$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json) Hash identifier: RQT4wzcyPzd2ibomOMaVvBSg7ueuHDQ/oVT5mUlsChc= Subject key identifier: 45:0D:CA:04:36:1E:3C:93:09:5D:93:B3:8C:61:3E:1B:76:81:67:94 Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft Manifest number: 0850 Signing time: Sat 18 Oct 2025 21:54:22 +0000 Manifest this update: Sat 18 Oct 2025 21:54:21 +0000 Manifest next update: Sat 25 Oct 2025 21:54:21 +0000 Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: gWrunnkbyyyl05QmE9l7D9sa0DRSeoArfOeZV2HrptY=) 2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: F2ehSlNBpZVAOeI83NaC14EsDciABgTNrvpmZu4awNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Oct 18 21:54:21 2025 GMT Not After : Oct 25 21:54:21 2025 GMT Subject: CN=68f40c8d-09a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:fd:37:81:6c:85:6b:61:9b:19:57:7d:c1: e1:4a:84:be:68:1a:4e:e0:6f:76:7f:bc:1a:c3:fc: b1:53:9d:f2:86:80:e8:7a:87:2d:b2:32:c7:aa:ae: 4a:4c:2a:6d:bb:b6:c9:68:f6:97:9d:8f:c8:e5:d1: 9a:08:39:d7:47:49:ec:28:7e:f1:7c:5e:c2:23:4f: dd:6f:62:ab:95:6b:62:7c:9c:28:b6:1b:43:c1:a3: bb:c8:b4:f5:be:56:a1:ac:30:dd:01:92:1f:12:b9: d6:6c:ca:52:43:06:2c:f9:03:fa:ac:49:57:ad:d7: 8c:d7:42:e0:bf:c4:ed:99:52:33:e7:ca:20:b0:c7: 01:b6:7f:37:62:11:63:fe:a3:34:83:d1:73:a3:d5: 18:a0:dd:f3:9c:70:8a:bd:d1:9e:59:dc:3a:09:77: a0:a7:fd:47:72:47:87:94:7a:22:b6:3f:f0:28:ce: 33:5d:cf:f6:b7:8b:8b:a9:bf:b5:48:33:42:8d:62: 14:3b:bc:b6:b4:f4:c1:be:a9:ec:f6:c0:42:53:fb: 8e:b1:1b:c2:1b:a0:ae:5b:77:ce:35:9b:56:78:19: 38:04:24:2c:84:d1:0b:de:7e:25:17:da:dd:c4:8b: ab:1c:2a:d8:f4:86:8f:2d:25:f3:1b:0b:70:8b:8c: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0D:CA:04:36:1E:3C:93:09:5D:93:B3:8C:61:3E:1B:76:81:67:94 X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ac:42:8c:1d:24:06:e2:a0:bc:d8:ef:bb:f5:16:39:f9:a2: 35:06:9f:63:04:a6:dc:2c:1e:b7:33:56:4c:88:de:6a:d0:b7: 2b:88:17:19:93:2a:e9:55:d6:5c:8e:44:92:c5:e7:42:7e:a0: 09:df:71:5c:64:16:b1:8c:b4:db:d5:d1:23:ec:27:35:df:be: 3b:20:06:47:a6:7d:a9:5c:be:f7:0d:08:f6:c9:23:7f:49:81: 3d:43:84:fc:51:24:e2:d9:81:06:da:c7:88:84:ba:75:b1:e3: 33:68:87:66:4c:36:61:c8:a7:c6:4c:9b:a4:86:55:9a:b2:fd: bc:d7:d3:d9:4d:f9:8e:dc:5b:f0:7d:9a:d2:2d:c1:37:a5:3b: 23:de:4f:57:4b:f7:38:66:37:9a:52:46:e7:09:bf:d3:1d:a3: d7:80:fe:ef:20:ea:0d:0c:af:75:b0:ed:cd:a6:23:1e:d7:9b: ff:13:66:95:1a:9e:70:60:9a:2f:f2:73:a7:40:7b:e1:e9:0e: 9f:40:27:15:89:c4:0e:2f:c1:37:ed:15:6d:8a:c0:9f:59:2d: 16:66:4a:4d:02:4d:59:b9:9e:c5:a2:ea:ec:66:a9:aa:2b:a1: 47:0d:f6:53:2c:70:13:63:15:f7:fe:6c:3d:31:2a:49:7f:73: 09:d9:12:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjUxMDE4MjE1NDIxWhcNMjUxMDI1MjE1NDIxWjAYMRYwFAYD VQQDEw02OGY0MGM4ZC0wOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkH9N4FshWthmxlXfcHhSoS+aBpO4G92f7waw/yxU53yhoDoeoctsjLHqq5K TCptu7bJaPaXnY/I5dGaCDnXR0nsKH7xfF7CI0/db2KrlWtifJwothtDwaO7yLT1 vlahrDDdAZIfErnWbMpSQwYs+QP6rElXrdeM10Lgv8TtmVIz58ogsMcBtn83YhFj /qM0g9Fzo9UYoN3znHCKvdGeWdw6CXegp/1HckeHlHoitj/wKM4zXc/2t4uLqb+1 SDNCjWIUO7y2tPTBvqns9sBCU/uOsRvCG6CuW3fONZtWeBk4BCQshNEL3n4lF9rd xIurHCrY9IaPLSXzGwtwi4xq0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUNygQ2 HjyTCV2Ts4xhPht2gWeUMB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABrEKMHSQG4qC82O+79RY5+aI1Bp9jBKbcLB63M1ZMiN5q0LcriBcZ kyrpVdZcjkSSxedCfqAJ33FcZBaxjLTb1dEj7Cc13747IAZHpn2pXL73DQj2ySN/ SYE9Q4T8USTi2YEG2seIhLp1seMzaIdmTDZhyKfGTJukhlWasv2819PZTfmO3Fvw fZrSLcE3pTsj3k9XS/c4ZjeaUkbnCb/THaPXgP7vIOoNDK91sO3NpiMe15v/E2aV Gp5wYJov8nOnQHvh6Q6fQCcVicQOL8E37RVtisCfWS0WZkpNAk1ZuZ7FoursZqmq K6FHDfZTLHATYxX3/mw9MSpJf3MJ2RK5 -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:40 2025 by rpki-client