$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: tGsUZ12CF3xzspPECplhHJaUeg1CcxML+UZNbfuLAkk= Subject key identifier: CE:8C:51:50:A7:29:6B:B3:17:7F:45:04:98:D9:8A:73:99:F7:CF:39 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 34E0 Signing time: Sun 02 Nov 2025 15:01:21 +0000 Manifest this update: Sun 02 Nov 2025 15:01:20 +0000 Manifest next update: Sun 09 Nov 2025 15:01:20 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: 9ZbWAdPgAu+3MK0HpRLtaQjEzoHL+N20/NwYeBak3sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Nov 2 15:01:20 2025 GMT Not After : Nov 9 15:01:20 2025 GMT Subject: CN=69077240-7d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:4f:18:d8:87:f1:7e:2a:77:76:b4:dc:2d: 38:dc:f3:62:a7:eb:51:a2:fb:e0:74:a4:34:26:9e: b9:f4:87:d4:92:98:8c:f7:24:f3:a9:ec:af:f5:d2: 65:57:4d:2d:77:d3:64:ee:f9:63:35:e2:1f:7d:36: 1e:3b:91:2d:fa:9a:6e:4e:2b:a5:0b:ae:4c:e8:f9: 3c:81:47:f2:0b:0f:93:2f:28:8f:72:4f:ea:56:5c: 3a:c3:0b:81:56:d7:16:db:6a:32:7a:41:af:37:b4: a9:56:03:0e:01:f2:69:b1:15:6a:d6:5c:a2:db:6a: 63:0d:75:dc:7c:e2:9f:72:f1:13:18:b4:01:2d:b1: 4d:0d:3d:d1:54:d4:0b:ff:20:79:2a:e7:95:9f:11: aa:38:e4:91:cf:40:1b:c6:ab:44:44:98:fa:09:39: e7:13:93:bc:e3:48:7b:25:32:f5:7e:12:73:10:21: 10:6e:53:38:7b:7e:ab:0c:bb:f9:b3:8b:dc:29:26: c6:09:b8:51:99:11:7d:e3:c1:9d:87:b9:bc:57:ad: ea:b3:85:6f:74:bc:90:c0:60:a9:69:6d:40:89:25: f9:b6:1d:6e:cd:23:3b:a9:30:51:e5:6a:ca:c4:78: ac:22:6c:19:70:0a:86:6b:1e:e1:5f:b5:73:f5:d3: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8C:51:50:A7:29:6B:B3:17:7F:45:04:98:D9:8A:73:99:F7:CF:39 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:36:b4:ed:41:3f:2c:48:87:7d:73:cc:f4:e5:ba:95:ca:1c: f3:60:d7:d0:35:1a:7e:1c:d4:b6:9d:56:02:2a:3c:8a:c6:60: f9:06:86:9c:13:3a:16:ee:90:d3:e4:b9:d6:da:74:b0:07:35: 73:e6:45:20:c1:54:41:2b:2a:25:2d:93:73:fc:db:d0:13:ab: fe:f2:7a:10:08:7c:0f:30:1a:be:15:b8:32:4c:17:29:2c:3a: 80:91:4a:82:93:06:be:79:50:b0:27:1d:45:0e:0d:37:c6:e2: ab:1b:45:6b:03:b3:b8:92:d5:45:54:df:07:b2:36:77:4c:7b: 01:b0:7c:ef:46:1c:29:42:3e:68:ee:5d:58:35:ae:59:39:74: 36:2f:46:ec:38:98:ed:20:a1:16:cf:b7:c6:1a:c0:bd:47:58: 0e:ca:47:4f:24:0b:1a:29:09:f8:4e:dc:11:a1:66:23:93:29: 91:ae:ae:a9:f0:3b:06:3d:67:f4:dd:b4:d3:ef:0e:c2:14:f1: 3f:30:70:a6:17:80:17:88:ee:da:e8:f8:e4:78:b7:98:85:fe: 89:8c:11:2e:23:b3:a1:4c:64:a1:7f:2d:40:75:a7:4a:fb:1e: f2:72:31:b2:c1:60:53:76:23:4e:6e:11:52:8e:b9:bb:8e:a8: c0:71:82:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUxMTAyMTUwMTIwWhcNMjUxMTA5MTUwMTIwWjAYMRYwFAYD VQQDEw02OTA3NzI0MC03ZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmdPGNiH8X4qd3a03C043PNip+tRovvgdKQ0Jp659IfUkpiM9yTzqeyv9dJl V00td9Nk7vljNeIffTYeO5Et+ppuTiulC65M6Pk8gUfyCw+TLyiPck/qVlw6wwuB VtcW22oyekGvN7SpVgMOAfJpsRVq1lyi22pjDXXcfOKfcvETGLQBLbFNDT3RVNQL /yB5KueVnxGqOOSRz0AbxqtERJj6CTnnE5O840h7JTL1fhJzECEQblM4e36rDLv5 s4vcKSbGCbhRmRF948Gdh7m8V63qs4VvdLyQwGCpaW1AiSX5th1uzSM7qTBR5WrK xHisImwZcAqGax7hX7Vz9dODnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6MUVCn KWuzF39FBJjZinOZ9885MB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTNrTtQT8sSId9c8z05bqVyhzzYNfQNRp+HNS2nVYCKjyKxmD5Boac EzoW7pDT5LnW2nSwBzVz5kUgwVRBKyolLZNz/NvQE6v+8noQCHwPMBq+FbgyTBcp LDqAkUqCkwa+eVCwJx1FDg03xuKrG0VrA7O4ktVFVN8HsjZ3THsBsHzvRhwpQj5o 7l1YNa5ZOXQ2L0bsOJjtIKEWz7fGGsC9R1gOykdPJAsaKQn4TtwRoWYjkymRrq6p 8DsGPWf03bTT7w7CFPE/MHCmF4AXiO7a6PjkeLeYhf6JjBEuI7OhTGShfy1AdadK +x7ycjGywWBTdiNObhFSjrm7jqjAcYJO -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:07 2025 by rpki-client