$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: +Um+gtPPCBbFdUupweIp4XLHe3bbyYyrccoRoMwmYc8= Subject key identifier: AD:DC:98:EE:8F:A0:E8:51:FB:A7:10:9C:A0:5E:17:DC:85:1D:6D:AF Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0C86 Signing time: Sat 18 Oct 2025 19:07:11 +0000 Manifest this update: Sat 18 Oct 2025 19:07:10 +0000 Manifest next update: Sat 25 Oct 2025 19:07:10 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: 2SAsPZyLCPe/PlefgWvLL4dL0YbUZiMcJfRu9SgP3Uk=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: MoMl/DlQY62DjxtHrGyaIblAP24xLixngcq1DFl3W2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Oct 18 19:07:10 2025 GMT Not After : Oct 25 19:07:10 2025 GMT Subject: CN=68f3e55e-fc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e8:74:99:fe:25:72:f1:5d:72:17:5e:78:3a: 97:1e:7b:dd:54:78:56:7b:de:57:d9:51:52:10:02: 3c:d1:9f:5c:04:67:de:ff:77:7e:5d:5a:6d:10:f2: f9:47:fe:a7:f6:ee:6b:8a:80:8d:9a:30:9a:27:f9: ed:5c:35:1f:b7:7f:40:9b:af:06:b2:22:f0:ac:65: 84:ab:42:4f:02:63:0a:41:d8:e4:b3:90:31:b7:ca: 57:d0:69:15:4f:61:0d:9e:33:32:6a:f3:3d:ed:87: 17:3b:80:12:1e:b6:66:93:24:97:26:ce:53:c8:5f: 4e:d9:66:8f:db:25:c1:cb:47:43:0a:58:ad:0d:7b: 0d:37:31:46:cf:be:d9:14:54:be:7f:45:4c:1e:cd: 99:d0:9b:be:34:fa:aa:20:e9:46:f6:38:0f:67:6a: 8e:00:5c:5e:a1:3c:ef:25:7c:81:7e:8d:86:ba:a2: 3b:ad:bc:84:c0:fb:99:41:d6:ce:c9:d0:27:0c:96: 70:5b:34:85:60:4d:21:20:17:86:30:2e:3c:1e:f4: 81:ea:6b:01:88:2f:50:32:38:4c:cc:62:1f:79:9c: 0c:ca:43:4b:39:f2:69:4b:12:38:c9:48:5c:be:d2: 99:3e:c4:77:7c:7f:f0:60:12:9f:19:70:09:54:1b: 59:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DC:98:EE:8F:A0:E8:51:FB:A7:10:9C:A0:5E:17:DC:85:1D:6D:AF X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1b:c4:44:25:33:76:4f:1c:2f:ce:c5:d1:2a:3f:64:5b:96: db:11:04:08:4f:d3:82:34:10:cd:3c:5b:29:4e:8f:16:a6:7e: 64:78:67:59:78:05:11:8d:6e:ce:d4:49:09:e3:d5:54:d7:b4: d4:bf:a5:0d:aa:3d:7c:49:e6:0e:53:29:52:e5:a5:b5:98:23: 9d:c0:80:11:bf:ae:98:f9:d2:15:64:56:8f:83:b9:cd:e3:fc: 4c:a9:80:19:25:57:39:09:0d:5c:b1:7d:7d:67:3f:82:c4:ad: 88:6a:d6:98:cc:9e:c2:3a:73:6a:f9:e1:0e:55:2c:01:a3:92: ef:75:18:0e:22:b0:df:16:2b:ca:d8:49:86:33:e2:40:f3:99: 58:db:4c:da:45:8a:a5:f1:07:fa:58:76:90:89:d0:af:91:59: 87:f2:8a:94:52:e4:38:40:7b:20:29:ad:ab:97:5d:0e:cb:9e: ff:b1:50:78:4e:1c:06:51:5d:83:14:46:84:1e:f7:bf:f5:f1: 1f:09:9d:36:a4:8e:13:05:ec:8b:0a:63:f6:b9:0d:26:08:68: 8a:27:0d:e0:93:6e:97:af:0a:a7:40:31:21:71:2a:1a:21:69: e2:94:d1:94:46:89:f9:48:06:99:d7:72:44:46:dd:5b:08:79: d5:44:fc:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUxMDE4MTkwNzEwWhcNMjUxMDI1MTkwNzEwWjAYMRYwFAYD VQQDEw02OGYzZTU1ZS1mYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9uh0mf4lcvFdchdeeDqXHnvdVHhWe95X2VFSEAI80Z9cBGfe/3d+XVptEPL5 R/6n9u5rioCNmjCaJ/ntXDUft39Am68GsiLwrGWEq0JPAmMKQdjks5Axt8pX0GkV T2ENnjMyavM97YcXO4ASHrZmkySXJs5TyF9O2WaP2yXBy0dDClitDXsNNzFGz77Z FFS+f0VMHs2Z0Ju+NPqqIOlG9jgPZ2qOAFxeoTzvJXyBfo2GuqI7rbyEwPuZQdbO ydAnDJZwWzSFYE0hIBeGMC48HvSB6msBiC9QMjhMzGIfeZwMykNLOfJpSxI4yUhc vtKZPsR3fH/wYBKfGXAJVBtZIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3cmO6P oOhR+6cQnKBeF9yFHW2vMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmG8REJTN2TxwvzsXRKj9kW5bbEQQIT9OCNBDNPFspTo8Wpn5keGdZ eAURjW7O1EkJ49VU17TUv6UNqj18SeYOUylS5aW1mCOdwIARv66Y+dIVZFaPg7nN 4/xMqYAZJVc5CQ1csX19Zz+CxK2IataYzJ7COnNq+eEOVSwBo5LvdRgOIrDfFivK 2EmGM+JA85lY20zaRYql8Qf6WHaQidCvkVmH8oqUUuQ4QHsgKa2rl10Oy57/sVB4 ThwGUV2DFEaEHve/9fEfCZ02pI4TBeyLCmP2uQ0mCGiKJw3gk26XrwqnQDEhcSoa IWnilNGURon5SAaZ13JERt1bCHnVRPwc -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:39 2025 by rpki-client