$ rpki-client -vvf rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft File: VU0O_yINZrbppAkPDcy6milc3bU.mft (raw, json) Hash identifier: BMSSKBc/Jsq2LXdYOrHJG1iTFq0qYzo3cxJViBaFYrs= Subject key identifier: 91:8A:84:70:A7:21:3B:DC:3C:32:FE:B3:AB:CE:3D:6C:A3:46:8D:77 Authority key identifier: 55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5 Certificate issuer: /CN=A914A514/serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft Manifest number: 68 Signing time: Wed 05 Nov 2025 07:13:37 +0000 Manifest this update: Wed 05 Nov 2025 07:13:36 +0000 Manifest next update: Wed 12 Nov 2025 07:13:36 +0000 Files and hashes: 1: VU0O_yINZrbppAkPDcy6milc3bU.crl (hash: zg17KZ4FdUnvLKQ7w8nXyQWeuovoI5Bom2Wg69znTR4=) 2: 4499D9921F4A11F0AF06577CC4F9AE02.roa (hash: 22OD3LRGDCNECXd/CFSHge2YqhsRF1PsexljEXFJrwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A514, serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5 Validity Not Before: Nov 5 07:13:36 2025 GMT Not After : Nov 12 07:13:36 2025 GMT Subject: CN=690af921-9fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:93:07:47:6a:f8:d2:eb:64:97:84:6b:2f:85: 51:8e:3f:55:cb:7b:f9:a7:7f:00:67:f9:3a:ea:52: 72:dc:80:3b:04:5c:76:76:6d:67:96:39:0c:16:e7: 23:3a:bf:ed:83:b9:f3:91:62:4b:fd:b8:31:7b:bf: c6:de:f5:bb:c2:62:be:2e:3b:d5:cf:3a:42:78:29: df:8f:4e:54:76:50:52:22:14:7d:b8:5e:36:34:33: 59:05:86:1f:17:7e:fc:e4:ed:f0:3c:98:fd:68:91: 7a:6b:76:9c:80:b1:6d:18:81:56:ce:f1:75:59:eb: 95:c9:c3:03:7b:4c:ba:57:94:9e:ca:b2:13:87:26: 10:a6:46:c1:59:b3:75:55:49:25:d2:9f:c5:e0:ef: e2:67:d8:54:a4:bb:09:34:d7:13:8c:34:63:89:54: e9:89:12:4d:7e:0f:0a:e0:3b:1a:61:23:d8:2e:a6: c8:59:84:09:65:83:38:c0:45:8e:23:29:38:69:76: 65:59:92:f7:b1:bd:c6:88:2e:1d:d9:c1:5c:81:d8: 4b:48:76:1e:9c:8e:70:aa:c4:4d:78:8e:05:60:b2: 3a:f6:37:bf:1c:9d:3c:f9:64:b8:18:10:ad:f3:32: 6d:43:63:94:4a:ea:43:dd:57:3a:c1:ca:f4:9a:dc: 62:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8A:84:70:A7:21:3B:DC:3C:32:FE:B3:AB:CE:3D:6C:A3:46:8D:77 X509v3 Authority Key Identifier: keyid:55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b3:34:38:d7:e9:f2:36:0f:c3:6b:7c:19:a6:bc:fa:de:1b: 31:39:11:f9:73:ea:30:04:56:97:33:9c:97:1f:5f:2d:2e:c6: 62:a5:c9:03:35:9a:57:1d:05:98:40:3f:00:de:67:60:13:5e: c4:aa:bf:f0:4b:9a:5f:79:16:0d:f0:75:bf:c8:8b:94:d9:71: 61:52:34:d8:b0:a0:65:43:64:ec:90:7f:e5:cf:c3:a6:6c:fa: 76:4d:64:38:80:28:c5:9e:6b:f7:0b:b8:d0:6b:a7:d4:52:02: f1:5c:fa:c7:27:ad:a1:45:1c:6a:e4:5c:62:75:a5:03:48:0d: a1:32:3e:6d:fa:30:83:a2:f9:ff:42:7e:9a:14:54:7d:4a:fe: 01:1f:92:3e:7a:1e:a4:ea:d3:0d:80:29:c6:66:04:be:64:00: ec:a5:8a:9b:c3:67:cd:34:e0:f1:71:f1:dc:fa:6e:55:68:5f: 7c:79:a1:b0:dc:9e:99:13:d7:d0:ac:d0:58:4d:68:ae:8b:23: 26:04:94:31:d0:cb:4e:f3:ba:6b:54:e7:bf:fe:e7:e7:f8:1a: 37:53:34:fa:58:99:f2:d3:1a:d4:f6:af:76:58:98:ca:84:e1: 3b:87:af:ae:85:b4:d1:a3:c8:10:9e:38:5c:8b:5a:c5:1a:45: 7f:4b:66:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTUxNDExMC8GA1UEBRMoNTU0RDBFRkYyMjBENjZCNkU5QTQwOTBGMERDQ0JBOUEy OTVDRERCNTAeFw0yNTExMDUwNzEzMzZaFw0yNTExMTIwNzEzMzZaMBgxFjAUBgNV BAMTDTY5MGFmOTIxLTlmYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmkwdHavjS62SXhGsvhVGOP1XLe/mnfwBn+TrqUnLcgDsEXHZ2bWeWOQwW5yM6 v+2DufORYkv9uDF7v8be9bvCYr4uO9XPOkJ4Kd+PTlR2UFIiFH24XjY0M1kFhh8X fvzk7fA8mP1okXprdpyAsW0YgVbO8XVZ65XJwwN7TLpXlJ7KshOHJhCmRsFZs3VV SSXSn8Xg7+Jn2FSkuwk01xOMNGOJVOmJEk1+DwrgOxphI9gupshZhAllgzjARY4j KThpdmVZkvexvcaILh3ZwVyB2EtIdh6cjnCqxE14jgVgsjr2N78cnTz5ZLgYEK3z Mm1DY5RK6kPdVzrByvSa3GK9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkYqEcKch O9w8Mv6zq849bKNGjXcwHwYDVR0jBBgwFoAUVU0O/yINZrbppAkPDcy6milc3bUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTE0LzNGRjI1QUZBMUY0 OTExRjA5NkY3QUU3QUM0RjlBRTAyL1ZVME9feUlOWnJicHBBa1BEY3k2bWlsYzNi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlUwT195SU5acmJwcEFrUERjeTZtaWxjM2JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB NTE0LzNGRjI1QUZBMUY0OTExRjA5NkY3QUU3QUM0RjlBRTAyL1ZVME9feUlOWnJi cHBBa1BEY3k2bWlsYzNiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJOzNDjX6fI2D8NrfBmmvPreGzE5Eflz6jAEVpcznJcfXy0uxmKlyQM1 mlcdBZhAPwDeZ2ATXsSqv/BLml95Fg3wdb/Ii5TZcWFSNNiwoGVDZOyQf+XPw6Zs +nZNZDiAKMWea/cLuNBrp9RSAvFc+scnraFFHGrkXGJ1pQNIDaEyPm36MIOi+f9C fpoUVH1K/gEfkj56HqTq0w2AKcZmBL5kAOylipvDZ8004PFx8dz6blVoX3x5obDc npkT19Cs0FhNaK6LIyYElDHQy07zumtU57/+5+f4GjdTNPpYmfLTGtT2r3ZYmMqE 4TuHr66FtNGjyBCeOFyLWsUaRX9LZlw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:40 2025 by rpki-client