$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: cb2ERDq8cpk2JkOXpOIqELG7ftRkXlL201rtaZ9szhs= Subject key identifier: 95:38:5D:8F:A3:0F:CC:1A:30:77:37:DF:12:8F:D7:89:8D:24:6A:DC Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 02E7 Signing time: Mon 03 Nov 2025 01:12:08 +0000 Manifest this update: Mon 03 Nov 2025 01:12:08 +0000 Manifest next update: Mon 10 Nov 2025 01:12:08 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: NpiCvNe1Grc1fKRPnWueqnEg41fS4XeDiHcj6im6M98=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: lORLBE7+FfhOwINAGtcBHyopu2FbSYXSTs4IIjqvS/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Nov 3 01:12:08 2025 GMT Not After : Nov 10 01:12:08 2025 GMT Subject: CN=69080168-5481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:1f:d1:4b:ef:05:a6:4d:41:f4:8c:fc:31: d6:1c:df:84:1c:21:a3:55:c9:c3:43:cd:64:61:0e: 94:e8:01:70:14:3c:44:86:36:e2:f6:ba:03:e9:1a: ba:54:74:07:ae:8f:72:5f:5e:54:59:38:9c:46:2a: b5:98:52:ef:d0:fd:44:ed:3e:1a:b8:2f:7b:65:0e: d5:27:21:35:1e:f0:8a:0c:43:72:2b:82:98:f9:19: d9:ed:74:c5:df:cc:94:bc:f3:f5:ca:79:84:1d:cd: ca:eb:97:e3:67:49:64:b0:d8:c1:61:7c:af:81:cc: 5c:4a:71:9d:58:60:be:af:a9:5a:c8:56:15:b1:a7: bf:69:0d:9f:f0:0b:a9:49:f3:a7:17:29:48:da:01: 2a:75:f0:9c:01:1a:7c:3a:bf:b0:fd:ad:d7:a1:3c: 03:12:0a:28:21:82:10:f1:7b:49:90:d9:4c:fa:0f: e6:6d:bc:f8:ef:d7:f3:c3:fd:af:11:c9:04:d0:2c: cb:90:58:9d:4b:62:e8:58:73:14:9e:27:f6:68:da: 00:a8:c0:33:01:87:fa:7e:e1:76:9b:a1:ad:e5:90: 12:f5:65:3a:e1:a3:a3:8e:7f:12:a0:00:a0:74:b2: e5:f6:2e:fb:04:03:40:2c:1e:74:13:08:f5:d8:76: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:38:5D:8F:A3:0F:CC:1A:30:77:37:DF:12:8F:D7:89:8D:24:6A:DC X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:df:5a:25:af:89:12:55:17:19:9c:a9:11:74:bd:a3:92:38: c5:0e:ec:14:1c:53:2a:9b:01:3c:7a:f2:2b:03:db:cf:4a:2a: 53:29:c3:3c:4b:67:0a:f9:54:16:36:4a:80:74:ac:21:d1:e8: 39:7b:54:e5:62:38:f8:46:f7:64:59:9d:27:f4:1e:57:ee:f0: 4c:38:a2:97:6c:db:b8:35:ee:97:e7:b5:f6:bb:c8:f7:66:64: 97:03:00:00:f4:dc:6b:70:a3:94:ad:71:2f:01:e2:8a:d9:d3: c0:a5:22:94:f9:9c:0e:2e:e1:6d:11:13:9b:2e:83:da:e4:61: 1f:a7:09:63:08:a5:08:44:cf:03:11:86:f6:a2:f0:c2:8f:53: ba:d1:d4:54:1d:e6:65:73:c3:09:9a:81:6b:5d:f1:f5:58:b1: 50:5b:ea:55:36:26:24:a4:4d:c2:c2:a6:29:bd:d0:71:66:95: f4:5a:e4:84:92:20:ab:0e:9e:1a:6a:3c:85:77:e9:a4:1e:65: 23:8c:0f:fe:bb:4c:21:83:92:da:4f:a9:96:d0:65:f0:4f:51: ba:4b:1b:21:6e:3d:b7:fb:f8:7b:30:1e:48:25:db:b2:ae:f1: 23:1c:a1:bc:ad:80:1d:ae:d5:a3:2d:aa:32:ce:c0:77:8b:40: f0:54:9d:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjUxMTAzMDExMjA4WhcNMjUxMTEwMDExMjA4WjAYMRYwFAYD VQQDEw02OTA4MDE2OC01NDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxAf0UvvBaZNQfSM/DHWHN+EHCGjVcnDQ81kYQ6U6AFwFDxEhjbi9roD6Rq6 VHQHro9yX15UWTicRiq1mFLv0P1E7T4auC97ZQ7VJyE1HvCKDENyK4KY+RnZ7XTF 38yUvPP1ynmEHc3K65fjZ0lksNjBYXyvgcxcSnGdWGC+r6layFYVsae/aQ2f8Aup SfOnFylI2gEqdfCcARp8Or+w/a3XoTwDEgooIYIQ8XtJkNlM+g/mbbz479fzw/2v EckE0CzLkFidS2LoWHMUnif2aNoAqMAzAYf6fuF2m6Gt5ZAS9WU64aOjjn8SoACg dLLl9i77BANALB50Ewj12Hah6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJU4XY+j D8waMHc33xKP14mNJGrcMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb31olr4kSVRcZnKkRdL2jkjjFDuwUHFMqmwE8evIrA9vPSipTKcM8 S2cK+VQWNkqAdKwh0eg5e1TlYjj4RvdkWZ0n9B5X7vBMOKKXbNu4Ne6X57X2u8j3 ZmSXAwAA9NxrcKOUrXEvAeKK2dPApSKU+ZwOLuFtERObLoPa5GEfpwljCKUIRM8D EYb2ovDCj1O60dRUHeZlc8MJmoFrXfH1WLFQW+pVNiYkpE3CwqYpvdBxZpX0WuSE kiCrDp4aajyFd+mkHmUjjA/+u0whg5LaT6mW0GXwT1G6Sxshbj23+/h7MB5IJduy rvEjHKG8rYAdrtWjLaoyzsB3i0DwVJ0E -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:21 2025 by rpki-client