$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json) Hash identifier: nUiT0XYjNx06Nl0yZOFaOMipdypYR4Q00rFIqM93d7Y= Subject key identifier: 83:AD:36:D9:9E:CB:E1:86:20:C3:79:07:5C:C2:C0:EB:24:D4:A7:8A Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft Manifest number: 36 Signing time: Sun 19 Oct 2025 11:01:59 +0000 Manifest this update: Sun 19 Oct 2025 11:01:58 +0000 Manifest next update: Sun 26 Oct 2025 11:01:58 +0000 Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: cblQXnEJ5dxoLvCHJ4bmw0MylHVsV8/Ydf9Sk2mMdXA=) 2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: /uTCkM+7T3MX4CR0F7TNTBgsSs4yKxKjHNmhUVycHRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Validity Not Before: Oct 19 11:01:58 2025 GMT Not After : Oct 26 11:01:58 2025 GMT Subject: CN=68f4c526-cab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:4e:84:e8:8b:79:00:af:da:09:20:7f:67: 93:b2:d4:cf:8e:25:b9:be:01:f0:21:94:00:a5:ea: 48:1a:80:6e:3d:64:07:0b:aa:e9:11:ea:0f:9a:b8: 33:ac:bf:32:78:65:fa:66:7b:be:88:c0:20:36:bc: e3:a7:55:85:58:44:41:62:05:7f:bc:72:14:3a:dd: 61:f4:0f:bd:7b:e0:45:78:c2:3e:27:4f:88:60:bf: 65:76:e1:53:30:ea:15:34:f1:66:80:e0:76:28:36: 1f:62:99:af:96:58:94:18:de:7f:36:64:e7:35:b4: 3a:e2:3a:41:41:fa:18:48:73:8b:58:9b:f9:2d:8c: bb:57:49:59:93:bf:02:e1:c0:03:43:29:be:7a:b7: d3:69:97:f9:db:21:6c:dc:c2:e6:f5:c7:b1:0f:2b: b1:0b:f6:ea:4d:6c:15:f5:6f:84:24:c7:5b:fa:e9: e0:95:2d:4d:9b:2f:55:3f:fa:83:5f:f8:fd:00:6c: d4:f6:6c:89:43:61:4a:55:9e:dd:44:8e:b4:16:97: 37:f0:02:cb:ac:7e:b0:ce:76:64:f1:e8:e5:c3:5a: 9a:9a:00:b8:df:cf:7a:8d:db:49:24:9f:cb:36:a8: ce:2a:e5:e9:a1:c2:e4:43:96:ae:9e:3e:d5:6e:72: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AD:36:D9:9E:CB:E1:86:20:C3:79:07:5C:C2:C0:EB:24:D4:A7:8A X509v3 Authority Key Identifier: keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ee:5d:5b:93:ff:a7:c8:0b:92:b1:c0:f3:81:e5:ea:0c:d6: 0f:f2:1c:f3:82:49:b5:68:e4:94:53:65:45:3a:09:58:8d:aa: dc:4f:b6:ed:e0:ee:f7:0a:12:e5:5b:62:28:44:34:28:90:04: 95:b9:b7:05:ca:6b:cc:87:b2:42:a5:a9:0b:45:8c:13:87:a7: a0:b1:6b:82:2a:9e:87:9f:2e:74:71:7c:51:d6:da:3d:57:0b: 1a:db:bd:98:fc:31:ae:0c:7a:86:de:65:88:7e:ee:f4:dc:5d: 86:89:8d:b4:c5:0e:c1:b4:fc:bd:23:6b:77:a5:7c:cb:bd:c4: 00:24:18:65:a3:7b:cb:7c:15:aa:e7:6d:95:0e:ae:79:ee:17: b1:c9:56:9a:75:d0:6e:08:9c:bf:e0:b4:38:8d:d0:b3:65:ad: bf:3a:c5:90:eb:53:76:35:e7:35:27:da:35:56:0a:45:46:e1: 3b:80:0c:43:e8:f0:52:05:ef:bb:2d:7f:ea:91:a9:6d:7c:3f: 88:91:4c:d9:82:a9:a5:d0:8a:05:b2:d6:8f:04:d5:4c:3f:4b: d9:db:60:7b:40:e6:27:28:6b:97:6a:05:74:4d:11:a7:bc:b0: c5:33:a5:85:84:77:a2:42:67:f6:84:1d:6b:13:33:80:d4:83: dd:4c:d3:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4 NDAwQzMwRjAeFw0yNTEwMTkxMTAxNThaFw0yNTEwMjYxMTAxNThaMBgxFjAUBgNV BAMTDTY4ZjRjNTI2LWNhYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1bU6E6It5AK/aCSB/Z5Oy1M+OJbm+AfAhlACl6kgagG49ZAcLqukR6g+auDOs vzJ4Zfpme76IwCA2vOOnVYVYREFiBX+8chQ63WH0D7174EV4wj4nT4hgv2V24VMw 6hU08WaA4HYoNh9ima+WWJQY3n82ZOc1tDriOkFB+hhIc4tYm/ktjLtXSVmTvwLh wANDKb56t9Npl/nbIWzcwub1x7EPK7EL9upNbBX1b4Qkx1v66eCVLU2bL1U/+oNf +P0AbNT2bIlDYUpVnt1EjrQWlzfwAsusfrDOdmTx6OXDWpqaALjfz3qN20kkn8s2 qM4q5emhwuRDlq6ePtVuckB9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg6022Z7L 4YYgw3kHXMLA6yTUp4owHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5 OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MkVCL0RGNTQ1Q0M4NUM5OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1 N3NfOFBOcmVPLUlRQXd3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAATuXVuT/6fIC5KxwPOB5eoM1g/yHPOCSbVo5JRTZUU6CViNqtxPtu3g 7vcKEuVbYihENCiQBJW5twXKa8yHskKlqQtFjBOHp6Cxa4IqnoefLnRxfFHW2j1X CxrbvZj8Ma4MeobeZYh+7vTcXYaJjbTFDsG0/L0ja3elfMu9xAAkGGWje8t8Farn bZUOrnnuF7HJVpp10G4InL/gtDiN0LNlrb86xZDrU3Y15zUn2jVWCkVG4TuADEPo 8FIF77stf+qRqW18P4iRTNmCqaXQigWy1o8E1Uw/S9nbYHtA5icoa5dqBXRNEae8 sMUzpYWEd6JCZ/aEHWsTM4DUg91M05k= -----END CERTIFICATE-----Generated at Tue Oct 21 08:08:55 2025 by rpki-client