$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: JpZIP4Ms3MMbPVUhcvZPZToFrZQseBdmRPicOhL3Uqk= Subject key identifier: 21:EE:9E:D8:D2:E7:3D:CC:8A:0F:39:E6:1A:B0:4E:10:BA:07:DB:1E Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 34D8 Signing time: Sat 18 Oct 2025 15:09:09 +0000 Manifest this update: Sat 18 Oct 2025 15:09:08 +0000 Manifest next update: Sat 25 Oct 2025 15:09:08 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: YBW8rJ0oYXkmXIxqe3Y9qwyZWjKuF6IJotgXZBzvpuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Oct 18 15:09:08 2025 GMT Not After : Oct 25 15:09:08 2025 GMT Subject: CN=68f3ad94-bd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:c8:ea:52:21:2f:b6:5a:0a:b6:a8:77:74: 4b:83:97:4f:7f:4a:b0:14:eb:f9:9f:24:5d:62:7e: 01:9a:cc:85:84:1f:0b:38:37:49:16:ff:7a:4a:37: 92:82:5c:15:de:47:37:bd:bf:96:e0:41:8f:9b:d7: 01:cb:99:5b:c2:0a:92:ff:63:f9:86:bf:9b:09:62: 70:83:67:b5:fb:f1:2e:01:4f:4a:f3:21:02:fd:0e: 71:67:31:d2:37:2c:24:4d:d6:1c:79:de:62:1d:89: b2:f2:42:21:e4:aa:11:26:da:86:a8:d3:ff:cf:6d: c5:85:af:7d:3a:8d:f6:75:6f:9d:9b:a5:99:8d:08: c6:b8:e8:06:93:c2:59:63:fe:4b:fb:8d:b4:c5:08: 1a:51:8d:33:c3:83:42:03:68:d9:f9:0a:e3:af:01: e5:10:d8:9a:23:fc:fd:3e:6b:62:1e:ec:57:81:63: 5c:d0:a3:97:fd:ac:80:57:d8:bc:60:ca:6a:80:8d: 67:8b:7e:16:51:9c:68:76:b7:c1:47:97:a2:12:5a: 3e:64:d9:d9:70:f3:31:5c:75:7d:93:82:21:eb:73: 18:97:c7:78:f5:55:21:bc:d1:e9:54:23:11:0e:fe: 51:01:51:68:61:75:e6:73:6d:c5:28:53:e0:0f:d6: b6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EE:9E:D8:D2:E7:3D:CC:8A:0F:39:E6:1A:B0:4E:10:BA:07:DB:1E X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2e:ea:f3:04:be:f5:48:d2:9e:23:e6:7e:55:45:39:d8:1b: c9:8d:51:bd:7f:4c:59:82:ee:4b:3f:41:78:66:fe:3a:df:1e: 73:fc:cc:be:76:31:69:eb:14:1f:18:a9:f0:09:1c:c2:83:0e: c2:f2:e5:76:b2:7f:68:d4:d8:b7:bf:55:96:e3:6d:0f:a8:ca: 68:eb:f5:05:67:54:5f:b3:76:c7:aa:74:98:ee:cc:06:78:45: 67:68:28:17:15:81:e7:02:cf:52:1b:e2:22:c4:8f:1e:ba:36: 39:27:b0:d9:a2:ef:06:48:0b:54:d1:30:a4:52:b3:49:73:92: 9b:08:7c:80:a8:d4:49:0d:4a:56:25:5a:33:bd:2b:5e:bc:a1: 99:87:f4:8c:6f:e9:6b:69:0e:de:43:c2:bd:86:b2:42:88:da: 67:22:19:bb:db:c0:ee:78:02:b5:85:42:21:f6:13:a3:27:ea: 13:15:81:12:0b:4b:19:ea:1e:d3:00:e1:7c:bd:2b:36:8d:01: ee:53:a2:0c:ba:c9:48:00:49:df:f1:73:cd:59:8c:20:5c:81: f8:69:a2:da:46:bd:77:2a:38:e0:4a:11:78:76:83:23:79:4d: 93:c1:7b:17:32:52:9b:e7:51:89:75:e0:f9:35:4a:46:72:e0: ac:80:ce:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUxMDE4MTUwOTA4WhcNMjUxMDI1MTUwOTA4WjAYMRYwFAYD VQQDEw02OGYzYWQ5NC1iZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2PI6lIhL7ZaCraod3RLg5dPf0qwFOv5nyRdYn4BmsyFhB8LODdJFv96SjeS glwV3kc3vb+W4EGPm9cBy5lbwgqS/2P5hr+bCWJwg2e1+/EuAU9K8yEC/Q5xZzHS NywkTdYced5iHYmy8kIh5KoRJtqGqNP/z23Fha99Oo32dW+dm6WZjQjGuOgGk8JZ Y/5L+420xQgaUY0zw4NCA2jZ+QrjrwHlENiaI/z9PmtiHuxXgWNc0KOX/ayAV9i8 YMpqgI1ni34WUZxodrfBR5eiElo+ZNnZcPMxXHV9k4Ih63MYl8d49VUhvNHpVCMR Dv5RAVFoYXXmc23FKFPgD9a2vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHuntjS 5z3Mig855hqwThC6B9seMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqLurzBL71SNKeI+Z+VUU52BvJjVG9f0xZgu5LP0F4Zv463x5z/My+ djFp6xQfGKnwCRzCgw7C8uV2sn9o1Ni3v1WW420PqMpo6/UFZ1Rfs3bHqnSY7swG eEVnaCgXFYHnAs9SG+IixI8eujY5J7DZou8GSAtU0TCkUrNJc5KbCHyAqNRJDUpW JVozvStevKGZh/SMb+lraQ7eQ8K9hrJCiNpnIhm728DueAK1hUIh9hOjJ+oTFYES C0sZ6h7TAOF8vSs2jQHuU6IMuslIAEnf8XPNWYwgXIH4aaLaRr13KjjgShF4doMj eU2TwXsXMlKb51GJdeD5NUpGcuCsgM6I -----END CERTIFICATE-----Generated at Mon Oct 20 01:42:41 2025 by rpki-client