$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft File: VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json) Hash identifier: HexYfmbvVsU01rwrtuq/ACNcuYyoqj31e+0bHDGh8eM= Subject key identifier: 76:2F:C1:3C:84:22:7F:7A:99:2A:85:1F:AE:E1:24:67:9E:81:5C:4E Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft Manifest number: 3B Signing time: Mon 03 Nov 2025 07:30:33 +0000 Manifest this update: Mon 03 Nov 2025 07:30:32 +0000 Manifest next update: Mon 10 Nov 2025 07:30:32 +0000 Files and hashes: 1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: h7V/YUdigvCLCpZORlRDr3BN6SoMmF+ShkGKJJOVbLQ=) 2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: z6l4Kf7BBkbhNbxfRp+L0t7tdYphMHusFnOI/s0ajOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Validity Not Before: Nov 3 07:30:32 2025 GMT Not After : Nov 10 07:30:32 2025 GMT Subject: CN=69085a19-4bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:c7:c0:ea:49:3c:26:20:ac:8d:49:e8:b3: 30:07:28:c8:ea:aa:0d:c4:67:b6:ca:0a:63:3b:bb: 39:3f:64:b8:55:e2:aa:fd:8b:ec:5f:0f:80:46:e0: 2a:5b:ec:b8:02:2b:27:1a:e6:ae:e3:0f:67:f5:b7: 07:12:05:44:3e:18:64:72:b9:9a:d0:d4:73:eb:87: 49:22:a9:84:4e:f2:cf:b8:63:98:86:38:cb:0a:9e: 8a:20:bd:da:90:7e:5d:9a:b1:9c:cf:f9:92:30:59: 10:4e:83:22:7e:a8:eb:61:e0:9f:8e:c0:96:38:40: 0e:67:c5:c1:64:24:c1:2c:f4:54:7a:b1:5b:89:5e: 0b:7c:15:fb:49:01:f4:d9:14:ca:f9:bf:90:4d:34: c2:7b:82:46:ec:9d:96:60:2b:a0:67:6e:e9:39:26: 52:0d:7e:ff:28:a2:49:5f:3b:d2:d0:8a:53:9f:d9: 7e:e5:de:30:7b:7b:88:93:c7:8f:85:17:82:94:e2: 37:5d:a3:be:e6:5e:42:74:dd:04:e2:e1:66:c1:f0: 02:95:8a:25:d8:03:c8:ec:35:38:b1:11:41:a9:d9: 38:5f:16:ad:06:1f:26:be:6b:1b:98:60:c3:aa:3a: 20:18:56:93:5f:49:82:db:1e:7a:53:22:c1:7c:21: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2F:C1:3C:84:22:7F:7A:99:2A:85:1F:AE:E1:24:67:9E:81:5C:4E X509v3 Authority Key Identifier: keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:31:ba:05:7a:49:17:c0:11:25:e0:a8:e0:c9:94:b1:c6:5b: 82:46:17:3a:f0:25:49:34:6d:37:3f:41:de:49:a2:48:e5:c7: 14:a9:ab:2f:65:0f:73:48:79:ed:52:1c:40:ce:de:9c:a2:88: 49:a8:b1:29:ee:b8:8c:cd:05:41:c8:31:98:9d:e0:a8:60:ce: 33:19:f9:5f:aa:58:a0:06:5b:0a:48:ac:8c:6f:6a:29:0d:c5: 9c:91:17:f2:06:c7:ae:84:55:d2:07:d1:e2:3a:e6:e1:a1:7a: 93:f4:fe:c7:5a:71:83:8d:79:99:65:e7:6f:2b:92:8d:a1:12: 2a:7f:04:d1:68:c0:95:87:ab:fd:ba:09:2f:d9:ae:7b:eb:c0: 2f:9a:f9:31:b1:07:7a:79:ad:6b:ec:0c:ed:ec:7a:7d:6f:67: 1d:7a:df:8a:96:b1:50:83:99:78:94:cf:84:60:b1:99:91:eb: d4:94:2f:10:19:4f:ea:3f:ab:89:5e:25:12:9e:14:5b:84:31: db:27:17:65:40:5a:d6:9b:12:21:e3:64:84:05:c6:85:58:e8: 38:74:4e:39:32:8d:3c:17:3a:62:83:c7:0d:24:2d:89:88:5f: d4:9d:5c:b6:45:a0:e0:23:d9:4f:27:f2:9d:7e:95:af:4d:e6: 20:b5:eb:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoNTU3ODlBMzQxNkU3RUY1MTVDRTA4RjA1QTM2RjFERUQ4 MzQ0NEMwOTAeFw0yNTExMDMwNzMwMzJaFw0yNTExMTAwNzMwMzJaMBgxFjAUBgNV BAMTDTY5MDg1YTE5LTRiZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7d8fA6kk8JiCsjUnoszAHKMjqqg3EZ7bKCmM7uzk/ZLhV4qr9i+xfD4BG4Cpb 7LgCKyca5q7jD2f1twcSBUQ+GGRyuZrQ1HPrh0kiqYRO8s+4Y5iGOMsKnoogvdqQ fl2asZzP+ZIwWRBOgyJ+qOth4J+OwJY4QA5nxcFkJMEs9FR6sVuJXgt8FftJAfTZ FMr5v5BNNMJ7gkbsnZZgK6Bnbuk5JlINfv8ooklfO9LQilOf2X7l3jB7e4iTx4+F F4KU4jddo77mXkJ03QTi4WbB8AKViiXYA8jsNTixEUGp2ThfFq0GHya+axuYYMOq OiAYVpNfSYLbHnpTIsF8IZv7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdi/BPIQi f3qZKoUfruEkZ56BXE4wHwYDVR0jBBgwFoAUVXiaNBbn71Fc4I8Fo28d7YNETAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzQxODA1MDk0NjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL1ZYaWFOQmJuNzFGYzRJOEZvMjhkN1lORVRB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhpYU5CYm43MUZjNEk4Rm8yOGQ3WU5FVEFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 M0YyLzQxODA1MDk0NjBDMDExRjBBRkI0NTcyQkM0RjlBRTAyL1ZYaWFOQmJuNzFG YzRJOEZvMjhkN1lORVRBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYxugV6SRfAESXgqODJlLHGW4JGFzrwJUk0bTc/Qd5JokjlxxSpqy9l D3NIee1SHEDO3pyiiEmosSnuuIzNBUHIMZid4KhgzjMZ+V+qWKAGWwpIrIxvaikN xZyRF/IGx66EVdIH0eI65uGhepP0/sdacYONeZll528rko2hEip/BNFowJWHq/26 CS/ZrnvrwC+a+TGxB3p5rWvsDO3sen1vZx1634qWsVCDmXiUz4RgsZmR69SULxAZ T+o/q4leJRKeFFuEMdsnF2VAWtabEiHjZIQFxoVY6Dh0TjkyjTwXOmKDxw0kLYmI X9SdXLZFoOAj2U8n8p1+la9N5iC165g= -----END CERTIFICATE-----Generated at Wed Nov 5 06:43:38 2025 by rpki-client