$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft File: T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json) Hash identifier: ulFdn13tmBt3tNegsYy4zEqu5l0AI0Y6W5ajiMpK4JA= Subject key identifier: 99:BB:EF:34:20:F6:D1:6B:56:3F:DD:00:B0:C9:A9:E0:AE:C0:31:0F Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E Certificate issuer: /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft Manifest number: 77 Signing time: Mon 03 Nov 2025 06:49:13 +0000 Manifest this update: Mon 03 Nov 2025 06:49:13 +0000 Manifest next update: Mon 10 Nov 2025 06:49:13 +0000 Files and hashes: 1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: wYP5RE+wEbyOMxh96xwJVIo7yTh4PvPWrQNcrTqpDSM=) 2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Validity Not Before: Nov 3 06:49:13 2025 GMT Not After : Nov 10 06:49:13 2025 GMT Subject: CN=69085069-a8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:1e:58:cb:71:83:19:79:f5:44:54:52:fe: f8:6c:84:4d:06:ca:3e:4d:28:a1:76:5c:2e:17:62: 87:78:14:a2:5f:c8:b3:13:68:eb:86:02:0d:d1:e2: e3:76:33:e3:c2:83:c2:02:ce:7e:5c:90:14:54:71: ef:01:17:ef:0a:66:4d:26:3b:7a:80:6b:7c:84:09: c9:d5:6c:0c:50:62:d5:6f:ca:e0:9f:f6:4f:5b:6f: 05:33:b9:15:a0:58:ad:87:66:9d:37:2b:62:1a:af: f5:e4:43:fd:e6:1f:d4:24:f1:99:88:00:2f:7b:ca: 50:c5:92:47:0c:d1:69:d1:ea:4f:f9:8f:74:04:38: 35:17:b3:36:ad:fc:5c:fd:1d:7c:55:c3:f2:26:26: 9a:02:b0:83:7e:d6:0d:dc:3a:c5:4b:33:60:68:14: 83:7a:ac:6a:eb:2f:1d:52:d4:d5:e2:50:26:bb:b5: 7d:ed:92:35:4d:5e:25:95:90:b0:0a:55:0e:71:7e: c3:c8:d1:27:fc:e3:3e:46:20:91:30:c0:61:92:f2: 8c:5d:6f:f8:69:d5:c5:33:df:8f:5c:47:ec:18:e5: cf:7d:85:2b:f4:c1:8b:86:cf:6a:7a:20:82:98:dd: 6a:96:c7:46:97:15:a2:2e:89:8c:aa:b3:2a:6d:99: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BB:EF:34:20:F6:D1:6B:56:3F:DD:00:B0:C9:A9:E0:AE:C0:31:0F X509v3 Authority Key Identifier: keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e5:ce:9d:37:5c:b9:fd:74:a4:ab:e7:c4:1b:97:46:4b:da: fb:d7:79:f2:5e:f0:27:38:aa:97:ad:23:d7:51:15:cc:3d:15: c7:07:62:5a:e1:2a:55:e6:93:be:78:f2:b7:f5:42:1c:6b:61: cd:cf:06:ff:74:30:c6:e9:d0:15:62:27:fb:4a:da:79:b2:da: d6:7d:d4:fa:66:81:93:f6:bc:f0:9e:22:e2:1e:cf:0b:67:04: 91:36:21:24:05:6e:9f:16:28:89:b9:78:3c:e0:e7:35:2f:9c: c4:de:16:43:05:2f:77:de:91:fc:8e:d4:04:bd:74:3c:e1:eb: b4:4a:b5:10:19:85:6b:27:2b:d9:1b:ed:1a:de:b5:a6:58:1a: e5:a8:4d:5a:a7:83:58:1e:67:cb:54:5e:49:4d:30:99:09:d4: c6:3a:36:c0:b2:bd:3d:60:e3:01:35:ec:a6:f7:1d:4a:35:1b: e1:94:d2:0b:7d:23:75:f3:8b:0c:c0:52:78:01:91:a7:2e:5c: 73:5b:69:c2:53:31:4c:f4:f1:5c:00:b7:4e:92:73:3c:58:6d: 4e:2b:8d:f5:20:bf:bf:60:74:65:96:4d:7f:f3:20:83:e8:07: 9e:c4:10:d3:bb:ef:92:41:c9:e3:ce:5b:a6:55:7b:67:bc:73: 01:ca:d0:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNEZGNTRERUFCQUQ0OTQ1NTkyNTEwMTJBQTVBQzIyMjk1 MENCMjYxRTAeFw0yNTExMDMwNjQ5MTNaFw0yNTExMTAwNjQ5MTNaMBgxFjAUBgNV BAMTDTY5MDg1MDY5LWE4Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC19x5Yy3GDGXn1RFRS/vhshE0Gyj5NKKF2XC4XYod4FKJfyLMTaOuGAg3R4uN2 M+PCg8ICzn5ckBRUce8BF+8KZk0mO3qAa3yECcnVbAxQYtVvyuCf9k9bbwUzuRWg WK2HZp03K2Iar/XkQ/3mH9Qk8ZmIAC97ylDFkkcM0WnR6k/5j3QEODUXszat/Fz9 HXxVw/ImJpoCsIN+1g3cOsVLM2BoFIN6rGrrLx1S1NXiUCa7tX3tkjVNXiWVkLAK VQ5xfsPI0Sf84z5GIJEwwGGS8oxdb/hp1cUz349cR+wY5c99hSv0wYuGz2p6IIKY 3WqWx0aXFaIuiYyqsyptmYQtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmbvvNCD2 0WtWP90AsMmp4K7AMQ8wHwYDVR0jBBgwFoAUT/VN6rrUlFWSUQEqpawiKVDLJh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0YwMjYzRkYwMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZXU1VRRXFwYXdpS1ZETEpo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVF9WTjZyclVsRldTVVFFcXBhd2lLVkRMSmg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0YwMjYzRkYwMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZX U1VRRXFwYXdpS1ZETEpoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7lzp03XLn9dKSr58Qbl0ZL2vvXefJe8Cc4qpetI9dRFcw9FccHYlrh KlXmk7548rf1QhxrYc3PBv90MMbp0BViJ/tK2nmy2tZ91PpmgZP2vPCeIuIezwtn BJE2ISQFbp8WKIm5eDzg5zUvnMTeFkMFL3fekfyO1AS9dDzh67RKtRAZhWsnK9kb 7RretaZYGuWoTVqng1geZ8tUXklNMJkJ1MY6NsCyvT1g4wE17Kb3HUo1G+GU0gt9 I3XziwzAUngBkacuXHNbacJTMUz08VwAt06SczxYbU4rjfUgv79gdGWWTX/zIIPo B57EENO775JByePOW6ZVe2e8cwHK0Fs= -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:33 2025 by rpki-client