$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: zoNCm1X/7jc0XSLbjMZYkHv0+ocP7OJfL+Km5J2hses= Subject key identifier: FF:3B:E7:21:74:0F:1C:5B:1C:E4:3E:06:95:66:6F:49:9D:88:89:90 Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 06E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 06DF Signing time: Sun 02 Nov 2025 21:57:52 +0000 Manifest this update: Sun 02 Nov 2025 21:57:51 +0000 Manifest next update: Sun 09 Nov 2025 21:57:51 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: VxFkDqeVpX6ZlkuXCWQUtK1YavoADiUPUC9lKl0GwAM=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1764 (0x6e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: Nov 2 21:57:51 2025 GMT Not After : Nov 9 21:57:51 2025 GMT Subject: CN=6907d3e0-7763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:c6:42:a0:c5:d9:95:ad:f4:b0:06:a9:c8: 96:3b:70:01:a2:0e:92:80:cc:9f:e4:53:b2:e7:37: bb:02:2e:62:88:e0:d0:e7:04:ce:50:ae:97:34:7f: 37:95:c1:cd:14:ab:ed:f9:a9:79:d8:a7:06:de:b8: 28:0b:36:14:b6:1e:cf:55:13:53:5e:b1:97:1d:45: 2b:c8:57:04:79:da:64:64:8e:13:a7:59:ea:ad:73: a1:7b:2d:e5:5e:23:23:04:a9:c0:a5:94:ba:c0:78: 97:a6:7c:d5:ab:cd:cb:b2:47:52:bb:ab:cd:a9:6d: ec:71:32:91:a6:64:c5:a5:e6:af:f5:35:cb:2e:40: 1d:bb:03:0a:91:38:8a:a7:8d:0c:8d:d2:55:f8:b7: cf:02:b4:b5:25:ba:53:c5:5d:7c:50:b3:07:b6:41: d9:d7:23:b7:65:79:7c:70:5c:25:be:ca:c7:d8:a6: e7:de:2a:08:7d:1b:28:09:2f:a8:62:a9:9f:9c:09: 82:33:eb:2b:b8:34:65:6b:36:4c:d5:87:ed:d5:78: d4:63:96:e4:5e:8b:72:a9:d7:5c:31:c1:b5:07:e3: b3:fb:7f:b8:23:65:cd:7a:ed:b4:3e:5d:43:bb:20: 9a:34:f9:42:8e:eb:68:18:c3:ef:d3:96:91:f8:98: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3B:E7:21:74:0F:1C:5B:1C:E4:3E:06:95:66:6F:49:9D:88:89:90 X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:26:05:34:00:c9:41:15:c2:19:6c:04:0c:14:86:15:21:9c: 35:18:7d:bc:9b:52:6d:3d:d3:28:a1:b7:64:23:70:4b:28:7d: 00:5b:27:d5:7f:bd:41:56:9f:57:85:c4:c7:50:30:75:28:06: 45:d6:f1:b8:c8:34:1d:40:d4:7f:0f:a5:d9:40:67:7f:6a:d9: 7b:ad:be:34:63:47:93:dd:19:aa:cc:8d:ad:35:e1:b1:0c:19: b1:a4:d4:7b:55:03:21:bd:93:34:d7:68:29:70:e0:d9:32:06: e6:e8:3d:4d:11:06:58:b7:35:bb:42:0f:81:ea:82:38:27:1d: da:01:24:0d:22:b6:35:b5:1a:8b:78:b6:64:78:6e:6f:98:9c: dd:12:b2:b3:1a:41:66:17:3a:67:ea:08:3e:d7:8a:44:7e:b3: 59:3d:6f:a3:54:13:39:8c:01:6e:ea:5b:e9:3a:19:67:88:2c: 05:4f:de:bd:e4:fd:1a:ee:fe:4f:e5:18:de:4b:00:2c:d9:e2: 2b:48:1e:8c:45:f1:83:11:08:0b:03:e9:10:6b:8f:2e:a6:eb: 92:66:8b:c1:91:4b:81:03:5b:81:2f:7c:82:a2:69:31:00:19: c9:94:cb:de:17:39:e3:47:60:7d:b0:43:7c:b4:54:00:dd:ab: 2d:fc:28:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjUxMTAyMjE1NzUxWhcNMjUxMTA5MjE1NzUxWjAYMRYwFAYD VQQDEw02OTA3ZDNlMC03NzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLrGQqDF2ZWt9LAGqciWO3ABog6SgMyf5FOy5ze7Ai5iiODQ5wTOUK6XNH83 lcHNFKvt+al52KcG3rgoCzYUth7PVRNTXrGXHUUryFcEedpkZI4Tp1nqrXOhey3l XiMjBKnApZS6wHiXpnzVq83LskdSu6vNqW3scTKRpmTFpeav9TXLLkAduwMKkTiK p40MjdJV+LfPArS1JbpTxV18ULMHtkHZ1yO3ZXl8cFwlvsrH2Kbn3ioIfRsoCS+o YqmfnAmCM+sruDRlazZM1Yft1XjUY5bkXotyqddcMcG1B+Oz+3+4I2XNeu20Pl1D uyCaNPlCjutoGMPv05aR+JjyWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP875yF0 DxxbHOQ+BpVmb0mdiImQMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGJgU0AMlBFcIZbAQMFIYVIZw1GH28m1JtPdMoobdkI3BLKH0AWyfV f71BVp9XhcTHUDB1KAZF1vG4yDQdQNR/D6XZQGd/atl7rb40Y0eT3RmqzI2tNeGx DBmxpNR7VQMhvZM012gpcODZMgbm6D1NEQZYtzW7Qg+B6oI4Jx3aASQNIrY1tRqL eLZkeG5vmJzdErKzGkFmFzpn6gg+14pEfrNZPW+jVBM5jAFu6lvpOhlniCwFT969 5P0a7v5P5RjeSwAs2eIrSB6MRfGDEQgLA+kQa48upuuSZovBkUuBA1uBL3yComkx ABnJlMveFznjR2B9sEN8tFQA3ast/CgZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:06 2025 by rpki-client