$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft File: Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json) Hash identifier: 5z1MVhl/lQdTXx4F3veWOuLTJVvJ6Ja8Jna7ABm/qhk= Subject key identifier: 58:B2:C4:0E:81:9D:43:15:D4:22:B4:43:60:A7:27:5B:CE:07:49:DC Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft Manifest number: 0245 Signing time: Sun 19 Oct 2025 04:04:40 +0000 Manifest this update: Sun 19 Oct 2025 04:04:39 +0000 Manifest next update: Sun 26 Oct 2025 04:04:39 +0000 Files and hashes: 1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: 41wAY6BytPbm4142Xq7IU3JPTOmi0hlcigo2bdw1PKA=) 2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: y3OZF+3yS21va8DTETIk41Nb13Feo85xufsVmJd2vzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Validity Not Before: Oct 19 04:04:39 2025 GMT Not After : Oct 26 04:04:39 2025 GMT Subject: CN=68f46358-38cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ab:e3:78:2f:2e:df:cc:36:a1:41:5f:ad:2e: a8:db:21:2b:fa:cd:bd:78:33:51:a7:f6:c8:2e:6d: cf:d5:c9:30:f9:ed:9a:24:4f:7b:a2:41:f8:aa:21: 98:c0:ab:e8:ba:2b:03:1e:f5:9e:ac:ed:d8:fc:52: 74:b8:42:a8:f0:19:8a:25:e9:d2:d8:06:e5:d5:01: 2c:74:e4:18:82:58:68:41:5a:b5:c2:59:21:4e:72: d0:63:e2:ae:20:5e:27:d6:a8:db:04:93:c3:7c:59: b2:e4:63:72:bd:4f:97:f1:42:b6:54:c1:e2:ba:50: a6:3f:95:91:53:34:7e:ab:0c:64:87:0a:ac:0b:2c: 9d:cb:ab:dd:6a:cb:d9:ac:62:5b:ab:65:9a:63:54: ba:47:2e:44:e9:35:a7:83:f3:9b:c1:45:34:5c:5b: ce:0f:bd:af:44:d5:c1:7d:25:d7:41:28:8b:48:de: ed:63:72:e2:89:9f:b1:8d:b7:ed:85:be:19:2b:a6: b9:c3:04:e6:c9:1d:f7:85:cb:d2:d2:0a:aa:14:b1: d3:ad:22:46:18:a2:e0:d9:ee:f6:31:c6:26:1f:ec: 29:db:f4:14:2c:05:fe:0c:a8:0a:29:a1:02:b1:69: 07:a8:95:38:6c:ba:38:40:14:f1:7e:5c:e5:5c:87: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:C4:0E:81:9D:43:15:D4:22:B4:43:60:A7:27:5B:CE:07:49:DC X509v3 Authority Key Identifier: keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:94:02:70:3d:dc:01:c9:83:4c:87:d7:4c:e0:48:16:92:33: a2:b9:8f:09:d2:db:d5:83:f8:cd:18:43:30:f2:08:ee:cc:6a: b8:ee:9d:df:2e:ad:86:cc:a3:d3:ce:2a:ad:e2:93:fe:07:de: f8:aa:43:af:ff:64:cc:ac:4e:67:de:7e:ca:37:4b:46:25:c3: 03:f6:d4:c4:6a:53:38:18:c3:2b:cc:f1:0d:68:e0:d4:46:a3: 0f:59:fa:eb:50:78:9d:fd:ae:6a:7c:aa:58:8b:e5:14:3c:04: 9e:6e:23:f6:c1:a2:5e:43:3a:05:a8:29:37:35:6d:72:b4:e2: 11:6d:56:9c:53:d6:4a:03:0d:08:6e:dd:fd:d4:78:29:40:8e: 76:a1:09:7a:80:5c:eb:df:c5:39:d1:2a:0f:10:6f:c4:a9:f0: 23:bd:3a:14:33:b6:a0:bc:89:3e:67:b4:3c:93:7d:c0:b1:1f: 8e:06:58:ab:b9:a9:83:c5:b2:b1:d2:d9:7a:04:e3:43:34:0c: dd:3b:aa:65:41:63:9c:6a:58:8a:84:3b:d0:75:3f:ff:70:32: df:5a:ff:51:22:33:f5:98:56:2c:91:2e:fd:b3:3d:bf:e8:44: 01:06:31:96:19:a2:d2:39:cd:a9:69:28:ab:cb:bb:42:f1:a0: 4d:6c:25:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2 MEI2NkI4MDAwHhcNMjUxMDE5MDQwNDM5WhcNMjUxMDI2MDQwNDM5WjAYMRYwFAYD VQQDEw02OGY0NjM1OC0zOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qvjeC8u38w2oUFfrS6o2yEr+s29eDNRp/bILm3P1ckw+e2aJE97okH4qiGY wKvouisDHvWerO3Y/FJ0uEKo8BmKJenS2Abl1QEsdOQYglhoQVq1wlkhTnLQY+Ku IF4n1qjbBJPDfFmy5GNyvU+X8UK2VMHiulCmP5WRUzR+qwxkhwqsCyydy6vdasvZ rGJbq2WaY1S6Ry5E6TWng/ObwUU0XFvOD72vRNXBfSXXQSiLSN7tY3LiiZ+xjbft hb4ZK6a5wwTmyR33hcvS0gqqFLHTrSJGGKLg2e72McYmH+wp2/QULAX+DKgKKaEC sWkHqJU4bLo4QBTxflzlXIfSFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiyxA6B nUMV1CK0Q2CnJ1vOB0ncMB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11 QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9FMkRBODUxODQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxw Sm9YQU1GV3ZscDVndG11QUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChlAJwPdwByYNMh9dM4EgWkjOiuY8J0tvVg/jNGEMw8gjuzGq47p3f Lq2GzKPTziqt4pP+B974qkOv/2TMrE5n3n7KN0tGJcMD9tTEalM4GMMrzPENaODU RqMPWfrrUHid/a5qfKpYi+UUPASebiP2waJeQzoFqCk3NW1ytOIRbVacU9ZKAw0I bt391HgpQI52oQl6gFzr38U50SoPEG/EqfAjvToUM7agvIk+Z7Q8k33AsR+OBlir uamDxbKx0tl6BONDNAzdO6plQWOcaliKhDvQdT//cDLfWv9RIjP1mFYskS79sz2/ 6EQBBjGWGaLSOc2paSiry7tC8aBNbCVQ -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:06 2025 by rpki-client