$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: f2rUYZNKDhX6e7ggne2ZAU05YBXjnusHlmTF2EX7Km8= Subject key identifier: AC:99:5A:67:5B:FD:A7:87:5B:6C:1F:4A:9C:DC:48:A6:A1:8C:89:27 Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 01AB Signing time: Wed 05 Nov 2025 03:25:44 +0000 Manifest this update: Wed 05 Nov 2025 03:25:44 +0000 Manifest next update: Wed 12 Nov 2025 03:25:44 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: +ndYcjYTQedKA7fG8aN9cljLhP3dGyFK8Qh+sFPXTAs=) 2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: W2GUCwLH1zO0HSDwZ2rzdxgCK5Z2LezwQn+GLI/pJ/g=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: inmnpyaDxDWlLYNelzuadkNEoddsaWxx/qXH6LYAyxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: Nov 5 03:25:44 2025 GMT Not After : Nov 12 03:25:44 2025 GMT Subject: CN=690ac3b8-f5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:06:d6:49:87:95:6b:62:03:4a:03:4d:9b: 90:dc:2e:80:40:15:81:9d:ba:54:c6:1c:e3:5a:70: cd:42:7a:e3:ce:37:7e:65:9d:e2:e1:04:b3:8f:a9: cb:da:41:e7:61:d8:83:e5:00:28:86:3f:5c:60:5c: 25:cf:5b:1e:ab:9d:d0:5f:df:40:65:b1:bb:1a:1d: 17:80:66:ef:f8:ee:6a:4f:2a:14:44:64:4e:c7:a6: c6:13:ae:5a:87:5d:0e:12:2d:f1:58:0f:56:e7:61: f5:33:d8:98:46:6f:29:e1:be:14:91:a8:09:91:37: eb:12:79:b7:20:0e:70:b3:b9:e6:62:cb:ca:9d:99: 3e:c0:08:82:ad:3d:6d:bb:55:2c:9f:55:19:1b:3f: a5:92:97:08:db:9e:6c:41:66:f8:e0:42:ce:af:db: bf:00:ea:9d:71:41:e2:53:29:13:03:7c:83:73:1d: 15:79:10:92:57:80:29:ee:b7:a1:ad:b5:3d:ef:0a: 5f:a7:3f:c7:a9:e1:26:99:a9:40:0b:ea:d5:0a:88: fc:e6:a9:ec:9f:17:fe:04:43:f0:4f:a5:49:b5:78: 1d:26:2c:fd:83:50:f2:86:e0:29:a5:cf:4f:5a:93: 4c:36:22:60:81:d8:33:1f:6a:08:3b:88:b0:bc:91: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:99:5A:67:5B:FD:A7:87:5B:6C:1F:4A:9C:DC:48:A6:A1:8C:89:27 X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:78:fb:31:8c:97:2c:7d:26:fa:14:19:d5:ed:69:cb:ee:14: 05:93:42:23:6f:65:43:17:15:b7:23:b8:e3:45:3a:a2:c1:e6: d0:fd:fe:ea:b0:6f:a8:e0:4a:73:e9:d7:40:7e:6e:55:77:f4: a7:7f:55:45:52:86:48:5a:c1:6a:d5:6b:85:aa:3c:c7:a2:70: 01:88:28:a9:c7:38:ee:f6:7b:56:b0:fa:81:e4:c3:dc:52:f4: 45:57:69:f1:e1:89:9f:4e:c4:29:2f:a6:57:38:c9:49:7c:2b: e0:f6:79:a3:b0:38:bd:b0:d3:7e:b9:53:61:76:3d:14:08:0f: d3:2f:06:ec:6a:f1:e5:66:ac:3b:78:33:29:0e:07:de:1c:1b: 9a:12:29:c6:7b:ab:63:d6:9e:fd:87:5e:0d:0c:45:42:8d:0c: f7:60:96:6f:cc:fd:9f:f5:f5:f9:29:5c:26:74:ce:f0:5c:e3: a0:e3:af:d5:03:36:ec:26:7a:94:fd:ca:65:68:36:3b:0c:b3: 26:31:40:72:8f:92:f1:9f:17:2a:c2:37:57:90:b6:bc:02:ba: 34:93:37:79:e9:e5:2d:31:7c:7f:03:28:f4:58:1f:cb:8f:29: 26:63:91:dd:06:cf:00:93:d6:96:ea:3d:9f:7c:66:98:0a:6b: 10:62:5c:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjUxMTA1MDMyNTQ0WhcNMjUxMTEyMDMyNTQ0WjAYMRYwFAYD VQQDEw02OTBhYzNiOC1mNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPgG1kmHlWtiA0oDTZuQ3C6AQBWBnbpUxhzjWnDNQnrjzjd+ZZ3i4QSzj6nL 2kHnYdiD5QAohj9cYFwlz1seq53QX99AZbG7Gh0XgGbv+O5qTyoURGROx6bGE65a h10OEi3xWA9W52H1M9iYRm8p4b4UkagJkTfrEnm3IA5ws7nmYsvKnZk+wAiCrT1t u1Usn1UZGz+lkpcI255sQWb44ELOr9u/AOqdcUHiUykTA3yDcx0VeRCSV4Ap7reh rbU97wpfpz/HqeEmmalAC+rVCoj85qnsnxf+BEPwT6VJtXgdJiz9g1DyhuAppc9P WpNMNiJggdgzH2oIO4iwvJEmzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyZWmdb /aeHW2wfSpzcSKahjIknMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxePsxjJcsfSb6FBnV7WnL7hQFk0Ijb2VDFxW3I7jjRTqiwebQ/f7q sG+o4Epz6ddAfm5Vd/Snf1VFUoZIWsFq1WuFqjzHonABiCipxzju9ntWsPqB5MPc UvRFV2nx4YmfTsQpL6ZXOMlJfCvg9nmjsDi9sNN+uVNhdj0UCA/TLwbsavHlZqw7 eDMpDgfeHBuaEinGe6tj1p79h14NDEVCjQz3YJZvzP2f9fX5KVwmdM7wXOOg46/V AzbsJnqU/cplaDY7DLMmMUByj5LxnxcqwjdXkLa8Aro0kzd56eUtMXx/Ayj0WB/L jykmY5HdBs8Ak9aW6j2ffGaYCmsQYlzF -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:39 2025 by rpki-client