$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft File: VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json) Hash identifier: hNgo0CQsR/NnDcuE9+L4q14E3c3wemadCC1xIan15R8= Subject key identifier: 8E:3B:2B:D9:07:24:B4:1E:2B:2D:84:60:E4:CF:C8:89:F9:99:FC:75 Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft Manifest number: 04AE Signing time: Sun 02 Nov 2025 23:54:18 +0000 Manifest this update: Sun 02 Nov 2025 23:54:17 +0000 Manifest next update: Sun 09 Nov 2025 23:54:17 +0000 Files and hashes: 1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: dsuhSvre3mkRhLmMqde61I4FqjnHMs74CDZMOso5oVE=) 2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: VdZlll8N2yHckG8u+VAt3wnnIi65LnwSgFUO4q8nuCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Validity Not Before: Nov 2 23:54:17 2025 GMT Not After : Nov 9 23:54:17 2025 GMT Subject: CN=6907ef29-bb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:c1:18:0b:e5:e2:ed:f9:15:68:67:18:63: f7:c0:99:63:ac:e4:2a:2e:7c:93:2d:2d:3a:b9:87: f9:21:85:83:5e:97:cf:23:8c:b2:6c:2b:41:d3:4a: 3b:31:71:77:a6:f5:f3:76:7c:e7:63:9a:3a:3e:8e: 99:53:b7:af:13:65:50:54:ac:a3:1f:d2:e8:5b:19: b2:04:96:17:34:57:f2:96:cb:86:21:ae:c1:28:ff: 3b:d9:6e:68:63:af:56:2a:40:0a:5e:5e:8b:16:0d: 92:5a:dc:ec:ac:74:30:7c:d5:bc:b8:95:9c:b2:54: 65:62:16:60:fb:9e:ad:e6:49:d4:ae:aa:b3:39:7d: d3:4a:6e:40:d8:d5:07:ae:5e:aa:19:7f:88:e0:d5: 5b:01:6a:bf:7d:85:2b:44:d6:0f:a6:64:37:dd:a7: 77:e4:0b:1e:d1:e9:75:c1:c3:d7:30:ca:e4:26:ea: 40:c5:97:b3:ff:f7:5e:4a:f6:8e:b5:51:1b:83:c9: 1b:ee:25:f7:2f:9b:16:01:32:06:fd:96:ae:12:a0: be:8f:4d:f9:fc:35:0a:6f:74:20:02:9c:a0:41:3e: f1:cc:65:fd:26:3c:3e:16:5e:8c:25:be:af:d2:e7: c1:8d:98:92:ea:6f:86:2c:39:ec:88:d7:b1:30:1d: a8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3B:2B:D9:07:24:B4:1E:2B:2D:84:60:E4:CF:C8:89:F9:99:FC:75 X509v3 Authority Key Identifier: keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:a6:70:88:81:f8:ef:64:0e:4a:1f:60:56:18:ff:e7:c1:45: 85:e9:68:26:ed:e7:58:7d:91:0d:82:f7:73:45:99:27:6f:eb: 75:f8:0a:46:ea:03:f5:54:71:c1:a8:fa:72:16:28:24:a4:01: 66:f9:9a:ab:5d:ee:6c:52:bf:bb:9f:06:14:c6:06:37:7a:4c: e0:fb:ab:ff:a8:73:52:3d:44:4a:eb:cb:cb:ab:f2:5d:e0:d1: e7:eb:a3:0a:64:93:e3:40:ea:f4:c2:f1:0c:03:37:24:96:5a: f5:fb:dc:8a:bf:49:44:f3:29:df:af:8b:fe:46:2e:39:c9:7d: 98:01:8a:28:b1:62:6f:a8:5b:56:15:7f:f3:97:13:fd:9d:e6: f6:8a:a4:65:b5:8d:d5:1f:d8:44:2f:e5:70:47:c2:04:22:60: ab:ae:f6:64:6b:7e:f8:18:3e:38:24:06:d9:16:63:a9:5e:2c: 5c:dc:18:fe:1a:9b:1b:90:72:94:55:1e:a5:a6:03:2e:57:65: d8:ba:5d:c5:fa:97:8a:95:10:eb:01:09:6a:fe:c0:2e:4a:9e: 26:d6:c4:55:42:f6:b5:84:1b:64:a6:28:64:79:e9:6b:62:86: 60:14:6c:05:8f:cb:e3:87:03:cd:cc:36:59:5d:69:f7:de:40: 34:a5:d5:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCRkYxMTAvBgNVBAUTKDU0NDExRkU3MzMyRDJFRjRGRjI3NUU1OUQ1REVGRUQx Q0NFOTYwMTQwHhcNMjUxMTAyMjM1NDE3WhcNMjUxMTA5MjM1NDE3WjAYMRYwFAYD VQQDEw02OTA3ZWYyOS1iYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHLBGAvl4u35FWhnGGP3wJljrOQqLnyTLS06uYf5IYWDXpfPI4yybCtB00o7 MXF3pvXzdnznY5o6Po6ZU7evE2VQVKyjH9LoWxmyBJYXNFfylsuGIa7BKP872W5o Y69WKkAKXl6LFg2SWtzsrHQwfNW8uJWcslRlYhZg+56t5knUrqqzOX3TSm5A2NUH rl6qGX+I4NVbAWq/fYUrRNYPpmQ33ad35Ase0el1wcPXMMrkJupAxZez//deSvaO tVEbg8kb7iX3L5sWATIG/ZauEqC+j035/DUKb3QgApygQT7xzGX9Jjw+Fl6MJb6v 0ufBjZiS6m+GLDnsiNexMB2oDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI47K9kH JLQeKy2EYOTPyIn5mfx1MB8GA1UdIwQYMBaAFFRBH+czLS70/ydeWdXe/tHM6WAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUJGRi9FM0RDMjlFNjUw REMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2VF9KMTVaMWQ3LTBjenBZ QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFRWY1ek10THZUX0oxNVoxZDctMGN6cFlCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUJGRi9FM0RDMjlFNjUwREMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2 VF9KMTVaMWQ3LTBjenBZQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrpnCIgfjvZA5KH2BWGP/nwUWF6Wgm7edYfZENgvdzRZknb+t1+ApG 6gP1VHHBqPpyFigkpAFm+ZqrXe5sUr+7nwYUxgY3ekzg+6v/qHNSPURK68vLq/Jd 4NHn66MKZJPjQOr0wvEMAzckllr1+9yKv0lE8ynfr4v+Ri45yX2YAYoosWJvqFtW FX/zlxP9neb2iqRltY3VH9hEL+VwR8IEImCrrvZka374GD44JAbZFmOpXixc3Bj+ GpsbkHKUVR6lpgMuV2XYul3F+peKlRDrAQlq/sAuSp4m1sRVQva1hBtkpihkeelr YoZgFGwFj8vjhwPNzDZZXWn33kA0pdW+ -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:30 2025 by rpki-client