$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: bKLXiB73HMeFwMuuXdR1tzpjaLP2dBORozoHldhHh2w= Subject key identifier: 3E:02:26:A1:D5:E0:BD:62:C5:70:D4:98:DE:EF:04:9C:1F:8A:E6:95 Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 07E2 Signing time: Sat 18 Oct 2025 22:22:00 +0000 Manifest this update: Sat 18 Oct 2025 22:21:59 +0000 Manifest next update: Sat 25 Oct 2025 22:21:59 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: swmVXLPrFpcaTAdPmJs8+1AsSE3j2l4qJHjw8CdHU1k=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: gudUHLzJpmvIi7qROWYt11jIMMWxAxmreMkdOGwLNhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: Oct 18 22:21:59 2025 GMT Not After : Oct 25 22:21:59 2025 GMT Subject: CN=68f41308-87c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4b:27:24:b9:12:4e:8b:a4:1d:09:83:09:62: 50:0f:9d:5d:c4:f9:c8:9f:d7:b4:84:0c:84:d4:63: 7a:fd:04:49:30:b2:f6:91:28:a7:f1:0f:95:86:23: 75:55:3a:3e:fd:0b:f5:c4:2b:01:e7:6f:c4:a4:41: 4f:a3:bd:b6:7d:6c:36:6a:f1:4a:cb:0a:ff:88:a9: fd:9c:94:e9:04:44:6d:51:13:09:f9:ff:25:21:90: 51:eb:85:35:67:dd:52:e6:68:e2:9e:c8:ac:bb:94: 70:81:68:6e:75:17:7c:9b:45:ae:72:80:74:06:14: 53:a7:ad:e2:e5:f4:17:76:b9:17:c5:cd:47:28:29: 9f:5a:4c:57:7b:e8:04:15:01:e1:43:18:f4:4a:97: 21:ff:52:57:30:0a:ed:64:f4:44:52:fe:8a:3b:90: c2:33:06:d5:7d:a7:85:a6:8c:98:32:b3:48:1d:4c: 36:e2:06:87:a3:96:98:2f:87:78:67:1b:e3:c4:41: 77:6e:8e:4d:31:1f:7d:f5:af:b0:4d:c3:4a:88:f3: b8:59:5f:2f:3e:46:78:5d:f4:fd:8f:3f:26:da:31: 72:a0:93:8b:e1:6a:de:3f:14:4f:97:c6:15:c7:92: de:fc:60:62:28:80:fd:fc:c7:1f:d0:d3:42:36:31: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:02:26:A1:D5:E0:BD:62:C5:70:D4:98:DE:EF:04:9C:1F:8A:E6:95 X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3b:da:c2:3b:00:a9:54:95:b1:1a:ad:0e:3b:c5:de:d6:d0: c9:29:2e:ee:84:fe:d4:a7:92:6a:c1:13:b9:0b:f5:fd:02:4e: 21:af:c9:6d:f0:7d:0f:47:9f:3a:b9:f6:d6:b0:af:7c:78:30: 32:3a:c0:58:4c:13:51:e4:21:86:8a:31:d5:92:6e:41:56:30: 63:9f:8a:10:7a:f4:3f:6b:0f:47:08:fa:65:f0:e6:f2:41:a0: ad:81:5d:81:ff:fe:11:a9:25:a6:e1:1b:8f:62:33:33:b3:0b: 5e:c9:10:30:b8:c2:8f:5f:a5:47:1d:56:2f:a3:cb:20:5c:ed: 10:6d:da:b3:2a:22:f1:36:66:c4:57:68:24:aa:10:d5:d7:84: 9f:23:61:5f:37:72:78:8c:74:29:31:43:71:d8:67:a6:70:ce: 67:ee:3b:15:9e:70:58:6f:85:5c:20:ba:a6:26:85:e5:3e:cb: b5:74:a4:1d:4f:48:8f:1b:3d:4c:00:d3:f3:ee:fa:88:b0:5c: 4d:67:1b:67:8e:27:ab:22:11:9f:bd:49:ea:ea:ea:34:f1:ba: c2:1a:31:81:46:a6:47:1a:22:f1:68:f3:84:a0:88:93:14:ab: 67:a9:8d:37:0f:0e:0a:04:6a:52:8d:3c:14:3d:65:e3:23:c3: 9f:f7:5b:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUxMDE4MjIyMTU5WhcNMjUxMDI1MjIyMTU5WjAYMRYwFAYD VQQDEw02OGY0MTMwOC04N2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80snJLkSToukHQmDCWJQD51dxPnIn9e0hAyE1GN6/QRJMLL2kSin8Q+VhiN1 VTo+/Qv1xCsB52/EpEFPo722fWw2avFKywr/iKn9nJTpBERtURMJ+f8lIZBR64U1 Z91S5mjinsisu5RwgWhudRd8m0WucoB0BhRTp63i5fQXdrkXxc1HKCmfWkxXe+gE FQHhQxj0Spch/1JXMArtZPREUv6KO5DCMwbVfaeFpoyYMrNIHUw24gaHo5aYL4d4 ZxvjxEF3bo5NMR999a+wTcNKiPO4WV8vPkZ4XfT9jz8m2jFyoJOL4WrePxRPl8YV x5Le/GBiKID9/Mcf0NNCNjFwDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4CJqHV 4L1ixXDUmN7vBJwfiuaVMB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRO9rCOwCpVJWxGq0OO8Xe1tDJKS7uhP7Up5JqwRO5C/X9Ak4hr8lt 8H0PR586ufbWsK98eDAyOsBYTBNR5CGGijHVkm5BVjBjn4oQevQ/aw9HCPpl8Oby QaCtgV2B//4RqSWm4RuPYjMzswteyRAwuMKPX6VHHVYvo8sgXO0QbdqzKiLxNmbE V2gkqhDV14SfI2FfN3J4jHQpMUNx2GemcM5n7jsVnnBYb4VcILqmJoXlPsu1dKQd T0iPGz1MANPz7vqIsFxNZxtnjierIhGfvUnq6uo08brCGjGBRqZHGiLxaPOEoIiT FKtnqY03Dw4KBGpSjTwUPWXjI8Of91vb -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:22 2025 by rpki-client