$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: ZsK795BU6PCQJlGC6eBlhOR1gZw+5bj7QTa/EGBZIkE= Subject key identifier: E9:C2:18:29:9D:C1:6C:ED:D8:22:1C:CA:1A:8A:73:E9:6F:E0:01:56 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 02E8 Signing time: Wed 05 Nov 2025 01:19:53 +0000 Manifest this update: Wed 05 Nov 2025 01:19:52 +0000 Manifest next update: Wed 12 Nov 2025 01:19:52 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: lL2Ooupzzk65lcpeaZ9+jMR0zN0K1k8EJsostWGxhho=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: lORLBE7+FfhOwINAGtcBHyopu2FbSYXSTs4IIjqvS/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Nov 5 01:19:52 2025 GMT Not After : Nov 12 01:19:52 2025 GMT Subject: CN=690aa638-9046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:3c:d3:ea:a3:6c:3e:c4:a5:53:b6:46:e2: fb:e0:ed:0e:4c:4c:12:2d:48:b8:65:f1:25:87:1a: 5e:ef:22:15:9a:77:fa:74:1d:01:85:81:49:60:83: 09:3c:d6:b2:ae:1d:9b:df:7e:63:cd:e8:01:12:cf: 55:7f:7b:ba:ed:9f:3f:fa:a5:a0:18:06:7d:bf:9a: 53:1c:6f:1e:8b:0c:9c:d6:a8:8a:d6:f4:3d:46:4c: af:be:ca:f9:1c:fc:2d:57:5a:c5:54:ab:bd:47:27: 5e:e9:21:18:d7:14:d5:86:cb:d3:4d:4f:32:49:1f: d4:36:d3:eb:6d:02:b1:7c:09:ef:d1:92:9f:a0:60: 9b:01:73:d4:2d:47:d2:e1:13:f2:53:78:a8:2d:7a: 9d:9c:7e:f5:c6:c8:f8:27:a2:f1:c8:7c:d3:32:cf: 91:8b:67:c3:1a:2f:ff:a0:3a:2d:63:33:bf:41:2d: e5:06:a3:e2:db:15:2e:70:eb:5f:f5:d4:e6:3e:f7: 0b:02:dd:59:8b:85:1e:c5:92:93:21:aa:51:f3:16: 78:91:06:b2:27:91:be:1e:bf:fa:87:91:5f:6a:a1: 70:e8:1d:eb:ad:04:19:8f:6f:39:88:f3:d7:ab:6b: 07:48:87:85:16:63:41:d0:72:5b:f2:a5:ca:74:c8: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C2:18:29:9D:C1:6C:ED:D8:22:1C:CA:1A:8A:73:E9:6F:E0:01:56 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:12:bc:0f:39:67:1d:bb:cd:76:1c:19:63:66:ab:98:16:88: d9:11:d2:7a:75:46:c4:5b:c9:46:d9:0c:61:a5:60:60:99:73: 56:e2:d1:48:fc:ef:4e:5f:00:17:37:fc:3b:ba:7c:4d:98:3c: 64:46:60:2c:dd:6b:83:7c:10:27:37:65:ed:76:9d:1c:b1:69: 5f:db:d4:3a:52:a5:c6:63:40:31:c8:6e:73:16:24:d9:40:ab: 4c:92:3c:c9:4d:ad:be:87:53:ba:de:bd:38:1f:6f:aa:b6:1e: e3:1b:4e:c6:42:a0:0e:ad:94:93:bb:df:36:cb:53:33:15:37: 20:5f:ba:32:90:7c:af:5d:6c:34:d3:71:40:71:e9:af:50:30: 69:3c:68:c1:07:ec:89:f3:3f:dd:28:d6:01:c6:13:4b:72:6b: 29:3e:0f:ca:3b:09:00:a0:8d:fd:b3:13:f1:d0:9c:0d:10:8a: ef:72:14:86:4c:86:1d:71:6c:43:cc:21:ad:1a:a8:e5:5d:64: ea:8d:4f:94:9a:dc:a7:26:d9:15:22:f6:cb:04:02:9e:f3:10: 2c:11:35:bb:13:8c:49:9d:e8:b0:86:14:ab:af:c6:7b:9d:18: f3:95:1e:13:82:b1:92:3f:95:ac:c1:9d:4f:a3:7d:42:17:c5: 38:87:6f:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjUxMTA1MDExOTUyWhcNMjUxMTEyMDExOTUyWjAYMRYwFAYD VQQDEw02OTBhYTYzOC05MDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoE80+qjbD7EpVO2RuL74O0OTEwSLUi4ZfElhxpe7yIVmnf6dB0BhYFJYIMJ PNayrh2b335jzegBEs9Vf3u67Z8/+qWgGAZ9v5pTHG8eiwyc1qiK1vQ9Rkyvvsr5 HPwtV1rFVKu9Ryde6SEY1xTVhsvTTU8ySR/UNtPrbQKxfAnv0ZKfoGCbAXPULUfS 4RPyU3ioLXqdnH71xsj4J6LxyHzTMs+Ri2fDGi//oDotYzO/QS3lBqPi2xUucOtf 9dTmPvcLAt1Zi4UexZKTIapR8xZ4kQayJ5G+Hr/6h5FfaqFw6B3rrQQZj285iPPX q2sHSIeFFmNB0HJb8qXKdMhhzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnCGCmd wWzt2CIcyhqKc+lv4AFWMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8ErwPOWcdu812HBljZquYFojZEdJ6dUbEW8lG2QxhpWBgmXNW4tFI /O9OXwAXN/w7unxNmDxkRmAs3WuDfBAnN2Xtdp0csWlf29Q6UqXGY0AxyG5zFiTZ QKtMkjzJTa2+h1O63r04H2+qth7jG07GQqAOrZSTu982y1MzFTcgX7oykHyvXWw0 03FAcemvUDBpPGjBB+yJ8z/dKNYBxhNLcmspPg/KOwkAoI39sxPx0JwNEIrvchSG TIYdcWxDzCGtGqjlXWTqjU+UmtynJtkVIvbLBAKe8xAsETW7E4xJneiwhhSrr8Z7 nRjzlR4TgrGSP5WswZ1Po31CF8U4h29J -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:56 2025 by rpki-client