$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: HmyE20PMzE3nJUREz0KNA2E+Mu29nEokiFnWr9NqH5c= Subject key identifier: 40:09:BB:93:08:21:9A:2D:90:47:99:D5:5B:FE:3F:29:43:11:2F:1E Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: 0138 Signing time: Mon 03 Nov 2025 04:29:53 +0000 Manifest this update: Mon 03 Nov 2025 04:29:53 +0000 Manifest next update: Mon 10 Nov 2025 04:29:53 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: SfWcbDz4Vb3tyj2j6MO9++ih0IU8VyCAPeZPLHHCH6Y=) 2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Nov 3 04:29:53 2025 GMT Not After : Nov 10 04:29:53 2025 GMT Subject: CN=69082fc1-a40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:e6:29:6a:37:9f:11:88:e3:79:8d:f6:66: 2b:98:ac:29:59:a3:2d:2e:ca:bd:30:72:29:77:85: 39:a8:f4:a3:42:ba:09:ab:31:ee:49:ff:b0:31:82: 4c:16:4c:fd:dd:4b:ab:01:ae:da:05:9a:e4:ce:e2: 9f:a9:2d:fa:bb:39:04:25:ce:2c:52:85:a4:b1:97: 36:8b:e1:d7:25:2c:0b:3e:99:17:27:ae:96:95:9e: 5e:94:5f:62:09:62:04:f0:be:9e:06:f8:93:52:a7: 2b:e5:7d:20:7c:a1:94:90:a2:66:ea:9a:82:0e:8f: 68:bb:a0:37:e7:db:d4:1b:cd:23:38:c5:a0:10:ce: 49:b4:4a:f0:b7:3c:3e:00:55:56:1c:96:94:74:6c: 23:da:96:8d:1a:57:ae:eb:ef:e9:4d:32:2c:41:90: 95:7d:d0:38:bc:04:38:3d:da:76:46:bc:af:f5:c8: 3e:1e:96:4c:09:4c:4c:26:2d:ee:42:b1:53:68:e8: 8a:d2:11:39:58:df:0f:fa:65:bf:bd:24:18:69:fb: 3d:83:89:fe:13:2b:83:72:48:bd:86:06:2a:88:22: f3:b6:b7:c6:2c:be:e9:38:7c:54:86:3b:b5:3e:22: b2:f0:51:35:ad:ea:9f:93:b9:64:8a:1f:c6:64:28: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:09:BB:93:08:21:9A:2D:90:47:99:D5:5B:FE:3F:29:43:11:2F:1E X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:5f:28:6e:bf:60:6a:6a:13:cb:4e:70:46:1d:ef:58:6e:dd: 5c:45:ae:8b:7f:d8:41:60:85:0f:e9:3e:27:22:ad:90:1c:cb: 6a:9d:bf:64:d8:75:f6:4a:cc:a9:de:2d:7f:9e:91:82:3f:5b: 9f:50:3d:60:10:a6:71:93:9e:a8:ae:56:10:5a:40:a2:e2:7b: 96:bf:c5:52:1a:1e:52:da:b1:26:a5:ac:8b:31:21:31:49:f8: 23:a2:37:38:75:3f:db:b0:95:b9:94:8d:1d:50:97:c7:6a:9e: e4:10:0d:ca:24:b9:79:05:97:25:a1:2c:17:2e:c3:c5:1d:55: 8d:c2:4e:92:91:00:a8:f2:34:d1:9b:ec:7c:f4:d1:5a:ee:12: ae:95:20:90:9a:94:4b:95:1b:67:38:48:c8:56:c7:e5:3c:5d: d6:ca:ef:92:ec:86:78:e7:c5:3b:d8:91:8b:41:80:6c:1a:ae: 87:fb:16:76:a8:31:54:dd:e9:d9:c0:b3:d0:9b:87:7e:34:de: 8c:b5:c2:66:e4:3d:86:80:45:22:06:a1:f1:4a:ec:39:5c:2d: fc:64:71:da:01:cb:85:cc:09:d4:7a:e1:a0:61:8e:31:a1:b5: 39:de:a7:5c:68:1a:35:d5:f6:a9:78:54:cb:e6:d0:d3:c1:18: 15:48:3b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUxMTAzMDQyOTUzWhcNMjUxMTEwMDQyOTUzWjAYMRYwFAYD VQQDEw02OTA4MmZjMS1hNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArljmKWo3nxGI43mN9mYrmKwpWaMtLsq9MHIpd4U5qPSjQroJqzHuSf+wMYJM Fkz93UurAa7aBZrkzuKfqS36uzkEJc4sUoWksZc2i+HXJSwLPpkXJ66WlZ5elF9i CWIE8L6eBviTUqcr5X0gfKGUkKJm6pqCDo9ou6A359vUG80jOMWgEM5JtErwtzw+ AFVWHJaUdGwj2paNGleu6+/pTTIsQZCVfdA4vAQ4Pdp2Rryv9cg+HpZMCUxMJi3u QrFTaOiK0hE5WN8P+mW/vSQYafs9g4n+EyuDcki9hgYqiCLztrfGLL7pOHxUhju1 PiKy8FE1reqfk7lkih/GZCgtjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAJu5MI IZotkEeZ1Vv+PylDES8eMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1X UVdVcFVIOWJ5cHdBNFJnYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnXyhuv2BqahPLTnBGHe9Ybt1cRa6Lf9hBYIUP6T4nIq2QHMtqnb9k 2HX2Ssyp3i1/npGCP1ufUD1gEKZxk56orlYQWkCi4nuWv8VSGh5S2rEmpayLMSEx Sfgjojc4dT/bsJW5lI0dUJfHap7kEA3KJLl5BZcloSwXLsPFHVWNwk6SkQCo8jTR m+x89NFa7hKulSCQmpRLlRtnOEjIVsflPF3Wyu+S7IZ458U72JGLQYBsGq6H+xZ2 qDFU3enZwLPQm4d+NN6MtcJm5D2GgEUiBqHxSuw5XC38ZHHaAcuFzAnUeuGgYY4x obU53qdcaBo11fapeFTL5tDTwRgVSDty -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:14 2025 by rpki-client