$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: QE4Uxn1TjqFgf6P0ofEroleuxWOERzLwVHkYG/QNCbo= Subject key identifier: C2:FF:B7:FD:48:CF:26:AA:CF:04:34:60:9D:2A:85:85:80:3A:1C:FB Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: CA Signing time: Thu 23 Oct 2025 08:20:16 +0000 Manifest this update: Thu 23 Oct 2025 08:20:15 +0000 Manifest next update: Thu 30 Oct 2025 08:20:15 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: IjjLHChHmknaA1ZXN7Nn7TvajYpQllvyUcBIlCXneJo=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: hQ+Gx7Vv9Bqml1yrkYB3EZZ2s/v+ssA89alsVLHowuc=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: 3sSuU9QTymYHLk6nKJf8ZY9J70HL/WV6OzgAH7Dy+z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 08:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Oct 23 08:20:15 2025 GMT Not After : Oct 30 08:20:15 2025 GMT Subject: CN=68f9e540-d0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:0a:14:05:e3:26:8b:dd:35:d1:9a:28:3b: 75:25:c2:28:70:ce:47:fe:39:d5:00:1b:e2:2c:a1: 06:68:f8:4c:12:cd:45:c4:92:41:7d:13:b2:c8:1f: d8:a7:81:e6:8b:c7:57:aa:b7:ff:70:65:6d:34:3d: 01:cb:e9:cb:17:82:90:f1:5c:03:20:11:1b:ce:52: 14:6b:30:43:19:41:8f:10:e6:fa:c7:0e:f2:4e:7e: 9c:58:cf:b0:ad:01:b0:dc:8e:bd:4a:b5:3d:43:78: 86:61:39:ea:24:24:13:9a:ec:4b:eb:e9:0b:85:ef: 50:b1:d3:e6:8f:71:5c:e2:5e:6f:60:77:19:13:31: 47:73:d3:f7:f1:87:e8:05:56:76:71:d7:e1:e4:c7: d7:f3:f4:3a:8a:5e:10:09:aa:b9:f8:31:f5:39:6d: a7:67:79:d1:bb:fc:0c:b5:01:7f:a7:28:fd:0a:90: 71:2e:f2:1b:66:a9:d3:ad:d6:ae:70:df:00:0e:14: f1:1b:74:32:ce:c5:57:27:6d:48:a8:f6:0d:25:c2: 18:88:47:1a:fe:e7:80:b1:b3:e6:aa:e3:77:99:f1: fa:05:fc:4e:99:ab:46:12:a6:56:92:91:98:98:90: 55:14:59:bd:9b:ce:12:cb:b1:f9:7d:25:21:96:fe: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FF:B7:FD:48:CF:26:AA:CF:04:34:60:9D:2A:85:85:80:3A:1C:FB X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e8:a7:ff:46:a3:10:d6:19:7a:b2:1b:18:02:08:79:63:0e: e7:f2:0b:d5:f7:93:25:40:5c:07:72:7c:9a:82:58:5a:7c:dc: ed:2a:86:a9:2c:1d:b7:f4:31:bf:a9:c4:15:be:bb:82:b7:98: f0:ce:00:7e:4e:3d:9b:7c:9d:c0:23:66:f6:7e:dd:79:b2:31: 47:36:c7:4e:91:0f:54:ac:3c:83:a6:80:f0:99:35:e1:8f:12: c6:70:c2:d7:92:ba:94:f9:68:89:42:f1:28:8a:75:8b:cb:99: 67:5b:6a:21:be:06:4a:1d:64:08:9c:90:05:0e:81:09:31:46: 06:03:c5:4e:e7:e7:28:d8:97:c1:39:38:10:e9:93:d5:1f:c9: 7d:55:47:47:da:84:20:80:14:22:17:68:79:88:94:21:54:5d: 8b:ae:45:4c:92:fb:27:d4:37:b6:1e:13:78:5b:1d:4e:54:85: eb:0c:05:db:2f:ef:9e:82:90:de:4e:3a:5c:1f:cb:7b:08:42: e3:68:d3:d3:49:7f:ca:bf:f8:1b:81:4c:ca:9a:46:8e:94:1e: 0e:31:38:0c:02:50:24:3a:35:e4:31:01:23:c7:29:ad:24:4b: bf:ff:ce:ea:39:51:46:0e:d9:6b:91:fc:3d:4a:25:7d:63:9c: 79:7b:0a:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RkExMTAvBgNVBAUTKDU1MzNBN0M1N0JGNERCMUU1MzhGOUU3N0UwQjQ4NjhC OEY5MEM1ODIwHhcNMjUxMDIzMDgyMDE1WhcNMjUxMDMwMDgyMDE1WjAYMRYwFAYD VQQDEw02OGY5ZTU0MC1kMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvsKFAXjJovdNdGaKDt1JcIocM5H/jnVABviLKEGaPhMEs1FxJJBfROyyB/Y p4Hmi8dXqrf/cGVtND0By+nLF4KQ8VwDIBEbzlIUazBDGUGPEOb6xw7yTn6cWM+w rQGw3I69SrU9Q3iGYTnqJCQTmuxL6+kLhe9QsdPmj3Fc4l5vYHcZEzFHc9P38Yfo BVZ2cdfh5MfX8/Q6il4QCaq5+DH1OW2nZ3nRu/wMtQF/pyj9CpBxLvIbZqnTrdau cN8ADhTxG3QyzsVXJ21IqPYNJcIYiEca/ueAsbPmquN3mfH6BfxOmatGEqZWkpGY mJBVFFm9m84Sy7H5fSUhlv6+NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFML/t/1I zyaqzwQ0YJ0qhYWAOhz7MB8GA1UdIwQYMBaAFFUzp8V79NseU4+ed+C0houPkMWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGQS85QzUyQTdFODg0 QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4NVRqNTUzNExTR2k0LVF4 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGQS85QzUyQTdFODg0QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4 NVRqNTUzNExTR2k0LVF4WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj6Kf/RqMQ1hl6shsYAgh5Yw7n8gvV95MlQFwHcnyaglhafNztKoap LB239DG/qcQVvruCt5jwzgB+Tj2bfJ3AI2b2ft15sjFHNsdOkQ9UrDyDpoDwmTXh jxLGcMLXkrqU+WiJQvEoinWLy5lnW2ohvgZKHWQInJAFDoEJMUYGA8VO5+co2JfB OTgQ6ZPVH8l9VUdH2oQggBQiF2h5iJQhVF2LrkVMkvsn1De2HhN4Wx1OVIXrDAXb L++egpDeTjpcH8t7CELjaNPTSX/Kv/gbgUzKmkaOlB4OMTgMAlAkOjXkMQEjxymt JEu//87qOVFGDtlrkfw9SiV9Y5x5ewpM -----END CERTIFICATE-----Generated at Fri Oct 24 20:50:27 2025 by rpki-client