$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: 1q/6hfnPlAp+AXx8gVeMoneR+mrUG+D81Bw5/D9zZMk= Subject key identifier: 38:E6:B0:55:ED:DB:04:6F:31:3D:20:2A:AA:8C:93:91:EC:EB:7C:63 Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 97 Signing time: Mon 03 Nov 2025 06:24:57 +0000 Manifest this update: Mon 03 Nov 2025 06:24:57 +0000 Manifest next update: Mon 10 Nov 2025 06:24:57 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: bCWWlBvRvqLDJX3TNy/HFVavjYaViIHU7YVaUWZJlvQ=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Validity Not Before: Nov 3 06:24:57 2025 GMT Not After : Nov 10 06:24:57 2025 GMT Subject: CN=69084ab9-ce56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:0a:7b:ff:0b:c6:1e:d3:68:e2:f2:58:bb: 6c:ea:d1:b9:75:3c:fc:ac:b2:fb:a9:a8:65:93:77: fb:2a:83:e8:3c:db:ca:e4:5c:54:c6:83:68:0f:b0: 18:9b:c3:7d:da:1a:d1:32:46:63:37:e0:c1:ff:8b: bf:26:51:37:5e:d8:9b:e9:3d:74:4d:d4:d4:41:29: a3:4d:86:7c:f2:f7:01:0c:5d:69:13:47:35:39:1f: 53:53:7f:64:6e:1d:52:c9:f1:b2:c7:49:c9:40:36: 81:d3:d1:6e:54:44:e2:2a:30:2c:6d:10:13:56:81: 5d:fd:2e:dd:ec:c7:60:db:ff:04:70:d2:b6:da:7c: 56:c1:ff:75:76:4f:30:d7:8d:df:a5:2d:74:a6:07: 3f:05:b2:8c:a8:ab:a0:98:85:be:21:23:bf:1f:1d: 22:01:ea:f1:53:a3:38:bf:9b:0b:30:03:f8:62:e5: ad:21:71:c2:96:6c:e8:f6:a1:46:b1:5b:ed:25:03: 33:4c:8b:23:78:ae:6b:5d:d2:f1:4b:81:a4:16:45: ed:fa:f8:a9:ca:51:f3:e2:1d:01:79:0b:95:52:a1: 5d:f2:0a:48:98:79:76:96:2e:61:e5:7b:57:4d:3c: 12:5a:af:af:2c:2e:52:83:96:31:b8:37:e7:44:92: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E6:B0:55:ED:DB:04:6F:31:3D:20:2A:AA:8C:93:91:EC:EB:7C:63 X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2a:43:62:cc:ec:04:40:30:5e:84:66:63:c3:37:51:fe:a9: 2e:da:d9:5a:54:65:e9:57:07:02:ad:bc:5d:1e:89:74:ff:35: 58:83:b9:86:cb:f1:0c:61:8d:f7:06:f3:93:97:0f:0b:4b:23: 3b:0f:a2:37:94:02:91:8a:cb:9b:24:b8:f9:60:19:33:c6:c6: d7:0b:33:25:a9:9b:12:44:8c:a6:6b:a6:21:2f:b9:8d:c9:1c: 91:82:00:5b:10:43:bb:be:18:59:6b:69:d0:fc:24:c5:a0:47: 65:89:5f:db:f8:42:35:cd:fa:9c:ab:eb:b2:fe:2f:e1:88:fc: ee:85:61:b8:23:be:9c:34:bf:e6:8f:9a:aa:71:06:e9:29:f6: b2:3d:fe:4c:3a:b5:f3:ee:9d:9f:c0:2c:a0:1f:cd:b7:50:af: 5a:7a:7b:67:28:40:bb:0d:18:75:b9:83:d2:7e:b1:57:f9:28: 5a:12:92:dd:c5:8d:2d:c3:2b:a7:18:5a:24:a4:79:c0:19:49: 87:de:2b:18:76:e3:16:9e:f7:cd:93:e4:4b:57:84:58:74:00: 9b:f2:35:21:27:a7:ee:79:44:b7:47:61:13:8a:ee:d3:67:26: 96:5e:3f:7c:ca:db:37:eb:68:59:32:70:2b:2a:52:67:48:40: 43:73:69:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU4MzIxMTAvBgNVBAUTKEJFOUI5MDRFQjc2Q0IwNUM2MEMzRTJDMzc5RTJGQTQ4 OUEwRTE3NzIwHhcNMjUxMTAzMDYyNDU3WhcNMjUxMTEwMDYyNDU3WjAYMRYwFAYD VQQDEw02OTA4NGFiOS1jZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulsKe/8Lxh7TaOLyWLts6tG5dTz8rLL7qahlk3f7KoPoPNvK5FxUxoNoD7AY m8N92hrRMkZjN+DB/4u/JlE3Xtib6T10TdTUQSmjTYZ88vcBDF1pE0c1OR9TU39k bh1SyfGyx0nJQDaB09FuVETiKjAsbRATVoFd/S7d7Mdg2/8EcNK22nxWwf91dk8w 143fpS10pgc/BbKMqKugmIW+ISO/Hx0iAerxU6M4v5sLMAP4YuWtIXHClmzo9qFG sVvtJQMzTIsjeK5rXdLxS4GkFkXt+vipylHz4h0BeQuVUqFd8gpImHl2li5h5XtX TTwSWq+vLC5Sg5YxuDfnRJKtvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjmsFXt 2wRvMT0gKqqMk5Hs63xjMB8GA1UdIwQYMBaAFL6bkE63bLBcYMPiw3ni+kiaDhdy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTgzMi8yNkU1ODI1NEQw QkExMUVGODk2Q0QwMjZDNEY5QUUwMi92cHVRVHJkc3NGeGd3LUxEZWVMNlNKb09G M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0YzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTgzMi8yNkU1ODI1NEQwQkExMUVGODk2Q0QwMjZDNEY5QUUwMi92cHVRVHJkc3NG eGd3LUxEZWVMNlNKb09GM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKKkNizOwEQDBehGZjwzdR/qku2tlaVGXpVwcCrbxdHol0/zVYg7mG y/EMYY33BvOTlw8LSyM7D6I3lAKRisubJLj5YBkzxsbXCzMlqZsSRIyma6YhL7mN yRyRggBbEEO7vhhZa2nQ/CTFoEdliV/b+EI1zfqcq+uy/i/hiPzuhWG4I76cNL/m j5qqcQbpKfayPf5MOrXz7p2fwCygH823UK9aentnKEC7DRh1uYPSfrFX+ShaEpLd xY0twyunGFokpHnAGUmH3isYduMWnvfNk+RLV4RYdACb8jUhJ6fueUS3R2ETiu7T ZyaWXj98yts362hZMnArKlJnSEBDc2kf -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:08 2025 by rpki-client