$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: 1mK6vOf9/HK2sjEeTTWWpv9Ycu7ix4fMY8Vnisu+64w= Subject key identifier: A9:7F:BF:52:30:C5:5A:46:5C:FF:10:71:67:A1:FC:86:BC:46:9A:FE Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 0229 Signing time: Mon 20 Oct 2025 20:39:04 +0000 Manifest this update: Mon 20 Oct 2025 20:39:03 +0000 Manifest next update: Mon 27 Oct 2025 20:39:03 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: elsGnrSqeVVEbyamY7/8P3wFHafwAwEbLYq2F7zh7hU=) 2: 8ED301D0782011F0BDB6E683C4F9AE02.roa (hash: qjBtyTQ/dYsRebIp6ZkwlHiVqfqKITocMEosdGcOqv0=) 3: 96C1C6A0782111F0A5880F87C4F9AE02.roa (hash: G2RSm0IwLRt/typGeA6hLdDQJj9eRF45VegOaQjSFIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Oct 20 20:39:03 2025 GMT Not After : Oct 27 20:39:03 2025 GMT Subject: CN=68f69de8-0584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:1d:8d:0e:57:18:ba:3f:98:2f:9c:16:be: dd:a2:17:d4:6e:11:f6:5e:fb:a1:e7:76:0a:a2:a6: c0:d5:1f:3e:9b:88:4a:41:8b:1a:6b:03:ec:8d:7c: aa:24:57:a9:b9:88:3d:93:c8:b3:58:31:db:89:6c: 19:66:4d:c6:3a:2a:90:b2:88:6f:b7:8c:cd:95:34: d2:4c:e5:c0:35:72:86:09:c5:a6:74:14:47:d0:a3: 1b:2c:b9:e1:1f:5c:aa:82:92:99:33:21:23:e6:9e: 8c:d3:cc:20:82:0c:68:8d:21:bc:cf:f6:b5:22:90: 97:a5:c7:a5:2a:6a:02:90:89:a0:e0:ef:22:2c:6e: 71:21:2d:45:1f:6d:41:07:d4:c3:98:83:a2:6c:b5: 15:58:5a:de:b3:2e:c2:39:f3:37:f2:c0:e4:93:99: 77:6b:dd:08:a5:46:96:e9:83:59:a5:34:41:ba:b9: ea:74:b6:da:a4:29:e9:80:e6:be:61:3e:b5:ec:e6: 8c:78:d0:4d:1b:c5:60:7c:0f:8b:55:9e:ab:81:cd: 48:8a:78:97:a8:ab:2b:f4:73:68:43:75:91:c9:a0: d5:cc:6e:5d:db:05:b5:d0:f4:3c:c4:13:ef:c1:19: 43:1c:ee:03:9f:96:cb:1f:44:f5:64:79:a7:52:e3: 60:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7F:BF:52:30:C5:5A:46:5C:FF:10:71:67:A1:FC:86:BC:46:9A:FE X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:03:f7:64:c6:1c:f2:c8:cc:50:bd:30:84:98:33:d7:c9:36: 7f:ea:b3:20:85:8e:90:ed:c6:fd:30:7a:dd:2d:cf:7d:bf:8a: c1:45:59:77:b5:2c:9b:f0:e5:00:84:a9:1d:73:8d:3d:e5:9e: 1a:ff:43:67:dd:9e:c5:a6:82:53:72:f6:f3:43:07:9c:84:ce: 75:c3:2b:ab:c0:a5:48:13:53:30:c5:4d:86:8a:49:6a:53:8a: 55:9d:ef:0d:58:e2:a1:af:f0:fe:56:a5:90:21:11:ad:da:d1: e9:93:40:b8:d1:7c:45:09:4f:7e:ee:08:cb:a2:6c:8d:07:f5: 06:bc:dd:2e:60:24:15:c9:31:54:d7:f3:5d:fb:82:9e:0c:ea: 65:96:3b:2e:08:49:45:a7:a6:f8:af:56:d6:20:bf:47:da:b8: 41:e6:a5:99:aa:18:46:ae:75:a4:4c:dc:40:15:67:3a:78:43: 32:32:ca:6e:dd:eb:9f:53:ee:aa:e3:d6:35:bd:d8:34:df:fa: 3d:6a:af:09:b6:0b:67:83:23:b7:32:f0:9f:67:5d:55:c9:fc: 0e:11:bf:b7:57:64:c8:a5:4c:ff:cd:69:d3:05:59:89:fc:03: b5:5b:f9:30:57:77:11:32:7c:59:c3:e9:ef:e4:b1:5d:8a:aa: ae:bc:a9:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUxMDIwMjAzOTAzWhcNMjUxMDI3MjAzOTAzWjAYMRYwFAYD VQQDEw02OGY2OWRlOC0wNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVEdjQ5XGLo/mC+cFr7dohfUbhH2Xvuh53YKoqbA1R8+m4hKQYsaawPsjXyq JFepuYg9k8izWDHbiWwZZk3GOiqQsohvt4zNlTTSTOXANXKGCcWmdBRH0KMbLLnh H1yqgpKZMyEj5p6M08wgggxojSG8z/a1IpCXpcelKmoCkImg4O8iLG5xIS1FH21B B9TDmIOibLUVWFresy7COfM38sDkk5l3a90IpUaW6YNZpTRBurnqdLbapCnpgOa+ YT617OaMeNBNG8VgfA+LVZ6rgc1IiniXqKsr9HNoQ3WRyaDVzG5d2wW10PQ8xBPv wRlDHO4Dn5bLH0T1ZHmnUuNglQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKl/v1Iw xVpGXP8QcWeh/Ia8Rpr+MB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHA/dkxhzyyMxQvTCEmDPXyTZ/6rMghY6Q7cb9MHrdLc99v4rBRVl3 tSyb8OUAhKkdc4095Z4a/0Nn3Z7FpoJTcvbzQwechM51wyurwKVIE1MwxU2Giklq U4pVne8NWOKhr/D+VqWQIRGt2tHpk0C40XxFCU9+7gjLomyNB/UGvN0uYCQVyTFU 1/Nd+4KeDOplljsuCElFp6b4r1bWIL9H2rhB5qWZqhhGrnWkTNxAFWc6eEMyMspu 3eufU+6q49Y1vdg03/o9aq8JtgtngyO3MvCfZ11VyfwOEb+3V2TIpUz/zWnTBVmJ /AO1W/kwV3cRMnxZw+nv5LFdiqquvKm6 -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:21 2025 by rpki-client