$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: aJM1pCWf0UJlChigbHtkzmKLdtt2Iizh3aG76z2hF7s= Subject key identifier: 7B:16:25:5B:B0:2F:AB:66:92:CA:E0:D6:19:DD:01:1A:5A:9F:56:86 Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0D3B Signing time: Thu 18 Sep 2025 18:12:48 +0000 Manifest this update: Thu 18 Sep 2025 18:12:48 +0000 Manifest next update: Thu 25 Sep 2025 18:12:48 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: xZjcHbbfbi0Eiljes6hzaCU2a55xX4l65moo/jCVf9A=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Sep 18 18:12:48 2025 GMT Not After : Sep 25 18:12:48 2025 GMT Subject: CN=68cc4ba0-6cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:54:5b:13:0f:97:86:81:45:36:2f:eb:5e: b4:65:a8:fd:26:4f:df:57:7d:61:f3:63:b4:2a:0e: a3:a2:a2:c1:15:49:bc:de:46:26:05:fd:00:11:a5: df:a1:14:5d:51:90:c1:ab:da:20:e6:ca:9f:58:75: 8d:2c:a4:eb:df:58:c8:a6:b7:b3:2d:8a:2e:bd:15: b5:0c:59:86:72:0c:1e:99:49:d9:24:27:5c:e1:74: cc:a3:e4:f3:84:8f:2f:f0:a1:bd:00:a9:16:b1:05: 1d:4f:05:8e:69:e8:44:d3:5f:76:e4:7d:87:b9:09: bc:2e:5f:d0:17:24:9b:b1:f9:e1:31:cd:46:f9:a0: a3:96:0a:cd:74:49:c7:b1:93:ab:ff:35:16:95:16: 68:44:73:88:e6:34:de:d1:31:0a:55:79:5a:fb:ee: 78:29:8e:b3:dc:3a:a4:38:84:4b:cb:f8:ed:0e:51: b6:f9:8f:87:2f:9b:aa:0e:bc:8f:1f:44:a1:c6:aa: d6:32:34:8e:65:c5:3c:8d:ad:37:d5:67:ad:d4:aa: 1c:cd:de:94:18:41:54:fe:37:bf:28:70:0a:51:5f: 7a:4a:db:2f:be:be:e4:53:eb:56:2f:e0:db:2c:d1: f4:98:df:cc:58:5b:05:11:a0:d1:15:d9:dc:82:89: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:16:25:5B:B0:2F:AB:66:92:CA:E0:D6:19:DD:01:1A:5A:9F:56:86 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:56:95:87:40:d0:47:ce:44:e7:75:be:d3:41:0c:31:46:44: e3:9a:bb:df:6c:3a:e1:9c:d6:8d:cb:fa:48:51:60:8a:ab:0c: 06:03:1c:6d:a6:0e:13:fc:d1:c3:60:6b:eb:e4:85:fb:cd:2d: 77:ed:31:e6:01:b1:d4:fb:0e:ed:ad:cf:92:ea:b1:de:e8:75: b6:04:b8:b6:e2:eb:a5:3f:1f:06:82:b7:51:1a:7a:07:52:20: 62:9b:d2:16:51:1e:c5:71:66:0a:fa:fd:6d:ab:05:79:ca:bc: 82:e8:86:c5:54:0d:a0:f8:4c:55:b7:93:e3:3a:c1:3b:73:39: e8:51:e9:85:eb:0e:a0:43:05:0b:18:70:6b:c0:f7:75:68:1d: b7:8f:c6:98:bb:36:cf:48:46:6e:5e:ea:96:e3:9a:fe:cc:22: ee:f6:16:ce:83:12:80:63:72:32:26:72:85:75:f5:c8:b4:90: 01:5e:6c:42:19:bb:b3:74:4c:60:f6:11:a0:3a:e4:ce:ed:85: 17:c7:9f:d0:0a:3f:ad:78:0f:5e:47:c1:c8:1c:09:a6:3d:e2: 2b:ba:41:25:ba:b6:1d:f3:8f:87:63:02:02:60:07:0c:39:46: d8:09:10:e6:4b:f4:2e:73:a2:f8:42:c5:40:5a:2d:e5:ab:68: ae:c6:da:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwOTE4MTgxMjQ4WhcNMjUwOTI1MTgxMjQ4WjAYMRYwFAYD VQQDEw02OGNjNGJhMC02Y2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwElUWxMPl4aBRTYv6160Zaj9Jk/fV31h82O0Kg6joqLBFUm83kYmBf0AEaXf oRRdUZDBq9og5sqfWHWNLKTr31jIprezLYouvRW1DFmGcgwemUnZJCdc4XTMo+Tz hI8v8KG9AKkWsQUdTwWOaehE01925H2HuQm8Ll/QFySbsfnhMc1G+aCjlgrNdEnH sZOr/zUWlRZoRHOI5jTe0TEKVXla++54KY6z3DqkOIRLy/jtDlG2+Y+HL5uqDryP H0ShxqrWMjSOZcU8ja031Wet1Koczd6UGEFU/je/KHAKUV96Stsvvr7kU+tWL+Db LNH0mN/MWFsFEaDRFdncgolqTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsWJVuw L6tmksrg1hndARpan1aGMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiVpWHQNBHzkTndb7TQQwxRkTjmrvfbDrhnNaNy/pIUWCKqwwGAxxt pg4T/NHDYGvr5IX7zS137THmAbHU+w7trc+S6rHe6HW2BLi24uulPx8GgrdRGnoH UiBim9IWUR7FcWYK+v1tqwV5yryC6IbFVA2g+ExVt5PjOsE7cznoUemF6w6gQwUL GHBrwPd1aB23j8aYuzbPSEZuXuqW45r+zCLu9hbOgxKAY3IyJnKFdfXItJABXmxC GbuzdExg9hGgOuTO7YUXx5/QCj+teA9eR8HIHAmmPeIrukElurYd84+HYwICYAcM OUbYCRDmS/Quc6L4QsVAWi3lq2iuxtry -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:41 2025 by rpki-client