$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: 4J104qCxXDr1R0464O5qAi3xST3Z4Bqx9jeprcT6kKo= Subject key identifier: 32:F8:17:9E:22:17:FE:38:59:AB:E7:9E:B1:5F:BD:99:77:D6:82:7A Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 1395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 138D Signing time: Sun 02 Nov 2025 16:58:31 +0000 Manifest this update: Sun 02 Nov 2025 16:58:31 +0000 Manifest next update: Sun 09 Nov 2025 16:58:31 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: sP/wHItTQjh21ePDzI8Li8eO1phK18CB6HwhlMxO4KQ=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: c/V3Stz0hBoC77cDsx2sOFkExhPVs+UBbA7TaA5YseQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5013 (0x1395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Nov 2 16:58:31 2025 GMT Not After : Nov 9 16:58:31 2025 GMT Subject: CN=69078db7-f5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:3e:96:41:15:90:6f:51:0e:e8:b7:b4:89: b4:0b:ce:2f:55:d8:31:54:eb:b2:21:5d:ed:4a:22: 04:4e:43:62:1e:85:8e:62:3f:09:aa:12:10:9b:c0: 6d:9d:df:42:78:a8:06:29:37:20:62:cf:3b:0d:f2: 7c:e2:7e:3a:b7:2f:7d:19:79:60:45:f0:2d:ca:fd: 83:bd:d7:5f:5a:08:ff:a2:6e:dc:21:72:d2:f3:6c: 1f:ef:45:07:85:66:89:d6:9c:1b:a2:99:56:63:a5: 59:7e:84:2f:74:f5:ff:4c:40:87:a4:0c:23:47:76: ab:43:04:66:a7:07:37:3b:3c:9b:50:bd:8c:be:28: b7:df:ba:50:7f:3f:dd:98:16:d4:40:32:2b:92:3a: a4:a9:65:01:cc:63:fc:48:ab:d9:e5:7e:aa:f3:de: d9:f6:46:d9:ee:35:b3:df:51:14:63:52:19:2d:44: f6:7e:91:8b:a9:ce:18:cb:07:7f:57:c2:24:9d:e5: 3c:84:cb:b5:26:ea:63:4e:b9:7c:4d:fb:cf:47:37: 06:87:a4:6b:da:07:0c:f7:1e:57:4c:f1:e9:28:27: 3e:80:1b:ca:8d:bc:94:96:73:c1:9c:2e:77:a0:06: 25:9d:66:67:b4:e3:e1:7c:24:a5:d9:f0:8f:4a:ce: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F8:17:9E:22:17:FE:38:59:AB:E7:9E:B1:5F:BD:99:77:D6:82:7A X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b8:8d:71:25:07:b2:64:11:a2:d8:ad:8e:02:2e:7f:03:60: 84:fa:e6:53:f7:9b:f9:70:11:b6:ee:7c:78:ab:21:bf:3b:4c: 6e:67:21:2e:6f:d4:4b:51:04:cd:21:4c:81:f1:aa:0e:82:c6: 67:40:4c:fe:ad:95:c8:a7:15:3b:8f:8d:37:71:08:8b:0d:56: da:19:28:65:80:03:b3:69:4d:f4:31:e8:15:a1:2a:3e:d5:dc: 64:6f:53:4f:8f:b5:57:96:dd:af:91:d1:88:28:5e:0d:c9:c8: c2:bb:76:ae:49:71:7f:32:f1:20:79:3d:34:ad:f5:39:8b:1c: 87:8b:a9:15:17:71:83:e9:4a:32:b2:04:69:fb:8e:4f:43:10: 99:8e:10:2a:b9:d5:38:f7:bd:e7:12:8e:5e:5b:89:fd:01:09: eb:73:4a:d3:d2:b7:51:cd:d7:18:86:37:a4:30:3b:47:43:06: 58:51:c4:5e:02:dd:5d:76:e8:1c:a0:d9:1c:d7:e0:75:c8:5c: 1f:f9:9d:4c:6d:f5:87:d3:c3:c7:fc:47:5e:c4:68:0a:81:97: 82:e4:68:30:a2:9d:4d:87:1c:4d:a3:fb:83:49:d0:e1:26:73: eb:2a:67:1d:dd:44:be:90:27:9b:df:cc:1d:86:96:b8:58:a3: 18:8f:6f:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjUxMTAyMTY1ODMxWhcNMjUxMTA5MTY1ODMxWjAYMRYwFAYD VQQDEw02OTA3OGRiNy1mNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6s+lkEVkG9RDui3tIm0C84vVdgxVOuyIV3tSiIETkNiHoWOYj8JqhIQm8Bt nd9CeKgGKTcgYs87DfJ84n46ty99GXlgRfAtyv2DvddfWgj/om7cIXLS82wf70UH hWaJ1pwboplWY6VZfoQvdPX/TECHpAwjR3arQwRmpwc3OzybUL2Mvii337pQfz/d mBbUQDIrkjqkqWUBzGP8SKvZ5X6q897Z9kbZ7jWz31EUY1IZLUT2fpGLqc4Yywd/ V8IkneU8hMu1JupjTrl8TfvPRzcGh6Rr2gcM9x5XTPHpKCc+gBvKjbyUlnPBnC53 oAYlnWZntOPhfCSl2fCPSs5ZzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL4F54i F/44WavnnrFfvZl31oJ6MB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZuI1xJQeyZBGi2K2OAi5/A2CE+uZT95v5cBG27nx4qyG/O0xuZyEu b9RLUQTNIUyB8aoOgsZnQEz+rZXIpxU7j403cQiLDVbaGShlgAOzaU30MegVoSo+ 1dxkb1NPj7VXlt2vkdGIKF4NycjCu3auSXF/MvEgeT00rfU5ixyHi6kVF3GD6Uoy sgRp+45PQxCZjhAqudU4973nEo5eW4n9AQnrc0rT0rdRzdcYhjekMDtHQwZYUcRe At1ddugcoNkc1+B1yFwf+Z1MbfWH08PH/EdexGgKgZeC5Ggwop1NhxxNo/uDSdDh JnPrKmcd3US+kCeb38wdhpa4WKMYj29B -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:21 2025 by rpki-client