$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: lgEpO8z7yIl9AdNqiN8aUZb7TbCUubNnNHe/GXRb5bI= Subject key identifier: 9A:92:46:03:8B:C5:91:2A:10:8A:75:20:FC:D8:EF:5F:8B:B0:FA:08 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 07A1 Signing time: Tue 04 Nov 2025 21:38:52 +0000 Manifest this update: Tue 04 Nov 2025 21:38:51 +0000 Manifest next update: Tue 11 Nov 2025 21:38:51 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: B+CFKyqAMkt1aeOCRJN0trDw6vMPCBt2r3wgFo01J5w=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: 9R9QsXFUMXvz//+w7pzMdn8juESdiZRyTDAnvcDwnQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Nov 4 21:38:51 2025 GMT Not After : Nov 11 21:38:51 2025 GMT Subject: CN=690a726c-deca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:54:b3:d9:0c:69:9c:a8:55:d8:8f:de:c2: e9:d6:46:6b:ab:99:df:13:0c:d4:76:cc:6a:85:ca: c9:50:c9:5d:0e:dc:6d:a6:da:53:f8:1c:69:b2:40: 84:99:75:4b:c6:2b:7d:d0:f4:30:c7:4a:07:3a:29: 3a:e6:34:92:02:60:65:7e:99:08:5b:6b:c9:7a:8f: 4b:37:8f:0c:27:d2:70:8e:dd:2b:75:d5:e1:6f:3f: 68:1c:c8:10:67:3c:25:35:cd:b5:e0:77:d5:a4:8a: b5:eb:85:0a:59:48:7f:1f:91:03:57:c7:48:54:97: f9:21:5d:33:ec:65:12:07:4f:74:13:6b:81:6a:0e: 65:c5:77:f9:bc:3c:9f:c2:b8:7d:71:44:79:e3:05: b5:30:e1:6b:48:01:1e:10:3a:9e:59:ec:53:c0:94: 24:24:3e:ac:6b:f3:67:d4:fe:38:e3:a9:97:67:9b: 23:44:d6:92:97:61:61:84:80:df:58:ee:3c:00:62: ac:1e:7a:5b:05:ca:1f:61:5c:a9:95:2d:08:41:bf: db:f1:80:ca:6c:46:10:6e:d7:eb:28:12:14:75:7f: 24:05:61:43:5b:e4:59:36:44:94:c4:17:08:55:0b: cd:64:9b:e5:a4:19:e6:4f:90:a6:be:65:2e:80:fa: 0d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:92:46:03:8B:C5:91:2A:10:8A:75:20:FC:D8:EF:5F:8B:B0:FA:08 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:23:45:a7:02:c4:ad:1d:0b:18:3c:80:85:4a:fb:ae:ea:f8: 2a:ff:06:69:28:d8:8b:89:7b:0a:2e:e0:1e:3e:78:1e:ec:17: 6e:1c:9e:ad:9f:b6:eb:f6:94:ff:01:2f:1e:cd:fd:a3:d6:94: 22:3e:6a:c8:14:39:39:3c:28:93:20:4b:8c:3b:ea:f6:2a:f0: 07:ea:a4:3a:da:27:67:48:0b:75:85:41:3d:ab:49:da:59:30: 00:e5:2a:17:50:a9:81:6d:9c:b2:be:fa:97:1d:22:61:77:3c: a0:37:55:0d:3a:3f:f9:a8:42:73:56:37:74:ea:7d:b6:f3:58: 7c:d3:5d:9b:c2:0d:17:95:d2:84:2b:1f:45:c9:79:78:e6:36: 18:6c:43:87:3c:51:8b:4a:f6:55:ec:84:21:f6:d5:75:a2:53: ce:f8:8d:67:25:50:27:db:d0:cb:19:7d:2c:eb:a9:55:26:4d: 1c:e1:5f:5f:17:83:dc:3f:5e:d7:a7:63:20:81:1c:9e:1f:63: 4f:c6:86:05:0c:24:de:f0:37:d8:eb:9a:ea:02:44:b5:37:8d: ca:0e:8a:96:6c:80:4e:2d:62:a4:65:11:79:e9:c0:af:19:aa: 60:d1:e2:65:3a:7a:dd:2e:f3:b7:da:47:c7:24:93:55:3f:03: a7:45:63:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUxMTA0MjEzODUxWhcNMjUxMTExMjEzODUxWjAYMRYwFAYD VQQDEw02OTBhNzI2Yy1kZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIlUs9kMaZyoVdiP3sLp1kZrq5nfEwzUdsxqhcrJUMldDtxtptpT+BxpskCE mXVLxit90PQwx0oHOik65jSSAmBlfpkIW2vJeo9LN48MJ9Jwjt0rddXhbz9oHMgQ ZzwlNc214HfVpIq164UKWUh/H5EDV8dIVJf5IV0z7GUSB090E2uBag5lxXf5vDyf wrh9cUR54wW1MOFrSAEeEDqeWexTwJQkJD6sa/Nn1P4446mXZ5sjRNaSl2FhhIDf WO48AGKsHnpbBcofYVyplS0IQb/b8YDKbEYQbtfrKBIUdX8kBWFDW+RZNkSUxBcI VQvNZJvlpBnmT5CmvmUugPoN1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqSRgOL xZEqEIp1IPzY71+LsPoIMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjI0WnAsStHQsYPICFSvuu6vgq/wZpKNiLiXsKLuAePnge7BduHJ6t n7br9pT/AS8ezf2j1pQiPmrIFDk5PCiTIEuMO+r2KvAH6qQ62idnSAt1hUE9q0na WTAA5SoXUKmBbZyyvvqXHSJhdzygN1UNOj/5qEJzVjd06n2281h8012bwg0XldKE Kx9FyXl45jYYbEOHPFGLSvZV7IQh9tV1olPO+I1nJVAn29DLGX0s66lVJk0c4V9f F4PcP17Xp2MggRyeH2NPxoYFDCTe8DfY65rqAkS1N43KDoqWbIBOLWKkZRF56cCv Gapg0eJlOnrdLvO32kfHJJNVPwOnRWM3 -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:40 2025 by rpki-client