 GMT Subject: CN=690795bd-e5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:8e:53:73:2c:e8:ed:e2:c4:0f:35:79:bb: 90:17:ee:85:86:7c:22:c2:4b:a2:1e:04:9d:8f:71: 22:0c:11:45:58:62:48:08:57:d4:ae:6a:f5:1a:20: ff:9e:dd:2c:da:8c:11:15:ed:f5:54:98:ee:b4:1f: 1e:1b:51:98:f2:01:a7:c4:66:1d:f6:9a:25:e5:0e: 35:4b:88:62:65:ad:81:b2:e7:aa:5a:62:5c:99:b8: a3:1b:8d:e5:bf:8d:7c:bf:0a:f3:66:ab:4d:da:d6: c2:82:e0:65:af:fe:46:94:b9:72:be:f5:4d:69:0d: de:43:ee:29:93:4a:bb:3f:f9:f3:04:73:d5:9a:3f: 48:04:13:23:30:4e:22:ed:20:3a:b5:cc:a1:8a:a8: 3d:c8:46:f2:ce:ce:17:7b:47:8c:15:ee:d4:55:d1: 60:0c:61:e6:90:79:fd:87:4b:ce:7b:f8:cb:01:eb: f0:19:18:dd:5b:87:82:9c:bb:3b:a2:87:9f:a3:15: cd:23:ec:2a:58:3b:a1:fd:d7:f6:3f:64:2c:36:91: ce:d8:60:b5:95:19:a5:fa:97:14:22:92:d2:9d:ff: d1:a7:a9:44:25:61:96:3f:dd:4b:58:d9:b5:9c:09: 2c:1e:28:64:52:67:a5:a0:47:ee:05:c5:24:bc:06: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:04:17:62:55:D7:6E:10:F7:BF:41:46:60:38:21:35:3C:4D:C3:C6 X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b5:e1:98:d8:95:cd:9b:e2:3d:67:47:e7:63:97:8d:64:2e: 82:aa:22:22:b6:bf:43:a9:3a:75:e7:fa:6f:b5:cb:5e:ea:d5: 64:9a:97:6b:1b:db:eb:55:3f:cf:7e:90:26:3c:3b:30:1c:b7: ef:4d:2f:56:22:14:cb:1f:a1:2f:4a:6a:f1:9d:e8:bf:4b:ba: 65:3c:77:21:56:c7:be:15:18:a3:38:0a:63:84:da:cf:b8:fc: 3e:98:63:eb:c0:f2:e5:26:6e:02:77:bc:cc:3f:3f:77:eb:c3: b1:82:62:e6:29:2b:cb:d9:6f:70:4c:27:d8:3c:59:9b:81:c8: ff:a7:93:8a:26:35:44:cb:fc:5d:c5:39:d7:6c:bc:30:08:85: 3b:a4:ff:20:39:85:f4:80:29:68:87:c1:d0:d1:98:00:ae:0a: d6:4c:d1:55:52:d1:ea:de:f1:71:80:d1:12:d7:18:48:df:58: 4f:b4:c8:92:22:32:79:a1:cc:b8:ed:5b:b8:71:71:1b:da:b9: 67:ac:50:50:0a:7e:21:33:a5:cf:a1:e1:e4:64:37:81:1b:d8: 59:67:e3:11:fa:89:90:b9:2c:c0:cb:08:b2:8e:ee:df:b8:8d: d3:76:12:d5:3a:df:19:fd:98:02:7b:24:7b:0a:40:51:69:ed: b6:cc:34:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUxMTAyMTczMjQ1WhcNMjUxMTA5MTczMjQ1WjAYMRYwFAYD VQQDEw02OTA3OTViZC1lNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJuOU3Ms6O3ixA81ebuQF+6FhnwiwkuiHgSdj3EiDBFFWGJICFfUrmr1GiD/ nt0s2owRFe31VJjutB8eG1GY8gGnxGYd9pol5Q41S4hiZa2BsueqWmJcmbijG43l v418vwrzZqtN2tbCguBlr/5GlLlyvvVNaQ3eQ+4pk0q7P/nzBHPVmj9IBBMjME4i 7SA6tcyhiqg9yEbyzs4Xe0eMFe7UVdFgDGHmkHn9h0vOe/jLAevwGRjdW4eCnLs7 ooefoxXNI+wqWDuh/df2P2QsNpHO2GC1lRml+pcUIpLSnf/Rp6lEJWGWP91LWNm1 nAksHihkUmeloEfuBcUkvAbGwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0EF2JV 124Q979BRmA4ITU8TcPGMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGteGY2JXNm+I9Z0fnY5eNZC6CqiIitr9DqTp15/pvtcte6tVkmpdr G9vrVT/PfpAmPDswHLfvTS9WIhTLH6EvSmrxnei/S7plPHchVse+FRijOApjhNrP uPw+mGPrwPLlJm4Cd7zMPz9368OxgmLmKSvL2W9wTCfYPFmbgcj/p5OKJjVEy/xd xTnXbLwwCIU7pP8gOYX0gCloh8HQ0ZgArgrWTNFVUtHq3vFxgNES1xhI31hPtMiS IjJ5ocy47Vu4cXEb2rlnrFBQCn4hM6XPoeHkZDeBG9hZZ+MR+omQuSzAywiyju7f uI3TdhLVOt8Z/ZgCeyR7CkBRae22zDTt -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:48 2025 by rpki-client