$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: SZflpecet5gjzdtQw0EQIXzCCfzngUW8EpvXhYgTjM8= Subject key identifier: 40:1B:C9:0A:AF:9C:7A:23:DA:CE:BC:93:6D:E3:F3:F8:E9:55:87:DB Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0DDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0DCA Signing time: Sat 18 Oct 2025 18:34:23 +0000 Manifest this update: Sat 18 Oct 2025 18:34:22 +0000 Manifest next update: Sat 25 Oct 2025 18:34:22 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: D6042pl/OkWNgW/Y7EWCWBTh4k6V68cqEunjXRHnRNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3547 (0xddb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: Oct 18 18:34:22 2025 GMT Not After : Oct 25 18:34:22 2025 GMT Subject: CN=68f3ddaf-7ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:fd:45:f5:2d:c8:3e:42:9f:f5:e2:07:be: 0d:00:96:df:1c:93:4b:9d:b5:b6:73:e2:ba:72:bb: b4:72:ef:1a:95:67:14:bd:22:c2:cd:29:df:33:11: 9b:14:fe:c1:26:61:3d:b8:99:ad:60:b5:b7:df:3b: 27:ca:ed:6e:d7:f1:aa:b0:88:39:22:6b:d9:1b:64: cc:28:c4:e4:ae:56:7a:3d:5b:53:ea:95:41:55:69: 12:38:af:76:c0:d2:b4:88:35:25:16:16:29:aa:f5: e2:a6:37:cd:49:5f:3a:11:bb:fe:26:8a:4d:38:0e: a5:a0:3b:2a:8f:f8:92:87:3f:a4:6f:a1:d7:a4:9d: 29:7d:10:92:a7:89:61:b6:91:8c:98:2a:c7:44:b6: 2b:b4:7e:5c:ae:56:70:4d:8c:22:66:f7:6d:ab:88: 42:b7:ac:27:43:b9:2b:6a:de:40:e4:c6:fd:4d:1d: cd:47:ca:a2:2c:e0:50:14:ae:d4:1a:e7:d8:66:2c: 2d:90:c7:40:1d:3e:d0:bc:b9:18:5b:61:24:ac:d6: 68:3a:fb:f1:80:ad:c0:3a:53:be:59:b2:fb:be:6b: 8d:f9:ff:61:13:c7:5b:d9:10:e2:2b:ca:7d:57:47: c5:07:d0:b0:4b:4a:50:43:38:2b:b9:66:13:36:3f: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1B:C9:0A:AF:9C:7A:23:DA:CE:BC:93:6D:E3:F3:F8:E9:55:87:DB X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:50:26:35:bf:58:e0:54:2d:00:d5:78:d3:3c:a7:de:26:08: 64:8e:68:67:3f:04:5d:fb:5d:fc:fc:b9:c8:74:d4:80:14:8a: 20:7c:6b:f4:e3:da:c1:05:16:21:8f:30:0f:6a:77:08:ec:5e: 74:2a:2c:02:87:1e:da:35:55:ea:64:d0:3b:d3:4a:8a:a3:df: 04:c7:c4:0b:d8:32:cf:3b:2b:be:6b:ee:6a:e4:fc:da:25:c4: 73:6f:42:53:35:c0:cb:a2:aa:fd:8f:9c:32:cb:66:60:07:1d: 20:0e:b1:c2:38:fa:2b:a1:0f:93:42:6d:85:8e:1a:3a:a1:39: cb:91:77:f5:5d:33:14:83:8c:0f:05:61:5d:46:6b:62:4a:99: 33:07:1a:76:78:85:bd:dd:14:0b:42:21:00:f3:71:62:19:fe: d9:1d:53:2b:1e:14:07:5a:e6:4e:11:ad:31:1c:ed:dd:89:d8: f5:30:29:db:5c:26:39:77:ad:6c:dd:33:25:97:2e:73:ec:e5: ba:f6:55:f0:15:91:87:ad:33:d4:c7:82:f7:fd:36:4f:a7:a4: 96:65:50:8e:67:6e:f5:c6:e4:c6:88:30:db:bf:1f:f3:66:94: 84:99:3e:2e:21:3c:f2:fb:86:46:cb:45:5d:b7:7c:d8:24:e3: 72:98:64:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjUxMDE4MTgzNDIyWhcNMjUxMDI1MTgzNDIyWjAYMRYwFAYD VQQDEw02OGYzZGRhZi03ZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxL9RfUtyD5Cn/XiB74NAJbfHJNLnbW2c+K6cru0cu8alWcUvSLCzSnfMxGb FP7BJmE9uJmtYLW33zsnyu1u1/GqsIg5ImvZG2TMKMTkrlZ6PVtT6pVBVWkSOK92 wNK0iDUlFhYpqvXipjfNSV86Ebv+JopNOA6loDsqj/iShz+kb6HXpJ0pfRCSp4lh tpGMmCrHRLYrtH5crlZwTYwiZvdtq4hCt6wnQ7krat5A5Mb9TR3NR8qiLOBQFK7U GufYZiwtkMdAHT7QvLkYW2EkrNZoOvvxgK3AOlO+WbL7vmuN+f9hE8db2RDiK8p9 V0fFB9CwS0pQQzgruWYTNj+1jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAbyQqv nHoj2s68k23j8/jpVYfbMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/UCY1v1jgVC0A1XjTPKfeJghkjmhnPwRd+138/LnIdNSAFIogfGv0 49rBBRYhjzAPancI7F50KiwChx7aNVXqZNA700qKo98Ex8QL2DLPOyu+a+5q5Pza JcRzb0JTNcDLoqr9j5wyy2ZgBx0gDrHCOPoroQ+TQm2Fjho6oTnLkXf1XTMUg4wP BWFdRmtiSpkzBxp2eIW93RQLQiEA83FiGf7ZHVMrHhQHWuZOEa0xHO3didj1MCnb XCY5d61s3TMlly5z7OW69lXwFZGHrTPUx4L3/TZPp6SWZVCOZ271xuTGiDDbvx/z ZpSEmT4uITzy+4ZGy0Vdt3zYJONymGQ4 -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:40 2025 by rpki-client