$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json) Hash identifier: k1xsoaxBNojv24xrKWKdc6uJ2m9qGOMayYE6kY2QYas= Subject key identifier: 1A:23:31:8C:AA:33:F4:3D:E2:8F:C0:CE:B0:AE:CA:94:65:51:E8:60 Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft Manifest number: E1 Signing time: Mon 03 Nov 2025 05:50:43 +0000 Manifest this update: Mon 03 Nov 2025 05:50:42 +0000 Manifest next update: Mon 10 Nov 2025 05:50:42 +0000 Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: DV/jgcva1r1HVq4j6/QKid5/0r+4X/CQ4brsdTmo5PI=) 2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: dqu1pobFvfzlLwg/sGBEkfm71ncOuw3ix0UQH+itn8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Validity Not Before: Nov 3 05:50:42 2025 GMT Not After : Nov 10 05:50:42 2025 GMT Subject: CN=690842b3-797a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:a4:d8:76:40:82:34:c9:7c:41:df:a0:83: 96:d6:5b:0a:7a:15:44:89:42:ee:c1:6d:f3:1a:88: fc:ef:8c:99:8f:c4:91:11:2a:e3:c3:35:5f:d1:dd: 22:4c:59:89:f3:d0:c6:35:1f:67:9c:ce:12:8d:c1: ac:3d:da:ab:6c:69:07:96:a7:04:fa:53:bb:49:76: fc:9f:66:3c:cf:06:e6:c4:55:a4:34:6d:30:32:1d: e4:39:fc:0c:57:ab:a9:2a:ab:4f:e5:f5:67:f8:be: 71:c2:9f:78:da:cb:66:63:8f:1b:77:5b:0e:7a:f2: c8:4d:c6:7b:ad:27:07:d7:f8:66:b1:f5:41:b0:6f: 34:fe:ec:9e:46:d4:de:9c:c7:f7:26:f7:26:39:c7: 5b:0b:9f:36:f4:4d:8c:b8:f8:89:ba:15:79:40:4f: 3e:f4:1f:2b:f2:0e:fb:f3:08:e8:94:51:9a:55:66: be:e4:6c:05:4d:2d:f8:a7:d4:62:00:b1:39:0f:a3: d7:7d:ae:42:e5:ac:9e:a0:a1:04:83:c1:42:46:8a: 21:a9:8e:70:ff:d1:12:6a:43:51:e9:d1:38:0b:37: bd:31:cd:1b:87:55:92:d7:b4:5b:77:c9:69:f5:d9: b6:13:39:58:6c:85:60:b6:49:e8:dd:af:38:aa:ec: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:23:31:8C:AA:33:F4:3D:E2:8F:C0:CE:B0:AE:CA:94:65:51:E8:60 X509v3 Authority Key Identifier: keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:cb:12:83:08:3c:c6:fb:30:45:ba:d3:47:48:79:df:51:a6: 1f:1d:52:db:23:55:86:7b:5f:b4:25:71:cd:00:0e:97:a1:e6: ea:bd:87:dc:b0:1d:c7:b5:49:1c:a4:c5:a3:1d:eb:66:d1:6a: d3:cd:f3:7d:59:cb:ed:d1:08:cc:db:dd:e3:57:37:c8:c5:a9: d8:32:15:e9:4e:c8:9d:ef:ef:b6:46:24:18:e8:dc:1e:1b:98: 35:86:9e:86:74:8d:89:2a:5f:86:98:31:12:45:10:62:9f:ac: bf:39:6d:69:bb:b8:6a:ce:f2:b8:eb:fb:a5:8c:28:da:d4:6d: f6:2d:0a:7f:3e:35:cc:38:57:a5:fc:c6:31:73:18:ce:df:4b: 4d:70:f4:a3:51:f1:18:45:15:ca:95:f2:53:5c:8c:5b:c4:84: da:cb:4a:63:11:30:3a:f3:fa:ec:71:ec:a3:b5:f2:69:47:87: 1c:2f:f6:83:0e:4f:e7:52:39:b5:10:a5:18:35:75:91:65:0b: ea:82:4b:aa:43:b9:29:27:90:1e:94:b4:6b:9f:b5:ea:59:a4: 9b:13:d6:c6:cf:32:49:f3:a5:65:87:54:04:dd:95:f4:6e:0c: d0:5d:24:c2:7b:34:a5:0c:49:b9:0d:cb:c9:d3:8b:ea:63:1b: 42:7d:be:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDU1MDVBMUEyODc2NkRCMzE4MjJDNDYxNTg2RTY4RURE RjJBNzkzRkEwHhcNMjUxMTAzMDU1MDQyWhcNMjUxMTEwMDU1MDQyWjAYMRYwFAYD VQQDEw02OTA4NDJiMy03OTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoOk2HZAgjTJfEHfoIOW1lsKehVEiULuwW3zGoj874yZj8SRESrjwzVf0d0i TFmJ89DGNR9nnM4SjcGsPdqrbGkHlqcE+lO7SXb8n2Y8zwbmxFWkNG0wMh3kOfwM V6upKqtP5fVn+L5xwp942stmY48bd1sOevLITcZ7rScH1/hmsfVBsG80/uyeRtTe nMf3JvcmOcdbC5829E2MuPiJuhV5QE8+9B8r8g778wjolFGaVWa+5GwFTS34p9Ri ALE5D6PXfa5C5ayeoKEEg8FCRoohqY5w/9ESakNR6dE4Cze9Mc0bh1WS17Rbd8lp 9dm2EzlYbIVgtkno3a84quxJ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBojMYyq M/Q94o/AzrCuypRlUehgMB8GA1UdIwQYMBaAFFUFoaKHZtsxgixGFYbmjt3yp5P6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82QTBBQzgwMjY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6R0NMRVlWaHVhTzNmS25r X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRV2hvb2RtMnpHQ0xFWVZodWFPM2ZLbmtfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82QTBBQzgwMjY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6 R0NMRVlWaHVhTzNmS25rX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYyxKDCDzG+zBFutNHSHnfUaYfHVLbI1WGe1+0JXHNAA6XoebqvYfc sB3HtUkcpMWjHetm0WrTzfN9Wcvt0QjM293jVzfIxanYMhXpTsid7++2RiQY6Nwe G5g1hp6GdI2JKl+GmDESRRBin6y/OW1pu7hqzvK46/uljCja1G32LQp/PjXMOFel /MYxcxjO30tNcPSjUfEYRRXKlfJTXIxbxITay0pjETA68/rsceyjtfJpR4ccL/aD Dk/nUjm1EKUYNXWRZQvqgkuqQ7kpJ5AelLRrn7XqWaSbE9bGzzJJ86Vlh1QE3ZX0 bgzQXSTCezSlDEm5DcvJ04vqYxtCfb47 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:57 2025 by rpki-client