$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: jY7GzX/nwdFb3BYJ+Q8955eKNq0Qs9TEQURR7v3Xzh4= Subject key identifier: 83:4D:BD:3A:9D:9A:23:AF:20:52:C0:49:BB:B8:EC:91:5D:21:78:14 Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0C78 Signing time: Sun 02 Nov 2025 18:26:57 +0000 Manifest this update: Sun 02 Nov 2025 18:26:57 +0000 Manifest next update: Sun 09 Nov 2025 18:26:57 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: RpTfSC5Crqu42cBK4qJbgPnWtraUFs9Xihu4PYDX9Cg=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: sizu4+OIZ/A8x9uQpAud/O4xnlom/Pk+/kkVVxPExzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: Nov 2 18:26:57 2025 GMT Not After : Nov 9 18:26:57 2025 GMT Subject: CN=6907a271-65bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:d3:b5:66:26:9c:05:d1:bc:4a:64:89:f6: e3:3b:54:31:fc:97:c9:10:ba:48:39:32:15:b3:01: 6d:04:cb:6e:e3:e5:38:78:e4:2f:ad:32:4e:7b:0d: 87:0b:c5:64:ab:6d:60:33:26:8c:03:fc:10:24:f5: da:dd:98:68:69:23:f2:19:5b:76:c2:24:93:b9:bf: 16:c4:51:59:27:bc:e2:76:f3:b3:29:5c:80:8c:71: 26:bc:55:13:41:c8:8e:13:e3:ef:cf:3d:c6:13:be: 2c:bb:89:c8:ce:12:1a:d1:fe:a2:91:be:01:4c:11: b8:4a:c0:98:c1:7f:e6:8a:12:24:67:c2:e0:53:4a: 66:50:18:ff:7d:5e:bf:b7:f0:7c:9d:53:c0:b2:3d: 7e:37:c4:b6:45:c0:ff:b6:6f:e3:1f:d6:e5:21:b5: db:dc:89:00:0c:5b:50:81:31:64:1f:0c:2b:06:68: 9e:4c:3e:08:a0:f5:98:5b:38:7d:86:d4:d3:5d:41: 04:1a:a1:72:1c:d1:39:53:13:6a:b8:9b:27:81:4c: d9:19:28:39:64:c3:52:67:dc:8b:03:19:48:90:9d: 09:3d:96:03:4b:71:11:e6:fd:2f:33:83:f2:c1:a9: 69:30:ad:66:28:2d:28:b3:fb:ee:86:f4:ff:eb:c1: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4D:BD:3A:9D:9A:23:AF:20:52:C0:49:BB:B8:EC:91:5D:21:78:14 X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:07:24:29:ef:00:e7:aa:a1:46:cd:31:d7:c7:a4:93:1d:03: df:81:1a:d5:30:91:f6:ce:2b:8d:b0:e9:1a:33:78:46:c4:ee: d4:fb:7b:9f:6e:a3:ed:02:fc:fd:8b:41:ee:a2:14:b9:56:24: c4:2a:19:6c:d9:4e:d2:78:69:3b:41:70:a7:1f:68:22:22:dd: b2:2e:94:7e:27:41:5b:7e:0e:b2:a1:75:51:71:b2:07:1a:7a: e3:e1:ce:95:c7:99:61:d2:dd:8d:80:52:98:fd:10:6a:0b:49: 8c:b9:a1:dd:3f:10:7e:0f:86:bd:ae:cf:d1:eb:a8:94:fd:7c: c0:38:67:90:74:ac:2e:2d:7e:35:c2:5f:50:0b:7c:c0:95:8d: ac:ad:74:25:e5:ca:fe:c0:07:fa:55:48:00:1b:f3:7f:27:a1: f4:84:47:44:03:dc:ff:44:6b:c4:8c:64:ed:13:09:95:03:7d: c5:2a:08:0f:d0:4e:69:3e:25:ff:74:df:be:7c:fb:f8:9e:ac: 63:78:92:27:92:0f:0f:c9:ad:96:95:53:95:36:5d:b8:95:aa: 22:f5:6d:4b:35:35:72:e5:2d:27:37:18:3e:08:0a:19:54:0d: e9:26:ab:d1:49:bc:48:16:9e:35:52:7c:09:d5:e9:6e:5f:fa: 73:aa:c2:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjUxMTAyMTgyNjU3WhcNMjUxMTA5MTgyNjU3WjAYMRYwFAYD VQQDEw02OTA3YTI3MS02NWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3DTtWYmnAXRvEpkifbjO1Qx/JfJELpIOTIVswFtBMtu4+U4eOQvrTJOew2H C8Vkq21gMyaMA/wQJPXa3ZhoaSPyGVt2wiSTub8WxFFZJ7zidvOzKVyAjHEmvFUT QciOE+Pvzz3GE74su4nIzhIa0f6ikb4BTBG4SsCYwX/mihIkZ8LgU0pmUBj/fV6/ t/B8nVPAsj1+N8S2RcD/tm/jH9blIbXb3IkADFtQgTFkHwwrBmieTD4IoPWYWzh9 htTTXUEEGqFyHNE5UxNquJsngUzZGSg5ZMNSZ9yLAxlIkJ0JPZYDS3ER5v0vM4Py walpMK1mKC0os/vuhvT/68GJ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINNvTqd miOvIFLASbu47JFdIXgUMB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ByQp7wDnqqFGzTHXx6STHQPfgRrVMJH2ziuNsOkaM3hGxO7U+3uf bqPtAvz9i0HuohS5ViTEKhls2U7SeGk7QXCnH2giIt2yLpR+J0Fbfg6yoXVRcbIH Gnrj4c6Vx5lh0t2NgFKY/RBqC0mMuaHdPxB+D4a9rs/R66iU/XzAOGeQdKwuLX41 wl9QC3zAlY2srXQl5cr+wAf6VUgAG/N/J6H0hEdEA9z/RGvEjGTtEwmVA33FKggP 0E5pPiX/dN++fPv4nqxjeJInkg8Pya2WlVOVNl24laoi9W1LNTVy5S0nNxg+CAoZ VA3pJqvRSbxIFp41UnwJ1eluX/pzqsIw -----END CERTIFICATE-----Generated at Tue Nov 4 08:31:18 2025 by rpki-client