$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: dnS4CzjIkHKSntpyhRyWp8qZtUAI/k7zZtZ6g/cOQC8= Subject key identifier: 66:F7:B9:2A:25:A1:B3:46:8F:F7:34:3D:9B:52:1B:5A:B1:E6:F5:99 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 07A0 Signing time: Sun 02 Nov 2025 21:32:38 +0000 Manifest this update: Sun 02 Nov 2025 21:32:37 +0000 Manifest next update: Sun 09 Nov 2025 21:32:37 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: V4UUe1f+tFaWxrPRjQ8XVr9cQdKSB7qsbdLsUn71BJ0=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: 9R9QsXFUMXvz//+w7pzMdn8juESdiZRyTDAnvcDwnQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Nov 2 21:32:37 2025 GMT Not After : Nov 9 21:32:37 2025 GMT Subject: CN=6907cdf6-e6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:a0:6f:67:f9:95:b0:40:8a:c8:26:d6:cd: 2e:96:4d:8e:51:97:9e:7d:3f:c2:22:b8:39:c7:98: c2:fc:62:6d:1a:d1:2f:fe:05:93:76:f4:f6:a6:3e: 40:e6:57:47:1f:3a:91:4d:ae:b1:f2:ad:7b:60:06: a7:dd:a6:c1:8a:c6:35:40:8d:69:24:c9:e4:7f:b4: a8:6f:d7:28:be:ec:86:ac:7c:c2:f2:64:48:ef:fc: 23:20:49:e3:d7:78:12:fa:eb:60:3b:f3:47:ca:3a: 18:f1:a1:30:60:86:5d:38:28:03:55:b1:b3:d3:73: e4:74:4b:f5:4c:7f:15:26:bb:82:a2:75:12:10:7f: c6:64:6e:cd:37:93:01:c3:01:e7:60:36:60:11:43: 90:23:e0:18:2c:4d:7f:05:f7:80:d5:f4:34:a2:96: 1d:86:c0:1c:3e:1f:1f:14:91:ca:d5:f3:ad:8a:65: 03:d1:5b:2b:a1:2d:e1:1a:08:e9:41:37:e2:5b:6e: 86:da:c0:4e:78:12:19:55:46:22:f5:14:68:4d:ac: 99:9e:aa:d1:b0:67:89:bd:9d:b7:81:94:e4:03:90: ca:d7:ad:2b:d2:b8:7b:b8:fb:41:3d:78:d1:ab:f3: 5e:f8:d5:d9:e5:50:dd:21:59:6f:a9:da:24:70:ef: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F7:B9:2A:25:A1:B3:46:8F:F7:34:3D:9B:52:1B:5A:B1:E6:F5:99 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:72:1f:8b:78:ba:3f:2e:2d:cb:58:c5:1f:90:45:d1:ec: a0:50:af:aa:8b:4c:80:1c:a2:e5:9c:01:9a:e7:f1:06:0f:13: 89:db:a4:71:2f:05:8a:1d:3d:a9:57:c6:05:e1:ae:db:33:c4: 06:56:f9:15:09:2a:2b:e1:38:63:9d:dc:d7:03:c5:cc:28:a7: 03:a6:0e:3d:2a:11:cf:42:3f:36:41:4e:18:5b:f8:2b:52:47: 25:57:f1:55:26:5d:0b:f1:28:1f:60:59:f3:56:e2:39:43:43: 13:97:9c:0c:c0:52:b2:86:a3:c9:57:95:c5:0c:4a:da:73:bc: a8:1d:0d:7b:30:19:79:16:e5:9b:93:e5:e2:3d:a6:32:af:64: 4c:de:dc:eb:ac:2e:d3:77:e2:60:9d:73:c4:bf:0a:60:e4:78: af:54:3d:8a:61:41:b7:a6:f6:73:d2:7f:18:45:84:f4:09:f9: a1:d1:6b:98:c5:77:d4:0f:ab:0f:24:5d:23:b3:53:70:e6:96: 29:8b:0c:01:24:a4:5b:97:a9:81:73:07:3a:8e:a8:a0:8b:3e: f8:fa:a8:71:d0:59:a3:e9:c9:b1:b4:29:3a:4a:e5:c9:a3:23: 24:fa:ca:53:b6:00:64:97:d9:8f:72:b2:26:99:99:ce:12:d6: 87:9a:82:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUxMTAyMjEzMjM3WhcNMjUxMTA5MjEzMjM3WjAYMRYwFAYD VQQDEw02OTA3Y2RmNi1lNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02mgb2f5lbBAisgm1s0ulk2OUZeefT/CIrg5x5jC/GJtGtEv/gWTdvT2pj5A 5ldHHzqRTa6x8q17YAan3abBisY1QI1pJMnkf7Sob9covuyGrHzC8mRI7/wjIEnj 13gS+utgO/NHyjoY8aEwYIZdOCgDVbGz03PkdEv1TH8VJruConUSEH/GZG7NN5MB wwHnYDZgEUOQI+AYLE1/BfeA1fQ0opYdhsAcPh8fFJHK1fOtimUD0VsroS3hGgjp QTfiW26G2sBOeBIZVUYi9RRoTayZnqrRsGeJvZ23gZTkA5DK160r0rh7uPtBPXjR q/Ne+NXZ5VDdIVlvqdokcO/O/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb3uSol obNGj/c0PZtSG1qx5vWZMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFx3Ifi3i6Py4ty1jFH5BF0eygUK+qi0yAHKLlnAGa5/EGDxOJ26Rx LwWKHT2pV8YF4a7bM8QGVvkVCSor4ThjndzXA8XMKKcDpg49KhHPQj82QU4YW/gr UkclV/FVJl0L8SgfYFnzVuI5Q0MTl5wMwFKyhqPJV5XFDErac7yoHQ17MBl5FuWb k+XiPaYyr2RM3tzrrC7Td+JgnXPEvwpg5HivVD2KYUG3pvZz0n8YRYT0Cfmh0WuY xXfUD6sPJF0js1Nw5pYpiwwBJKRbl6mBcwc6jqigiz74+qhx0Fmj6cmxtCk6SuXJ oyMk+spTtgBkl9mPcrImmZnOEtaHmoKI -----END CERTIFICATE-----Generated at Tue Nov 4 12:48:16 2025 by rpki-client