$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: dx2JbARpraYSS5o6EuqPcTUva8q6A+0dwugrQL2OZbo= Subject key identifier: A0:A1:D6:FF:AA:36:DF:2F:FD:DB:70:69:D7:27:63:11:3F:13:1B:3E Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0C71 Signing time: Mon 20 Oct 2025 19:04:55 +0000 Manifest this update: Mon 20 Oct 2025 19:04:54 +0000 Manifest next update: Mon 27 Oct 2025 19:04:54 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: fILr7MjGGXf1pQp1yGtYSVFjF3qBCMqp75eZD3+4APw=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: sizu4+OIZ/A8x9uQpAud/O4xnlom/Pk+/kkVVxPExzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: Oct 20 19:04:54 2025 GMT Not After : Oct 27 19:04:54 2025 GMT Subject: CN=68f687d7-fb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:2c:23:35:17:e7:83:b5:90:1b:a5:d2:2a: 5d:80:51:fc:7e:04:9c:ce:d6:b5:65:37:f3:2f:36: 7c:97:2a:08:34:af:a7:cf:32:cc:8d:27:b1:ad:01: f7:8d:28:af:2b:f6:1a:af:04:b8:37:f4:cd:21:81: 54:e4:27:bf:02:77:f4:9d:46:0f:1b:db:1a:7c:30: c7:f4:7b:4e:b7:54:23:55:5f:56:d6:80:29:32:0a: 0e:7d:bf:7e:cd:13:26:28:4f:f9:c3:bc:35:0b:40: 99:f6:61:31:97:bc:b4:c1:69:b9:65:48:49:94:b8: 3a:12:a9:41:a2:95:0a:1b:64:df:4c:9e:b5:13:e9: fa:3c:4d:16:81:5c:02:8e:1b:c1:f8:bd:a3:83:cf: 1c:2d:96:b3:7a:1c:26:7c:58:3e:22:d8:2e:0f:55: 68:ae:52:2b:a2:f6:fa:e2:22:ce:5e:44:ee:71:30: b3:74:3e:58:5e:d9:57:ec:3d:90:fc:58:2b:71:6f: 3d:c8:aa:55:f3:28:9b:45:59:d5:86:83:42:4b:da: f0:62:3f:e8:2b:27:ef:18:1b:18:4d:14:34:c0:a9: ba:75:0f:ad:81:ba:c7:f1:59:07:1e:74:37:f1:43: c8:39:65:ff:b1:e7:e8:50:8b:32:b5:b2:5f:d8:86: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A1:D6:FF:AA:36:DF:2F:FD:DB:70:69:D7:27:63:11:3F:13:1B:3E X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a6:af:20:03:6a:8a:c6:f0:ee:41:4e:56:7a:7a:6e:3b:0c: df:18:65:a4:c2:2f:8e:b2:58:fe:f2:10:82:85:7d:48:69:d6: a7:85:7d:6d:13:95:23:b0:e3:57:a8:52:6b:00:0a:6f:b2:5b: 68:3b:42:d5:30:27:6f:a2:e9:69:72:84:5d:88:ac:cf:56:20: ce:03:2e:51:28:b0:93:1c:29:80:e0:24:1a:fe:f6:ae:3e:65: c2:c4:6d:84:9c:dd:9e:da:15:84:bb:e7:4a:5e:d0:8d:83:18: 2d:c2:ab:70:53:88:91:5e:92:fa:db:26:ed:7c:33:52:a9:8f: 43:c4:6a:b8:1b:54:c5:59:8a:3d:f9:ca:7d:15:f7:9f:b5:5d: e3:80:2a:d7:cd:2b:b4:ec:7a:da:21:49:a7:3e:3b:5f:7c:b3: 69:cb:6f:bb:38:6b:34:39:b2:d1:38:a5:c5:2b:22:26:1f:56: 0a:b1:39:52:7f:1a:ec:dc:b4:36:a5:03:29:0d:62:57:a7:8b: bd:7a:e8:69:33:a8:2d:ee:c6:b7:2f:f6:38:49:b8:8c:cd:ee: b0:d8:5d:46:c1:d4:fc:e9:62:d3:99:e2:c7:61:6b:fd:6e:27: 3f:f4:e8:bc:eb:61:e5:e9:91:f5:8f:72:9b:d8:b5:81:67:19: 46:50:c4:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjUxMDIwMTkwNDU0WhcNMjUxMDI3MTkwNDU0WjAYMRYwFAYD VQQDEw02OGY2ODdkNy1mYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9IsIzUX54O1kBul0ipdgFH8fgSczta1ZTfzLzZ8lyoINK+nzzLMjSexrQH3 jSivK/YarwS4N/TNIYFU5Ce/Anf0nUYPG9safDDH9HtOt1QjVV9W1oApMgoOfb9+ zRMmKE/5w7w1C0CZ9mExl7y0wWm5ZUhJlLg6EqlBopUKG2TfTJ61E+n6PE0WgVwC jhvB+L2jg88cLZazehwmfFg+ItguD1VorlIrovb64iLOXkTucTCzdD5YXtlX7D2Q /FgrcW89yKpV8yibRVnVhoNCS9rwYj/oKyfvGBsYTRQ0wKm6dQ+tgbrH8VkHHnQ3 8UPIOWX/sefoUIsytbJf2IaylwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCh1v+q Nt8v/dtwadcnYxE/Exs+MB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUpq8gA2qKxvDuQU5WenpuOwzfGGWkwi+Oslj+8hCChX1IadanhX1t E5UjsONXqFJrAApvsltoO0LVMCdvoulpcoRdiKzPViDOAy5RKLCTHCmA4CQa/vau PmXCxG2EnN2e2hWEu+dKXtCNgxgtwqtwU4iRXpL62ybtfDNSqY9DxGq4G1TFWYo9 +cp9FfeftV3jgCrXzSu07HraIUmnPjtffLNpy2+7OGs0ObLROKXFKyImH1YKsTlS fxrs3LQ2pQMpDWJXp4u9euhpM6gt7sa3L/Y4SbiMze6w2F1GwdT86WLTmeLHYWv9 bic/9Oi862Hl6ZH1j3Kb2LWBZxlGUMTN -----END CERTIFICATE-----Generated at Tue Oct 21 00:54:22 2025 by rpki-client