$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft File: VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json) Hash identifier: R/FfRPeclrQyPcjYwIPflpluyR6h4lu5eAV8aPtT9q4= Subject key identifier: 30:4A:66:4D:DD:89:D7:B4:A1:A4:C6:C1:79:E7:7C:72:CD:B3:BE:DC Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft Manifest number: 35 Signing time: Sun 19 Oct 2025 11:03:07 +0000 Manifest this update: Sun 19 Oct 2025 11:03:07 +0000 Manifest next update: Sun 26 Oct 2025 11:03:07 +0000 Files and hashes: 1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: 9JJFGazyxWm7oMawI+qLF4bjxq0azqPs7yRmrflHrZE=) 2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: eyKHyX1nC8rcYA1x+etP21iE0ELwmQ5yf7hxtFXOuMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Validity Not Before: Oct 19 11:03:07 2025 GMT Not After : Oct 26 11:03:07 2025 GMT Subject: CN=68f4c56b-c2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ee:c6:6d:b8:ff:45:dd:17:da:92:c0:9a:dd: c6:da:71:a1:f4:d1:51:0a:54:44:f6:40:34:2b:8f: c5:72:8b:24:b5:6d:31:42:60:45:61:1d:99:39:e0: ab:db:4c:68:d2:d7:56:78:c4:76:6d:27:29:de:6d: cc:82:df:d0:c6:21:da:91:34:cf:ac:c0:7d:cc:d1: a9:c3:45:71:f4:a9:02:de:85:90:89:67:3b:8d:cf: 4d:df:66:ec:f8:a8:c2:42:11:d8:cf:79:09:a5:81: 8a:c2:80:ae:24:5e:3b:70:dc:7d:d9:ce:d8:4f:69: 5d:b0:cd:bf:62:02:bc:3b:2d:d4:e7:ac:6a:9e:8c: bd:11:d8:52:d5:e3:0e:ab:a9:16:fd:62:e1:50:c0: ee:14:c3:5c:43:d5:6c:93:6d:9d:44:97:af:a5:27: 1a:8f:b3:6b:e8:6d:82:28:2c:8d:00:82:bd:b9:16: 80:44:a0:6b:14:ae:83:a9:04:83:1b:ca:f1:94:86: 6a:2f:01:bb:40:80:7b:82:6a:67:78:33:6a:f3:b5: d4:74:0c:8e:e2:26:5b:d2:43:f1:cc:a2:c5:b3:4d: da:48:58:8c:af:3e:e7:ee:36:a5:39:01:a2:23:96: ca:c7:f2:70:56:6a:fd:da:03:b2:09:4b:85:f3:b6: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:66:4D:DD:89:D7:B4:A1:A4:C6:C1:79:E7:7C:72:CD:B3:BE:DC X509v3 Authority Key Identifier: keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1a:68:f5:98:bf:30:05:51:21:05:c4:0d:bd:e5:97:2b:30: eb:c9:ea:45:bd:1e:1a:7a:bd:9d:85:4a:d1:46:22:b0:0f:4f: b7:cd:58:cd:e5:1c:e2:12:5e:98:d9:f3:8a:66:93:be:2e:49: f5:0f:32:3a:70:5b:de:11:11:21:e9:70:60:41:96:61:1e:1c: 6b:c7:45:bc:10:33:85:e6:0f:9f:9d:38:65:9a:99:f8:a9:e8: ff:6c:a3:9f:4f:11:42:8d:f7:00:3f:d9:4d:97:84:5b:b1:ac: 8c:2e:f3:76:ab:b0:5b:df:5a:b4:80:4a:4b:d1:bc:18:57:74: 51:8a:a3:7b:7a:e5:ed:86:71:35:34:81:1a:79:80:53:65:1d: cf:20:32:99:75:b1:39:be:76:f2:17:55:e3:49:b5:7d:b2:29: 9d:cc:76:28:f3:1c:c2:00:99:8f:8d:4b:4e:2e:42:e4:56:f4: e8:64:2c:9a:3a:e6:40:6f:1f:00:63:8d:65:77:6e:5d:4a:e4: dc:48:50:9b:bc:56:e1:40:73:4d:ee:ea:49:fe:4b:16:80:21: b0:f6:ab:37:33:49:4e:8b:ee:f5:ee:e3:6c:55:dd:81:31:7b: 03:7a:ca:2c:9e:ba:f4:fa:e5:87:ba:2a:b1:76:13:71:81:1e: cb:5b:f8:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTlDNTExMC8GA1UEBRMoNTY0QjY5MTc4RjI2OUVGQjk2Qjc2OTE2Rjc4MTcwNzU0 RThGMEM4NzAeFw0yNTEwMTkxMTAzMDdaFw0yNTEwMjYxMTAzMDdaMBgxFjAUBgNV BAMTDTY4ZjRjNTZiLWMyZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd7sZtuP9F3RfaksCa3cbacaH00VEKVET2QDQrj8VyiyS1bTFCYEVhHZk54Kvb TGjS11Z4xHZtJynebcyC39DGIdqRNM+swH3M0anDRXH0qQLehZCJZzuNz03fZuz4 qMJCEdjPeQmlgYrCgK4kXjtw3H3ZzthPaV2wzb9iArw7LdTnrGqejL0R2FLV4w6r qRb9YuFQwO4Uw1xD1WyTbZ1El6+lJxqPs2vobYIoLI0Agr25FoBEoGsUroOpBIMb yvGUhmovAbtAgHuCamd4M2rztdR0DI7iJlvSQ/HMosWzTdpIWIyvPufuNqU5AaIj lsrH8nBWav3aA7IJS4XztiT1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMEpmTd2J 17ShpMbBeed8cs2zvtwwHwYDVR0jBBgwFoAUVktpF48mnvuWt2kW94FwdU6PDIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OUM1L0ZDMDFFODdDNURC QjExRjA5QUExNzg1MEM0RjlBRTAyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmt0cEY0OG1udnVXdDJrVzk0RndkVTZQREljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OUM1L0ZDMDFFODdDNURCQjExRjA5QUExNzg1MEM0RjlBRTAyL1ZrdHBGNDhtbnZ1 V3Qya1c5NEZ3ZFU2UERJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYaaPWYvzAFUSEFxA295ZcrMOvJ6kW9Hhp6vZ2FStFGIrAPT7fNWM3l HOISXpjZ84pmk74uSfUPMjpwW94RESHpcGBBlmEeHGvHRbwQM4XmD5+dOGWamfip 6P9so59PEUKN9wA/2U2XhFuxrIwu83arsFvfWrSASkvRvBhXdFGKo3t65e2GcTU0 gRp5gFNlHc8gMpl1sTm+dvIXVeNJtX2yKZ3MdijzHMIAmY+NS04uQuRW9OhkLJo6 5kBvHwBjjWV3bl1K5NxIUJu8VuFAc03u6kn+SxaAIbD2qzczSU6L7vXu42xV3YEx ewN6yiyeuvT65Ye6KrF2E3GBHstb+Kw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:39:21 2025 by rpki-client