$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: jwEGhr2zPwiThau87yQ36nZ/20vSGHgYrHYnxDp+33Q= Subject key identifier: B9:A5:1C:59:C4:F2:C3:6E:77:C3:3B:C7:21:3D:FD:07:23:47:C5:DF Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0D4A Signing time: Sat 18 Oct 2025 18:41:53 +0000 Manifest this update: Sat 18 Oct 2025 18:41:52 +0000 Manifest next update: Sat 25 Oct 2025 18:41:52 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: nXvqumCywf7YfoA8HBO63TRR73EbnpI1NJiS5i89z/0=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3412 (0xd54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Oct 18 18:41:52 2025 GMT Not After : Oct 25 18:41:52 2025 GMT Subject: CN=68f3df71-39b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:56:de:20:b5:a4:81:af:24:91:3f:20:79:cb: 18:16:be:ea:76:4d:45:ae:aa:2e:b3:f4:11:24:78: 8a:7b:7f:b3:e0:8d:c6:b6:fe:0c:a1:68:5b:61:83: 45:87:f4:97:b4:9f:14:98:db:e5:fc:31:e9:47:db: ec:a4:82:ff:27:41:67:18:ef:47:d6:35:95:01:da: 06:47:02:a4:66:64:1e:5b:b9:61:62:2b:2e:ef:a0: 09:ee:f4:6c:ba:23:0f:a8:4b:34:6b:14:53:e5:2e: f5:6f:c4:12:c2:a5:a0:7f:b9:22:a1:1a:75:76:20: 0a:5f:b6:d3:85:9f:06:0b:12:de:8a:80:0e:04:ab: 96:a7:7f:eb:a3:cb:48:fd:0d:f8:d2:d1:a2:a8:ba: 15:9d:e9:22:06:e7:83:61:08:99:58:a1:53:e5:32: cc:34:94:ee:ff:3b:d6:ba:88:ee:63:88:c9:03:ff: 15:68:ac:f3:8d:ec:eb:d0:cf:60:7c:86:ea:ef:23: 4e:7b:6d:b9:f9:5d:f3:44:1f:40:90:35:a8:c8:5e: e7:e6:91:87:ad:1a:58:83:bd:59:74:d0:d7:24:58: 45:98:6d:37:30:e0:98:2e:a8:9d:5a:09:4b:a9:4e: 10:b1:1c:8e:7d:56:c7:e0:c4:ca:5d:7d:9f:38:fe: 12:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:1C:59:C4:F2:C3:6E:77:C3:3B:C7:21:3D:FD:07:23:47:C5:DF X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:45:16:f9:a5:ad:42:55:6c:5a:75:a0:b3:2a:d3:23:78:10: 53:4a:38:05:63:f6:35:f3:a4:49:ff:ac:52:3e:b5:ce:9b:dc: f6:d4:75:01:ee:6a:87:13:77:02:63:8e:88:46:e1:50:9c:94: c8:d3:bd:29:70:09:62:cd:cd:1e:87:d8:cb:1a:f4:81:c9:3f: 44:4c:4d:11:e1:db:67:ea:34:8a:a1:3e:3d:49:43:cd:12:c0: cd:02:e4:c6:90:d3:92:fa:c9:64:06:86:58:13:b8:fd:6a:35: 3d:44:5d:4f:3a:48:fb:0d:18:67:f8:75:27:04:08:db:5c:00: 09:df:5a:28:c7:6c:cf:49:14:d4:59:c5:dc:8e:36:67:a6:21: b8:e0:07:52:45:71:44:af:0d:91:e1:58:82:f3:97:05:59:b7: a8:f8:e3:87:92:3b:6f:f0:04:62:70:af:e7:76:c3:4b:7b:78: eb:03:e9:c7:d8:9f:df:38:e6:12:77:6e:ed:6b:86:d5:d3:35: 6e:49:0e:c7:f7:c6:aa:c6:0e:7d:2b:b8:da:b2:ce:19:e5:b6: 6c:50:95:34:09:f4:2f:12:36:bb:c0:9c:fc:67:a7:f3:17:b9: 99:3f:b3:6b:51:dd:66:37:9b:86:7c:bf:fe:36:21:6e:b1:e0: a4:cc:ff:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUxMDE4MTg0MTUyWhcNMjUxMDI1MTg0MTUyWjAYMRYwFAYD VQQDEw02OGYzZGY3MS0zOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FbeILWkga8kkT8gecsYFr7qdk1Frqous/QRJHiKe3+z4I3Gtv4MoWhbYYNF h/SXtJ8UmNvl/DHpR9vspIL/J0FnGO9H1jWVAdoGRwKkZmQeW7lhYisu76AJ7vRs uiMPqEs0axRT5S71b8QSwqWgf7kioRp1diAKX7bThZ8GCxLeioAOBKuWp3/ro8tI /Q340tGiqLoVnekiBueDYQiZWKFT5TLMNJTu/zvWuojuY4jJA/8VaKzzjezr0M9g fIbq7yNOe225+V3zRB9AkDWoyF7n5pGHrRpYg71ZdNDXJFhFmG03MOCYLqidWglL qU4QsRyOfVbH4MTKXX2fOP4ShQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmlHFnE 8sNud8M7xyE9/QcjR8XfMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3RRb5pa1CVWxadaCzKtMjeBBTSjgFY/Y186RJ/6xSPrXOm9z21HUB 7mqHE3cCY46IRuFQnJTI070pcAlizc0eh9jLGvSByT9ETE0R4dtn6jSKoT49SUPN EsDNAuTGkNOS+slkBoZYE7j9ajU9RF1POkj7DRhn+HUnBAjbXAAJ31oox2zPSRTU WcXcjjZnpiG44AdSRXFErw2R4ViC85cFWbeo+OOHkjtv8ARicK/ndsNLe3jrA+nH 2J/fOOYSd27ta4bV0zVuSQ7H98aqxg59K7jass4Z5bZsUJU0CfQvEja7wJz8Z6fz F7mZP7NrUd1mN5uGfL/+NiFuseCkzP/T -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:08 2025 by rpki-client