$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json) Hash identifier: 2ASgXw0FU93R4Ho9zFcspo5vrSPq174A2ivWAn777hk= Subject key identifier: BD:FE:32:04:D6:29:9B:83:0B:75:37:36:AA:66:35:51:FD:18:9E:45 Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft Manifest number: AA Signing time: Mon 03 Nov 2025 06:16:27 +0000 Manifest this update: Mon 03 Nov 2025 06:16:26 +0000 Manifest next update: Mon 10 Nov 2025 06:16:26 +0000 Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: 9NyyJX/axRQyXHG7I9+oXB0h3ZjiYIBiEbS7y6zB5ss=) 2: 0EC0EC1CC71F11EF85C66E2FC4F9AE02.roa (hash: +qrfRV2PMdtXAnNnZKKe18T1gS8IeX0szeLZzmY8t+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Validity Not Before: Nov 3 06:16:26 2025 GMT Not After : Nov 10 06:16:26 2025 GMT Subject: CN=690848ba-df94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:07:50:59:64:c2:82:65:3b:19:ab:0d:f5: 93:d3:23:99:1e:02:79:fc:c3:3b:44:b6:73:94:5b: 08:78:03:ae:21:d1:55:95:a2:cd:2e:6f:3e:ee:8c: c8:da:bd:18:09:f2:b1:cb:be:d4:06:25:eb:52:1d: 61:5f:bd:b7:31:2a:2b:1b:0a:f2:cf:c4:cb:84:81: 42:a8:24:90:8a:05:5f:28:5a:39:0c:ae:e3:51:fc: aa:12:2a:4c:53:31:34:f3:ce:e6:a1:a9:af:b6:80: 69:33:91:06:3a:9f:b2:de:81:d6:6e:8f:a2:56:7e: d6:48:be:e1:66:b8:74:18:1a:68:4c:a7:da:9a:00: 1f:72:50:87:b2:ec:26:c3:f0:29:b2:c2:f0:ea:e9: 1f:97:fd:de:f9:eb:14:c0:f1:8e:4c:7b:d4:5e:f9: a0:d4:71:da:84:4c:64:25:24:52:a5:5d:45:19:20: 68:f1:e0:b9:87:43:69:18:8b:86:23:4f:e7:54:c9: 3d:1d:35:1c:14:76:90:cd:ff:f8:bf:93:b0:af:4f: a0:b1:5d:23:6d:3c:fb:47:f0:9c:e4:65:d4:da:fc: 89:9a:82:09:a4:24:4d:04:49:06:77:0b:2a:cf:4b: 31:72:cb:1a:54:ae:e1:05:90:ba:3f:4c:7f:0c:57: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FE:32:04:D6:29:9B:83:0B:75:37:36:AA:66:35:51:FD:18:9E:45 X509v3 Authority Key Identifier: keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:11:fa:20:f2:24:59:a4:12:3b:be:47:a5:6c:a3:3e:74:0f: d6:09:05:1e:17:03:0c:72:a9:56:b3:d3:18:bb:90:c4:95:db: 1b:f1:67:21:fe:20:15:7d:45:ad:2f:46:4a:c4:d6:1d:6a:ed: 11:1f:bd:35:04:cd:31:64:3a:71:6c:ef:a9:88:c7:8f:56:fa: b8:62:58:cc:04:f6:ca:88:87:84:e8:9e:2e:15:c0:f6:f0:f5: e5:52:58:41:c7:2d:76:f2:43:4d:58:93:d7:55:ce:26:51:f0: ef:ce:cf:d2:63:15:34:99:98:a9:00:39:03:fb:0d:09:6d:1a: 8b:3f:e2:5e:a5:6c:db:03:7b:0d:7d:83:89:c7:cf:9e:d5:37: 78:26:ef:fa:5d:ef:5e:6c:a5:15:1f:dd:3d:8e:b0:00:51:2b: ae:6b:f7:19:92:38:70:3b:0b:2d:3d:30:18:47:9a:dc:0c:5f: 95:90:6d:82:6b:f9:7b:9c:6d:22:d5:c3:6b:12:00:45:e7:e3: 1f:87:56:f3:fb:1f:40:dd:82:c7:99:b9:0a:ad:80:b8:2e:08: a2:61:9c:3c:33:f2:9a:d8:4d:93:b0:4e:6c:c2:cb:8c:48:db: dc:21:c6:29:02:4e:5e:2b:0b:51:70:8e:54:cc:80:f6:b3:aa: 5c:24:7a:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVFRjgxMTAvBgNVBAUTKDU2QzY5MzA1QjVFQkE1NDI1NTVEOEM3OEM1NjFBQjdB NkNEMUFBMkMwHhcNMjUxMTAzMDYxNjI2WhcNMjUxMTEwMDYxNjI2WjAYMRYwFAYD VQQDEw02OTA4NDhiYS1kZjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdQHUFlkwoJlOxmrDfWT0yOZHgJ5/MM7RLZzlFsIeAOuIdFVlaLNLm8+7ozI 2r0YCfKxy77UBiXrUh1hX723MSorGwryz8TLhIFCqCSQigVfKFo5DK7jUfyqEipM UzE0887moamvtoBpM5EGOp+y3oHWbo+iVn7WSL7hZrh0GBpoTKfamgAfclCHsuwm w/ApssLw6ukfl/3e+esUwPGOTHvUXvmg1HHahExkJSRSpV1FGSBo8eC5h0NpGIuG I0/nVMk9HTUcFHaQzf/4v5Owr0+gsV0jbTz7R/Cc5GXU2vyJmoIJpCRNBEkGdwsq z0sxcssaVK7hBZC6P0x/DFcPdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3+MgTW KZuDC3U3NqpmNVH9GJ5FMB8GA1UdIwQYMBaAFFbGkwW166VCVV2MeMVhq3ps0aos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUVGOC85Nzk5RTZEMEJC QzQxMUVGQjk4NUJFM0ZDNEY5QUUwMi9Wc2FUQmJYcnBVSlZYWXg0eFdHcmVtelJx aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzYVRCYlhycFVKVlhZeDR4V0dyZW16UnFpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUVGOC85Nzk5RTZEMEJCQzQxMUVGQjk4NUJFM0ZDNEY5QUUwMi9Wc2FUQmJYcnBV SlZYWXg0eFdHcmVtelJxaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDEfog8iRZpBI7vkelbKM+dA/WCQUeFwMMcqlWs9MYu5DEldsb8Wch /iAVfUWtL0ZKxNYdau0RH701BM0xZDpxbO+piMePVvq4YljMBPbKiIeE6J4uFcD2 8PXlUlhBxy128kNNWJPXVc4mUfDvzs/SYxU0mZipADkD+w0JbRqLP+JepWzbA3sN fYOJx8+e1Td4Ju/6Xe9ebKUVH909jrAAUSuua/cZkjhwOwstPTAYR5rcDF+VkG2C a/l7nG0i1cNrEgBF5+Mfh1bz+x9A3YLHmbkKrYC4LgiiYZw8M/Ka2E2TsE5swsuM SNvcIcYpAk5eKwtRcI5UzID2s6pcJHqT -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:42 2025 by rpki-client