$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: 3bbABidw3gZWQTbhoewTN8edb//PZz3vgdTzSitm6uQ= Subject key identifier: B5:75:17:D3:4F:B2:23:27:1B:A4:43:91:56:B3:D5:52:22:31:21:2D Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 046B Signing time: Mon 03 Nov 2025 00:11:55 +0000 Manifest this update: Mon 03 Nov 2025 00:11:55 +0000 Manifest next update: Mon 10 Nov 2025 00:11:55 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: n874SO7tq0x8ThXSUaQ/PXcdSF9tqPDVBGaBtS24wTs=) 2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=) 3: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: FmTdhb6JOatjzFGpUujz0yqqemXgtcfk0JQ/+/a77U0=) 4: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: wF1Z2aa2PTEiRRPCp23vYrxyf7/d64gIm78PkkwoFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Nov 3 00:11:55 2025 GMT Not After : Nov 10 00:11:55 2025 GMT Subject: CN=6907f34b-7058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:4d:69:a2:58:e1:76:77:7c:93:8c:e4:d9: b9:bf:65:62:e1:e9:a9:9c:2d:36:30:d6:49:f3:da: 46:51:f1:73:52:4a:28:c0:90:9c:5b:50:9e:9f:4b: 14:9e:d5:f5:cd:37:b1:a8:aa:6e:d8:cd:4e:f1:e7: 1c:1b:7a:c8:ce:1b:ce:8e:c9:a1:49:eb:7e:cb:3c: ae:36:5b:0b:1c:a6:b9:b0:9b:00:c5:35:00:9f:9b: a1:6b:5d:68:ff:52:dd:69:c3:42:10:08:42:4a:36: ea:52:7f:8a:f5:a7:43:db:02:7c:68:79:c7:70:98: 0b:b6:e8:f8:cc:f1:20:bf:8e:10:6d:92:df:cd:0f: 12:fb:55:56:ef:62:97:1f:10:84:ee:f6:9e:d2:20: e0:93:68:a9:fe:cd:f6:a6:87:61:95:6b:c1:0f:f9: 3a:47:f1:d5:5f:a5:a2:d3:79:75:b0:3c:36:f0:c0: e5:18:b0:27:21:81:a1:77:f1:a8:4e:f5:91:a6:68: 68:3a:bc:83:b0:7f:42:df:36:74:d8:f8:be:c0:98: 71:d4:c2:b0:96:c0:de:4c:71:72:59:fd:1e:58:3d: a6:80:97:91:96:d3:19:13:81:3e:9e:0a:ea:dc:87: 9b:9b:9c:2c:b9:5e:18:74:20:81:fd:91:a9:60:20: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:75:17:D3:4F:B2:23:27:1B:A4:43:91:56:B3:D5:52:22:31:21:2D X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ad:d4:12:b6:2a:77:20:02:cd:a7:a3:84:8d:88:64:ac:32: 29:5d:63:37:c5:f0:6e:0c:bd:73:ac:88:aa:42:24:a4:bd:18: 61:49:60:6d:85:44:d3:aa:f0:c2:d1:ee:28:78:34:33:11:b2: 23:8e:4e:b3:b3:52:8c:e4:77:88:58:0c:02:60:5c:9c:ee:e5: f5:28:0d:c2:fa:b9:57:6e:09:fb:09:97:66:04:22:30:fb:f4: 48:7e:05:09:a9:74:25:9c:7c:b5:1b:05:cc:7d:a8:ec:18:fd: 02:64:c6:e1:91:11:40:6c:74:0e:4b:47:98:be:ca:e8:98:96: 83:1d:f5:40:c2:25:cc:b3:97:d2:7c:d5:3b:13:5e:8c:bc:5d: a2:2b:df:7e:7f:7d:48:ff:f9:7d:d0:c3:01:09:71:ba:78:a1: 28:5d:ba:d5:72:36:6a:ae:b8:ce:e0:ec:fd:4e:6b:70:8d:a6: 6b:ff:61:af:2e:9d:36:c7:71:eb:53:1b:f0:29:26:f6:63:f8: 22:e6:5f:89:2c:be:5f:a2:26:58:c9:0a:a9:4c:5c:2a:9d:e7: 80:fd:08:a0:ee:06:ac:07:c7:19:78:b0:35:62:66:f9:a2:45: b5:76:6e:99:b8:5e:6f:99:ca:18:1c:40:d3:b8:64:8f:58:27: 36:73:31:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjUxMTAzMDAxMTU1WhcNMjUxMTEwMDAxMTU1WjAYMRYwFAYD VQQDEw02OTA3ZjM0Yi03MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqg1NaaJY4XZ3fJOM5Nm5v2Vi4empnC02MNZJ89pGUfFzUkoowJCcW1Cen0sU ntX1zTexqKpu2M1O8eccG3rIzhvOjsmhSet+yzyuNlsLHKa5sJsAxTUAn5uha11o /1LdacNCEAhCSjbqUn+K9adD2wJ8aHnHcJgLtuj4zPEgv44QbZLfzQ8S+1VW72KX HxCE7vae0iDgk2ip/s32podhlWvBD/k6R/HVX6Wi03l1sDw28MDlGLAnIYGhd/Go TvWRpmhoOryDsH9C3zZ02Pi+wJhx1MKwlsDeTHFyWf0eWD2mgJeRltMZE4E+ngrq 3Iebm5wsuV4YdCCB/ZGpYCAicQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLV1F9NP siMnG6RDkVaz1VIiMSEtMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvrdQStip3IALNp6OEjYhkrDIpXWM3xfBuDL1zrIiqQiSkvRhhSWBt hUTTqvDC0e4oeDQzEbIjjk6zs1KM5HeIWAwCYFyc7uX1KA3C+rlXbgn7CZdmBCIw +/RIfgUJqXQlnHy1GwXMfajsGP0CZMbhkRFAbHQOS0eYvsromJaDHfVAwiXMs5fS fNU7E16MvF2iK99+f31I//l90MMBCXG6eKEoXbrVcjZqrrjO4Oz9TmtwjaZr/2Gv Lp02x3HrUxvwKSb2Y/gi5l+JLL5foiZYyQqpTFwqneeA/Qig7gasB8cZeLA1Ymb5 okW1dm6ZuF5vmcoYHEDTuGSPWCc2czEx -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:19 2025 by rpki-client