$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json) Hash identifier: LXnZE6pSPcqy4GvtSGeVfT1ecD3rH2w29VpDpvbNRt8= Subject key identifier: 3A:41:6C:43:BD:DD:C0:D9:EC:0B:95:4C:68:10:44:C3:8E:16:96:6A Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft Manifest number: 34CD Signing time: Sat 18 Oct 2025 15:08:09 +0000 Manifest this update: Sat 18 Oct 2025 15:08:08 +0000 Manifest next update: Sat 25 Oct 2025 15:08:08 +0000 Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: fiAzjNT56+K1q/3LHAcy8medeqOEulY6ZizYFDzvVV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Validity Not Before: Oct 18 15:08:08 2025 GMT Not After : Oct 25 15:08:08 2025 GMT Subject: CN=68f3ad59-123c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:b0:37:77:d4:ee:af:27:b5:a5:27:62:a6: 77:5f:61:bf:c1:a5:01:e3:8e:72:40:b6:fd:30:9c: 09:fc:07:86:59:b0:3c:75:fd:df:f3:ca:0c:a9:8c: 28:c4:8d:b2:c9:71:98:84:a4:5f:f6:47:ae:03:06: 41:4f:f1:25:03:65:91:e6:74:e8:18:94:45:29:04: 32:b5:28:a0:64:e5:12:c5:d9:cd:f7:a7:9f:06:c6: 54:e8:26:7c:48:4f:f3:1d:49:2f:09:12:4c:1f:db: 3b:21:f9:05:fb:67:ab:ec:a4:dc:62:e8:f8:92:bb: bc:d8:89:5d:6a:0a:48:12:c9:e5:25:1a:2f:25:56: f0:e0:35:16:52:3a:8b:27:af:a7:e4:31:09:4e:91: 03:8e:72:ae:35:18:86:ec:98:a2:2f:7b:06:e8:8c: 02:38:4a:56:63:14:d2:12:dd:42:96:58:58:7f:34: a0:30:cc:5b:ad:a4:3d:b9:e2:91:f3:59:d5:44:1d: d0:87:5b:9d:61:69:c7:60:c6:5c:37:38:dd:85:c7: 42:86:68:d3:5a:8e:98:77:29:14:26:c2:82:ca:b1: f2:57:47:0a:df:fb:e2:9b:77:c4:5c:dd:00:c2:1c: 38:58:cd:36:d6:a0:66:06:c4:49:d9:06:1a:38:b0: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:41:6C:43:BD:DD:C0:D9:EC:0B:95:4C:68:10:44:C3:8E:16:96:6A X509v3 Authority Key Identifier: keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:66:a2:f4:d2:8f:59:35:16:a6:e5:f8:54:94:cc:72:05:51: 78:bb:78:6e:67:6b:11:d1:98:1a:48:e0:f4:48:11:ee:5f:3e: cc:f6:52:fc:eb:7b:b8:28:4e:d2:6e:fb:21:c6:ed:38:3a:b9: 47:10:78:de:e5:00:66:c8:4b:c2:d1:bd:9f:a4:91:04:60:57: 40:53:78:91:66:6a:09:36:97:51:ff:0f:52:84:86:d7:f6:fc: c1:7e:80:b8:6d:79:09:cd:f7:96:94:3c:5b:d4:ec:2c:5b:2b: 73:93:6b:1c:78:28:d3:73:e1:ed:4f:88:57:00:31:82:53:7e: a6:e3:5e:5f:69:d8:a0:6a:f7:3b:79:e1:f3:33:c5:7f:7a:81: c8:a0:01:d3:b4:0e:d9:9a:1e:52:4f:3c:76:56:08:bd:6e:09: a0:d2:84:84:01:92:00:ae:e1:dd:b7:82:f1:a0:b8:df:05:34: 55:d5:c4:95:18:1f:5c:a4:88:b9:09:81:d7:13:0f:de:79:13: 95:74:29:5e:35:41:0c:32:59:b6:b6:ea:a3:6c:e0:e4:2b:bc: 5a:0c:07:67:e9:98:bb:31:f2:3f:f4:06:72:dc:68:ee:0d:47: 79:d5:e7:89:d7:25:a8:8d:7f:9e:b1:e5:62:02:d2:09:c2:94: c2:99:3f:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF MzBEMDFGNjQwHhcNMjUxMDE4MTUwODA4WhcNMjUxMDI1MTUwODA4WjAYMRYwFAYD VQQDEw02OGYzYWQ1OS0xMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9ywN3fU7q8ntaUnYqZ3X2G/waUB445yQLb9MJwJ/AeGWbA8df3f88oMqYwo xI2yyXGYhKRf9keuAwZBT/ElA2WR5nToGJRFKQQytSigZOUSxdnN96efBsZU6CZ8 SE/zHUkvCRJMH9s7IfkF+2er7KTcYuj4kru82IldagpIEsnlJRovJVbw4DUWUjqL J6+n5DEJTpEDjnKuNRiG7JiiL3sG6IwCOEpWYxTSEt1CllhYfzSgMMxbraQ9ueKR 81nVRB3Qh1udYWnHYMZcNzjdhcdChmjTWo6YdykUJsKCyrHyV0cK3/vim3fEXN0A whw4WM021qBmBsRJ2QYaOLDiLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpBbEO9 3cDZ7AuVTGgQRMOOFpZqMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0 MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdZqL00o9ZNRam5fhUlMxyBVF4u3huZ2sR0ZgaSOD0SBHuXz7M9lL8 63u4KE7Sbvshxu04OrlHEHje5QBmyEvC0b2fpJEEYFdAU3iRZmoJNpdR/w9ShIbX 9vzBfoC4bXkJzfeWlDxb1OwsWytzk2sceCjTc+HtT4hXADGCU36m415fadigavc7 eeHzM8V/eoHIoAHTtA7Zmh5STzx2Vgi9bgmg0oSEAZIAruHdt4LxoLjfBTRV1cSV GB9cpIi5CYHXEw/eeROVdCleNUEMMlm2tuqjbODkK7xaDAdn6Zi7MfI/9AZy3Gju DUd51eeJ1yWojX+eseViAtIJwpTCmT// -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:26 2025 by rpki-client