$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: aoar5gZjyo4iHpmpHDb/mzxr/48RouVpo6aTQqkklRc= Subject key identifier: FD:44:D0:82:9A:ED:E1:D5:82:3C:0D:C0:77:40:EF:01:E1:2E:5B:26 Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 06D8 Signing time: Sat 18 Oct 2025 23:27:17 +0000 Manifest this update: Sat 18 Oct 2025 23:27:17 +0000 Manifest next update: Sat 25 Oct 2025 23:27:17 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: xBm3hFYcE6hHerQV44i6eSSV/SzvmfgptHSbWcjcIcs=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: Oct 18 23:27:17 2025 GMT Not After : Oct 25 23:27:17 2025 GMT Subject: CN=68f42255-1026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:be:e8:41:90:a6:94:d7:ce:8e:ec:68:c0: 79:60:f8:1a:32:09:da:03:c3:c3:22:f9:0d:a5:8d: bc:43:4e:00:c5:2b:58:0b:f1:51:ff:ba:93:cb:2e: 10:7b:70:6a:6b:fc:f6:26:c6:f9:57:be:10:15:68: 8a:ea:5c:22:e3:34:9f:bc:c5:76:63:6a:d5:74:6c: e1:8d:16:53:65:7c:c3:ef:18:b2:f4:20:6f:e9:67: 99:3c:97:16:97:0a:cd:6d:c4:f8:98:07:02:1c:77: 32:90:be:0d:cc:70:4e:0f:0f:87:6e:39:ce:64:60: a0:78:85:b4:d6:1b:82:84:3b:31:06:21:88:57:e6: ef:0b:e5:fd:50:5c:65:8c:31:a1:fd:0e:6b:28:4e: e6:30:82:49:6e:a0:44:cf:8f:44:dc:06:45:ec:84: ed:e6:92:cd:c2:d2:4b:8c:39:8f:6a:7c:6a:e8:d6: 2f:7d:f0:d1:4d:27:56:ed:ff:6c:6a:25:73:23:6b: 1d:e5:88:19:a8:c8:b8:05:3d:45:8d:12:3e:3e:aa: 01:b1:ed:2c:b8:14:cf:24:db:51:2a:97:52:a8:7e: 1f:2e:58:7d:da:da:3c:60:16:dc:32:0f:e0:05:84: b4:b8:82:2a:d4:d6:c8:6a:c6:bb:ab:64:72:0b:0d: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:44:D0:82:9A:ED:E1:D5:82:3C:0D:C0:77:40:EF:01:E1:2E:5B:26 X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3b:15:7f:de:8d:65:91:d1:00:ec:e8:17:f1:d4:20:ee:22: 5a:cf:65:ad:fb:9a:5b:83:8b:e0:c4:10:6a:3e:61:d9:b9:37: bf:1a:4a:93:83:28:b5:63:5a:2e:01:de:5e:b1:54:95:96:93: 7c:d5:32:67:ed:32:9f:5d:6a:d3:ab:f6:de:69:84:e9:90:f1: 6d:5a:e0:1c:61:35:b8:9b:13:3b:e2:59:4b:3c:e6:cd:da:8b: c9:77:ef:f6:db:55:ce:f7:53:8a:f3:5c:da:83:02:9f:64:29: 94:ee:e3:aa:c3:ee:32:bc:a2:6c:e6:16:b3:44:b9:ca:fe:b2: cc:eb:ef:d2:d1:7e:be:41:68:13:73:9d:e9:ef:37:5c:f4:f3: 9d:6d:86:e1:db:63:9f:07:58:f4:45:ca:17:1e:25:65:c2:ed: d9:59:96:8e:d8:ce:e8:26:27:51:89:20:5a:0b:37:28:94:b1: 31:8e:c9:08:6b:39:c2:39:c6:31:6b:5e:c0:b9:09:72:aa:ef: d3:74:0b:28:98:c7:e2:da:11:61:80:a4:a3:28:aa:aa:61:8c: ee:24:eb:bd:d0:48:bd:0e:ff:af:34:d7:67:5c:3b:b1:e8:58: e3:e2:07:e3:8e:29:90:6a:ab:f6:e1:09:37:41:9d:5f:e8:05: 59:bb:9e:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjUxMDE4MjMyNzE3WhcNMjUxMDI1MjMyNzE3WjAYMRYwFAYD VQQDEw02OGY0MjI1NS0xMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8K+6EGQppTXzo7saMB5YPgaMgnaA8PDIvkNpY28Q04AxStYC/FR/7qTyy4Q e3Bqa/z2Jsb5V74QFWiK6lwi4zSfvMV2Y2rVdGzhjRZTZXzD7xiy9CBv6WeZPJcW lwrNbcT4mAcCHHcykL4NzHBODw+HbjnOZGCgeIW01huChDsxBiGIV+bvC+X9UFxl jDGh/Q5rKE7mMIJJbqBEz49E3AZF7ITt5pLNwtJLjDmPanxq6NYvffDRTSdW7f9s aiVzI2sd5YgZqMi4BT1FjRI+PqoBse0suBTPJNtRKpdSqH4fLlh92to8YBbcMg/g BYS0uIIq1NbIasa7q2RyCw0z7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1E0IKa 7eHVgjwNwHdA7wHhLlsmMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsOxV/3o1lkdEA7OgX8dQg7iJaz2Wt+5pbg4vgxBBqPmHZuTe/GkqT gyi1Y1ouAd5esVSVlpN81TJn7TKfXWrTq/beaYTpkPFtWuAcYTW4mxM74llLPObN 2ovJd+/221XO91OK81zagwKfZCmU7uOqw+4yvKJs5hazRLnK/rLM6+/S0X6+QWgT c53p7zdc9POdbYbh22OfB1j0RcoXHiVlwu3ZWZaO2M7oJidRiSBaCzcolLExjskI aznCOcYxa17AuQlyqu/TdAsomMfi2hFhgKSjKKqqYYzuJOu90Ei9Dv+vNNdnXDux 6Fjj4gfjjimQaqv24Qk3QZ1f6AVZu55J -----END CERTIFICATE-----Generated at Mon Oct 20 16:06:28 2025 by rpki-client