$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: K3lmxc9KifxKzZWWKI3IMhde2FsnnT4ivqVLx8SHmVQ= Subject key identifier: A3:0A:B1:7E:21:06:24:62:63:3F:87:2C:BC:F7:C7:33:D3:1D:2D:41 Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 75 Signing time: Sun 19 Oct 2025 10:07:40 +0000 Manifest this update: Sun 19 Oct 2025 10:07:40 +0000 Manifest next update: Sun 26 Oct 2025 10:07:40 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: Zg3STYxQ+RSN3rLV9KA0MIREOHhzfKIeZkRjCYBdWmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Oct 19 10:07:40 2025 GMT Not After : Oct 26 10:07:40 2025 GMT Subject: CN=68f4b86c-a9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:ee:7f:73:31:b2:19:99:e2:1c:33:32:bb: a8:d8:91:c1:f6:ab:fd:18:4c:4a:3a:f9:cf:22:90: cc:11:ce:bc:98:6b:b6:29:06:10:45:12:03:94:d1: a6:17:c9:fb:b8:93:02:88:19:e5:45:10:e9:3a:45: 5c:26:42:11:e9:49:4b:e5:1f:49:7d:25:53:a3:f0: 6b:e1:51:37:59:2e:c0:f4:56:b6:e7:22:54:a7:13: 3d:e4:b8:e8:c1:e4:f2:13:7a:99:a6:f4:e5:d2:98: 71:90:df:58:63:2f:0f:c0:d5:ef:8e:39:c2:b4:c0: fa:ff:8c:29:da:5e:25:1d:56:97:d5:72:a1:aa:cf: c4:f1:56:f0:bf:38:ee:72:15:f6:ba:fa:bb:43:61: 36:28:95:2f:37:2e:a9:97:0e:2c:95:0c:fd:76:17: f7:17:41:c2:61:22:37:96:2b:a1:c9:d3:c2:7b:b3: 27:da:de:15:0e:49:bb:7e:bb:31:e3:81:6a:df:2c: 86:68:e0:02:9b:92:c5:ae:2d:a2:3c:e8:6b:78:c2: 11:d2:e6:8e:3a:fc:30:d2:44:a3:cd:74:5f:89:5c: 48:af:ec:70:5e:5b:fd:31:27:5b:b9:18:8f:e7:ea: 16:b2:d2:91:b4:bf:fe:9c:65:32:1d:2c:0c:d6:18: 0c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0A:B1:7E:21:06:24:62:63:3F:87:2C:BC:F7:C7:33:D3:1D:2D:41 X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:29:68:db:23:0a:9f:de:14:4a:77:ff:ed:f8:db:f0:93:a5: 4c:74:42:3d:49:f2:d2:01:89:1b:e0:50:06:6b:00:f3:4e:94: 15:aa:40:94:da:84:9c:fb:8d:c6:f1:e4:23:71:f0:a8:96:1c: 27:2e:83:f8:2f:e9:54:1d:c2:c0:67:83:a2:48:16:98:62:88: 2a:17:4f:b2:1d:ec:c7:16:c0:56:e7:18:d6:88:ec:3d:96:4f: ac:26:db:1b:53:cb:5a:c9:98:74:fd:37:f6:96:f5:83:0d:64: c2:76:fb:45:7a:54:a2:ba:bf:e9:72:49:4f:3e:31:fd:d7:89: 1c:b6:e2:ae:55:c5:c8:06:ee:1a:07:b1:3f:86:97:f7:f1:28: 65:36:2d:de:38:da:02:26:fa:bf:51:f1:51:ea:70:c3:0e:68: 26:19:89:f8:36:fd:13:81:57:70:ea:c9:7e:59:3e:90:32:bb: 25:88:0c:5d:ea:8a:b6:09:54:5f:41:f5:15:24:29:91:90:11: e3:8d:66:cb:92:aa:b4:04:05:ce:80:f3:c2:bd:0a:44:2e:4c: fd:7b:ac:77:14:69:b9:3c:c6:18:c6:b6:60:09:d7:30:92:aa: 27:1b:b0:99:4a:0c:66:4d:aa:87:7c:96:7d:d9:63:55:5e:9c: 65:5b:2c:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoQkRBM0U4QTgyMzFDNzg3RjZCN0YxOEJDMTQ2Qjk1RkI1 QzAzOEVEOTAeFw0yNTEwMTkxMDA3NDBaFw0yNTEwMjYxMDA3NDBaMBgxFjAUBgNV BAMTDTY4ZjRiODZjLWE5ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS3O5/czGyGZniHDMyu6jYkcH2q/0YTEo6+c8ikMwRzryYa7YpBhBFEgOU0aYX yfu4kwKIGeVFEOk6RVwmQhHpSUvlH0l9JVOj8GvhUTdZLsD0VrbnIlSnEz3kuOjB 5PITepmm9OXSmHGQ31hjLw/A1e+OOcK0wPr/jCnaXiUdVpfVcqGqz8TxVvC/OO5y Ffa6+rtDYTYolS83LqmXDiyVDP12F/cXQcJhIjeWK6HJ08J7syfa3hUOSbt+uzHj gWrfLIZo4AKbksWuLaI86Gt4whHS5o46/DDSRKPNdF+JXEiv7HBeW/0xJ1u5GI/n 6hay0pG0v/6cZTIdLAzWGAzVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUowqxfiEG JGJjP4csvPfHM9MdLUEwHwYDVR0jBBgwFoAUvaPoqCMceH9rfxi8FGuV+1wDjtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzRCMDFDNEE2Rjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdmFQb3FDTWNlSDlyZnhpOEZHdVYtMXdEanRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzRCMDFDNEE2RjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5 cmZ4aThGR3VWLTF3RGp0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADopaNsjCp/eFEp3/+342/CTpUx0Qj1J8tIBiRvgUAZrAPNOlBWqQJTa hJz7jcbx5CNx8KiWHCcug/gv6VQdwsBng6JIFphiiCoXT7Id7McWwFbnGNaI7D2W T6wm2xtTy1rJmHT9N/aW9YMNZMJ2+0V6VKK6v+lySU8+Mf3XiRy24q5VxcgG7hoH sT+Gl/fxKGU2Ld442gIm+r9R8VHqcMMOaCYZifg2/ROBV3DqyX5ZPpAyuyWIDF3q irYJVF9B9RUkKZGQEeONZsuSqrQEBc6A88K9CkQuTP17rHcUabk8xhjGtmAJ1zCS qicbsJlKDGZNqod8ln3ZY1VenGVbLGM= -----END CERTIFICATE-----Generated at Tue Oct 21 15:10:01 2025 by rpki-client