$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft File: vjdwS4x985dWFxlK8q3u2hzJvPY.mft (raw, json) Hash identifier: fOnpJzNDv7ofSv2dOZeu7Bxb+DK7sn5rsmfrZE9X2HA= Subject key identifier: FF:73:7C:B5:4B:CC:2B:00:72:2D:41:E6:AE:33:69:28:2C:0C:DB:4D Authority key identifier: BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 Certificate issuer: /CN=A91D0432/serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft Manifest number: 0220 Signing time: Wed 05 Nov 2025 02:14:43 +0000 Manifest this update: Wed 05 Nov 2025 02:14:43 +0000 Manifest next update: Wed 12 Nov 2025 02:14:43 +0000 Files and hashes: 1: vjdwS4x985dWFxlK8q3u2hzJvPY.crl (hash: aTWLa+jRUwwCuSa/WlEqMWbSWfs9ZVp+DlwwyLCq55A=) 2: 539DF534D1FB11EDA0A31C2FC4F9AE02.roa (hash: ZwuvYUkBHuPjyaZwcok71ZoBlPTV1oL4tY+NTXiSqLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0432, serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Validity Not Before: Nov 5 02:14:43 2025 GMT Not After : Nov 12 02:14:43 2025 GMT Subject: CN=690ab313-078e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:bd:45:32:9b:49:46:dc:5d:ef:40:7b:82: 31:2c:51:a1:b8:a0:13:9f:33:3e:e7:33:8e:db:0b: 6a:c4:a4:58:e4:79:82:db:6a:cc:dc:c5:20:cf:a2: 39:61:83:de:eb:12:d9:8b:91:13:cc:ab:7f:14:8a: e6:c5:72:84:f7:2d:96:ec:eb:f6:24:62:7d:d7:41: 4c:af:2b:dc:83:04:11:12:06:4b:cb:ca:0a:eb:2e: fc:88:30:44:d8:b8:32:4e:9d:cc:65:bd:b3:14:68: a8:45:71:99:42:52:13:30:29:35:eb:f9:47:7d:7a: 7c:f6:c7:c2:7a:c4:14:76:07:28:de:71:49:b4:1c: e1:bf:2e:6f:6e:c7:77:c1:94:a7:89:19:6e:cc:d5: 8d:a9:74:3c:c9:b3:08:5e:96:fa:91:d6:97:e3:72: 01:11:61:7a:47:9f:60:48:c7:82:4a:46:2e:4a:f7: 8c:37:91:31:7d:49:cd:eb:f6:ee:e6:9a:2a:3d:9f: 11:00:4f:74:58:fc:6f:76:d3:72:a2:54:5a:c5:6d: 80:62:1d:34:81:6b:46:c5:92:46:d1:0d:fb:34:d2: e9:fb:b2:b4:12:b5:33:6f:bf:aa:88:a7:99:78:bb: 88:9d:f3:f2:4e:38:0b:b8:76:0f:2a:b7:30:b3:b8: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:73:7C:B5:4B:CC:2B:00:72:2D:41:E6:AE:33:69:28:2C:0C:DB:4D X509v3 Authority Key Identifier: keyid:BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:29:35:91:f6:4a:e1:96:62:98:27:ea:60:72:a4:e8:dc:c7: 9b:03:05:a4:e2:17:6c:02:08:42:2b:e4:66:39:cc:0a:1b:f4: 99:47:dd:d3:16:99:ef:c3:e4:21:18:79:6f:de:34:47:01:09: 8c:8a:ce:59:c1:db:a8:d9:22:96:b7:7b:20:06:84:bb:1f:31: 65:a1:6f:89:60:3a:81:9c:19:23:4b:5f:af:94:23:bf:81:74: c6:34:10:2c:f0:76:61:af:fe:1d:48:dc:58:27:c9:f0:2a:ea: bf:ef:1f:0c:86:74:34:dd:d5:0a:2e:44:a1:90:76:96:fb:cb: 46:79:89:b2:d8:88:74:08:12:f3:3b:ae:17:96:9f:24:a2:3b: 23:0d:3b:9e:0c:a3:ed:8f:0f:44:fd:d1:33:f2:1f:40:62:c9: 8a:ff:ad:a2:48:f2:ca:d0:3a:2f:05:8d:ec:df:f1:3d:4f:28: 7f:97:b1:77:dd:e8:fb:31:55:6c:e4:3e:b4:00:8d:ee:90:b6: 16:91:71:17:58:07:7a:9a:7a:ea:c8:5c:75:38:39:92:cc:59: 15:92:06:0a:48:6b:c2:f6:09:81:b2:99:a6:29:ed:3f:40:72: ee:6f:8e:23:b7:26:3d:2e:61:66:2e:29:f3:6a:0d:56:a9:0e: d9:40:63:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA0MzIxMTAvBgNVBAUTKEJFMzc3MDRCOEM3REYzOTc1NjE3MTk0QUYyQURFRURB MUNDOUJDRjYwHhcNMjUxMTA1MDIxNDQzWhcNMjUxMTEyMDIxNDQzWjAYMRYwFAYD VQQDEw02OTBhYjMxMy0wNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDe9RTKbSUbcXe9Ae4IxLFGhuKATnzM+5zOO2wtqxKRY5HmC22rM3MUgz6I5 YYPe6xLZi5ETzKt/FIrmxXKE9y2W7Ov2JGJ910FMryvcgwQREgZLy8oK6y78iDBE 2LgyTp3MZb2zFGioRXGZQlITMCk16/lHfXp89sfCesQUdgco3nFJtBzhvy5vbsd3 wZSniRluzNWNqXQ8ybMIXpb6kdaX43IBEWF6R59gSMeCSkYuSveMN5ExfUnN6/bu 5poqPZ8RAE90WPxvdtNyolRaxW2AYh00gWtGxZJG0Q37NNLp+7K0ErUzb7+qiKeZ eLuInfPyTjgLuHYPKrcws7j5IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9zfLVL zCsAci1B5q4zaSgsDNtNMB8GA1UdIwQYMBaAFL43cEuMffOXVhcZSvKt7tocybz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDQzMi9FM0NBMThFQzdC ODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1ZFdGeGxLOHEzdTJoekp2 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqZHdTNHg5ODVkV0Z4bEs4cTN1Mmh6SnZQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDQzMi9FM0NBMThFQzdCODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1 ZFdGeGxLOHEzdTJoekp2UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXKTWR9krhlmKYJ+pgcqTo3MebAwWk4hdsAghCK+RmOcwKG/SZR93T Fpnvw+QhGHlv3jRHAQmMis5Zwduo2SKWt3sgBoS7HzFloW+JYDqBnBkjS1+vlCO/ gXTGNBAs8HZhr/4dSNxYJ8nwKuq/7x8MhnQ03dUKLkShkHaW+8tGeYmy2Ih0CBLz O64Xlp8kojsjDTueDKPtjw9E/dEz8h9AYsmK/62iSPLK0DovBY3s3/E9Tyh/l7F3 3ej7MVVs5D60AI3ukLYWkXEXWAd6mnrqyFx1ODmSzFkVkgYKSGvC9gmBspmmKe0/ QHLub44jtyY9LmFmLinzag1WqQ7ZQGPz -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:03 2025 by rpki-client