$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: lyufCse20A6X7jlZIODgA8MkbiQ7gOlFMtYxcqJgPXE= Subject key identifier: DC:22:58:20:5F:AD:74:28:48:BE:17:B9:56:6B:05:5D:07:0F:E9:2E Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 08C3 Signing time: Sat 18 Oct 2025 21:36:05 +0000 Manifest this update: Sat 18 Oct 2025 21:36:04 +0000 Manifest next update: Sat 25 Oct 2025 21:36:04 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: JWd7NRf4D6pCcZWfSvQADssnz7vv8qlHsZ8piOSvTUE=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Oct 18 21:36:04 2025 GMT Not After : Oct 25 21:36:04 2025 GMT Subject: CN=68f40845-45b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:48:4a:47:1a:4b:fb:cd:6f:4d:45:a5:9f: 11:0c:fd:0b:50:76:5f:22:61:68:79:79:2b:9b:d3: 37:01:97:11:be:34:b8:9f:ec:c7:d4:b5:5b:06:8c: 01:60:59:f4:e8:74:c8:c5:9c:cc:bd:65:2f:23:fc: 8f:48:76:11:6d:11:f5:bc:56:cf:f9:25:23:04:7c: 41:ab:07:22:ee:7e:27:d8:eb:a9:69:bd:c4:d0:14: 26:d3:2c:be:1d:14:09:29:43:af:b9:95:05:39:87: 48:48:68:cb:c5:9d:93:ac:88:10:f7:a8:4e:a5:a3: 9b:e7:e8:8a:c7:ad:c1:b3:2c:92:f6:1a:1c:de:37: fb:15:8a:09:9a:36:f6:64:7a:3e:a6:39:6a:f4:9f: ba:0d:2b:bc:ab:83:77:09:17:2c:f6:16:2e:99:e5: 1d:29:e4:3c:21:2b:03:13:3e:b0:bb:25:6a:9d:7f: 53:6e:bf:4c:2b:3a:97:52:23:e2:f7:21:f0:f2:b3: be:15:10:61:89:6b:12:5c:a4:c6:b6:15:ec:54:fa: 0f:7a:eb:0d:e7:d2:bd:ac:9f:7a:d4:5b:ef:2f:14: 55:b5:ed:69:8a:56:c5:9b:10:e6:e3:1c:06:1e:b4: cf:c6:3f:c3:6c:2f:99:0e:ab:83:99:1c:59:4e:bd: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:22:58:20:5F:AD:74:28:48:BE:17:B9:56:6B:05:5D:07:0F:E9:2E X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:41:27:de:b6:04:3b:44:0e:3a:97:bc:ab:41:8d:60:1e:ec: 25:92:c1:46:ce:bf:2e:d2:ef:2f:8a:03:2a:aa:81:75:9d:42: ff:c0:23:60:30:a5:c6:aa:a7:01:f1:b8:f4:8b:f9:90:88:a9: ba:4d:76:a9:32:bb:df:39:ff:c9:87:6f:7c:d3:5e:7b:61:07: 25:b8:95:11:79:d3:d2:60:a0:d7:ee:82:8d:f1:d4:52:89:c1: 85:0c:08:c1:b1:29:f0:79:4d:4a:a6:87:42:13:3b:65:c5:a0: 0c:40:f0:9c:e5:50:63:da:40:b4:65:1b:2a:61:2b:ad:34:69: 52:ee:d3:7c:12:55:18:dd:ef:cf:f4:8d:fc:30:64:fe:b7:28: 0e:e6:2f:4d:06:9b:8e:6d:1d:79:68:6b:47:d6:e2:4e:39:a6: 96:08:85:b2:08:b0:08:92:27:61:92:34:1f:2b:d5:6f:75:19: 21:49:a1:36:cf:c6:b1:28:0b:d1:8d:04:f1:f9:8c:24:0d:91: 8c:81:1b:20:61:88:ca:b0:a5:d9:b3:4f:fd:f2:ec:ce:68:f7: 69:22:04:0a:e9:b1:f9:a1:ea:28:85:6e:e9:38:8c:d9:51:71: 54:93:65:9d:63:b2:60:54:f2:55:85:4d:23:4e:c5:7c:41:63: 41:57:ea:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjUxMDE4MjEzNjA0WhcNMjUxMDI1MjEzNjA0WjAYMRYwFAYD VQQDEw02OGY0MDg0NS00NWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD9ISkcaS/vNb01FpZ8RDP0LUHZfImFoeXkrm9M3AZcRvjS4n+zH1LVbBowB YFn06HTIxZzMvWUvI/yPSHYRbRH1vFbP+SUjBHxBqwci7n4n2Oupab3E0BQm0yy+ HRQJKUOvuZUFOYdISGjLxZ2TrIgQ96hOpaOb5+iKx63BsyyS9hoc3jf7FYoJmjb2 ZHo+pjlq9J+6DSu8q4N3CRcs9hYumeUdKeQ8ISsDEz6wuyVqnX9Tbr9MKzqXUiPi 9yHw8rO+FRBhiWsSXKTGthXsVPoPeusN59K9rJ961FvvLxRVte1pilbFmxDm4xwG HrTPxj/DbC+ZDquDmRxZTr1qVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwiWCBf rXQoSL4XuVZrBV0HD+kuMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClQSfetgQ7RA46l7yrQY1gHuwlksFGzr8u0u8vigMqqoF1nUL/wCNg MKXGqqcB8bj0i/mQiKm6TXapMrvfOf/Jh2980157YQcluJURedPSYKDX7oKN8dRS icGFDAjBsSnweU1KpodCEztlxaAMQPCc5VBj2kC0ZRsqYSutNGlS7tN8ElUY3e/P 9I38MGT+tygO5i9NBpuObR15aGtH1uJOOaaWCIWyCLAIkidhkjQfK9VvdRkhSaE2 z8axKAvRjQTx+YwkDZGMgRsgYYjKsKXZs0/98uzOaPdpIgQK6bH5oeoohW7pOIzZ UXFUk2WdY7JgVPJVhU0jTsV8QWNBV+rf -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:12 2025 by rpki-client