$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft File: vz-8DaluLlE6qliBLGlLzQe43Xc.mft (raw, json) Hash identifier: W1NTgiHDodNFZTlXvSii1SaAcEWzhbJpryZ0YUyExA0= Subject key identifier: 49:7E:DA:D7:06:26:EE:D0:09:E5:B3:A6:A1:8B:ED:71:5A:B9:8D:95 Authority key identifier: BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77 Certificate issuer: /CN=A91C7AC5/serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77 Certificate serial: 08E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft Manifest number: 08DB Signing time: Tue 04 Nov 2025 20:30:44 +0000 Manifest this update: Tue 04 Nov 2025 20:30:43 +0000 Manifest next update: Tue 11 Nov 2025 20:30:43 +0000 Files and hashes: 1: vz-8DaluLlE6qliBLGlLzQe43Xc.crl (hash: hn1TYifLpDt5tL6m7qJ48MbdPkqU0aOMoi6cTu68NC8=) 2: 5BC42F286E9F11EC90A66E2BC4F9AE02.roa (hash: Q9vZhAG6Yamyb12YqcE4KK4DdQNWSpjDAHBVo8AWp24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AC5, serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77 Validity Not Before: Nov 4 20:30:43 2025 GMT Not After : Nov 11 20:30:43 2025 GMT Subject: CN=690a6273-d627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:e2:22:dc:88:7c:85:1b:38:34:6e:1f:63: ab:cc:b9:d0:a3:87:25:6d:57:e6:fe:56:c9:99:e4: ac:8a:82:23:60:62:56:0a:61:11:42:e6:2e:57:ef: 3a:29:58:c1:72:1c:27:5c:f6:c1:3f:fe:2b:2c:22: 4a:da:a7:9e:34:f9:6c:2b:6b:90:71:8d:5f:85:54: d1:63:34:34:85:0c:d5:fd:b1:1b:8a:b9:1e:0e:b4: 33:8b:3f:73:ec:41:2f:24:4a:ce:6d:84:50:2b:ff: bb:09:de:43:af:95:f2:01:66:51:dc:e5:96:ec:a4: 3b:f1:17:dd:56:13:e2:e9:b6:be:e2:0f:a2:43:00: 23:0d:aa:39:bc:10:fb:9b:89:f7:05:f9:ec:15:32: e6:b2:24:29:c1:69:ca:8d:4f:92:6d:97:5c:28:79: 43:d9:60:e4:d0:17:d0:2d:45:40:ff:f7:f8:d9:3e: 5b:ab:03:1e:9c:e2:51:ac:ba:c2:d0:ff:c4:56:7f: ab:3d:2e:58:eb:95:78:85:44:71:b1:08:d5:16:b2: 78:46:31:47:03:d3:b8:ed:6a:34:01:1a:f1:1a:0e: 80:47:66:62:03:f8:2f:8c:a3:d6:e5:7a:50:de:a9: c5:f0:f9:a1:3b:d1:71:34:71:d7:70:a7:8a:14:47: 68:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7E:DA:D7:06:26:EE:D0:09:E5:B3:A6:A1:8B:ED:71:5A:B9:8D:95 X509v3 Authority Key Identifier: keyid:BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:91:19:46:86:c2:55:b1:27:cd:e8:97:2b:19:82:59:76:1f: 5e:07:a1:0c:ee:fc:1d:7b:2b:bf:8a:ae:d1:08:1b:7a:48:f2: 87:96:60:cd:76:89:75:47:ac:06:1b:cd:fe:d4:c1:1c:75:e6: 11:af:b2:c0:97:18:43:c5:90:13:9d:92:1c:a4:35:1e:03:53: 84:df:e8:ee:56:1b:74:73:4c:19:d0:f7:c5:43:b1:d4:cf:67: 96:53:d0:c7:59:c4:55:6e:28:f1:29:86:54:6d:5d:a8:77:18: b8:8c:80:d1:5b:17:62:4a:87:ab:c4:f2:9b:33:43:1c:c7:3f: 33:bb:d9:71:15:63:53:4d:af:02:d6:b2:ea:c9:af:bf:48:2b: 45:36:de:1a:54:0d:5f:7a:e5:13:8b:41:77:4e:ca:18:83:2b: f9:1c:af:b8:df:4c:06:ae:1f:17:1b:64:9d:a5:2b:8c:33:11: 67:2a:30:e5:25:7a:df:6f:fa:43:6e:fe:d4:1e:17:2b:75:98: f0:0b:ce:fe:52:81:dc:fa:2e:22:32:af:5b:bf:56:e8:27:4f: 07:45:59:7c:1a:f8:f9:c6:63:2d:bc:25:9d:67:2a:43:2d:bb: 54:8d:e3:2e:00:c2:92:34:67:96:dd:3a:18:44:4f:9f:3d:25: 6f:9b:d6:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBQzUxMTAvBgNVBAUTKEJGM0ZCQzBEQTk2RTJFNTEzQUFBNTg4MTJDNjk0QkNE MDdCOERENzcwHhcNMjUxMTA0MjAzMDQzWhcNMjUxMTExMjAzMDQzWjAYMRYwFAYD VQQDEw02OTBhNjI3My1kNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjTiItyIfIUbODRuH2OrzLnQo4clbVfm/lbJmeSsioIjYGJWCmERQuYuV+86 KVjBchwnXPbBP/4rLCJK2qeeNPlsK2uQcY1fhVTRYzQ0hQzV/bEbirkeDrQziz9z 7EEvJErObYRQK/+7Cd5Dr5XyAWZR3OWW7KQ78RfdVhPi6ba+4g+iQwAjDao5vBD7 m4n3BfnsFTLmsiQpwWnKjU+SbZdcKHlD2WDk0BfQLUVA//f42T5bqwMenOJRrLrC 0P/EVn+rPS5Y65V4hURxsQjVFrJ4RjFHA9O47Wo0ARrxGg6AR2ZiA/gvjKPW5XpQ 3qnF8PmhO9FxNHHXcKeKFEdomwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEl+2tcG Ju7QCeWzpqGL7XFauY2VMB8GA1UdIwQYMBaAFL8/vA2pbi5ROqpYgSxpS80HuN13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FDNS9BM0VCNUMwMEMw RDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxsRTZxbGlCTEdsTHpRZTQz WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z6LThEYWx1TGxFNnFsaUJMR2xMelFlNDNYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0FDNS9BM0VCNUMwMEMwRDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxs RTZxbGlCTEdsTHpRZTQzWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIkRlGhsJVsSfN6JcrGYJZdh9eB6EM7vwdeyu/iq7RCBt6SPKHlmDN dol1R6wGG83+1MEcdeYRr7LAlxhDxZATnZIcpDUeA1OE3+juVht0c0wZ0PfFQ7HU z2eWU9DHWcRVbijxKYZUbV2odxi4jIDRWxdiSoerxPKbM0Mcxz8zu9lxFWNTTa8C 1rLqya+/SCtFNt4aVA1feuUTi0F3TsoYgyv5HK+430wGrh8XG2SdpSuMMxFnKjDl JXrfb/pDbv7UHhcrdZjwC87+UoHc+i4iMq9bv1boJ08HRVl8Gvj5xmMtvCWdZypD LbtUjeMuAMKSNGeW3ToYRE+fPSVvm9Zu -----END CERTIFICATE-----Generated at Wed Nov 5 11:50:21 2025 by rpki-client