$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json) Hash identifier: r+lYbnbiQDQ9CqEDoPb/SZxpWcoZ7drHFx7ISsKM1XM= Subject key identifier: D6:80:23:FE:48:A7:A0:63:2F:94:EA:C6:48:E9:D9:B2:31:5A:62:20 Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft Manifest number: 028E Signing time: Mon 03 Nov 2025 01:32:30 +0000 Manifest this update: Mon 03 Nov 2025 01:32:29 +0000 Manifest next update: Mon 10 Nov 2025 01:32:29 +0000 Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: YbA+hQo8AH7SoHiKnX66EcT4d30Ik+rA6G7rzfjw4kQ=) 2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: KwT8765tV1xGz2sf7ujcAdTQLGt8VA1bqI5xYKuBmVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Validity Not Before: Nov 3 01:32:29 2025 GMT Not After : Nov 10 01:32:29 2025 GMT Subject: CN=6908062d-621e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:8b:44:1b:11:7b:e6:cc:37:1e:7c:9d:e1: 6f:5b:64:cc:22:57:6e:1c:d9:7a:a7:de:b1:c0:30: 3a:c5:f2:e0:91:39:80:dc:1f:b1:69:e6:c4:b3:44: 9a:43:35:a4:de:e3:71:f9:db:3b:5a:c7:65:47:4e: 1c:be:c0:a7:3d:63:f3:28:56:07:d9:f1:3d:55:bf: b2:c5:af:62:ed:e6:f2:6f:56:92:13:fb:94:c1:a7: 73:da:a3:11:de:21:b5:9d:5d:6d:7b:58:74:8c:f3: 05:d0:97:80:11:cf:8a:48:34:70:70:eb:cd:7f:ba: 52:b0:a0:69:7a:eb:4f:50:59:9c:50:45:13:c7:d2: a4:a4:a7:e1:83:7b:d1:45:77:62:42:1a:0f:d0:6b: 18:4b:3f:be:a2:7a:14:e8:b4:22:d7:b7:2c:dc:ca: fd:7e:a6:ca:5d:19:06:20:02:32:e4:3f:04:f1:8f: 31:90:16:50:ea:d5:59:ff:a9:16:9e:75:7c:8a:79: 76:31:3f:3b:6c:2c:9d:d7:bf:21:89:7a:d8:ac:6c: 28:e0:47:71:94:19:28:93:40:f6:38:b3:dc:ba:7f: 5a:42:fb:78:bf:57:e7:29:41:24:60:90:aa:64:06: 6d:51:d2:a9:3b:54:73:4f:f3:17:a0:fe:01:06:72: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:80:23:FE:48:A7:A0:63:2F:94:EA:C6:48:E9:D9:B2:31:5A:62:20 X509v3 Authority Key Identifier: keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:41:74:c4:26:29:59:22:6e:d5:75:0a:f5:6e:c1:2b:ed:ff: d2:41:e5:2b:14:6e:06:25:c3:9d:2b:0c:84:65:d0:4b:82:cd: 7a:70:01:38:72:9e:01:1d:09:8c:40:17:0a:66:24:6f:0c:67: b6:3b:18:a6:e0:4f:70:36:38:16:9a:0d:f4:d2:52:dd:49:ed: 67:b2:b9:47:bf:c5:55:99:ad:64:fb:7a:a3:9a:f2:a4:8a:8f: fb:56:29:d9:be:0a:98:4b:30:f8:bc:4c:ae:b8:2c:eb:52:7f: ef:c4:79:84:3f:f8:cd:99:f6:a7:1d:75:01:64:43:ce:26:bb: 8a:b8:27:8a:06:63:3f:54:ed:bb:d6:20:ff:66:d2:d8:82:67: 25:eb:9f:9a:68:ac:24:31:87:21:4f:69:3d:a5:05:46:6e:55: d7:30:07:82:66:35:0d:05:fe:b7:b3:b6:12:aa:08:59:73:35: 66:67:51:ed:83:3b:d7:65:ad:bb:79:e4:79:37:ca:3d:94:d3: 38:06:7e:c7:e2:17:fb:8b:ae:64:ba:55:c5:f3:2b:96:e8:6f: 95:3e:85:a6:c6:80:fa:f1:31:f5:1c:30:52:72:e4:e7:a6:ac: 3e:b8:f1:46:9f:ea:67:ec:d5:88:2f:19:bc:af:f8:f8:cf:47: cb:6d:58:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCODkxMTAvBgNVBAUTKEJEMTZCNTY0MzJBRTVGNDMwMjVDNERBMTEzNDUzN0Y3 MDRFQjQwOTYwHhcNMjUxMTAzMDEzMjI5WhcNMjUxMTEwMDEzMjI5WjAYMRYwFAYD VQQDEw02OTA4MDYyZC02MjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2quLRBsRe+bMNx58neFvW2TMIlduHNl6p96xwDA6xfLgkTmA3B+xaebEs0Sa QzWk3uNx+ds7WsdlR04cvsCnPWPzKFYH2fE9Vb+yxa9i7ebyb1aSE/uUwadz2qMR 3iG1nV1te1h0jPMF0JeAEc+KSDRwcOvNf7pSsKBpeutPUFmcUEUTx9KkpKfhg3vR RXdiQhoP0GsYSz++onoU6LQi17cs3Mr9fqbKXRkGIAIy5D8E8Y8xkBZQ6tVZ/6kW nnV8inl2MT87bCyd178hiXrYrGwo4EdxlBkok0D2OLPcun9aQvt4v1fnKUEkYJCq ZAZtUdKpO1RzT/MXoP4BBnIT4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaAI/5I p6BjL5Tqxkjp2bIxWmIgMB8GA1UdIwQYMBaAFL0WtWQyrl9DAlxNoRNFN/cE60CW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUI4OS85NkQzQkE1QzI0 RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgwTUNYRTJoRTBVMzl3VHJR SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSYTFaREt1WDBNQ1hFMmhFMFUzOXdUclFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUI4OS85NkQzQkE1QzI0RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgw TUNYRTJoRTBVMzl3VHJRSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnQXTEJilZIm7VdQr1bsEr7f/SQeUrFG4GJcOdKwyEZdBLgs16cAE4 cp4BHQmMQBcKZiRvDGe2Oxim4E9wNjgWmg300lLdSe1nsrlHv8VVma1k+3qjmvKk io/7VinZvgqYSzD4vEyuuCzrUn/vxHmEP/jNmfanHXUBZEPOJruKuCeKBmM/VO27 1iD/ZtLYgmcl65+aaKwkMYchT2k9pQVGblXXMAeCZjUNBf63s7YSqghZczVmZ1Ht gzvXZa27eeR5N8o9lNM4Bn7H4hf7i65kulXF8yuW6G+VPoWmxoD68TH1HDBScuTn pqw+uPFGn+pn7NWILxm8r/j4z0fLbVhQ -----END CERTIFICATE-----Generated at Tue Nov 4 00:48:38 2025 by rpki-client