$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: nRj1+h7IBIglRI7ZZAQ4yO0xXZNo9/bJcyDbs36j8yE= Subject key identifier: 9D:8C:ED:E8:AA:66:B3:A5:FA:5C:1E:FA:DB:97:11:4E:3A:10:04:31 Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 0150 Signing time: Wed 05 Nov 2025 04:23:25 +0000 Manifest this update: Wed 05 Nov 2025 04:23:24 +0000 Manifest next update: Wed 12 Nov 2025 04:23:24 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: 3Ywvt0h2Pzs4NhuANvoIHb15TchfXZDIZIWnaTt5dTM=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: LUJnGhbUriDz5PEXzwqHVqGRqenH5+Jp3evLId0QNQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: Nov 5 04:23:24 2025 GMT Not After : Nov 12 04:23:24 2025 GMT Subject: CN=690ad13c-8744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:6d:58:d5:81:fa:a2:45:aa:d2:4e:f7:a7: 57:c9:7a:2d:a2:aa:cb:d3:55:4f:d4:96:c2:13:56: f8:64:7e:89:eb:ba:51:40:5c:02:b1:25:50:76:f5: d6:2d:05:98:9e:d7:a1:f3:f2:30:75:0d:85:ae:25: f2:c8:f7:1c:bd:39:29:9e:02:77:b3:2d:87:d0:c3: b6:3b:7f:4f:66:1e:66:2c:f9:9f:f7:b3:ba:c8:15: 55:4f:90:47:74:21:70:47:67:1f:98:52:23:40:73: a0:4d:3d:97:0d:1e:a2:a2:c9:72:d3:ce:f8:12:0c: 6b:0f:47:7a:c0:0c:4f:b5:4e:31:e5:45:cf:94:59: a9:70:ac:5e:99:fe:90:61:15:3e:8d:7f:df:b0:1c: 11:f3:c2:06:bf:ba:61:af:ca:64:ef:89:7e:d7:0e: 58:cf:5a:3d:9f:22:5f:53:23:5c:a5:3e:94:af:31: 1b:8d:aa:9d:d4:94:4b:5f:27:d6:98:b8:f6:b5:32: 5c:cd:b6:d9:9a:bb:a2:4e:ef:a2:61:99:b1:00:b2: 06:5a:f7:0d:c3:00:ed:21:73:82:b8:97:c2:f5:8c: 36:b1:42:4e:87:bb:fb:77:b6:3c:ca:74:ce:7a:28: 9e:e0:40:45:b1:37:30:3a:ff:50:c4:ed:af:76:c0: b5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8C:ED:E8:AA:66:B3:A5:FA:5C:1E:FA:DB:97:11:4E:3A:10:04:31 X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:06:7e:a6:ee:55:87:05:0f:22:c1:86:38:b9:50:99:ee:e4: d9:08:27:df:35:e5:8b:fa:82:3b:b5:eb:7d:cd:ce:06:d0:ec: ec:19:a6:7d:2c:b8:cd:57:f6:68:6f:2a:5e:65:99:4a:f0:3a: 57:1a:d5:81:58:de:01:33:4b:0f:9b:5e:b2:e9:2e:68:15:bc: d5:1d:58:9c:48:62:91:3b:0a:5a:1f:88:ee:a1:27:c4:f5:b3: ec:ac:68:05:69:65:63:fc:08:b7:84:d9:02:36:4b:78:a9:00: d2:d7:98:80:4b:7e:5a:b9:2f:1b:43:f8:2c:f0:10:42:1f:e5: ab:59:2c:12:9c:0d:4d:f6:c9:51:51:e4:3a:fa:65:44:5f:60: e2:63:0d:01:e1:01:96:1d:b3:47:ca:61:5e:fc:0d:c4:0b:36: ac:c7:ff:db:df:5c:3f:d2:c7:d9:93:2e:de:7f:d7:67:d9:4e: ba:fc:a7:c3:d7:ad:4a:33:ba:81:27:06:ea:b0:2e:a9:e0:53: e7:db:0f:7f:e6:bb:ff:86:47:f1:e7:70:b0:53:22:b9:ef:19: f5:0d:6f:15:cc:91:9e:13:6d:1b:9b:35:d9:0b:d1:b6:f6:97: 21:e6:8e:5e:90:68:45:c4:61:f6:83:7c:bb:11:9e:28:1d:98: 65:cc:64:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDMzRTU0MjVEMDM2OEY4MkZGODVCOUI4NDdGNDEyMzhB RDU4RDRFNTAwHhcNMjUxMTA1MDQyMzI0WhcNMjUxMTEyMDQyMzI0WjAYMRYwFAYD VQQDEw02OTBhZDEzYy04NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9ltWNWB+qJFqtJO96dXyXotoqrL01VP1JbCE1b4ZH6J67pRQFwCsSVQdvXW LQWYnteh8/IwdQ2FriXyyPccvTkpngJ3sy2H0MO2O39PZh5mLPmf97O6yBVVT5BH dCFwR2cfmFIjQHOgTT2XDR6iosly0874EgxrD0d6wAxPtU4x5UXPlFmpcKxemf6Q YRU+jX/fsBwR88IGv7phr8pk74l+1w5Yz1o9nyJfUyNcpT6UrzEbjaqd1JRLXyfW mLj2tTJczbbZmruiTu+iYZmxALIGWvcNwwDtIXOCuJfC9Yw2sUJOh7v7d7Y8ynTO eiie4EBFsTcwOv9QxO2vdsC1kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2M7eiq ZrOl+lwe+tuXEU46EAQxMB8GA1UdIwQYMBaAFDPlQl0DaPgv+FubhH9BI4rVjU5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS81RkI3REMwOEI5 QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1DXzRXNXVFZjBFaml0V05U bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS81RkI3REMwOEI5QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1D XzRXNXVFZjBFaml0V05UbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdBn6m7lWHBQ8iwYY4uVCZ7uTZCCffNeWL+oI7tet9zc4G0OzsGaZ9 LLjNV/ZobypeZZlK8DpXGtWBWN4BM0sPm16y6S5oFbzVHVicSGKROwpaH4juoSfE 9bPsrGgFaWVj/Ai3hNkCNkt4qQDS15iAS35auS8bQ/gs8BBCH+WrWSwSnA1N9slR UeQ6+mVEX2DiYw0B4QGWHbNHymFe/A3ECzasx//b31w/0sfZky7ef9dn2U66/KfD 161KM7qBJwbqsC6p4FPn2w9/5rv/hkfx53CwUyK57xn1DW8VzJGeE20bmzXZC9G2 9pch5o5ekGhFxGH2g3y7EZ4oHZhlzGQL -----END CERTIFICATE-----Generated at Wed Nov 5 12:58:39 2025 by rpki-client