$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: dLtyVklaRrj4m1KR1m8mttgnnV+tfhU+NTiZ9THJGnM= Subject key identifier: 0C:6E:0A:FE:F5:4A:F3:C0:36:11:55:C9:DD:E3:26:69:46:A7:09:28 Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 0158 Signing time: Wed 05 Nov 2025 04:15:38 +0000 Manifest this update: Wed 05 Nov 2025 04:15:38 +0000 Manifest next update: Wed 12 Nov 2025 04:15:38 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: F2suet3lSY7WmJLiyeICr6KxV2ovdXF+SozrjkLMAuk=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: Nov 5 04:15:38 2025 GMT Not After : Nov 12 04:15:38 2025 GMT Subject: CN=690acf6a-daf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:24:71:bc:cd:05:93:93:0b:67:d8:48:00: 72:9f:57:80:be:47:c4:f4:5d:3a:ff:9b:7e:39:64: a6:a4:da:15:9c:71:e8:17:f5:4d:be:96:11:f7:ec: 1a:96:fc:51:b4:f7:a2:3f:84:4c:a5:87:8c:5d:99: 1c:af:3c:8f:22:fc:f9:dd:51:ea:68:74:1d:0e:cc: 88:84:29:3e:a3:85:23:ea:8c:52:d4:66:f6:c2:e3: c7:74:be:29:29:9a:66:c9:cd:37:99:c0:66:c7:c1: 10:0c:51:ed:d6:30:94:92:0a:cf:f7:e9:23:dd:2c: 0f:e8:d6:c3:2f:9a:6e:2a:c4:eb:22:f2:9a:91:1f: 0a:26:f9:dd:20:4f:98:f5:4f:66:08:c7:e3:a0:65: f7:f8:d6:75:e7:85:0a:7a:78:a8:92:4c:6a:c2:e5: fd:a9:32:cf:45:e2:ba:ae:ca:25:b5:21:58:5d:20: 4c:0d:d6:94:f2:aa:db:64:69:b5:72:8a:3f:46:16: f0:ca:a8:4a:c3:cf:7f:79:da:5a:0f:7d:87:86:7f: ac:e8:61:ea:5e:6e:0c:db:4a:6f:08:9d:c3:87:19: 28:5a:9d:55:ba:50:6b:7e:62:d8:19:6f:d6:50:81: 08:d8:52:87:e6:ed:5a:bd:ef:d0:66:66:8f:e0:c4: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6E:0A:FE:F5:4A:F3:C0:36:11:55:C9:DD:E3:26:69:46:A7:09:28 X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c3:69:8e:11:b9:5f:7e:6c:99:e7:4d:cb:f3:79:0f:3e:97: 2b:37:0f:03:df:88:bf:2f:c9:f7:51:18:1a:7d:29:1c:9d:7c: 2c:1a:52:83:08:7e:8a:85:64:38:e7:89:c3:f2:cb:d1:47:05: e3:7b:23:04:4c:d2:e0:7e:ff:89:15:5b:f8:91:c4:56:4e:2b: 41:72:a2:3c:da:10:42:06:4e:e6:95:b0:b1:6b:2d:46:cc:2e: ca:a2:2a:44:ac:57:9f:3b:3f:8f:e0:b4:20:c9:a3:b8:69:05: fc:15:62:11:4b:0e:d9:00:38:f3:30:7f:c1:32:ba:e4:3e:74: 44:6e:6b:c5:93:4c:59:29:cb:51:05:1a:d0:4e:74:b9:28:af: d4:ee:bf:84:9e:91:49:bc:50:24:9b:87:97:f1:4c:2a:15:34: 34:9b:9d:c8:9b:61:25:d1:3a:4d:d1:bf:f9:de:41:9f:df:cd: a6:d0:ff:af:f9:47:ca:3e:7a:9b:1d:6e:d9:28:05:b5:a9:92: 09:79:b7:1a:8d:1c:94:f7:ef:c0:db:0e:39:78:2d:58:66:f0: 15:c7:0d:0b:6c:9d:3c:72:72:5b:00:81:4f:b5:59:07:dc:f1: aa:03:60:20:4c:d9:87:b5:a2:0a:b7:13:dd:78:99:d1:fe:35: 50:f9:30:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUxMTA1MDQxNTM4WhcNMjUxMTEyMDQxNTM4WjAYMRYwFAYD VQQDEw02OTBhY2Y2YS1kYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCYkcbzNBZOTC2fYSAByn1eAvkfE9F06/5t+OWSmpNoVnHHoF/VNvpYR9+wa lvxRtPeiP4RMpYeMXZkcrzyPIvz53VHqaHQdDsyIhCk+o4Uj6oxS1Gb2wuPHdL4p KZpmyc03mcBmx8EQDFHt1jCUkgrP9+kj3SwP6NbDL5puKsTrIvKakR8KJvndIE+Y 9U9mCMfjoGX3+NZ154UKeniokkxqwuX9qTLPReK6rsoltSFYXSBMDdaU8qrbZGm1 coo/RhbwyqhKw89/edpaD32Hhn+s6GHqXm4M20pvCJ3DhxkoWp1VulBrfmLYGW/W UIEI2FKH5u1ave/QZmaP4MQftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxuCv71 SvPANhFVyd3jJmlGpwkoMB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsw2mOEblffmyZ503L83kPPpcrNw8D34i/L8n3URgafSkcnXwsGlKD CH6KhWQ454nD8svRRwXjeyMETNLgfv+JFVv4kcRWTitBcqI82hBCBk7mlbCxay1G zC7KoipErFefOz+P4LQgyaO4aQX8FWIRSw7ZADjzMH/BMrrkPnREbmvFk0xZKctR BRrQTnS5KK/U7r+EnpFJvFAkm4eX8UwqFTQ0m53Im2El0TpN0b/53kGf382m0P+v +UfKPnqbHW7ZKAW1qZIJebcajRyU9+/A2w45eC1YZvAVxw0LbJ08cnJbAIFPtVkH 3PGqA2AgTNmHtaIKtxPdeJnR/jVQ+TBz -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:38 2025 by rpki-client