$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: cDGCgLwtOqP42UDCkjFpZabwxTvw65pYQl3mdqnwgmE= Subject key identifier: 9B:85:D9:1D:8B:4B:43:32:AD:62:D5:D5:97:0F:A3:84:EF:F4:DE:3E Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 98 Signing time: Wed 05 Nov 2025 06:36:07 +0000 Manifest this update: Wed 05 Nov 2025 06:36:07 +0000 Manifest next update: Wed 12 Nov 2025 06:36:07 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: VrBFBl67Abj5m68Dc3qJ3aby8Gr5wzSlj6P73frBvgI=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Validity Not Before: Nov 5 06:36:07 2025 GMT Not After : Nov 12 06:36:07 2025 GMT Subject: CN=690af057-5972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:96:c8:23:40:d0:51:f2:41:0d:4e:9a:6f: 8f:09:29:f4:9c:51:e3:ef:6a:9a:23:3b:e6:9a:05: 7d:c1:72:04:66:f1:a4:42:a5:a5:b1:57:c7:e9:56: f0:e3:89:53:9a:8d:8b:ba:1d:91:2b:e2:50:79:b1: 9e:2c:14:40:9a:f9:9e:90:c0:9b:0a:76:7b:20:9f: f5:12:55:8f:22:a7:65:8e:a8:9a:79:64:42:31:47: 81:d5:98:4d:82:fc:29:ad:df:71:0b:d8:63:10:73: ee:cc:02:58:15:7c:63:ee:43:52:8a:f9:3f:b7:93: ec:8a:1a:73:24:24:19:5a:2b:cf:48:11:16:87:2c: 04:58:6f:37:ac:af:b0:d6:96:1a:ce:1c:e8:9d:90: e1:63:bf:03:a0:71:e6:6b:7c:38:d8:e4:13:4f:ba: e9:24:98:43:df:38:18:cf:b3:71:47:d0:78:04:f4: c8:d9:a4:b2:cb:3e:85:83:83:d9:34:fb:06:d7:b2: 2c:51:2d:85:cd:80:ac:e2:f3:3b:e8:d9:73:64:5a: 72:d3:1a:2b:45:ed:7b:51:56:21:f1:15:eb:ce:83: 10:4c:7e:e4:de:6d:a0:c2:b3:e1:6c:86:00:47:b1: 8c:66:08:bf:10:73:fd:c2:35:9f:ab:1b:a2:10:d3: 49:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:85:D9:1D:8B:4B:43:32:AD:62:D5:D5:97:0F:A3:84:EF:F4:DE:3E X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:bf:98:1a:8f:c3:a4:3b:07:9e:3a:4a:4a:7e:d3:3a:d1:ed: 9a:75:43:4f:fb:bc:31:7d:7e:7c:9e:98:a0:4f:73:df:6c:00: 84:6b:81:cb:18:07:48:ec:3a:c7:73:4b:e8:f2:fc:36:e8:a0: 87:55:f4:79:a8:0f:2c:f3:a0:8f:86:c2:9f:1f:49:6e:ac:e5: 68:56:71:78:f3:47:af:3f:49:a7:94:43:a8:ae:61:56:e9:b8: 90:9b:7c:d7:38:95:97:b9:28:d8:c7:12:14:e8:1b:77:d3:bd: 57:be:86:78:93:17:fe:3e:45:a7:f3:8f:c8:07:cd:0a:5e:3e: 08:f1:46:6c:fd:40:34:a0:21:99:d8:24:e1:58:06:fe:d3:d4: 59:0a:c7:15:f2:c8:73:5d:2c:3b:b4:4e:4e:5e:9d:49:5c:90: 06:77:c8:74:94:3f:1f:80:76:42:7b:51:dd:d9:0b:dc:2d:aa: bf:ab:5e:19:4c:b0:c1:b4:d1:cc:f5:e2:0d:dc:85:ac:07:e1: c1:67:ce:af:f2:20:01:55:c6:ed:6a:7b:09:80:fc:27:7a:bc: 22:20:fe:42:01:de:22:70:e4:85:5c:03:89:5c:ff:e9:3a:f4: 26:3a:3c:14:93:3b:0d:07:af:b5:5d:24:c7:e3:aa:01:98:d8: 7b:93:6c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU4MzIxMTAvBgNVBAUTKEJFOUI5MDRFQjc2Q0IwNUM2MEMzRTJDMzc5RTJGQTQ4 OUEwRTE3NzIwHhcNMjUxMTA1MDYzNjA3WhcNMjUxMTEyMDYzNjA3WjAYMRYwFAYD VQQDEw02OTBhZjA1Ny01OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrKWyCNA0FHyQQ1Omm+PCSn0nFHj72qaIzvmmgV9wXIEZvGkQqWlsVfH6Vbw 44lTmo2Luh2RK+JQebGeLBRAmvmekMCbCnZ7IJ/1ElWPIqdljqiaeWRCMUeB1ZhN gvwprd9xC9hjEHPuzAJYFXxj7kNSivk/t5PsihpzJCQZWivPSBEWhywEWG83rK+w 1pYazhzonZDhY78DoHHma3w42OQTT7rpJJhD3zgYz7NxR9B4BPTI2aSyyz6Fg4PZ NPsG17IsUS2FzYCs4vM76NlzZFpy0xorRe17UVYh8RXrzoMQTH7k3m2gwrPhbIYA R7GMZgi/EHP9wjWfqxuiENNJBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuF2R2L S0MyrWLV1ZcPo4Tv9N4+MB8GA1UdIwQYMBaAFL6bkE63bLBcYMPiw3ni+kiaDhdy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTgzMi8yNkU1ODI1NEQw QkExMUVGODk2Q0QwMjZDNEY5QUUwMi92cHVRVHJkc3NGeGd3LUxEZWVMNlNKb09G M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0YzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTgzMi8yNkU1ODI1NEQwQkExMUVGODk2Q0QwMjZDNEY5QUUwMi92cHVRVHJkc3NG eGd3LUxEZWVMNlNKb09GM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXv5gaj8OkOweeOkpKftM60e2adUNP+7wxfX58npigT3PfbACEa4HL GAdI7DrHc0vo8vw26KCHVfR5qA8s86CPhsKfH0lurOVoVnF480evP0mnlEOormFW 6biQm3zXOJWXuSjYxxIU6Bt3071XvoZ4kxf+PkWn84/IB80KXj4I8UZs/UA0oCGZ 2CThWAb+09RZCscV8shzXSw7tE5OXp1JXJAGd8h0lD8fgHZCe1Hd2QvcLaq/q14Z TLDBtNHM9eIN3IWsB+HBZ86v8iABVcbtansJgPwnerwiIP5CAd4icOSFXAOJXP/p OvQmOjwUkzsNB6+1XSTH46oBmNh7k2xG -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:52 2025 by rpki-client