$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: dIhKo4UJrkCAkMQjeEH1FlnIb6tW7u5sKPo2tpOYzCk= Subject key identifier: 71:63:A0:01:35:CF:D9:D9:91:E3:FA:B5:99:FE:55:1C:50:60:B1:F7 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0C42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0C38 Signing time: Tue 04 Nov 2025 18:46:13 +0000 Manifest this update: Tue 04 Nov 2025 18:46:12 +0000 Manifest next update: Tue 11 Nov 2025 18:46:12 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: oAcWDzJAIkODR2yxEjwgeA/ZPZMMoZdrKTJm0h25mtI=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 29yqRgflWjw/V78Nb1MTmLxw9ept1pEu77NRsVFXw6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Nov 4 18:46:12 2025 GMT Not After : Nov 11 18:46:12 2025 GMT Subject: CN=690a49f5-7d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:18:96:1c:e1:88:d0:dd:b4:86:4e:e5:69: da:37:3a:f9:ad:5d:5c:b3:b7:5c:97:4c:1a:d8:73: 9b:de:18:10:9e:48:56:8d:e9:7d:31:ac:c9:44:77: 3f:b8:7e:e7:c8:5b:b5:07:92:61:20:52:31:68:4f: 5a:f5:f4:29:dd:f7:51:4e:38:68:2a:c9:dd:cf:7f: d9:81:ac:8a:9f:20:68:14:bd:c3:d1:e9:f3:b4:06: 28:58:49:26:e6:67:3f:ae:d3:63:7d:c7:a6:40:2a: 85:22:d7:3d:96:af:33:d9:2f:1c:ac:c9:2d:ba:60: 3e:e0:b3:e9:b3:60:a0:1a:3c:87:32:6b:41:2a:c0: 5a:37:d9:f8:2c:47:4d:75:ec:d0:38:4b:db:88:a5: bd:60:b7:31:73:31:35:64:5b:13:60:18:33:07:00: d6:be:4a:62:d2:c1:7f:e2:c8:7f:a0:db:75:33:98: 5e:b6:14:63:26:40:d2:1a:f5:3f:c8:1d:b7:3f:26: 4c:42:3a:ca:4b:17:15:3b:10:c8:c0:f1:2f:f4:b5: 9f:c9:bd:c9:56:33:f7:0a:51:df:c0:7c:aa:ad:be: fa:c7:3f:b9:26:64:22:5b:5e:b0:85:ff:d7:b6:7d: 9b:f5:f0:9e:75:98:94:f8:82:3c:36:c7:72:3b:6a: 27:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:63:A0:01:35:CF:D9:D9:91:E3:FA:B5:99:FE:55:1C:50:60:B1:F7 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0f:12:0a:33:cf:b3:f3:10:de:80:85:b6:ba:2a:d2:6d:51: 55:b8:a7:2a:26:bc:01:f8:eb:7b:e9:63:4d:a9:48:ac:86:c2: 03:a7:71:12:61:c4:15:5f:0b:e5:03:2f:14:fe:4d:cd:80:af: 77:39:44:75:3e:db:9c:7e:7b:24:5c:a4:49:5e:ad:fc:5e:a2: 55:a7:38:d5:15:3a:f9:46:04:ed:fb:f5:47:3e:ba:94:fd:19: 1c:b6:5b:d0:05:00:f6:3d:75:83:3f:0c:bf:0a:43:fd:5c:38: 40:a1:5a:32:9a:86:0c:81:29:4c:f0:a3:bf:ac:64:38:61:cf: 2f:6d:fb:19:20:77:4c:44:91:b3:01:c7:54:e4:30:f5:f6:34: b7:c5:bc:e5:2e:53:0d:d6:b8:eb:ce:fc:9f:39:e4:76:e5:e6: 5d:5c:45:55:81:3d:7f:08:a2:6e:0b:84:19:b6:9d:42:36:8e: 68:f7:c5:cf:4e:9d:2b:19:ed:2a:cc:b0:19:f0:e0:14:3f:72: 88:27:4b:27:8a:51:6a:77:5c:f5:2d:e2:b2:1a:41:8c:18:51: 51:f4:33:89:ea:d0:33:f7:53:b4:fa:8b:73:45:62:4d:b5:54: 73:ab:fd:3b:03:5d:ad:13:4a:3b:b3:2c:8c:41:3e:7b:31:12: c8:e9:2a:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjUxMTA0MTg0NjEyWhcNMjUxMTExMTg0NjEyWjAYMRYwFAYD VQQDEw02OTBhNDlmNS03ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMsYlhzhiNDdtIZO5WnaNzr5rV1cs7dcl0wa2HOb3hgQnkhWjel9MazJRHc/ uH7nyFu1B5JhIFIxaE9a9fQp3fdRTjhoKsndz3/ZgayKnyBoFL3D0enztAYoWEkm 5mc/rtNjfcemQCqFItc9lq8z2S8crMktumA+4LPps2CgGjyHMmtBKsBaN9n4LEdN dezQOEvbiKW9YLcxczE1ZFsTYBgzBwDWvkpi0sF/4sh/oNt1M5hethRjJkDSGvU/ yB23PyZMQjrKSxcVOxDIwPEv9LWfyb3JVjP3ClHfwHyqrb76xz+5JmQiW16whf/X tn2b9fCedZiU+II8NsdyO2onFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFjoAE1 z9nZkeP6tZn+VRxQYLH3MB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhDxIKM8+z8xDegIW2uirSbVFVuKcqJrwB+Ot76WNNqUishsIDp3ES YcQVXwvlAy8U/k3NgK93OUR1PtucfnskXKRJXq38XqJVpzjVFTr5RgTt+/VHPrqU /RkctlvQBQD2PXWDPwy/CkP9XDhAoVoymoYMgSlM8KO/rGQ4Yc8vbfsZIHdMRJGz AcdU5DD19jS3xbzlLlMN1rjrzvyfOeR25eZdXEVVgT1/CKJuC4QZtp1CNo5o98XP Tp0rGe0qzLAZ8OAUP3KIJ0snilFqd1z1LeKyGkGMGFFR9DOJ6tAz91O0+otzRWJN tVRzq/07A12tE0o7syyMQT57MRLI6Sq+ -----END CERTIFICATE-----Generated at Wed Nov 5 15:05:01 2025 by rpki-client