$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft File: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json) Hash identifier: 6TWLfj26jghor3qVIE4bTxs8yjZbFOBPSG+LOibgF1E= Subject key identifier: 7C:40:40:D1:89:3C:49:AA:A0:22:A5:F9:B1:76:74:A2:17:5A:00:E9 Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft Manifest number: 0217 Signing time: Wed 05 Nov 2025 02:25:24 +0000 Manifest this update: Wed 05 Nov 2025 02:25:24 +0000 Manifest next update: Wed 12 Nov 2025 02:25:24 +0000 Files and hashes: 1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: FIQJJji9T89Ys4y1TKsWLEWl6cbMO4hsEbXJBzeM9Sg=) 2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: owcMfgmf9kpDTDqNxCULdTdA0zhNtmzFgjLCV+yNCCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Validity Not Before: Nov 5 02:25:24 2025 GMT Not After : Nov 12 02:25:24 2025 GMT Subject: CN=690ab594-62d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:95:3d:23:8a:bd:ed:c7:15:cc:a8:db:dc:9f: 78:2a:bd:f6:2c:cd:87:9e:98:00:df:12:a9:5b:31: 3b:38:b7:11:68:8a:6b:88:7a:cb:b8:91:c2:61:42: bf:e3:d7:c2:a0:90:80:a0:88:05:b1:10:c3:0c:da: 6c:c9:b1:21:39:16:da:5f:f1:2d:4a:11:e5:27:7a: 36:9d:b2:f3:2d:06:e6:e6:c2:ae:27:a2:01:e1:5d: 8d:50:61:c1:f0:1a:6b:28:4b:85:b8:48:f7:98:e5: b0:e4:94:c7:69:29:13:81:a4:80:29:05:41:8a:d2: bf:a3:ba:a0:d0:f1:5e:b2:e0:11:a3:f1:3c:4c:71: 83:a6:de:04:59:5b:c0:50:16:47:b6:0a:d7:a1:17: a6:fe:54:b7:95:f8:06:9b:eb:bd:36:35:8a:6a:77: 8e:13:02:c1:bb:15:dd:18:d3:cd:df:cc:c4:81:8d: 3b:e2:97:75:bf:14:b0:d9:f2:be:82:72:11:20:a1: 3f:16:b9:34:07:19:dd:3d:60:6d:4c:f9:77:a7:54: 01:61:c7:1b:08:62:4c:db:e9:4d:a2:41:7a:12:85: 61:81:14:92:4f:93:ac:97:85:86:19:d4:f7:55:dc: 27:3b:a7:73:08:7b:96:40:b3:93:87:48:23:f9:50: 14:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:40:40:D1:89:3C:49:AA:A0:22:A5:F9:B1:76:74:A2:17:5A:00:E9 X509v3 Authority Key Identifier: keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:37:5b:f5:ec:2d:d8:2e:82:ca:9a:00:c4:50:73:b1:82:82: df:84:02:dc:5e:37:38:39:c0:9a:e4:cf:76:4a:4d:b9:a9:e3: d6:9b:23:a6:cd:fb:54:ca:24:b3:6e:86:e1:7c:13:88:0c:54: 9d:50:6c:cb:1a:90:e4:30:53:bc:b8:2f:b0:e7:13:15:b9:03: 3e:22:a7:bf:d2:85:71:8c:1d:ce:98:e4:5a:9a:af:7f:52:ce: 5b:08:6a:4f:0c:59:9c:0b:1d:3a:88:7c:13:84:34:f5:af:bf: 23:a7:4a:36:ac:0d:82:a0:fb:ff:16:13:28:7b:24:55:17:b3: fd:34:1d:8e:0e:03:69:4d:fa:43:5c:12:f7:74:b2:0e:a3:f9: 46:03:d0:c6:8b:6d:e6:c3:ae:03:f5:0d:a0:a9:5d:ef:79:c7: 0a:a4:d4:60:a6:4f:04:bb:cf:93:9b:78:c0:da:70:d5:c0:83: 2f:08:97:6a:16:cd:75:e5:41:bb:c8:66:57:c8:53:96:b0:14: 77:23:71:84:c6:1e:e6:7c:c7:26:cf:e4:92:57:0f:93:b4:91: 9a:b4:eb:dd:b4:5e:cc:9a:15:fd:18:e4:54:bc:74:a5:87:42: 87:3d:2d:be:9f:90:2d:21:67:ce:18:02:7c:b6:11:5c:00:77: b7:a3:dc:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5QkQxMTAvBgNVBAUTKDU2Qjc2ODAxRDUwQTRFNjNDODVFMDY0NTc3MDY1NEI3 RjkzNkM5OTQwHhcNMjUxMTA1MDIyNTI0WhcNMjUxMTEyMDIyNTI0WjAYMRYwFAYD VQQDEw02OTBhYjU5NC02MmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJU9I4q97ccVzKjb3J94Kr32LM2HnpgA3xKpWzE7OLcRaIpriHrLuJHCYUK/ 49fCoJCAoIgFsRDDDNpsybEhORbaX/EtShHlJ3o2nbLzLQbm5sKuJ6IB4V2NUGHB 8BprKEuFuEj3mOWw5JTHaSkTgaSAKQVBitK/o7qg0PFesuARo/E8THGDpt4EWVvA UBZHtgrXoRem/lS3lfgGm+u9NjWKaneOEwLBuxXdGNPN38zEgY074pd1vxSw2fK+ gnIRIKE/Frk0BxndPWBtTPl3p1QBYccbCGJM2+lNokF6EoVhgRSST5Osl4WGGdT3 VdwnO6dzCHuWQLOTh0gj+VAU/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxAQNGJ PEmqoCKl+bF2dKIXWgDpMB8GA1UdIwQYMBaAFFa3aAHVCk5jyF4GRXcGVLf5NsmU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlCRC8yN0QzRkNBQTk3 Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1RtUElYZ1pGZHdaVXRfazJ5 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZyZG9BZFVLVG1QSVhnWkZkd1pVdF9rMnlaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlCRC8yN0QzRkNBQTk3Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1Rt UElYZ1pGZHdaVXRfazJ5WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfN1v17C3YLoLKmgDEUHOxgoLfhALcXjc4OcCa5M92Sk25qePWmyOm zftUyiSzbobhfBOIDFSdUGzLGpDkMFO8uC+w5xMVuQM+Iqe/0oVxjB3OmORamq9/ Us5bCGpPDFmcCx06iHwThDT1r78jp0o2rA2CoPv/FhMoeyRVF7P9NB2ODgNpTfpD XBL3dLIOo/lGA9DGi23mw64D9Q2gqV3veccKpNRgpk8Eu8+Tm3jA2nDVwIMvCJdq Fs115UG7yGZXyFOWsBR3I3GExh7mfMcmz+SSVw+TtJGatOvdtF7MmhX9GORUvHSl h0KHPS2+n5AtIWfOGAJ8thFcAHe3o9yG -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:18 2025 by rpki-client