$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: V4dDMxyrXwlJdmxxPaVVxA45hYDMipz8mOowQklt0/0= Subject key identifier: 0B:8F:52:5B:D6:75:2F:ED:20:2A:EC:2F:3D:98:02:1B:7F:18:B7:9A Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 138D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 1385 Signing time: Sat 18 Oct 2025 17:28:12 +0000 Manifest this update: Sat 18 Oct 2025 17:28:12 +0000 Manifest next update: Sat 25 Oct 2025 17:28:12 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: C0cK/X0cj8D0NS9j0jTJsD/30ilI3CUeRsQyNYOmyLg=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: c/V3Stz0hBoC77cDsx2sOFkExhPVs+UBbA7TaA5YseQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5005 (0x138d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Oct 18 17:28:12 2025 GMT Not After : Oct 25 17:28:12 2025 GMT Subject: CN=68f3ce2c-dde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:64:0f:6e:28:db:52:96:49:8b:54:6c:28: 83:88:2c:bc:60:35:b1:a1:0b:ad:df:6f:59:85:56: c2:2f:16:a8:a4:32:60:a9:88:9f:4b:e8:8f:27:8e: 88:10:5a:83:83:c9:fe:29:53:66:09:ef:c2:fd:bc: e9:ad:28:8b:b7:60:25:df:66:59:18:1d:3a:5e:d8: 33:5e:f8:83:77:ec:b7:bb:1b:05:de:62:c7:8a:cb: f8:be:68:d1:a6:86:08:3f:bf:26:ca:24:56:7c:a6: 87:8a:04:47:2f:94:38:4b:b9:fc:b1:f5:57:d0:d3: 1f:cf:f4:f6:54:c7:61:5a:69:9c:4f:2f:48:f2:a8: 15:98:fd:0d:1b:57:89:ca:70:45:47:6f:db:ae:89: f2:66:bd:c2:4c:14:85:1d:74:2a:37:eb:74:7c:de: 70:f0:85:90:4f:ad:ca:60:03:57:22:f5:6e:cc:52: b0:36:8b:df:86:a9:be:21:33:7c:1c:03:cb:5e:a1: e4:06:47:58:ae:79:e0:a6:70:60:aa:a0:3e:a6:74: 31:bd:09:ad:30:5a:59:ae:ff:84:10:a4:d6:1c:b1: 21:99:40:e8:2c:81:94:81:52:8e:69:9f:4b:c9:55: c7:40:f3:be:53:77:c6:6e:cc:2b:bf:88:7a:ac:5d: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:52:5B:D6:75:2F:ED:20:2A:EC:2F:3D:98:02:1B:7F:18:B7:9A X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ab:4d:1c:37:15:1a:72:3c:d3:32:89:6b:97:2d:db:ed:44: 35:36:05:a1:68:cf:63:75:bb:59:e3:cf:fb:31:72:1a:53:d3: c1:f3:39:98:36:0a:2f:19:a1:11:c5:6e:3e:40:96:96:36:f3: 15:15:26:7a:44:a7:ff:d8:19:b2:8e:45:46:64:bd:e6:52:dd: cd:83:f9:91:e5:26:da:52:1b:3f:a4:f5:7b:62:e0:ae:bf:f5: 3a:de:8b:a0:52:86:88:09:8b:6a:22:84:c6:80:a9:59:74:d6: cf:51:b7:d6:e3:eb:a6:2b:d1:de:08:84:4f:c7:da:8d:de:3d: 9b:c3:97:88:e3:e6:a7:82:8e:b6:f7:e9:01:e2:b0:f9:29:aa: 14:98:e2:8c:9e:6f:24:bb:54:1f:a4:f5:6d:6a:ae:64:88:5b: 26:da:5e:10:e7:80:f5:b8:fc:26:42:91:47:07:94:7f:93:ef: 59:36:05:3c:c6:9e:6e:05:16:37:69:44:a4:20:3b:79:90:06: 13:ef:8e:c8:98:97:7c:6c:6c:e7:2d:dc:8c:fc:0e:39:ab:70: 6d:91:5f:fb:45:f8:c8:34:25:75:30:10:2e:ac:1e:de:29:02: 2d:49:27:86:33:a3:cf:55:75:f7:2b:c7:d4:f5:1f:f0:1e:de: 1c:b8:55:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjUxMDE4MTcyODEyWhcNMjUxMDI1MTcyODEyWjAYMRYwFAYD VQQDEw02OGYzY2UyYy1kZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjpkD24o21KWSYtUbCiDiCy8YDWxoQut329ZhVbCLxaopDJgqYifS+iPJ46I EFqDg8n+KVNmCe/C/bzprSiLt2Al32ZZGB06XtgzXviDd+y3uxsF3mLHisv4vmjR poYIP78myiRWfKaHigRHL5Q4S7n8sfVX0NMfz/T2VMdhWmmcTy9I8qgVmP0NG1eJ ynBFR2/bronyZr3CTBSFHXQqN+t0fN5w8IWQT63KYANXIvVuzFKwNovfhqm+ITN8 HAPLXqHkBkdYrnngpnBgqqA+pnQxvQmtMFpZrv+EEKTWHLEhmUDoLIGUgVKOaZ9L yVXHQPO+U3fGbswrv4h6rF18YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuPUlvW dS/tICrsLz2YAht/GLeaMB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVq00cNxUacjzTMolrly3b7UQ1NgWhaM9jdbtZ48/7MXIaU9PB8zmY NgovGaERxW4+QJaWNvMVFSZ6RKf/2BmyjkVGZL3mUt3Ng/mR5SbaUhs/pPV7YuCu v/U63ougUoaICYtqIoTGgKlZdNbPUbfW4+umK9HeCIRPx9qN3j2bw5eI4+ango62 9+kB4rD5KaoUmOKMnm8ku1QfpPVtaq5kiFsm2l4Q54D1uPwmQpFHB5R/k+9ZNgU8 xp5uBRY3aUSkIDt5kAYT747ImJd8bGznLdyM/A45q3BtkV/7RfjINCV1MBAurB7e KQItSSeGM6PPVXX3K8fU9R/wHt4cuFVB -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:35 2025 by rpki-client