$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: 5bfEn5jzAbnYGJ0pNZQqDm5TGSDXswWwMbIwQauWAaQ= Subject key identifier: C9:3F:7A:3A:91:60:3D:BD:12:86:4B:2D:79:7E:30:92:8E:8A:14:5A Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 0347 Signing time: Sat 25 Oct 2025 05:28:05 +0000 Manifest this update: Sat 25 Oct 2025 05:28:04 +0000 Manifest next update: Sat 01 Nov 2025 05:28:04 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: ldgzxKKoBH/txEckyjea/UhCsnObnUZvNeEtPyZCGdM=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: Ds7R3+sBBZEG01JWJaEnAvs9QgVWz9hGRIlkayRqHKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 05:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: Oct 25 05:28:04 2025 GMT Not After : Nov 1 05:28:04 2025 GMT Subject: CN=68fc5fe5-252c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:e9:e8:3a:24:4d:ba:de:af:ec:b5:c8:f8: df:6b:dc:db:b7:62:f4:86:63:c0:e9:07:ce:e7:d9: 99:3a:49:5d:a9:fa:e6:9b:85:82:74:f7:4f:d6:15: 84:32:13:f7:d1:b4:fc:94:ec:e9:64:8e:6f:1d:31: 14:db:71:11:1a:38:e9:15:d9:61:f8:7e:f8:bd:0b: 5b:e6:81:f4:fb:1f:cf:4d:c4:72:17:bb:a8:33:65: d5:c0:74:f4:99:bf:3f:c3:96:1d:bb:fa:96:f2:ef: 00:ea:8b:13:95:4c:1c:49:93:b2:59:c7:b7:56:ce: 19:ee:b0:59:fb:78:ba:76:67:df:34:53:d2:e5:4d: 98:77:82:7d:80:fa:07:20:7c:45:97:1e:12:46:3b: c6:e5:bf:bd:30:a7:74:43:e7:ff:1b:8c:59:ba:c8: 5c:9b:9f:2a:3d:46:51:2b:34:5a:e7:ef:43:4a:32: d2:f3:a2:dd:c9:ca:4e:ff:9f:7f:d4:83:70:5b:0b: 2b:e7:b3:ef:76:48:18:a3:21:11:d8:26:b7:24:f3: 1a:ed:e3:62:88:34:7c:41:05:27:9a:49:04:4c:8c: f7:fa:68:0b:46:42:cf:ad:39:3f:db:e8:bd:a5:1b: d5:83:e3:de:5b:46:64:58:9b:4d:0a:64:0d:59:77: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3F:7A:3A:91:60:3D:BD:12:86:4B:2D:79:7E:30:92:8E:8A:14:5A X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d2:91:2b:1a:a6:15:c2:6e:7d:a8:1c:e6:ad:14:12:66:b7: b1:ad:14:83:14:88:3f:02:87:c4:1d:cf:f4:5c:c5:37:d0:99: e2:fe:68:40:30:ef:7a:df:4f:91:4a:94:69:6d:f7:24:c3:27: dc:bb:89:50:93:5f:78:c9:c7:32:d2:24:da:c8:f8:0f:51:b8: 94:3e:5e:03:8e:81:1a:df:19:3c:c3:3d:c5:f7:da:a3:48:77: ab:36:cf:0a:31:e1:28:bb:04:d6:0c:27:69:70:68:99:a7:7e: 8e:c6:86:14:30:f4:ac:42:ac:9b:3f:e0:8d:16:9b:50:26:ca: e2:3c:16:5a:e2:ce:1d:ea:e4:67:75:59:d8:d9:37:17:7b:7b: bc:ac:fb:73:10:dd:32:b6:c5:80:5f:60:2f:bf:9b:21:92:8d: 39:e2:3d:da:37:08:06:59:23:79:76:88:4b:38:ea:06:25:41: 06:4c:cf:51:ba:76:4e:e4:4b:17:01:1d:71:d8:6f:29:3f:72: 0c:d9:83:60:82:eb:41:80:55:9d:d2:1f:9e:52:58:2e:6a:e1: b1:49:5f:e9:a4:26:6a:55:d0:fd:78:a8:e2:fe:cb:cc:42:3f: 2f:3f:7a:97:32:10:e3:ee:e3:ad:80:88:47:9b:17:dc:ee:0f: f3:d8:14:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjUxMDI1MDUyODA0WhcNMjUxMTAxMDUyODA0WjAYMRYwFAYD VQQDEw02OGZjNWZlNS0yNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfnp6DokTbrer+y1yPjfa9zbt2L0hmPA6QfO59mZOkldqfrmm4WCdPdP1hWE MhP30bT8lOzpZI5vHTEU23ERGjjpFdlh+H74vQtb5oH0+x/PTcRyF7uoM2XVwHT0 mb8/w5Ydu/qW8u8A6osTlUwcSZOyWce3Vs4Z7rBZ+3i6dmffNFPS5U2Yd4J9gPoH IHxFlx4SRjvG5b+9MKd0Q+f/G4xZushcm58qPUZRKzRa5+9DSjLS86LdycpO/59/ 1INwWwsr57PvdkgYoyER2Ca3JPMa7eNiiDR8QQUnmkkETIz3+mgLRkLPrTk/2+i9 pRvVg+PeW0ZkWJtNCmQNWXfyJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMk/ejqR YD29EoZLLXl+MJKOihRaMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB40pErGqYVwm59qBzmrRQSZrexrRSDFIg/AofEHc/0XMU30Jni/mhA MO9630+RSpRpbfckwyfcu4lQk194yccy0iTayPgPUbiUPl4DjoEa3xk8wz3F99qj SHerNs8KMeEouwTWDCdpcGiZp36OxoYUMPSsQqybP+CNFptQJsriPBZa4s4d6uRn dVnY2TcXe3u8rPtzEN0ytsWAX2Avv5shko054j3aNwgGWSN5dohLOOoGJUEGTM9R unZO5EsXAR1x2G8pP3IM2YNggutBgFWd0h+eUlguauGxSV/ppCZqVdD9eKji/svM Qj8vP3qXMhDj7uOtgIhHmxfc7g/z2BTD -----END CERTIFICATE-----Generated at Sun Oct 26 08:43:50 2025 by rpki-client