$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: 5O53K0VLhGebeeQf61qTSCmqay+k3GLnhcVwERjnuqc= Subject key identifier: 4D:5B:88:BA:C7:82:EB:BC:42:9E:01:39:DC:58:BF:6D:A6:58:F6:12 Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 046C Signing time: Wed 05 Nov 2025 00:14:35 +0000 Manifest this update: Wed 05 Nov 2025 00:14:34 +0000 Manifest next update: Wed 12 Nov 2025 00:14:34 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: UsA8GUGTUt8nu6ESiNFN933HCVBkJZ8/Sfn2kaelhjs=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: w5bL3BxYC2VJUK/MoXPR18n/PN4tqZHifWiPk20fkzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: Nov 5 00:14:34 2025 GMT Not After : Nov 12 00:14:34 2025 GMT Subject: CN=690a96eb-f762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:44:ff:96:ca:08:b4:62:91:34:8d:e4:9b: f8:48:5e:8b:f7:ab:f7:22:31:51:5f:69:d9:10:18: 8a:fe:85:af:98:3c:63:3e:13:d8:26:c8:f6:5d:03: 3f:1b:cb:69:4b:69:f1:7a:df:cb:42:bc:55:38:8c: bc:e2:d7:0a:2e:56:e8:5e:c2:e5:dc:88:a7:fe:95: 0e:06:27:11:dc:00:02:17:51:96:90:b9:22:25:e3: 90:d0:2c:01:91:76:61:73:6b:19:24:a1:4b:71:81: 83:8c:23:1c:90:95:86:f3:63:14:fb:82:59:26:27: f5:a9:21:43:f7:76:ca:31:fc:ae:8b:c7:fd:35:f4: bf:7b:3d:74:fd:d6:07:5e:07:2a:f2:94:21:a2:f0: 06:5c:d6:ee:42:f5:80:45:70:b8:ff:8e:7b:db:65: bf:3b:a5:41:af:3e:cb:8e:98:41:e3:31:d8:be:a1: 8a:61:ea:8d:0a:1d:2f:4e:d0:c0:5e:cb:89:2e:ab: d3:d1:88:99:3e:65:bb:ff:5b:ff:06:26:f7:0e:24: 4e:f7:84:cd:62:f0:b8:ed:12:e2:09:8f:6b:b9:dd: 62:91:70:52:db:dc:1a:32:fd:c0:e8:cf:d8:ee:75: 40:db:fd:68:f6:1c:a2:87:a9:16:f0:f4:18:db:ff: 11:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5B:88:BA:C7:82:EB:BC:42:9E:01:39:DC:58:BF:6D:A6:58:F6:12 X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:80:80:a7:be:38:4b:36:0d:d9:fc:ba:04:dd:36:a9:08:83: 84:88:0f:af:17:e6:ca:cd:3a:c3:c8:48:a7:31:46:d9:25:eb: d1:c7:44:e1:13:ee:4d:24:f0:47:45:7f:ef:32:ae:4e:2c:d1: 0b:6f:00:40:9a:39:1d:f8:eb:cf:77:b9:4f:ae:6c:fb:8b:c0: 66:c9:7a:31:14:bd:2b:09:77:dc:65:7c:d0:7c:19:22:ff:bf: 23:b5:b6:3e:7d:b0:d7:c4:05:b7:5e:38:ff:36:16:a3:4c:41: 40:88:60:dd:b3:12:68:a7:29:ca:b8:32:bc:c3:f2:c8:39:86: 29:f3:c7:25:2a:e1:51:06:a2:9e:e4:0d:12:b4:b2:1e:94:fc: d2:01:0e:4b:0e:b9:4f:2a:cd:a4:e1:eb:29:e0:9d:2b:7e:0d: a2:8c:09:e1:53:25:a1:61:7b:07:1a:a5:88:6f:0c:88:c2:af: 74:1c:2d:74:61:ab:fc:ad:63:60:38:a0:6d:26:fe:ad:f5:3f: 52:dd:e2:f0:ce:21:ac:e3:fe:79:3b:7c:61:eb:44:43:36:99: 22:c4:b6:cd:47:74:ad:8d:16:6b:f5:e8:a9:b7:fe:78:40:83: 35:6e:9c:0b:00:a7:36:ab:71:bc:bb:af:ba:85:be:8f:44:49: 1e:7a:29:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjUxMTA1MDAxNDM0WhcNMjUxMTEyMDAxNDM0WjAYMRYwFAYD VQQDEw02OTBhOTZlYi1mNzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sVE/5bKCLRikTSN5Jv4SF6L96v3IjFRX2nZEBiK/oWvmDxjPhPYJsj2XQM/ G8tpS2nxet/LQrxVOIy84tcKLlboXsLl3Iin/pUOBicR3AACF1GWkLkiJeOQ0CwB kXZhc2sZJKFLcYGDjCMckJWG82MU+4JZJif1qSFD93bKMfyui8f9NfS/ez10/dYH Xgcq8pQhovAGXNbuQvWARXC4/45722W/O6VBrz7LjphB4zHYvqGKYeqNCh0vTtDA XsuJLqvT0YiZPmW7/1v/Bib3DiRO94TNYvC47RLiCY9rud1ikXBS29waMv3A6M/Y 7nVA2/1o9hyih6kW8PQY2/8R5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1biLrH guu8Qp4BOdxYv22mWPYSMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAgICnvjhLNg3Z/LoE3TapCIOEiA+vF+bKzTrDyEinMUbZJevRx0Th E+5NJPBHRX/vMq5OLNELbwBAmjkd+OvPd7lPrmz7i8BmyXoxFL0rCXfcZXzQfBki /78jtbY+fbDXxAW3Xjj/NhajTEFAiGDdsxJopynKuDK8w/LIOYYp88clKuFRBqKe 5A0StLIelPzSAQ5LDrlPKs2k4esp4J0rfg2ijAnhUyWhYXsHGqWIbwyIwq90HC10 Yav8rWNgOKBtJv6t9T9S3eLwziGs4/55O3xh60RDNpkixLbNR3StjRZr9eipt/54 QIM1bpwLAKc2q3G8u6+6hb6PREkeeinm -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:46 2025 by rpki-client