$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: E/BOswzv3l92q/u4QcBqoZ5aS4YXGpKloPbRQ8Wb+qM= Subject key identifier: 0B:FA:02:E6:CE:F7:BA:68:B5:D8:4A:F8:50:86:23:33:9C:A0:32:92 Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0B8F Signing time: Sun 02 Nov 2025 18:59:37 +0000 Manifest this update: Sun 02 Nov 2025 18:59:37 +0000 Manifest next update: Sun 09 Nov 2025 18:59:37 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: TYyF+eYxN/xc+lzhlbXo4uFcfw9k+tpkaUy6jvTWoLU=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: MAWDNXgpu9PgJn7Gnnkwa2ICesKD1B+IPcDJf1k8UoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2967 (0xb97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: Nov 2 18:59:37 2025 GMT Not After : Nov 9 18:59:37 2025 GMT Subject: CN=6907aa19-6b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:6f:bc:69:d3:6e:76:e1:0c:51:c6:bc:43: 32:06:b1:5e:01:f9:5e:43:ad:35:88:79:23:86:9f: af:70:08:5f:99:bb:e5:3a:16:58:4a:da:bf:40:69: 9f:69:08:ac:2b:b6:25:69:a8:1b:02:f2:24:ec:9a: fc:4a:79:e6:52:c3:41:c6:61:b8:c6:ec:a4:f3:e1: 60:ce:05:29:5d:c8:a0:cb:9a:e3:42:70:f4:4d:21: 44:d9:a0:fe:e3:d4:34:c0:a7:b2:6a:58:93:8a:c9: ae:b4:bf:a0:1b:58:90:09:8e:4c:49:71:af:d6:bb: 9c:be:ac:3d:dc:30:16:f6:c1:24:69:f6:3a:18:9e: 21:3a:f9:86:c6:23:a3:35:09:7e:d5:84:6d:bc:cc: 33:4f:ca:e0:f0:15:36:78:8c:e7:16:97:6a:94:3d: 6c:4e:bb:f8:ef:11:84:d4:54:12:ec:86:1b:4f:d0: b3:7c:2b:22:a7:61:8f:86:ba:67:73:ee:8a:1e:1e: 15:73:0c:3f:b9:46:cf:4b:c7:6f:54:fd:17:81:db: f9:f9:32:5b:29:60:da:66:9e:cb:c4:dd:49:8c:e3: c3:dd:02:fd:59:a6:8f:c5:4e:5c:8e:99:b0:f7:54: 7f:e3:48:12:43:f6:e2:5f:21:dd:06:25:7f:dd:99: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FA:02:E6:CE:F7:BA:68:B5:D8:4A:F8:50:86:23:33:9C:A0:32:92 X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:85:00:ae:42:bd:4c:86:8d:cc:70:19:b7:08:f8:84:df:c5: 60:92:4d:09:8f:4b:b6:3f:bc:8b:49:d8:6b:9c:ac:23:11:86: 2b:9a:00:4e:66:24:24:b5:c0:43:a4:7b:93:c5:09:50:da:71: e4:75:4f:0c:0d:0f:5b:30:0b:f9:c2:87:a9:42:e2:ac:3e:95: af:1f:89:58:05:0f:45:32:f8:a3:c2:8d:1c:81:b2:4e:86:24: 17:ae:6d:07:9c:db:af:fd:bb:56:ee:c7:78:d5:4c:78:6d:1b: 11:b9:f6:08:a6:d5:41:0f:43:cc:2f:33:b1:b5:12:ed:12:17: ea:f8:56:71:96:7f:6d:3a:ea:d5:14:33:6f:aa:f4:c2:b1:67: 00:1a:d2:b5:22:d0:9d:ae:a8:7d:5e:89:54:b9:e7:69:24:6e: d7:1f:bc:99:f3:4a:a8:f4:7e:14:d3:30:4f:f6:68:02:6f:c5: 2c:a7:98:5f:6c:b3:66:46:df:4e:b7:b0:ab:29:04:6e:3e:a1: b8:f7:19:ec:f1:58:6d:02:ee:1d:59:26:23:a1:38:f8:05:79: 81:ab:82:fc:ac:f6:30:67:95:09:4b:d5:df:48:a0:8b:4a:86: d0:2a:b2:9d:5c:cf:d5:65:17:65:a9:2a:4a:98:c6:2c:40:93: 61:d2:71:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjUxMTAyMTg1OTM3WhcNMjUxMTA5MTg1OTM3WjAYMRYwFAYD VQQDEw02OTA3YWExOS02YjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9lvvGnTbnbhDFHGvEMyBrFeAfleQ601iHkjhp+vcAhfmbvlOhZYStq/QGmf aQisK7YlaagbAvIk7Jr8SnnmUsNBxmG4xuyk8+FgzgUpXcigy5rjQnD0TSFE2aD+ 49Q0wKeyaliTismutL+gG1iQCY5MSXGv1rucvqw93DAW9sEkafY6GJ4hOvmGxiOj NQl+1YRtvMwzT8rg8BU2eIznFpdqlD1sTrv47xGE1FQS7IYbT9CzfCsip2GPhrpn c+6KHh4Vcww/uUbPS8dvVP0Xgdv5+TJbKWDaZp7LxN1JjOPD3QL9WaaPxU5cjpmw 91R/40gSQ/biXyHdBiV/3ZlYPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAv6AubO 97potdhK+FCGIzOcoDKSMB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEhQCuQr1Mho3McBm3CPiE38Vgkk0Jj0u2P7yLSdhrnKwjEYYrmgBO ZiQktcBDpHuTxQlQ2nHkdU8MDQ9bMAv5woepQuKsPpWvH4lYBQ9FMvijwo0cgbJO hiQXrm0HnNuv/btW7sd41Ux4bRsRufYIptVBD0PMLzOxtRLtEhfq+FZxln9tOurV FDNvqvTCsWcAGtK1ItCdrqh9XolUuedpJG7XH7yZ80qo9H4U0zBP9mgCb8Usp5hf bLNmRt9Ot7CrKQRuPqG49xns8VhtAu4dWSYjoTj4BXmBq4L8rPYwZ5UJS9XfSKCL SobQKrKdXM/VZRdlqSpKmMYsQJNh0nEl -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:59 2025 by rpki-client