$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft File: vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json) Hash identifier: dRQGjqxoJgTFvWDSFxto+7xAkFdYHVBH3pJTclNFUAY= Subject key identifier: 85:6C:FE:F1:BF:91:C0:F0:2A:D4:27:EF:FE:E9:4E:98:C7:D4:A4:39 Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 Certificate issuer: /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft Manifest number: 0252 Signing time: Mon 03 Nov 2025 01:41:03 +0000 Manifest this update: Mon 03 Nov 2025 01:41:03 +0000 Manifest next update: Mon 10 Nov 2025 01:41:03 +0000 Files and hashes: 1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: a88Qb7cmEGfX+rxT9QwX1GwC+r5BhwFK3odIOnKToaA=) 2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: wuoqyYVDiG/sRQZo+9RPf+TSJtEdkwDtdHHUSy4QKA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Validity Not Before: Nov 3 01:41:03 2025 GMT Not After : Nov 10 01:41:03 2025 GMT Subject: CN=6908082f-d98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:d9:c9:f1:f3:a4:86:1f:c5:71:02:94:80: f8:a0:a5:83:b0:39:80:71:ad:83:b2:4e:1d:8d:92: 13:e9:95:f6:f3:76:11:64:73:5c:ec:0c:1a:1f:c8: 90:e6:63:07:1f:ff:84:47:cf:dd:80:69:e0:19:69: e6:42:11:0e:90:fb:26:a5:54:cf:2d:3a:d3:2f:56: 63:a5:be:2a:a7:a6:ff:7a:11:b2:f2:bb:d5:8d:4f: ca:ce:7b:8b:ee:a4:0e:4c:e4:e3:ec:b1:ae:4a:cc: 2b:01:6e:71:79:c0:f0:65:fb:5f:fe:3b:38:7f:1d: 4b:e9:0d:f3:5f:f9:81:37:35:5a:a4:ed:e8:be:ad: cc:c6:aa:57:c3:50:d9:3e:5a:16:72:09:e3:fe:3e: f2:e8:33:73:7b:ad:cc:d9:e4:e9:85:87:3c:9e:50: 38:cb:65:83:44:05:65:47:c1:ce:42:ac:1e:66:94: 25:98:83:a4:72:e5:ce:70:a3:79:ac:ed:b4:95:c4: 63:48:9f:c3:7a:1b:22:85:7c:77:00:74:17:0f:8e: ce:47:e8:6e:06:f8:c5:dc:f4:8a:ca:f9:f5:af:be: 72:ce:36:08:0b:32:18:c7:ea:6c:4e:6f:42:b5:33: 24:07:a2:3c:1f:e5:89:10:d9:0b:21:b3:b2:c3:01: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:FE:F1:BF:91:C0:F0:2A:D4:27:EF:FE:E9:4E:98:C7:D4:A4:39 X509v3 Authority Key Identifier: keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c5:62:60:9d:ce:2c:b6:c1:76:cf:08:9f:53:ea:61:a6:5c: 3a:d2:37:8f:ff:51:c9:49:e9:50:28:a2:b8:52:77:84:50:92: 5e:b6:1e:3b:16:0e:fc:63:7d:2b:42:4a:49:68:00:40:c4:40: 0d:47:25:1d:65:17:c3:f8:ba:0b:b0:db:91:5e:89:45:6c:48: 6f:85:44:98:bf:c4:43:89:d3:3e:6a:c7:17:ec:53:2c:25:7b: 6d:df:59:29:3b:c7:ad:0b:26:90:3f:9f:81:ca:d1:0f:5b:a1: ea:0a:f4:b2:de:d8:5d:40:63:2e:b4:b5:f2:37:6a:2c:c3:2f: a5:88:f0:72:7d:c7:82:61:a2:9a:52:09:df:f5:fa:bc:27:78: 37:94:2e:96:49:12:44:65:22:54:ac:09:5b:9c:dc:38:93:3a: ce:89:aa:68:ab:f2:fe:d8:1d:06:e3:25:7b:1e:12:5a:f2:38: 58:47:56:30:d5:7c:aa:82:3d:2d:70:02:dc:86:4e:07:34:90: a7:00:89:51:8e:04:a3:6f:b7:08:0f:ce:e3:71:74:7a:fd:7e: b1:23:07:37:50:d2:27:98:5d:45:a0:28:ee:ae:fb:8c:0f:f1: c6:e7:d0:cc:65:23:b6:d9:85:61:1d:45:d6:43:1e:62:37:91: 52:b1:d8:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyREUxMTAvBgNVBAUTKEJFRDAxMjU3MTg1NDVDMUU1MDgwMzFEM0ZGNUZCNkU4 Mjg2QTdGRDgwHhcNMjUxMTAzMDE0MTAzWhcNMjUxMTEwMDE0MTAzWjAYMRYwFAYD VQQDEw02OTA4MDgyZi1kOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOrZyfHzpIYfxXEClID4oKWDsDmAca2Dsk4djZIT6ZX283YRZHNc7AwaH8iQ 5mMHH/+ER8/dgGngGWnmQhEOkPsmpVTPLTrTL1Zjpb4qp6b/ehGy8rvVjU/KznuL 7qQOTOTj7LGuSswrAW5xecDwZftf/js4fx1L6Q3zX/mBNzVapO3ovq3MxqpXw1DZ PloWcgnj/j7y6DNze63M2eTphYc8nlA4y2WDRAVlR8HOQqweZpQlmIOkcuXOcKN5 rO20lcRjSJ/DehsihXx3AHQXD47OR+huBvjF3PSKyvn1r75yzjYICzIYx+psTm9C tTMkB6I8H+WJENkLIbOywwEE9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVs/vG/ kcDwKtQn7/7pTpjH1KQ5MB8GA1UdIwQYMBaAFL7QElcYVFweUIAx0/9ftugoan/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJERS84REU0RTRDMDNC NkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhCNVFnREhUXzEtMjZDaHFm OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z0QVNWeGhVWEI1UWdESFRfMS0yNkNocWY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJERS84REU0RTRDMDNCNkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhC NVFnREhUXzEtMjZDaHFmOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgxWJgnc4stsF2zwifU+phplw60jeP/1HJSelQKKK4UneEUJJeth47 Fg78Y30rQkpJaABAxEANRyUdZRfD+LoLsNuRXolFbEhvhUSYv8RDidM+ascX7FMs JXtt31kpO8etCyaQP5+BytEPW6HqCvSy3thdQGMutLXyN2oswy+liPByfceCYaKa Ugnf9fq8J3g3lC6WSRJEZSJUrAlbnNw4kzrOiapoq/L+2B0G4yV7HhJa8jhYR1Yw 1Xyqgj0tcALchk4HNJCnAIlRjgSjb7cID87jcXR6/X6xIwc3UNInmF1FoCjurvuM D/HG59DMZSO22YVhHUXWQx5iN5FSsdjL -----END CERTIFICATE-----Generated at Tue Nov 4 01:04:16 2025 by rpki-client