$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json) Hash identifier: t8FXQKzY4MNE38Z3Snxeo/+rJYCT0vLrBEwOpJBDTgk= Subject key identifier: F3:80:5A:C7:70:84:41:43:53:60:86:9E:A9:1B:D7:E9:DF:EE:D3:7C Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft Manifest number: 5A Signing time: Wed 05 Nov 2025 07:20:31 +0000 Manifest this update: Wed 05 Nov 2025 07:20:31 +0000 Manifest next update: Wed 12 Nov 2025 07:20:31 +0000 Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: Aez6cpJ5jO1PBU/YDsJ3BRnBLTk9KXkMqyfO60ljjN4=) 2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: 65bo4JvkKG1LiWSEJwhJil93bHGvwvvTBpuZe2kaGMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: Nov 5 07:20:31 2025 GMT Not After : Nov 12 07:20:31 2025 GMT Subject: CN=690afabf-9f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:b6:03:e7:85:ce:ab:7d:6c:5c:72:6b:da: 65:3d:e4:59:a9:d8:e9:e5:fe:5d:5b:5d:5b:30:14: ab:91:9d:bf:c3:ed:00:6f:4e:34:25:8b:05:93:92: b2:3d:4b:d6:61:bf:c0:88:82:5e:78:97:8f:62:f4: 1d:5b:b3:e0:ae:04:22:77:ca:da:dc:ca:79:2e:27: da:58:00:b2:7e:2c:b9:ff:30:42:cd:21:a2:fb:b8: cc:1d:84:a6:ca:b8:df:b3:57:af:c4:a3:18:c0:f0: 65:ad:af:86:ca:3a:db:8f:10:9b:8b:fe:64:dc:3d: 17:6c:56:b0:90:81:3b:b7:25:aa:d6:1f:6d:60:f0: 6f:a4:0b:9b:03:3a:4d:53:e5:0d:e5:46:ab:a5:89: 09:3d:cd:63:f5:c3:8a:63:33:d7:00:7a:f8:07:2a: 6f:4b:a9:5b:87:89:f2:0b:c1:8d:cd:85:23:8d:8e: 8e:b2:61:df:af:7a:64:54:58:8e:0c:d3:a3:69:45: 2e:af:8b:e3:03:52:ed:e7:46:c8:8c:cb:44:05:81: 0d:d0:2c:2f:e1:a0:10:6e:ac:d8:92:30:22:96:e4: 76:2d:6e:b7:e1:60:d6:f7:2c:83:1c:28:90:bc:3f: c9:6d:5e:07:a5:2c:4c:99:b3:e3:c3:bd:0e:7f:d6: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:80:5A:C7:70:84:41:43:53:60:86:9E:A9:1B:D7:E9:DF:EE:D3:7C X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:24:97:a3:be:b3:fb:da:96:0d:72:01:b3:90:25:6c:ba:08: b7:52:cf:c1:d5:7a:3b:ef:32:12:7e:f4:42:05:f9:2b:71:db: 64:d9:1a:ad:26:d6:85:a4:56:32:e6:6a:e5:5d:fa:ea:89:d1: c7:4c:34:d6:51:20:3b:a0:b6:32:d9:61:1a:2d:b2:ca:6a:78: 0c:9f:9f:59:1f:35:02:8e:bc:4d:52:a4:f6:ca:d0:9f:d6:11: 6a:22:f2:a6:1a:40:a3:7d:b9:6a:c9:a4:5f:0e:ce:e2:c7:d7: 86:52:3e:04:87:13:ca:8c:1d:d0:31:c0:68:8d:5b:84:a8:d8: 39:d4:de:eb:15:3b:56:95:ad:4f:0d:0f:48:36:67:7b:66:50: c7:1e:58:ef:f1:50:bc:7a:52:2c:74:73:bd:e9:4f:29:7d:a6: b7:27:c3:4b:3b:51:e2:92:2e:e6:78:f9:a9:92:32:39:c4:8c: 1c:12:54:6e:f0:a2:00:1d:8e:f9:63:a2:78:cb:d0:2e:62:7e: 0f:32:7e:8c:e4:3a:f3:d2:d8:6b:7d:33:bb:e0:2b:6c:9e:2f: e9:f1:cb:aa:52:84:9d:ea:45:2d:ae:ca:4f:d2:05:4f:64:e2: 34:5d:2c:a6:b4:22:55:75:a7:68:1f:3e:7f:a0:c6:65:0f:e4: d2:88:95:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4 RjM1Q0RDMzAeFw0yNTExMDUwNzIwMzFaFw0yNTExMTIwNzIwMzFaMBgxFjAUBgNV BAMTDTY5MGFmYWJmLTlmNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyq7YD54XOq31sXHJr2mU95Fmp2Onl/l1bXVswFKuRnb/D7QBvTjQliwWTkrI9 S9Zhv8CIgl54l49i9B1bs+CuBCJ3ytrcynkuJ9pYALJ+LLn/MELNIaL7uMwdhKbK uN+zV6/EoxjA8GWtr4bKOtuPEJuL/mTcPRdsVrCQgTu3JarWH21g8G+kC5sDOk1T 5Q3lRquliQk9zWP1w4pjM9cAevgHKm9LqVuHifILwY3NhSONjo6yYd+vemRUWI4M 06NpRS6vi+MDUu3nRsiMy0QFgQ3QLC/hoBBurNiSMCKW5HYtbrfhYNb3LIMcKJC8 P8ltXgelLEyZs+PDvQ5/1sifAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU84Bax3CE QUNTYIaeqRvX6d/u03wwHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzFFQzcyRjIyMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZn ZjZLeVdIemUzaVk4MXpjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFAkl6O+s/valg1yAbOQJWy6CLdSz8HVejvvMhJ+9EIF+Stx22TZGq0m 1oWkVjLmauVd+uqJ0cdMNNZRIDugtjLZYRotsspqeAyfn1kfNQKOvE1SpPbK0J/W EWoi8qYaQKN9uWrJpF8OzuLH14ZSPgSHE8qMHdAxwGiNW4So2DnU3usVO1aVrU8N D0g2Z3tmUMceWO/xULx6Uix0c73pTyl9prcnw0s7UeKSLuZ4+amSMjnEjBwSVG7w ogAdjvljonjL0C5ifg8yfozkOvPS2Gt9M7vgK2yeL+nxy6pShJ3qRS2uyk/SBU9k 4jRdLKa0IlV1p2gfPn+gxmUP5NKIlVw= -----END CERTIFICATE-----Generated at Thu Nov 6 06:19:15 2025 by rpki-client