$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: k+8e/usqCXoC9ENTLYEOdzv9oZduh6FDGavhYKyOx6g= Subject key identifier: CC:BA:94:77:C8:6B:3D:B0:ED:D3:A2:48:C9:72:0D:54:35:7A:A0:AA Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 01A3 Signing time: Sun 19 Oct 2025 05:56:47 +0000 Manifest this update: Sun 19 Oct 2025 05:56:46 +0000 Manifest next update: Sun 26 Oct 2025 05:56:46 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: yE9kWVsqEBNbjVJN1kKVJ1jyZjiWoXz/7lxYWx+rnwg=) 2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: W2GUCwLH1zO0HSDwZ2rzdxgCK5Z2LezwQn+GLI/pJ/g=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: inmnpyaDxDWlLYNelzuadkNEoddsaWxx/qXH6LYAyxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: Oct 19 05:56:46 2025 GMT Not After : Oct 26 05:56:46 2025 GMT Subject: CN=68f47d9f-dbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:2b:15:49:bf:fd:fe:5c:f1:8e:82:d6:8d: 93:80:2f:06:40:80:2e:4f:74:1b:f4:8b:ba:c7:98: 8c:e2:55:03:04:c2:64:37:64:7a:30:d7:2b:14:82: 1d:68:54:df:ad:80:16:6e:84:8a:67:1e:1f:a4:ee: 99:50:f4:49:b2:d8:f9:64:b7:44:3a:de:d1:99:19: 27:ea:82:25:34:7f:e6:88:e3:19:15:e5:e6:cd:2c: f9:89:e6:3e:b4:33:cd:fa:fb:92:bd:bd:ab:67:1f: 1e:9a:6c:76:9a:2c:5c:73:91:01:be:a9:b4:61:67: 1f:45:7d:1f:05:e7:cb:d5:0f:77:9d:76:f1:16:f8: f8:3a:28:8a:4a:9f:3f:9b:d1:89:00:81:61:2b:a4: c8:49:c6:16:66:31:c0:11:ae:cb:78:18:83:6e:c6: 4d:f5:48:71:5f:d6:c9:0e:20:b3:25:7a:81:65:79: ed:f2:a3:d1:2f:e2:43:32:d6:a7:ac:af:13:83:f5: b5:48:a4:b9:9e:ea:b6:f4:91:e9:e2:b1:80:21:43: 53:fd:bb:90:00:15:d0:b1:7f:a1:e4:b4:d3:25:56: 11:ac:57:5b:78:15:1d:fd:d0:c7:d3:0f:43:25:a3: 37:14:68:a7:c5:ee:4c:0a:96:7f:d6:6a:47:94:10: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BA:94:77:C8:6B:3D:B0:ED:D3:A2:48:C9:72:0D:54:35:7A:A0:AA X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:0c:43:bf:d8:bd:d8:df:53:4a:76:a0:77:1d:63:d9:cf:3a: 76:4f:1e:ea:df:e6:b5:c8:40:7d:d4:ee:ee:fa:ed:8f:c8:3f: d9:6b:00:48:c9:af:81:0c:f1:30:9a:8c:75:8c:f8:b2:e9:95: 3d:4f:3b:ea:5d:63:00:f7:14:d4:ea:94:ba:73:43:74:52:1f: be:38:0a:5b:d0:7b:27:87:c1:f4:0d:5c:b4:21:b6:df:b1:2d: 24:9a:d0:c5:b2:b5:f8:e8:a9:a5:6b:27:2b:10:85:3d:0b:a1: 3c:75:23:0f:30:9a:fb:c4:47:e9:20:26:e8:6a:bd:d3:c5:d3: 39:e4:ab:13:3a:48:ea:72:16:2c:b4:82:4d:ee:07:26:cf:99: 74:11:df:49:71:41:7a:84:35:0b:99:27:b9:bf:86:9e:03:38: 2d:8c:c1:3d:50:b3:d2:2f:a8:e4:2d:d6:83:c7:c4:f7:f5:62: d6:95:bf:36:e3:28:47:72:4f:cf:04:4b:d0:9f:70:51:cd:b1: e6:42:b5:29:57:91:8f:01:55:a3:fd:bb:73:4c:2a:c7:16:f1: a8:9b:ef:60:6e:47:ff:c2:d8:56:16:55:93:4d:98:bf:69:58: 51:45:84:5d:54:a7:8e:a5:57:21:9d:ad:ea:9c:53:79:ed:49: 95:03:8a:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjUxMDE5MDU1NjQ2WhcNMjUxMDI2MDU1NjQ2WjAYMRYwFAYD VQQDEw02OGY0N2Q5Zi1kYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh8rFUm//f5c8Y6C1o2TgC8GQIAuT3Qb9Iu6x5iM4lUDBMJkN2R6MNcrFIId aFTfrYAWboSKZx4fpO6ZUPRJstj5ZLdEOt7RmRkn6oIlNH/miOMZFeXmzSz5ieY+ tDPN+vuSvb2rZx8emmx2mixcc5EBvqm0YWcfRX0fBefL1Q93nXbxFvj4OiiKSp8/ m9GJAIFhK6TIScYWZjHAEa7LeBiDbsZN9UhxX9bJDiCzJXqBZXnt8qPRL+JDMtan rK8Tg/W1SKS5nuq29JHp4rGAIUNT/buQABXQsX+h5LTTJVYRrFdbeBUd/dDH0w9D JaM3FGinxe5MCpZ/1mpHlBD0ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMy6lHfI az2w7dOiSMlyDVQ1eqCqMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkDEO/2L3Y31NKdqB3HWPZzzp2Tx7q3+a1yEB91O7u+u2PyD/ZawBI ya+BDPEwmox1jPiy6ZU9TzvqXWMA9xTU6pS6c0N0Uh++OApb0Hsnh8H0DVy0Ibbf sS0kmtDFsrX46KmlaycrEIU9C6E8dSMPMJr7xEfpICboar3TxdM55KsTOkjqchYs tIJN7gcmz5l0Ed9JcUF6hDULmSe5v4aeAzgtjME9ULPSL6jkLdaDx8T39WLWlb82 4yhHck/PBEvQn3BRzbHmQrUpV5GPAVWj/btzTCrHFvGom+9gbkf/wthWFlWTTZi/ aVhRRYRdVKeOpVchna3qnFN57UmVA4q8 -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:24 2025 by rpki-client