$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: UQiGp3srWmeLfc37vkU4qmz3nMB99LDZNG5amWQIlZs= Subject key identifier: 5D:5E:4B:0A:D8:24:87:F1:63:59:23:C7:94:E8:D5:4B:73:61:52:C3 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0C5D Signing time: Sun 02 Nov 2025 18:34:13 +0000 Manifest this update: Sun 02 Nov 2025 18:34:12 +0000 Manifest next update: Sun 09 Nov 2025 18:34:12 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: uLRzTPuca8HmuKkL6/cAmfIeiDUtFTKae3h9qcxgFDs=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: 9jpZ67QWGAJhgEp9yZYa+B85oL6nxjWkZcfSp/yeSCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Nov 2 18:34:12 2025 GMT Not After : Nov 9 18:34:12 2025 GMT Subject: CN=6907a425-1129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:9f:48:2e:b9:e0:18:02:58:f5:f2:d7:27: 7d:30:d5:09:2a:b7:99:8d:25:3d:fe:62:1a:79:c7: 94:75:83:0a:db:72:b4:f5:11:ac:2a:00:ef:1c:3c: f9:01:c6:b0:80:b0:a7:e2:50:58:fe:80:4d:cf:d1: 01:d9:04:dc:36:6b:95:5e:12:96:62:0d:87:de:9a: ec:74:40:21:c7:ab:0f:48:41:af:4a:f9:57:93:84: b3:3e:5e:57:d1:59:d2:aa:91:e2:bd:17:d5:49:b6: 58:21:8c:3d:3f:c4:d9:bc:9a:ae:a1:e1:a3:7c:c3: 10:a2:d7:ac:9f:7c:9c:ae:10:88:8b:91:27:1f:98: 1b:31:ae:22:13:50:3e:70:06:1a:4f:2f:31:24:32: a2:fc:5b:bc:fd:9f:d9:c2:9a:ae:fd:12:fe:52:2d: 3d:e3:9a:ad:4d:3b:9e:e0:cf:5a:1d:eb:d6:7a:4d: 07:6f:36:a4:91:63:e3:2c:8a:c4:72:ec:f1:88:84: fa:cf:51:cb:3a:24:3b:ac:b9:e8:b2:52:15:56:94: ad:3e:48:6d:bd:87:60:33:cc:ef:33:5a:80:a5:28: e3:b7:71:a3:13:89:0a:ae:b5:40:b6:19:8f:61:e1: 3a:38:3f:90:e6:6c:a4:d0:ed:4a:46:44:c4:15:c7: 8c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5E:4B:0A:D8:24:87:F1:63:59:23:C7:94:E8:D5:4B:73:61:52:C3 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:7a:0a:f3:64:b5:b0:cb:ad:1b:e5:1f:38:1d:eb:87:9a:2b: 43:26:85:bc:99:c0:a4:f9:c4:e0:be:f0:be:e4:65:c6:0a:ef: 93:b3:ea:9f:54:c4:f5:8b:52:cd:f1:98:9b:d4:14:23:29:1a: c8:8f:05:72:cf:c6:12:e3:22:8e:04:2b:32:19:c4:89:cd:0f: 71:a0:3f:21:ef:fe:57:38:f2:0d:b7:cb:08:ac:92:b4:e7:0a: 61:2d:50:19:7d:ad:71:9b:5e:ed:4e:8e:30:1c:5b:dc:ab:98: 84:4a:ff:db:cd:7c:e1:dc:d8:1d:3d:c2:65:21:18:bd:96:ed: c9:01:8b:3b:55:bc:dc:db:45:80:96:87:c8:91:b1:88:20:ec: e9:e6:68:f7:0e:95:b9:06:26:51:76:ac:0b:ca:2d:aa:92:b7: a4:7c:7d:2b:bb:f2:c0:48:77:c1:63:3e:ae:7f:18:b4:17:8b: ad:e0:73:c0:eb:5f:95:7c:e2:57:87:83:dc:77:50:8a:ca:b0: 58:77:22:7e:b8:10:b8:18:5f:fa:72:da:12:f4:f8:d2:bf:73: 00:9d:83:ea:28:5b:37:29:1c:a3:78:d4:ba:24:a2:20:bc:4e: 44:01:61:86:7c:79:b0:5a:5e:7a:a4:3d:fc:49:2d:92:74:82: cc:80:45:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjUxMTAyMTgzNDEyWhcNMjUxMTA5MTgzNDEyWjAYMRYwFAYD VQQDEw02OTA3YTQyNS0xMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzifSC654BgCWPXy1yd9MNUJKreZjSU9/mIaeceUdYMK23K09RGsKgDvHDz5 AcawgLCn4lBY/oBNz9EB2QTcNmuVXhKWYg2H3prsdEAhx6sPSEGvSvlXk4SzPl5X 0VnSqpHivRfVSbZYIYw9P8TZvJquoeGjfMMQotesn3ycrhCIi5EnH5gbMa4iE1A+ cAYaTy8xJDKi/Fu8/Z/Zwpqu/RL+Ui0945qtTTue4M9aHevWek0HbzakkWPjLIrE cuzxiIT6z1HLOiQ7rLnoslIVVpStPkhtvYdgM8zvM1qApSjjt3GjE4kKrrVAthmP YeE6OD+Q5myk0O1KRkTEFceMvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1eSwrY JIfxY1kjx5To1UtzYVLDMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUegrzZLWwy60b5R84HeuHmitDJoW8mcCk+cTgvvC+5GXGCu+Ts+qf VMT1i1LN8Zib1BQjKRrIjwVyz8YS4yKOBCsyGcSJzQ9xoD8h7/5XOPINt8sIrJK0 5wphLVAZfa1xm17tTo4wHFvcq5iESv/bzXzh3NgdPcJlIRi9lu3JAYs7Vbzc20WA lofIkbGIIOzp5mj3DpW5BiZRdqwLyi2qkrekfH0ru/LASHfBYz6ufxi0F4ut4HPA 61+VfOJXh4Pcd1CKyrBYdyJ+uBC4GF/6ctoS9PjSv3MAnYPqKFs3KRyjeNS6JKIg vE5EAWGGfHmwWl56pD38SS2SdILMgEUf -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:54 2025 by rpki-client