$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: 2ux9m+L+sH4XlHUfKVNwQY8nX7PpDC8J3wTnGYSKuDo= Subject key identifier: 9A:5B:FB:DD:50:F7:9E:4A:EE:A9:25:68:F8:E9:4C:DF:35:E9:F2:03 Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 0875 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 086B Signing time: Tue 04 Nov 2025 20:42:15 +0000 Manifest this update: Tue 04 Nov 2025 20:42:14 +0000 Manifest next update: Tue 11 Nov 2025 20:42:14 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: C45dNmkZ8qiLpkgYy+o43VC5HP8QgocGbUWLCt228OU=) 2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: SXpG+rP8KDZ7mlez3vzJppnJKS0AYTjR+XpM0wzK6oU=) 3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: kkpip1TEWWFNH1mROSk1fuufLAg/gIfzk1gjTV7g7jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: Nov 4 20:42:14 2025 GMT Not After : Nov 11 20:42:14 2025 GMT Subject: CN=690a6527-e8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:9c:67:51:5b:79:b2:ba:66:a9:4b:01:42: aa:18:eb:9a:6d:1d:94:a8:81:54:b0:b7:a9:0d:2c: c8:d7:10:4e:41:a1:6c:f1:3f:62:ba:bc:ad:cc:ce: 05:f6:77:be:71:aa:c3:a6:19:0a:be:a6:83:c3:0f: ab:b7:19:7c:17:6c:45:90:37:2f:a1:b4:1b:ae:05: 66:07:c8:a3:82:fd:c7:98:8e:ff:09:a8:cc:b2:bc: b0:c5:9f:ba:2c:68:6f:95:67:6a:1a:e6:32:2f:d1: c9:d7:9b:33:36:ab:7e:97:e2:46:da:02:2b:d2:04: be:56:dc:4f:82:39:26:20:0b:e8:30:92:bb:14:37: 98:fd:da:02:44:21:b1:e0:9a:e1:1f:43:5d:b9:0d: d6:ef:b2:23:ef:40:0a:f4:92:2e:9d:f9:d5:18:d3: 10:6a:75:48:d3:c0:43:c4:9b:3d:26:13:e9:1e:36: 65:2c:23:ee:ad:e2:27:bc:80:70:f0:b0:31:06:42: 80:7c:35:20:98:e3:c8:8d:bd:a8:4e:3a:bb:c0:c3: b5:5c:07:b1:f2:9d:4c:4d:49:21:7a:c1:4b:0a:6f: 24:ad:3e:f8:34:d1:b4:ed:d5:8c:23:3c:e7:dd:ac: 00:6f:de:c3:af:71:7a:d8:3d:aa:60:01:c4:06:7e: b3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5B:FB:DD:50:F7:9E:4A:EE:A9:25:68:F8:E9:4C:DF:35:E9:F2:03 X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fc:2f:1d:d5:55:a7:fe:1f:f0:fc:2a:33:e4:42:63:9e:12: 05:e2:36:aa:de:ab:06:4b:a8:1f:9f:43:4d:66:17:b1:30:e8: 35:74:36:4e:9c:f2:9a:6e:04:e3:fc:2e:04:65:84:78:fa:be: b3:e0:3c:bd:a5:ee:7a:3f:7f:57:cb:16:a3:90:46:c2:1f:39: 8a:ec:6c:52:90:e2:72:db:d6:f1:f9:2b:90:40:61:3e:17:ac: 6d:30:9d:4c:28:e6:a1:61:bf:f8:a1:43:5e:4c:eb:09:e4:c0: 5d:40:a0:1e:11:72:0c:01:a5:c4:0d:bd:89:1b:09:10:0b:5f: 94:00:7a:a7:9a:4f:52:46:e9:98:6b:a3:1f:50:af:ac:6c:3b: 50:9a:38:59:8d:0f:77:ce:e2:b8:80:ab:82:18:45:77:7b:9f: 28:57:af:11:8a:4e:42:41:33:a3:f2:49:ca:75:2d:4f:27:eb: 3e:8a:10:9a:97:f5:1f:bb:f2:30:67:b9:e5:b9:eb:76:3c:ef: 8c:db:31:72:7d:cc:fd:18:e9:ec:da:93:24:a8:4a:06:97:e1: 98:2d:50:06:bd:fb:b3:3e:d9:b4:1f:76:13:7c:32:78:09:a4: 60:88:5a:3b:e3:1d:12:4c:f0:d4:79:b7:a1:ad:0d:25:b3:4a: c2:05:eb:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjUxMTA0MjA0MjE0WhcNMjUxMTExMjA0MjE0WjAYMRYwFAYD VQQDEw02OTBhNjUyNy1lOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49icZ1FbebK6ZqlLAUKqGOuabR2UqIFUsLepDSzI1xBOQaFs8T9iurytzM4F 9ne+carDphkKvqaDww+rtxl8F2xFkDcvobQbrgVmB8ijgv3HmI7/CajMsrywxZ+6 LGhvlWdqGuYyL9HJ15szNqt+l+JG2gIr0gS+VtxPgjkmIAvoMJK7FDeY/doCRCGx 4JrhH0NduQ3W77Ij70AK9JIunfnVGNMQanVI08BDxJs9JhPpHjZlLCPureInvIBw 8LAxBkKAfDUgmOPIjb2oTjq7wMO1XAex8p1MTUkhesFLCm8krT74NNG07dWMIzzn 3awAb97Dr3F62D2qYAHEBn6zVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpb+91Q 955K7qklaPjpTN816fIDMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf/C8d1VWn/h/w/Coz5EJjnhIF4jaq3qsGS6gfn0NNZhexMOg1dDZO nPKabgTj/C4EZYR4+r6z4Dy9pe56P39XyxajkEbCHzmK7GxSkOJy29bx+SuQQGE+ F6xtMJ1MKOahYb/4oUNeTOsJ5MBdQKAeEXIMAaXEDb2JGwkQC1+UAHqnmk9SRumY a6MfUK+sbDtQmjhZjQ93zuK4gKuCGEV3e58oV68Rik5CQTOj8knKdS1PJ+s+ihCa l/Ufu/IwZ7nluet2PO+M2zFyfcz9GOns2pMkqEoGl+GYLVAGvfuzPtm0H3YTfDJ4 CaRgiFo74x0STPDUebehrQ0ls0rCBes1 -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:08 2025 by rpki-client