$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft File: vBRJ7peREatw2N-Y2rpOJrprxls.mft (raw, json) Hash identifier: t5AyN56tG1N7u6B5EdktTDOGmrqTFbl5ewXPKt0hM/U= Subject key identifier: AD:97:29:CC:F3:6B:3E:C9:69:C5:15:A6:BA:A8:E3:6C:FB:90:3F:A8 Authority key identifier: BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B Certificate issuer: /CN=A91CCA34/serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B Certificate serial: 0783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft Manifest number: 077B Signing time: Tue 04 Nov 2025 21:39:43 +0000 Manifest this update: Tue 04 Nov 2025 21:39:42 +0000 Manifest next update: Tue 11 Nov 2025 21:39:42 +0000 Files and hashes: 1: vBRJ7peREatw2N-Y2rpOJrprxls.crl (hash: 9zFM9K0hmX3pQd0q0JFOJ8S9MZ+kJqcYhJZUR6fcra8=) 2: 7633392033B411EB98035F74C4F9AE02.roa (hash: 7jewiEiBEZ9bz5FtGjVeeC/IQVsbYDK8Mriosy8TldQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA34, serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B Validity Not Before: Nov 4 21:39:42 2025 GMT Not After : Nov 11 21:39:42 2025 GMT Subject: CN=690a729f-9db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:1e:47:42:62:18:ad:7f:16:1c:51:b3:83: d4:b3:11:8e:a8:03:04:e6:29:b2:e5:c9:c7:08:1a: 7d:9e:95:cd:50:f1:58:91:55:92:8d:76:2f:5f:a0: 1b:3c:b6:f9:b6:fb:90:69:63:a0:76:dc:77:de:23: df:64:b2:a3:5a:59:9f:3d:71:e1:69:62:87:6b:c0: 80:9f:05:89:f9:13:d1:59:22:72:00:0e:8c:b9:9b: 53:89:26:76:b4:6d:fe:34:d5:ad:9c:8a:78:ef:6b: 13:1c:a4:93:db:14:cb:7a:f8:66:58:d1:4c:89:00: e5:84:0c:4f:76:1a:72:47:dd:04:38:72:1b:81:e5: 01:a0:7a:28:e6:d4:e4:db:af:11:53:23:be:98:d3: 13:fc:30:47:53:91:64:4a:03:03:0e:dd:11:a8:5a: 47:42:70:30:f8:4e:42:b3:05:32:a7:68:46:4a:0d: d9:8e:e9:a0:dc:0a:5d:72:5a:83:00:52:e6:8e:1a: 8b:e9:98:9b:7d:8a:8f:26:24:bd:2a:77:76:b4:f4: 09:c6:d4:af:53:19:56:1a:89:83:e7:1a:bb:9c:99: e1:c2:53:72:15:ae:cb:f7:64:39:5f:89:a0:85:0b: 62:8c:f1:11:e0:9b:46:14:a5:5f:3e:54:d6:bd:06: 56:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:97:29:CC:F3:6B:3E:C9:69:C5:15:A6:BA:A8:E3:6C:FB:90:3F:A8 X509v3 Authority Key Identifier: keyid:BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:49:09:ef:c4:1c:22:a5:58:b9:ab:a4:7a:eb:10:f9:9b:37: ca:83:d2:72:0d:44:d3:e9:5e:cd:d6:38:7c:f5:ff:33:bb:19: 13:7c:da:ea:4e:64:3a:9d:c3:d7:4d:df:55:64:88:b9:db:c9: 3c:39:70:9b:6c:1d:5e:06:e0:90:1a:cd:77:16:b1:f7:e0:12: a3:af:7f:42:07:f1:37:49:e8:79:82:6f:a4:02:7d:54:da:cc: ee:23:31:f6:97:77:c6:5f:8d:01:da:3a:6a:4b:9b:c6:74:6f: 1c:e0:28:1f:8c:05:f4:ad:a1:a9:1b:81:90:b8:8e:08:ce:60: ba:3b:db:3a:b5:09:92:f8:19:31:8c:4f:5c:8c:d9:2c:3d:d4: be:ad:70:d2:39:fc:87:3d:83:ea:39:95:10:3d:d2:c3:63:0a: 59:81:17:75:4d:66:82:59:90:e7:e6:d7:24:0c:b5:52:e4:fc: c6:e5:ae:99:18:af:46:2c:a9:cc:32:27:c5:fb:88:7e:31:29: 3d:8a:36:16:0b:3c:6a:80:76:c4:72:ef:62:02:39:db:a6:b3: 7c:9f:ff:e2:50:0a:4f:fa:62:3f:29:6c:81:76:3d:3f:e3:8a: 6e:cb:bc:82:58:5e:84:25:e7:1b:88:c9:a7:94:97:6b:9a:fe: 7c:db:49:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBMzQxMTAvBgNVBAUTKEJDMTQ0OUVFOTc5MTExQUI3MEQ4REY5OERBQkE0RTI2 QkE2QkM2NUIwHhcNMjUxMTA0MjEzOTQyWhcNMjUxMTExMjEzOTQyWjAYMRYwFAYD VQQDEw02OTBhNzI5Zi05ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszMeR0JiGK1/FhxRs4PUsxGOqAME5imy5cnHCBp9npXNUPFYkVWSjXYvX6Ab PLb5tvuQaWOgdtx33iPfZLKjWlmfPXHhaWKHa8CAnwWJ+RPRWSJyAA6MuZtTiSZ2 tG3+NNWtnIp472sTHKST2xTLevhmWNFMiQDlhAxPdhpyR90EOHIbgeUBoHoo5tTk 268RUyO+mNMT/DBHU5FkSgMDDt0RqFpHQnAw+E5CswUyp2hGSg3Zjumg3ApdclqD AFLmjhqL6ZibfYqPJiS9Knd2tPQJxtSvUxlWGomD5xq7nJnhwlNyFa7L92Q5X4mg hQtijPER4JtGFKVfPlTWvQZWCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2XKczz az7JacUVprqo42z7kD+oMB8GA1UdIwQYMBaAFLwUSe6XkRGrcNjfmNq6Tia6a8Zb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0EzNC82RkFBMzY3ODMz QjIxMUVCQTg4QTBBNkZDNEY5QUUwMi92QlJKN3BlUkVhdHcyTi1ZMnJwT0pycHJ4 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCUko3cGVSRWF0dzJOLVkycnBPSnJwcnhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0EzNC82RkFBMzY3ODMzQjIxMUVCQTg4QTBBNkZDNEY5QUUwMi92QlJKN3BlUkVh dHcyTi1ZMnJwT0pycHJ4bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgSQnvxBwipVi5q6R66xD5mzfKg9JyDUTT6V7N1jh89f8zuxkTfNrq TmQ6ncPXTd9VZIi528k8OXCbbB1eBuCQGs13FrH34BKjr39CB/E3Seh5gm+kAn1U 2szuIzH2l3fGX40B2jpqS5vGdG8c4CgfjAX0raGpG4GQuI4IzmC6O9s6tQmS+Bkx jE9cjNksPdS+rXDSOfyHPYPqOZUQPdLDYwpZgRd1TWaCWZDn5tckDLVS5PzG5a6Z GK9GLKnMMifF+4h+MSk9ijYWCzxqgHbEcu9iAjnbprN8n//iUApP+mI/KWyBdj0/ 44puy7yCWF6EJecbiMmnlJdrmv5820m1 -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:33 2025 by rpki-client