$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft File: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft (raw, json) Hash identifier: dvyOSgQGxJ+pPAcaQZ/96jqb5zAatr+rSGqBCQLf0kI= Subject key identifier: C7:C5:34:C2:A8:1E:E6:F6:73:0A:0D:80:2E:65:75:26:13:C9:27:5E Authority key identifier: 56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C Certificate issuer: /CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft Manifest number: 0130 Signing time: Mon 03 Nov 2025 04:35:58 +0000 Manifest this update: Mon 03 Nov 2025 04:35:57 +0000 Manifest next update: Mon 10 Nov 2025 04:35:57 +0000 Files and hashes: 1: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl (hash: /yRZyuEuwbjRmybAjCxw7Q7pxsX5Hqlj+3AnixVUhzQ=) 2: 748B00F4EA8A11EE9295672AC4F9AE02.roa (hash: qJGm5qR8q633zY7nmDna54y82nnbrcUnVg4BUe56QiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB51, serialNumber=562FB302A876783A084158038BD49EF7051A603C Validity Not Before: Nov 3 04:35:57 2025 GMT Not After : Nov 10 04:35:57 2025 GMT Subject: CN=6908312d-a9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:3e:fc:b0:22:cf:7f:e8:b0:cd:66:6f:fc: bf:d5:24:ce:e6:a6:6b:ea:98:7c:0d:f1:bb:e9:4b: 37:d9:21:d0:b0:6f:0b:dd:b5:04:90:ca:57:da:bd: d8:f0:d6:44:8b:2e:9e:bc:eb:25:f7:6f:44:b8:65: a1:a3:e4:bc:dd:9b:73:97:8f:f6:03:e0:d0:ad:8d: 3a:ad:55:f7:8c:45:51:91:25:f2:4a:1c:d3:07:cc: 1d:a2:22:a1:c9:a4:aa:29:1a:f8:35:79:4b:68:b6: dc:11:2f:98:db:8b:63:f6:36:b9:f3:cd:4c:9d:8d: db:09:3b:5e:b4:ca:43:a3:ba:1c:b5:a0:48:bd:b5: ab:a2:92:d2:8a:2a:c9:17:99:0d:ef:e0:57:08:19: 73:23:2e:40:8d:a7:4d:e7:32:ae:65:1e:cd:9f:49: 61:24:3b:05:82:9f:31:08:89:7c:df:d3:c2:f8:59: bc:12:5f:21:1c:0b:4d:9b:83:de:7c:22:18:cc:6f: b0:a5:a9:0c:38:76:61:7d:d4:cc:4f:38:da:b6:6e: b7:f0:6c:e2:74:d6:e7:2f:f6:49:f3:2e:a9:22:db: 26:c3:53:3b:30:ce:8f:30:53:c3:df:81:46:14:a8: 45:af:6c:20:97:ae:81:ee:65:97:03:f7:0b:95:f7: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C5:34:C2:A8:1E:E6:F6:73:0A:0D:80:2E:65:75:26:13:C9:27:5E X509v3 Authority Key Identifier: keyid:56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:33:ff:e9:fc:2c:4c:7b:e5:fd:9c:3d:66:b6:f7:1e:af:b2: 35:cc:d0:f0:5b:48:f3:9f:12:c9:86:3e:d6:b2:e0:9b:7c:89: fc:36:8e:d8:c2:06:63:9a:8f:a7:41:7b:bb:e1:2a:96:e1:0b: 17:03:24:d6:a4:ea:0f:1a:fd:a4:92:cd:58:db:5c:6c:de:aa: 02:68:aa:76:bb:63:21:e4:b7:63:3a:92:90:8e:6d:1f:4c:cc: 66:35:19:ad:d7:2a:6b:41:e8:0e:57:79:9f:b2:77:5b:ce:63: 5a:c4:1d:f2:2e:6d:13:39:ef:c4:88:77:48:05:f2:d0:26:17: f9:96:b4:8b:5a:0b:bc:3f:aa:b5:2f:0c:15:aa:b3:56:f7:57: a2:47:63:53:36:8d:29:51:ce:54:84:68:87:04:63:38:2c:f6: 47:97:f8:d9:49:9e:0e:3a:6e:35:10:10:27:99:01:f1:24:de: 9f:35:66:58:9c:db:03:d7:44:96:76:0b:0c:18:85:fb:d3:7b: a1:ec:90:1a:c2:a0:eb:44:05:cf:cd:33:83:b9:ac:7f:db:be: 0a:e3:f3:58:cf:d1:a3:df:f8:21:bf:ef:65:90:e7:b1:5e:a9: 96:a8:d3:35:c7:63:65:57:ac:5f:86:58:64:4a:45:0a:b1:b0: c9:6b:4d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCNTExMTAvBgNVBAUTKDU2MkZCMzAyQTg3Njc4M0EwODQxNTgwMzhCRDQ5RUY3 MDUxQTYwM0MwHhcNMjUxMTAzMDQzNTU3WhcNMjUxMTEwMDQzNTU3WjAYMRYwFAYD VQQDEw02OTA4MzEyZC1hOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN8+/LAiz3/osM1mb/y/1STO5qZr6ph8DfG76Us32SHQsG8L3bUEkMpX2r3Y 8NZEiy6evOsl929EuGWho+S83Ztzl4/2A+DQrY06rVX3jEVRkSXyShzTB8wdoiKh yaSqKRr4NXlLaLbcES+Y24tj9ja5881MnY3bCTtetMpDo7octaBIvbWropLSiirJ F5kN7+BXCBlzIy5AjadN5zKuZR7Nn0lhJDsFgp8xCIl839PC+Fm8El8hHAtNm4Pe fCIYzG+wpakMOHZhfdTMTzjatm638GzidNbnL/ZJ8y6pItsmw1M7MM6PMFPD34FG FKhFr2wgl66B7mWXA/cLlfdCvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfFNMKo Hub2cwoNgC5ldSYTySdeMB8GA1UdIwQYMBaAFFYvswKodng6CEFYA4vUnvcFGmA8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUI1MS8zN0E1MzRCOEVB ODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVEb0lRVmdEaTlTZTl3VWFZ RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZpLXpBcWgyZURvSVFWZ0RpOVNlOXdVYVlEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUI1MS8zN0E1MzRCOEVBODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVE b0lRVmdEaTlTZTl3VWFZRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWM//p/CxMe+X9nD1mtvcer7I1zNDwW0jznxLJhj7WsuCbfIn8No7Y wgZjmo+nQXu74SqW4QsXAyTWpOoPGv2kks1Y21xs3qoCaKp2u2Mh5LdjOpKQjm0f TMxmNRmt1yprQegOV3mfsndbzmNaxB3yLm0TOe/EiHdIBfLQJhf5lrSLWgu8P6q1 LwwVqrNW91eiR2NTNo0pUc5UhGiHBGM4LPZHl/jZSZ4OOm41EBAnmQHxJN6fNWZY nNsD10SWdgsMGIX703uh7JAawqDrRAXPzTODuax/274K4/NYz9Gj3/ghv+9lkOex XqmWqNM1x2NlV6xfhlhkSkUKsbDJa00i -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:37 2025 by rpki-client