$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json) Hash identifier: pWINfG8VDr4ieAUspHbKxVhG8sTNH+hLEueKqfu8nFA= Subject key identifier: E2:E9:C8:74:EC:D2:B7:BE:5A:CD:6B:C9:A0:79:D1:9B:5B:A2:65:9A Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Certificate serial: 22D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft Manifest number: 2293 Signing time: Sat 18 Oct 2025 16:07:10 +0000 Manifest this update: Sat 18 Oct 2025 16:07:09 +0000 Manifest next update: Sat 25 Oct 2025 16:07:09 +0000 Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: 6PutW3weIeOebjKvDB2py7qEhhQU5+sfjt5xHVcKFjE=) 2: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: bRjvCEzkjDm3JJYu7t1zkHD97hp8O/fwotkC6wIv1RQ=) 3: 815465903EB511E9881B6529C4F9AE02.roa (hash: gW74XIULKnrcRgyXZDwxsWWvrLPKxQLUY/wa7dOD1h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8913 (0x22d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Validity Not Before: Oct 18 16:07:09 2025 GMT Not After : Oct 25 16:07:09 2025 GMT Subject: CN=68f3bb2d-c93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:46:ae:2f:fb:45:a3:49:be:1c:b9:d4:3f: 18:7b:8d:d3:3d:d9:d8:5f:d2:45:0b:e9:8f:87:ec: d6:71:b6:42:c1:e9:3b:2f:b5:9d:65:9a:c2:f4:44: 1a:2a:d9:03:bb:42:33:10:8f:c8:f4:65:d5:19:76: 51:ee:39:75:a9:54:d1:ed:5c:08:0d:f2:c8:40:34: 44:61:04:9e:01:18:60:ef:0b:f2:f7:c9:f7:5e:30: 45:ad:cb:c0:56:25:17:07:9b:f8:a3:28:b3:58:2e: 5e:0c:6e:b9:b6:46:f1:c7:3c:92:3b:1b:aa:0c:f9: ab:4d:72:8d:90:bd:24:93:24:fa:1e:13:1f:ed:b4: 89:13:76:f6:73:c1:d1:96:a6:f3:43:c1:0e:a4:74: 83:f7:79:d3:69:41:fb:a1:4e:c5:a4:60:bf:3a:8f: b4:2f:e2:9b:ee:d9:0c:40:69:fc:b4:5d:7b:82:c7: f7:3a:31:5e:41:79:69:d2:63:21:e5:3d:6a:50:8b: e4:65:bc:32:c2:11:c3:2b:38:39:c6:b2:1c:50:06: 4c:02:00:1b:39:8b:17:ee:a1:91:f4:47:90:c2:8b: 69:e6:fa:fe:26:c5:11:89:87:fb:7d:37:99:9a:fa: 2d:35:49:b5:c4:f0:ad:ac:16:5b:f8:f1:27:65:7b: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E9:C8:74:EC:D2:B7:BE:5A:CD:6B:C9:A0:79:D1:9B:5B:A2:65:9A X509v3 Authority Key Identifier: keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:82:07:0d:6b:aa:f8:5e:74:4d:3c:fd:07:20:21:a6:42:6c: 7e:ff:b1:7b:ae:89:58:cc:60:66:ae:c8:c9:02:6f:21:e7:cf: 21:34:f4:7a:ae:66:47:c4:50:59:63:b0:6f:7e:ed:7e:0a:0a: cf:45:93:ef:8e:28:80:61:57:9d:6b:46:02:cc:35:bd:a8:df: ec:de:bf:95:2c:ca:35:01:3e:51:a5:93:af:d2:40:d4:1b:ff: 4b:31:19:6a:2a:eb:83:3d:2e:de:c2:27:8f:e7:70:26:79:08: 9f:00:a1:b6:c8:d8:6d:9c:b2:c8:bc:a1:b8:8d:27:2c:7e:c1: 5c:7e:7d:b0:7a:29:4a:50:e9:ef:54:cf:96:f1:e0:f4:44:30: 50:e3:a1:83:51:67:08:3f:4f:14:51:92:2b:5b:cb:65:dc:11: 80:05:60:36:6f:a6:ea:04:f1:34:b3:f6:21:9d:22:1f:0c:ad: 42:f2:fd:e2:d1:09:e5:98:d3:9f:66:d9:ba:b5:bd:12:e9:d7: 3a:5f:56:02:ba:c6:d5:a5:28:53:e4:1b:08:fb:16:48:db:2c: fe:be:66:86:39:02:60:43:7c:3c:4c:e9:f6:0b:df:ee:7f:5d: ee:36:d1:20:ab:ba:da:16:51:6e:d8:32:6b:13:f4:db:db:ba: 5b:91:85:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICItEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex QThERTgxMkEwHhcNMjUxMDE4MTYwNzA5WhcNMjUxMDI1MTYwNzA5WjAYMRYwFAYD VQQDEw02OGYzYmIyZC1jOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQ5Gri/7RaNJvhy51D8Ye43TPdnYX9JFC+mPh+zWcbZCwek7L7WdZZrC9EQa KtkDu0IzEI/I9GXVGXZR7jl1qVTR7VwIDfLIQDREYQSeARhg7wvy98n3XjBFrcvA ViUXB5v4oyizWC5eDG65tkbxxzySOxuqDPmrTXKNkL0kkyT6HhMf7bSJE3b2c8HR lqbzQ8EOpHSD93nTaUH7oU7FpGC/Oo+0L+Kb7tkMQGn8tF17gsf3OjFeQXlp0mMh 5T1qUIvkZbwywhHDKzg5xrIcUAZMAgAbOYsX7qGR9EeQwotp5vr+JsURiYf7fTeZ mvotNUm1xPCtrBZb+PEnZXtrHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLpyHTs 0re+Ws1ryaB50ZtbomWaMB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu T21WdV9ieGZwbm9hamVnU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtggcNa6r4XnRNPP0HICGmQmx+/7F7rolYzGBmrsjJAm8h588hNPR6 rmZHxFBZY7Bvfu1+CgrPRZPvjiiAYVeda0YCzDW9qN/s3r+VLMo1AT5RpZOv0kDU G/9LMRlqKuuDPS7ewieP53AmeQifAKG2yNhtnLLIvKG4jScsfsFcfn2weilKUOnv VM+W8eD0RDBQ46GDUWcIP08UUZIrW8tl3BGABWA2b6bqBPE0s/YhnSIfDK1C8v3i 0QnlmNOfZtm6tb0S6dc6X1YCusbVpShT5BsI+xZI2yz+vmaGOQJgQ3w8TOn2C9/u f13uNtEgq7raFlFu2DJrE/Tb27pbkYUO -----END CERTIFICATE-----Generated at Mon Oct 20 08:55:23 2025 by rpki-client