$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json) Hash identifier: /HxjTv6ZSlrV6KtTm4ihO2oTlsICyweyL2zPBOxE710= Subject key identifier: 08:7E:4C:34:18:47:7A:C6:49:81:2C:A2:97:A2:99:1C:66:9F:12:97 Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft Manifest number: 028F Signing time: Wed 05 Nov 2025 01:41:34 +0000 Manifest this update: Wed 05 Nov 2025 01:41:33 +0000 Manifest next update: Wed 12 Nov 2025 01:41:33 +0000 Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: XX9DdtoGsTDWyZI1iSoJGDqyAyEHk+qSRXbVJVoMCiQ=) 2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: KwT8765tV1xGz2sf7ujcAdTQLGt8VA1bqI5xYKuBmVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Validity Not Before: Nov 5 01:41:33 2025 GMT Not After : Nov 12 01:41:33 2025 GMT Subject: CN=690aab4d-54d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:45:b9:03:c7:48:a8:d6:45:61:e5:ab:5b: 0d:b2:08:51:4d:ab:a4:b5:ee:24:54:a3:c8:ae:63: 5f:7e:81:23:8b:02:a3:f1:60:95:f9:d2:d3:6d:79: 6f:ca:f8:ad:08:44:52:06:91:f1:db:02:b7:34:21: 81:50:36:1e:26:e5:d1:4f:6d:34:4e:fb:71:e0:41: a1:eb:a1:3d:9b:c9:81:11:ba:50:33:fe:ac:e5:eb: 2f:19:c1:a3:70:0b:7e:c5:f7:93:c7:3b:64:87:6f: 1c:0e:81:d4:9b:21:ba:80:3f:c7:1c:c7:e5:7c:54: 35:e4:34:e7:e0:79:6a:51:d9:b6:ba:01:cd:a8:83: ce:35:28:48:0f:28:49:5d:52:2d:82:7e:8c:7a:6c: 87:5a:b6:73:a5:4e:f0:68:d5:06:1c:62:06:6d:f1: ba:ab:cf:7d:45:0b:c2:20:26:e1:6b:2f:f8:68:db: 05:94:af:d5:18:55:bb:47:4c:5c:91:98:9a:6d:53: 59:b7:74:0d:42:dc:b0:f3:57:d5:35:d1:ae:05:a4: 9f:be:fd:bd:52:6c:a5:3d:cc:92:21:a6:bc:ff:2f: 6c:b0:22:f4:ec:20:0f:f1:b3:db:14:17:96:0e:20: a3:98:f7:44:10:ed:a6:01:f3:25:64:9f:85:3f:9b: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7E:4C:34:18:47:7A:C6:49:81:2C:A2:97:A2:99:1C:66:9F:12:97 X509v3 Authority Key Identifier: keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:54:c2:b3:62:33:67:03:82:50:db:f7:fa:f6:3c:a9:65:50: 0f:53:1a:17:4f:ab:d7:cd:fa:38:c9:e7:d5:10:e5:7d:28:73: f2:19:2a:5f:22:f0:f6:5c:8d:1d:14:77:5d:e2:f9:99:ca:c5: 8d:9a:07:92:cc:b4:51:3f:10:ab:d8:0b:35:eb:3a:79:63:d8: 29:b5:40:3a:8a:9c:88:e2:2d:60:96:48:ca:e0:00:f4:23:13: 70:7d:6b:4a:e7:86:a3:b8:63:64:fb:e4:3e:44:12:85:24:6d: 10:b6:73:9a:26:f7:bf:8b:40:23:5a:6d:86:40:2a:c4:db:34: 74:de:f6:19:20:4c:f7:b3:26:64:f7:d5:83:0b:1a:f8:b8:e8: 1c:36:2e:55:67:48:7a:ac:9f:6f:4d:06:8b:cf:04:b2:a1:f2: 9f:3d:85:e3:b3:72:3e:db:97:dd:42:bf:df:39:5d:d5:1d:c9: 14:cc:67:e1:78:fa:98:77:86:bd:f0:0f:ff:c2:36:4d:20:04: 16:e7:0f:60:8d:1f:39:dc:a0:84:e6:f1:58:9c:3f:49:11:83: bf:c0:4f:90:11:40:d8:82:fa:0a:3d:18:36:57:0a:08:a8:6b: e3:a4:a2:e1:de:25:2e:e3:ce:e3:43:e2:76:6a:b5:3d:bb:b1: a4:bd:cd:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCODkxMTAvBgNVBAUTKEJEMTZCNTY0MzJBRTVGNDMwMjVDNERBMTEzNDUzN0Y3 MDRFQjQwOTYwHhcNMjUxMTA1MDE0MTMzWhcNMjUxMTEyMDE0MTMzWjAYMRYwFAYD VQQDEw02OTBhYWI0ZC01NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO1FuQPHSKjWRWHlq1sNsghRTaukte4kVKPIrmNffoEjiwKj8WCV+dLTbXlv yvitCERSBpHx2wK3NCGBUDYeJuXRT200Tvtx4EGh66E9m8mBEbpQM/6s5esvGcGj cAt+xfeTxztkh28cDoHUmyG6gD/HHMflfFQ15DTn4HlqUdm2ugHNqIPONShIDyhJ XVItgn6MemyHWrZzpU7waNUGHGIGbfG6q899RQvCICbhay/4aNsFlK/VGFW7R0xc kZiabVNZt3QNQtyw81fVNdGuBaSfvv29UmylPcySIaa8/y9ssCL07CAP8bPbFBeW DiCjmPdEEO2mAfMlZJ+FP5u0QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAh+TDQY R3rGSYEsopeimRxmnxKXMB8GA1UdIwQYMBaAFL0WtWQyrl9DAlxNoRNFN/cE60CW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUI4OS85NkQzQkE1QzI0 RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgwTUNYRTJoRTBVMzl3VHJR SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSYTFaREt1WDBNQ1hFMmhFMFUzOXdUclFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUI4OS85NkQzQkE1QzI0RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgw TUNYRTJoRTBVMzl3VHJRSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUVMKzYjNnA4JQ2/f69jypZVAPUxoXT6vXzfo4yefVEOV9KHPyGSpf IvD2XI0dFHdd4vmZysWNmgeSzLRRPxCr2As16zp5Y9gptUA6ipyI4i1glkjK4AD0 IxNwfWtK54ajuGNk++Q+RBKFJG0QtnOaJve/i0AjWm2GQCrE2zR03vYZIEz3syZk 99WDCxr4uOgcNi5VZ0h6rJ9vTQaLzwSyofKfPYXjs3I+25fdQr/fOV3VHckUzGfh ePqYd4a98A//wjZNIAQW5w9gjR853KCE5vFYnD9JEYO/wE+QEUDYgvoKPRg2VwoI qGvjpKLh3iUu487jQ+J2arU9u7Gkvc1G -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:03 2025 by rpki-client