$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft File: vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json) Hash identifier: Fzv/MJ0DmzzXL64jPeGb9Y5en8Zzcat6RKn0CVL24xg= Subject key identifier: 53:2B:70:1F:B8:BC:FB:DD:C7:1B:32:F0:0C:EF:96:AD:B1:3F:4D:6E Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D Certificate issuer: /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft Manifest number: 0129 Signing time: Mon 03 Nov 2025 04:48:53 +0000 Manifest this update: Mon 03 Nov 2025 04:48:52 +0000 Manifest next update: Mon 10 Nov 2025 04:48:52 +0000 Files and hashes: 1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: E7qNG9mQBPO3zVtppfiB42AoSOnxECHFV0HTXQA14v8=) 2: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: yvhUjHAiX+EPlHQdcU4E7154R9m6cxsrAxWsgLI83Mw=) 3: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: MLTTfCwREUsGVfNKsAVzpfz2Sc45FONq7T/5iif0e5s=) 4: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: ct7HNnoVMRTu9GGbvMdnAsr99cdgOMQ5g1ojGQzID0Y=) 5: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: VQG0WF9XSuXwWbMIIOSS0EFZqyrabhvnJP0dkdCPAVw=) 6: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: 2CtFG7HWVSfrrJnKmf+0gUAHRHN8PeRmFCcQjXhYXBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Validity Not Before: Nov 3 04:48:52 2025 GMT Not After : Nov 10 04:48:52 2025 GMT Subject: CN=69083434-af58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:e1:53:cc:dd:bc:b9:6f:0e:2f:c5:ad:c5: b1:00:0c:0c:5b:9f:95:25:15:4c:da:8f:b3:2f:bb: f5:91:89:8b:9e:ad:0a:79:1a:f0:1a:9d:a4:ac:ea: 61:b8:89:68:92:56:9b:a3:4f:fd:b6:be:76:9f:0b: 36:2a:3e:8e:e8:30:2f:ac:ea:21:e9:60:65:9f:e7: 73:ed:37:93:a0:cc:64:7d:46:b2:de:4b:fb:6f:3e: 15:77:a8:02:34:43:60:fb:b1:5a:4a:9c:90:24:c3: 96:56:47:3b:15:69:96:94:2f:95:e4:f2:0f:60:50: b0:b5:d1:bf:93:97:53:c7:b0:20:28:e4:fc:f6:9b: 34:80:7c:a2:4b:dd:7f:1a:fc:f3:f9:fa:0f:04:fd: 1a:fe:5b:64:e8:db:d6:b9:b5:98:09:ef:67:8b:f8: 04:a3:d6:63:ce:3f:d0:8a:4a:b2:03:6f:3b:3c:fb: 4f:d6:36:a6:d6:12:05:fd:f4:f7:72:8b:7e:95:42: b4:ee:fb:a4:29:36:2f:50:dc:ca:bd:5b:92:74:9a: 42:5c:5a:e1:f5:30:20:6a:30:4e:c1:1e:f0:e7:3a: 8d:b8:ab:22:e0:86:21:b1:f3:69:bf:79:83:4c:80: b9:06:de:6d:64:9c:e1:6c:fb:de:3f:b7:69:e6:17: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2B:70:1F:B8:BC:FB:DD:C7:1B:32:F0:0C:EF:96:AD:B1:3F:4D:6E X509v3 Authority Key Identifier: keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:17:65:62:d0:cc:8b:a8:f2:f9:bb:20:84:41:67:27:d9:9a: 1d:84:86:09:84:53:14:33:c3:84:99:d9:3e:7c:e4:29:ff:37: ae:3f:e6:05:47:e2:b7:a3:13:14:b9:b2:dd:39:23:91:6e:3b: 91:7a:19:8b:67:73:5d:ab:39:23:4a:f4:08:91:46:42:35:70: 5a:c5:12:08:48:26:0f:3f:b6:f1:5d:6f:03:5a:ce:54:17:82: 5b:25:2c:fd:7f:2a:76:6f:06:a0:4b:5a:e9:ca:da:48:a6:ad: f6:a6:e6:ce:be:56:03:3d:12:ed:37:67:e1:c7:14:aa:03:80: 56:39:96:47:ec:f2:6a:e3:df:52:b1:4a:8f:e1:67:87:da:c6: 38:66:34:37:df:b1:86:40:54:72:5d:ca:c5:e5:41:ec:b3:a3: bc:2f:b0:7f:05:3e:e5:48:8c:92:3b:d4:54:4f:4f:04:da:83: af:23:b7:ba:c2:b6:6f:d0:e3:93:55:02:7e:a0:3c:48:aa:77: ca:1a:ef:52:32:25:33:81:26:6b:3f:05:e9:b0:fd:22:fa:61: a3:ef:d2:ae:cd:4f:2d:f5:85:6f:47:0d:1d:a8:50:1c:77:98: 68:bc:d4:ba:f7:c8:d9:4a:bb:87:51:27:bb:38:fe:e6:4c:29: cf:d0:2e:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzQTAxMTAvBgNVBAUTKEJDQjdDRjQ0MzBCQjk4RUEwNDg1MUMzNDA3MjZFNTg4 MTUwRTEzOUQwHhcNMjUxMTAzMDQ0ODUyWhcNMjUxMTEwMDQ0ODUyWjAYMRYwFAYD VQQDEw02OTA4MzQzNC1hZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueThU8zdvLlvDi/FrcWxAAwMW5+VJRVM2o+zL7v1kYmLnq0KeRrwGp2krOph uIloklabo0/9tr52nws2Kj6O6DAvrOoh6WBln+dz7TeToMxkfUay3kv7bz4Vd6gC NENg+7FaSpyQJMOWVkc7FWmWlC+V5PIPYFCwtdG/k5dTx7AgKOT89ps0gHyiS91/ Gvzz+foPBP0a/ltk6NvWubWYCe9ni/gEo9Zjzj/QikqyA287PPtP1jam1hIF/fT3 cot+lUK07vukKTYvUNzKvVuSdJpCXFrh9TAgajBOwR7w5zqNuKsi4IYhsfNpv3mD TIC5Bt5tZJzhbPveP7dp5heTPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMrcB+4 vPvdxxsy8Azvlq2xP01uMB8GA1UdIwQYMBaAFLy3z0Qwu5jqBIUcNAcm5YgVDhOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTNBMC9BNTk1NUU1NjBD NDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21Pb0VoUncwQnlibGlCVU9F NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMZlBSREM3bU9vRWhSdzBCeWJsaUJVT0U1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTNBMC9BNTk1NUU1NjBDNDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21P b0VoUncwQnlibGlCVU9FNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsF2Vi0MyLqPL5uyCEQWcn2ZodhIYJhFMUM8OEmdk+fOQp/zeuP+YF R+K3oxMUubLdOSORbjuRehmLZ3NdqzkjSvQIkUZCNXBaxRIISCYPP7bxXW8DWs5U F4JbJSz9fyp2bwagS1rpytpIpq32pubOvlYDPRLtN2fhxxSqA4BWOZZH7PJq499S sUqP4WeH2sY4ZjQ337GGQFRyXcrF5UHss6O8L7B/BT7lSIySO9RUT08E2oOvI7e6 wrZv0OOTVQJ+oDxIqnfKGu9SMiUzgSZrPwXpsP0i+mGj79KuzU8t9YVvRw0dqFAc d5hovNS698jZSruHUSe7OP7mTCnP0C5k -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:10 2025 by rpki-client