$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft File: Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json) Hash identifier: DZQ0CRX0FBG1CuG1gq8XH7E3LgymhmcC2DKLGzBbbeM= Subject key identifier: 93:F2:0D:06:B8:59:ED:39:49:BE:8F:BD:06:12:E8:E6:FE:5A:A5:1E Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C Certificate issuer: /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft Manifest number: 48 Signing time: Mon 03 Nov 2025 07:20:32 +0000 Manifest this update: Mon 03 Nov 2025 07:20:31 +0000 Manifest next update: Mon 10 Nov 2025 07:20:31 +0000 Files and hashes: 1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: O/FP8AsNKezXU9GXyiPTSZzn8lNU449bTYP2Ll1l5bY=) 2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Mp1JcqkdMAmbReGNCmp0QyS72nIBhDSCoOb/C1pLXic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C Validity Not Before: Nov 3 07:20:31 2025 GMT Not After : Nov 10 07:20:31 2025 GMT Subject: CN=690857c0-ceab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ee:66:58:1b:86:88:1b:a1:c3:3d:88:3d:9e: d2:bf:df:c4:5f:3f:47:df:7e:15:ff:32:f6:d7:ae: d5:64:48:55:a7:d9:98:6f:78:80:51:cd:8d:7b:ff: a7:9a:b2:c6:32:0f:8a:d7:44:78:3b:a3:b6:2b:41: e5:90:7f:5d:cb:e3:c5:02:2f:63:d2:73:2c:47:54: 72:cf:82:d7:ef:52:fe:9e:f5:86:da:e3:8e:42:6a: cf:91:db:db:a8:ff:a1:02:08:bb:4d:13:87:15:11: d2:d0:82:64:41:ef:b6:da:76:e8:8c:87:e2:12:22: cd:20:ed:1c:5b:ed:bf:68:36:e5:f3:02:c2:34:f0: cf:da:bd:4b:6c:77:b4:15:ab:75:12:b3:05:0b:70: ad:57:c3:13:dc:39:94:ed:86:fa:1e:10:2d:5a:66: 54:a1:f2:45:37:5f:84:e4:d4:6b:93:5c:a0:8c:60: 75:1f:65:8c:d9:8c:b1:4b:39:05:f7:8e:7d:f5:c5: e1:d8:f2:fd:63:eb:ef:af:80:27:f1:45:91:22:4b: dc:d0:47:7e:64:1d:2c:35:1f:fd:61:8d:41:83:b9: 65:0f:0d:54:dc:f3:3f:6c:13:a6:d3:8f:49:6a:3f: 94:15:f5:26:10:48:dc:d4:f0:8b:57:8d:02:89:3c: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F2:0D:06:B8:59:ED:39:49:BE:8F:BD:06:12:E8:E6:FE:5A:A5:1E X509v3 Authority Key Identifier: keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7d:dc:b5:f0:e3:40:52:aa:4a:fd:bb:7e:18:47:b2:79:c6: 3b:2a:96:75:51:92:ed:f8:e9:7a:e9:ca:1b:e4:24:c8:a5:c5: 4d:65:13:40:8a:a2:7e:34:34:7b:81:6c:88:37:76:d5:7f:9b: a2:71:b4:cc:70:3c:32:3c:49:00:5b:c8:4f:90:ab:83:8a:d5: b3:f6:cf:3d:bb:b9:b7:6c:25:96:8f:54:b3:7a:55:ba:f7:b0: 0c:61:2f:ba:91:97:fb:cb:ed:42:86:4c:23:a3:2a:75:31:3a: b1:c4:16:58:76:20:65:0c:61:6e:91:16:da:d3:3d:ad:07:a7: 88:f3:ad:71:fd:5b:15:65:5e:5e:59:ea:05:db:73:31:22:ce: 40:5f:c1:65:0b:aa:a9:13:ab:c0:39:ab:0f:f0:e9:c4:e7:dd: ee:04:85:c6:f4:c9:31:d6:62:bb:b3:ff:01:9a:bb:72:b7:24: a1:fa:a8:ed:03:8c:bd:55:18:d4:b4:8f:59:01:3d:27:32:40: 2b:09:fa:12:9c:20:40:68:a1:fb:ae:c3:7a:bb:25:ac:1c:79: 88:1d:5d:6e:cc:83:1d:b4:de:4d:c7:f3:1a:2e:ed:a9:5a:6e: 2d:51:ee:b5:31:f1:cb:24:39:92:b1:89:3d:21:5b:72:00:29: ef:8e:a0:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUNBOTExMC8GA1UEBRMoNTVERDZDMUJGMUM0NDdERjNDQzg2NDBEMTExMkE5NkFD QUUxRjgwQzAeFw0yNTExMDMwNzIwMzFaFw0yNTExMTAwNzIwMzFaMBgxFjAUBgNV BAMTDTY5MDg1N2MwLWNlYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm7mZYG4aIG6HDPYg9ntK/38RfP0fffhX/MvbXrtVkSFWn2ZhveIBRzY17/6ea ssYyD4rXRHg7o7YrQeWQf13L48UCL2PScyxHVHLPgtfvUv6e9Yba445Cas+R29uo /6ECCLtNE4cVEdLQgmRB77baduiMh+ISIs0g7Rxb7b9oNuXzAsI08M/avUtsd7QV q3USswULcK1XwxPcOZTthvoeEC1aZlSh8kU3X4Tk1GuTXKCMYHUfZYzZjLFLOQX3 jn31xeHY8v1j6++vgCfxRZEiS9zQR35kHSw1H/1hjUGDuWUPDVTc8z9sE6bTj0lq P5QV9SYQSNzU8ItXjQKJPAFVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk/INBrhZ 7TlJvo+9BhLo5v5apR4wHwYDVR0jBBgwFoAUVd1sG/HER988yGQNERKpasrh+Aww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1Q0E5Lzk2RDYxMUQwNEIw QTExRjBBQjU0MjAxRUM0RjlBRTAyL1ZkMXNHX0hFUjk4OHlHUU5FUktwYXNyaC1B dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVmQxc0dfSEVSOTg4eUdRTkVSS3Bhc3JoLUF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 Q0E5Lzk2RDYxMUQwNEIwQTExRjBBQjU0MjAxRUM0RjlBRTAyL1ZkMXNHX0hFUjk4 OHlHUU5FUktwYXNyaC1Bdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACt93LXw40BSqkr9u34YR7J5xjsqlnVRku346XrpyhvkJMilxU1lE0CK on40NHuBbIg3dtV/m6JxtMxwPDI8SQBbyE+Qq4OK1bP2zz27ubdsJZaPVLN6Vbr3 sAxhL7qRl/vL7UKGTCOjKnUxOrHEFlh2IGUMYW6RFtrTPa0Hp4jzrXH9WxVlXl5Z 6gXbczEizkBfwWULqqkTq8A5qw/w6cTn3e4Ehcb0yTHWYruz/wGau3K3JKH6qO0D jL1VGNS0j1kBPScyQCsJ+hKcIEBoofuuw3q7JawceYgdXW7Mgx203k3H8xou7ala bi1R7rUx8cskOZKxiT0hW3IAKe+OoEQ= -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:29 2025 by rpki-client