$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: Mkwk+AbPpe9z8gzM6hK2LvxWFLa2sCh+JM8tuOSO6+s= Subject key identifier: A8:60:C1:41:9D:16:48:4D:2F:DB:82:5C:04:97:27:36:28:0B:1F:76 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0C39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0C2F Signing time: Sat 18 Oct 2025 19:28:25 +0000 Manifest this update: Sat 18 Oct 2025 19:28:24 +0000 Manifest next update: Sat 25 Oct 2025 19:28:24 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: qCAgTfNZL1UJETk96J2FELF1E0w1JaHzvq8IHMCZscQ=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 29yqRgflWjw/V78Nb1MTmLxw9ept1pEu77NRsVFXw6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Oct 18 19:28:24 2025 GMT Not After : Oct 25 19:28:24 2025 GMT Subject: CN=68f3ea58-c6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:73:c2:88:08:30:ad:45:26:b6:fa:4f:95: 15:87:78:9f:d0:31:c6:04:9d:1d:86:c2:61:f8:08: 3f:9c:fc:19:f1:39:7f:e4:f8:f2:dc:c3:3c:7b:64: 24:fd:dc:22:ab:66:91:33:9b:53:42:4e:79:bf:7b: 7a:4b:88:51:00:d0:f8:02:55:3b:19:de:ae:06:c5: 6c:39:f8:b8:b2:0d:1a:33:dd:ba:1e:d6:c4:4f:a2: 86:67:cf:d3:8a:88:41:e2:75:44:0b:3a:d1:e8:99: b4:97:88:49:e9:6a:95:ba:d0:94:5c:ac:3f:fa:3e: ae:c0:70:14:99:0c:90:b9:c6:ef:35:3b:4d:68:57: e8:5c:9b:48:dc:a0:cd:53:29:47:13:a1:55:93:64: 5a:86:5f:83:c1:98:0b:80:37:05:b5:63:c7:f3:be: 74:d6:52:da:55:b3:24:cf:19:56:3b:90:37:e2:71: b3:35:dc:a4:66:f3:ea:ea:b5:fc:78:4e:c1:f4:a9: e0:f3:f0:80:c1:dc:93:8b:af:c9:21:25:71:06:4c: 3f:55:2e:e7:8f:cd:ff:ad:c3:b2:bf:fa:18:09:bd: 03:32:4c:ba:1d:89:ab:cf:bd:37:b3:a4:6b:de:cc: 52:a1:5a:6d:4f:5b:85:18:8d:f5:f4:24:91:cd:bf: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:C1:41:9D:16:48:4D:2F:DB:82:5C:04:97:27:36:28:0B:1F:76 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:5f:8d:1d:da:40:cd:f4:e2:12:e6:8a:3d:9c:71:d3:e1:0b: 69:d1:17:94:40:0b:fa:2b:6e:11:57:0f:cb:b9:e8:9a:23:aa: 64:4b:e3:4a:f7:17:f0:8a:25:81:3e:28:7b:fb:56:ba:1f:c3: d1:bf:aa:7b:29:26:24:07:1c:a6:fa:ab:7b:60:17:1d:0e:da: 04:64:46:19:f3:aa:61:6e:d0:17:4b:63:00:9b:c1:74:84:b6: b9:10:f7:0d:a8:ff:01:aa:e0:ca:99:9f:a0:08:75:4d:8b:be: 6b:13:ff:55:4d:ab:95:e3:5b:e8:c0:76:fe:89:a4:8c:c8:2d: 4b:00:53:60:16:6d:df:19:ca:c2:5f:1e:aa:5b:95:0a:a3:6c: 9b:39:fe:d5:13:74:31:f2:b4:4b:fd:02:e7:f6:3d:1c:9c:cc: 07:89:4e:f3:8d:88:01:9a:fc:5d:26:14:a8:69:dc:05:77:37: 78:71:bf:f2:5b:ec:f2:e5:a4:5a:60:13:fe:7a:3d:b0:41:7e: 78:c1:4f:98:4b:e5:4b:17:c0:78:cb:4e:7d:4e:53:c1:eb:81: 91:fc:d8:a2:8d:bc:a3:e1:3a:85:6a:66:39:ef:44:10:b5:5c: ea:aa:15:fd:60:1f:49:9a:d4:a3:f5:9a:b2:94:1b:a6:4c:6b: 09:fc:b6:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjUxMDE4MTkyODI0WhcNMjUxMDI1MTkyODI0WjAYMRYwFAYD VQQDEw02OGYzZWE1OC1jNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOdzwogIMK1FJrb6T5UVh3if0DHGBJ0dhsJh+Ag/nPwZ8Tl/5Pjy3MM8e2Qk /dwiq2aRM5tTQk55v3t6S4hRAND4AlU7Gd6uBsVsOfi4sg0aM926HtbET6KGZ8/T iohB4nVECzrR6Jm0l4hJ6WqVutCUXKw/+j6uwHAUmQyQucbvNTtNaFfoXJtI3KDN UylHE6FVk2Rahl+DwZgLgDcFtWPH87501lLaVbMkzxlWO5A34nGzNdykZvPq6rX8 eE7B9Kng8/CAwdyTi6/JISVxBkw/VS7nj83/rcOyv/oYCb0DMky6HYmrz703s6Rr 3sxSoVptT1uFGI319CSRzb/JdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhgwUGd FkhNL9uCXASXJzYoCx92MB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRX40d2kDN9OIS5oo9nHHT4Qtp0ReUQAv6K24RVw/LueiaI6pkS+NK 9xfwiiWBPih7+1a6H8PRv6p7KSYkBxym+qt7YBcdDtoEZEYZ86phbtAXS2MAm8F0 hLa5EPcNqP8BquDKmZ+gCHVNi75rE/9VTauV41vowHb+iaSMyC1LAFNgFm3fGcrC Xx6qW5UKo2ybOf7VE3Qx8rRL/QLn9j0cnMwHiU7zjYgBmvxdJhSoadwFdzd4cb/y W+zy5aRaYBP+ej2wQX54wU+YS+VLF8B4y059TlPB64GR/Niijbyj4TqFamY570QQ tVzqqhX9YB9JmtSj9ZqylBumTGsJ/Lb2 -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:40 2025 by rpki-client