$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: lsRhbR3zsK5D/AbkuKmgQFqTf4Q6SbKkOlYGD9caRys= Subject key identifier: 02:BB:6F:56:C5:7A:1D:68:45:25:ED:B8:25:BF:00:EB:FA:DC:10:E3 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0C55 Signing time: Sat 18 Oct 2025 19:22:44 +0000 Manifest this update: Sat 18 Oct 2025 19:22:43 +0000 Manifest next update: Sat 25 Oct 2025 19:22:43 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: BwdRcyKx9U0fIy5v8xS9lm4svuCvwPSw5Yjkvln7HEU=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: 9jpZ67QWGAJhgEp9yZYa+B85oL6nxjWkZcfSp/yeSCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Oct 18 19:22:43 2025 GMT Not After : Oct 25 19:22:43 2025 GMT Subject: CN=68f3e903-aee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:d6:ce:2b:6f:82:ae:cd:70:6e:8a:a7:97: ff:64:cd:7e:51:39:f3:7a:cf:0b:57:44:35:13:ff: 6a:22:7a:99:69:52:6d:1c:7c:81:55:26:54:c2:a6: a4:3b:8b:e6:84:5c:38:60:2c:02:72:93:6f:b4:2a: b9:e2:22:25:0e:ab:cd:55:97:fb:64:1e:29:d2:cb: 65:a0:bc:9c:33:df:aa:72:41:ba:2b:47:db:34:45: 16:ee:1a:7b:52:8d:c1:e6:4b:2e:d8:fb:39:dd:d1: e8:b0:d7:0c:d9:b0:b3:e9:06:d9:92:c1:c7:bc:68: a8:67:f3:92:04:60:d5:6a:2c:34:37:e6:d9:02:2c: ae:15:8b:fe:9b:e7:8d:8e:b3:88:f5:f1:2a:25:64: 59:f2:0c:78:c9:fc:f9:7f:be:3f:db:62:86:fd:fd: 9f:0a:eb:f1:bb:a2:2b:29:ec:8c:22:37:27:8c:0c: 28:86:47:dc:5e:36:79:92:35:6c:f1:66:94:0f:07: af:5d:2d:1c:5d:ae:2c:0b:07:41:13:9c:5a:be:05: 59:fe:b3:52:ec:d3:74:36:f0:c1:65:40:5b:45:95: 01:00:50:b7:bd:0b:d5:84:d2:23:30:61:16:ed:90: e7:43:5c:28:92:18:0a:ef:b0:34:ae:20:9b:5c:0f: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BB:6F:56:C5:7A:1D:68:45:25:ED:B8:25:BF:00:EB:FA:DC:10:E3 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d6:ce:f7:fb:52:60:8a:19:c0:e0:94:25:94:3e:e6:e6:ae: f6:b3:d2:12:f0:74:0b:28:93:12:d9:ce:8e:d1:16:3e:58:1b: ae:51:94:30:42:6e:dd:bd:c8:c7:a9:c4:30:90:11:38:06:ab: 6e:e9:98:f9:f0:7c:b5:04:cc:cf:e0:98:66:31:ce:cf:7a:ea: 6d:5c:73:c7:12:2b:35:2e:ef:4d:d3:ea:35:77:97:7e:8b:8f: 06:78:93:32:ed:34:8a:9b:b3:c7:8f:fd:7f:e1:6c:44:d9:2c: 6b:39:d3:0d:95:9a:f1:58:f2:49:8e:2f:3f:34:ee:c1:ed:52: 32:aa:f8:52:3d:2a:0f:18:29:34:3c:5e:11:9f:78:9c:13:ea: 9d:0f:19:91:83:da:69:18:1e:55:a0:a5:b7:e0:ae:1f:b6:d0: fb:28:d1:89:b1:d0:48:55:29:b5:33:12:98:e3:4d:0f:65:06: 76:9f:07:74:e4:55:56:3b:57:d4:f0:ff:ac:ab:3b:9a:f1:77: 48:16:12:d0:99:ef:e1:fb:c3:27:74:e7:3c:40:0a:2d:8c:31: 7a:d2:2b:f0:9c:ec:8a:8e:8c:87:9b:2b:9c:6a:c2:46:9c:46: aa:90:b0:8b:2f:bd:ea:88:b7:4d:64:e9:1c:75:26:53:da:df: 15:a1:8e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjUxMDE4MTkyMjQzWhcNMjUxMDI1MTkyMjQzWjAYMRYwFAYD VQQDEw02OGYzZTkwMy1hZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyofWzitvgq7NcG6Kp5f/ZM1+UTnzes8LV0Q1E/9qInqZaVJtHHyBVSZUwqak O4vmhFw4YCwCcpNvtCq54iIlDqvNVZf7ZB4p0stloLycM9+qckG6K0fbNEUW7hp7 Uo3B5ksu2Ps53dHosNcM2bCz6QbZksHHvGioZ/OSBGDVaiw0N+bZAiyuFYv+m+eN jrOI9fEqJWRZ8gx4yfz5f74/22KG/f2fCuvxu6IrKeyMIjcnjAwohkfcXjZ5kjVs 8WaUDwevXS0cXa4sCwdBE5xavgVZ/rNS7NN0NvDBZUBbRZUBAFC3vQvVhNIjMGEW 7ZDnQ1wokhgK77A0riCbXA9fXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAK7b1bF eh1oRSXtuCW/AOv63BDjMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS1s73+1JgihnA4JQllD7m5q72s9IS8HQLKJMS2c6O0RY+WBuuUZQw Qm7dvcjHqcQwkBE4Bqtu6Zj58Hy1BMzP4JhmMc7PeuptXHPHEis1Lu9N0+o1d5d+ i48GeJMy7TSKm7PHj/1/4WxE2SxrOdMNlZrxWPJJji8/NO7B7VIyqvhSPSoPGCk0 PF4Rn3icE+qdDxmRg9ppGB5VoKW34K4fttD7KNGJsdBIVSm1MxKY400PZQZ2nwd0 5FVWO1fU8P+sqzua8XdIFhLQme/h+8MndOc8QAotjDF60ivwnOyKjoyHmyucasJG nEaqkLCLL73qiLdNZOkcdSZT2t8VoY7w -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:27 2025 by rpki-client