$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft File: Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json) Hash identifier: AtPelxMcPavbuIp0UhT115C/sIx2MenF635GEL1jEAw= Subject key identifier: 85:27:D0:0F:E8:30:A1:FC:66:7D:39:CB:96:69:8F:46:AB:43:80:FE Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C Certificate issuer: /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft Manifest number: 41 Signing time: Sun 19 Oct 2025 10:53:13 +0000 Manifest this update: Sun 19 Oct 2025 10:53:12 +0000 Manifest next update: Sun 26 Oct 2025 10:53:12 +0000 Files and hashes: 1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: 2MApR1e1bzpk9wyJStSWY8hqTToGNxGr50x+e4/eJjo=) 2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Mp1JcqkdMAmbReGNCmp0QyS72nIBhDSCoOb/C1pLXic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C Validity Not Before: Oct 19 10:53:12 2025 GMT Not After : Oct 26 10:53:12 2025 GMT Subject: CN=68f4c318-c2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:24:b7:0f:90:cb:6b:0b:a1:52:d0:03:3a: b4:4b:95:8a:8f:e0:0a:d6:97:65:ee:0b:cb:e1:39: 69:53:27:46:fc:92:6d:b4:6f:54:a2:5f:c5:c3:0b: a2:cc:33:b5:3c:32:3f:8d:20:10:c7:99:97:83:06: 0f:91:b9:b5:32:0f:59:aa:38:83:38:6f:f7:c2:c2: 8a:4c:9b:e6:a1:7b:98:2b:8a:d0:a3:75:05:64:9b: 29:70:4a:6c:4d:f1:80:52:b0:ef:5d:31:9f:30:47: 48:c5:d7:85:48:70:36:c8:d4:53:0d:03:c4:22:a4: 21:ea:a6:5f:50:e0:21:65:4b:be:0e:d5:32:0f:13: 92:4c:b6:b6:52:38:c9:d3:87:3d:13:6b:50:74:12: c7:c1:83:31:6c:ae:1a:09:9e:6a:9a:bf:69:ec:e0: be:d5:19:8a:7f:a8:f5:c2:18:99:35:8b:9b:ce:fd: 2f:cb:69:3c:a8:09:00:8b:c1:13:74:ac:07:eb:e9: 0e:80:ae:0b:c7:e9:11:fe:f8:be:92:4d:3e:38:7c: 99:9a:69:d6:8d:41:b5:10:27:16:a6:c5:5a:0e:fe: 7a:a5:ae:00:69:ac:26:90:87:2d:b5:16:5e:ba:5a: 7a:c7:33:88:ad:07:27:ff:e4:85:4a:f3:23:ff:5a: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:27:D0:0F:E8:30:A1:FC:66:7D:39:CB:96:69:8F:46:AB:43:80:FE X509v3 Authority Key Identifier: keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:35:c5:f3:51:23:16:83:15:89:05:63:be:98:b0:f4:9b:ab: 95:fc:9f:08:48:58:33:19:c5:76:2a:fd:7d:4e:2a:23:1d:81: 4b:1d:79:64:eb:73:d0:d0:bd:c4:43:1b:50:95:af:e5:45:ad: d8:5b:4a:c6:f0:06:6b:de:0c:e2:71:2c:c8:b4:7c:7a:d7:b8: d8:0a:44:11:01:82:a0:ef:3b:b3:cd:83:12:d3:76:90:40:fd: 3c:3e:d7:70:8e:88:69:66:ce:ea:08:1e:b3:67:63:82:54:8d: 02:dd:21:12:68:63:8a:30:13:b5:0d:a2:12:2d:ab:fd:9e:a9: fc:7a:2b:e4:c5:5b:a4:af:35:b6:2a:3d:d8:dc:b6:18:fb:6f: d2:40:d0:fb:48:3c:bc:d6:79:15:83:09:99:1f:d0:b3:af:37: 0a:d9:02:cf:3c:7c:81:aa:65:1e:00:4e:ce:be:ce:0d:b7:26: 2f:90:7a:0e:93:48:32:dc:fd:e7:0b:90:74:7d:c2:40:94:a5: 84:ad:6e:97:46:4e:b8:64:c2:37:67:b5:95:86:8f:33:c7:48: 81:72:6f:0c:c1:64:57:cc:8d:3e:e1:b6:aa:1f:05:bd:a9:17: f2:a3:75:b7:d0:1a:15:c9:2c:04:6f:22:28:aa:57:b7:ed:12: ec:f7:bd:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUNBOTExMC8GA1UEBRMoNTVERDZDMUJGMUM0NDdERjNDQzg2NDBEMTExMkE5NkFD QUUxRjgwQzAeFw0yNTEwMTkxMDUzMTJaFw0yNTEwMjYxMDUzMTJaMBgxFjAUBgNV BAMTDTY4ZjRjMzE4LWMyZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBtiS3D5DLawuhUtADOrRLlYqP4ArWl2XuC8vhOWlTJ0b8km20b1SiX8XDC6LM M7U8Mj+NIBDHmZeDBg+RubUyD1mqOIM4b/fCwopMm+ahe5gritCjdQVkmylwSmxN 8YBSsO9dMZ8wR0jF14VIcDbI1FMNA8QipCHqpl9Q4CFlS74O1TIPE5JMtrZSOMnT hz0Ta1B0EsfBgzFsrhoJnmqav2ns4L7VGYp/qPXCGJk1i5vO/S/LaTyoCQCLwRN0 rAfr6Q6ArgvH6RH++L6STT44fJmaadaNQbUQJxamxVoO/nqlrgBprCaQhy21Fl66 WnrHM4itByf/5IVK8yP/WiT9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhSfQD+gw ofxmfTnLlmmPRqtDgP4wHwYDVR0jBBgwFoAUVd1sG/HER988yGQNERKpasrh+Aww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1Q0E5Lzk2RDYxMUQwNEIw QTExRjBBQjU0MjAxRUM0RjlBRTAyL1ZkMXNHX0hFUjk4OHlHUU5FUktwYXNyaC1B dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVmQxc0dfSEVSOTg4eUdRTkVSS3Bhc3JoLUF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 Q0E5Lzk2RDYxMUQwNEIwQTExRjBBQjU0MjAxRUM0RjlBRTAyL1ZkMXNHX0hFUjk4 OHlHUU5FUktwYXNyaC1Bdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAw1xfNRIxaDFYkFY76YsPSbq5X8nwhIWDMZxXYq/X1OKiMdgUsdeWTr c9DQvcRDG1CVr+VFrdhbSsbwBmveDOJxLMi0fHrXuNgKRBEBgqDvO7PNgxLTdpBA /Tw+13COiGlmzuoIHrNnY4JUjQLdIRJoY4owE7UNohItq/2eqfx6K+TFW6SvNbYq Pdjcthj7b9JA0PtIPLzWeRWDCZkf0LOvNwrZAs88fIGqZR4ATs6+zg23Ji+Qeg6T SDLc/ecLkHR9wkCUpYStbpdGTrhkwjdntZWGjzPHSIFybwzBZFfMjT7htqofBb2p F/KjdbfQGhXJLARvIiiqV7ftEuz3vYQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:50 2025 by rpki-client