$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft File: vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json) Hash identifier: W1amkYxAVvKOcN06uWxflp8zZXpUlhIq8cKYZq+cG/Y= Subject key identifier: 9F:A9:CF:3B:9E:8F:00:4B:33:8F:C2:7E:7B:07:0E:E2:F1:55:77:2F Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 Certificate issuer: /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft Manifest number: 0253 Signing time: Wed 05 Nov 2025 01:50:33 +0000 Manifest this update: Wed 05 Nov 2025 01:50:32 +0000 Manifest next update: Wed 12 Nov 2025 01:50:32 +0000 Files and hashes: 1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: SUzDAhIBVF6SmSoz1Anr3FbVAohOOrIxg7Hssp6TqBA=) 2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: wuoqyYVDiG/sRQZo+9RPf+TSJtEdkwDtdHHUSy4QKA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Validity Not Before: Nov 5 01:50:32 2025 GMT Not After : Nov 12 01:50:32 2025 GMT Subject: CN=690aad68-8d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:93:02:4e:a2:02:cf:77:b7:53:ee:8a:a8: 51:81:8a:eb:57:86:65:bd:5e:ed:ef:b9:e3:34:4c: 20:1e:d4:8e:5e:82:e9:a0:12:73:51:c7:7e:fa:f5: 90:e5:04:31:ff:fd:4d:54:0f:88:10:bc:31:d6:a8: b9:0f:dd:2f:c8:f2:b4:0b:85:6e:fd:59:7e:b4:88: 28:26:55:bb:05:70:69:5a:48:ef:bd:6f:5c:e2:7a: 1f:0a:a8:ef:14:65:15:bb:ba:2c:f0:f1:25:88:a6: 2d:94:bc:87:07:e4:15:c6:3f:ac:45:e9:c6:5a:c9: d2:00:52:bf:5d:5d:b4:fc:17:56:7f:0c:cb:ea:7e: f2:1b:af:16:b9:02:b8:a4:65:18:5e:59:3b:7e:41: c1:b2:9f:d5:45:7b:33:ca:57:79:cd:cf:8f:f2:ad: 9b:68:4e:0a:a4:de:b4:10:c4:92:9f:55:fe:f3:99: e5:51:93:8c:cf:0d:67:dc:d5:50:1a:dc:0f:5d:b1: 75:9e:1d:4d:4e:23:19:3c:3e:72:aa:87:0e:75:fe: f1:1d:36:1e:17:80:a7:9a:a9:70:b5:7c:d5:08:55: 79:86:3d:58:be:22:9d:f1:b8:c7:f5:8e:33:61:e4: 43:17:e3:fb:8a:9d:09:7f:b4:f9:91:b3:39:01:27: 43:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A9:CF:3B:9E:8F:00:4B:33:8F:C2:7E:7B:07:0E:E2:F1:55:77:2F X509v3 Authority Key Identifier: keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:06:8c:71:a9:70:ea:ac:b6:4d:fb:84:59:7a:67:8b:61:e3: bb:92:32:e2:e2:7e:bd:3f:31:34:50:69:2f:a6:e0:82:8a:0f: 5c:38:d6:78:13:2d:ff:8e:1b:7b:03:5f:48:28:b4:b5:af:eb: 87:a5:70:b0:f3:56:18:fc:ec:6e:36:6d:44:21:bc:68:b5:2c: f1:c7:1a:64:91:a3:de:3f:51:36:19:7c:b8:99:33:95:6d:e3: 3b:7d:f9:ab:94:46:65:cb:9d:63:28:53:5d:7d:79:7c:eb:8a: b4:af:ad:a4:44:b0:20:9e:dd:db:19:20:2f:ca:39:0f:4d:22: b8:30:36:d7:0e:8c:c0:6c:18:68:5e:ee:24:f0:20:08:a3:c4: 46:e9:87:fb:3f:ec:ac:7a:45:c6:19:fb:0e:a0:b2:01:8f:09: 08:d6:d4:50:a4:17:d9:93:58:38:b9:2a:83:7f:f1:09:69:29: 41:fd:9e:b9:88:d4:d1:f1:0f:f1:6d:9c:72:04:92:cc:0b:51: aa:fd:b2:e9:2e:09:dd:b6:27:34:59:76:68:f7:94:23:d8:7e: 6e:72:d0:d3:45:11:66:df:87:7e:47:30:5f:db:cc:5c:8d:b3: 0d:4a:ba:0a:b9:c3:ee:e6:08:ed:89:26:da:ca:df:5a:d5:f2: 1a:1e:0c:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyREUxMTAvBgNVBAUTKEJFRDAxMjU3MTg1NDVDMUU1MDgwMzFEM0ZGNUZCNkU4 Mjg2QTdGRDgwHhcNMjUxMTA1MDE1MDMyWhcNMjUxMTEyMDE1MDMyWjAYMRYwFAYD VQQDEw02OTBhYWQ2OC04ZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0N2TAk6iAs93t1PuiqhRgYrrV4ZlvV7t77njNEwgHtSOXoLpoBJzUcd++vWQ 5QQx//1NVA+IELwx1qi5D90vyPK0C4Vu/Vl+tIgoJlW7BXBpWkjvvW9c4nofCqjv FGUVu7os8PEliKYtlLyHB+QVxj+sRenGWsnSAFK/XV20/BdWfwzL6n7yG68WuQK4 pGUYXlk7fkHBsp/VRXszyld5zc+P8q2baE4KpN60EMSSn1X+85nlUZOMzw1n3NVQ GtwPXbF1nh1NTiMZPD5yqocOdf7xHTYeF4CnmqlwtXzVCFV5hj1YviKd8bjH9Y4z YeRDF+P7ip0Jf7T5kbM5ASdDgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+pzzue jwBLM4/CfnsHDuLxVXcvMB8GA1UdIwQYMBaAFL7QElcYVFweUIAx0/9ftugoan/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJERS84REU0RTRDMDNC NkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhCNVFnREhUXzEtMjZDaHFm OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z0QVNWeGhVWEI1UWdESFRfMS0yNkNocWY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJERS84REU0RTRDMDNCNkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhC NVFnREhUXzEtMjZDaHFmOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIBoxxqXDqrLZN+4RZemeLYeO7kjLi4n69PzE0UGkvpuCCig9cONZ4 Ey3/jht7A19IKLS1r+uHpXCw81YY/OxuNm1EIbxotSzxxxpkkaPeP1E2GXy4mTOV beM7ffmrlEZly51jKFNdfXl864q0r62kRLAgnt3bGSAvyjkPTSK4MDbXDozAbBho Xu4k8CAIo8RG6Yf7P+ysekXGGfsOoLIBjwkI1tRQpBfZk1g4uSqDf/EJaSlB/Z65 iNTR8Q/xbZxyBJLMC1Gq/bLpLgndtic0WXZo95Qj2H5uctDTRRFm34d+RzBf28xc jbMNSroKucPu5gjtiSbayt9a1fIaHgzz -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:47 2025 by rpki-client