$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: 9lREYrLPRZBW6kgbnPiTUY4qjkM6mUCpCOZcBDZhivY= Subject key identifier: 5F:9B:A1:14:94:A5:68:48:DD:35:57:2D:2C:85:D4:F3:E5:85:F7:6B Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0FA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0F96 Signing time: Sat 18 Oct 2025 18:07:52 +0000 Manifest this update: Sat 18 Oct 2025 18:07:51 +0000 Manifest next update: Sat 25 Oct 2025 18:07:51 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: ypq4Kn8Lu+g7ev1TeACCE6BF5hL9bU/Q+tScbrMsMFM=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4001 (0xfa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Oct 18 18:07:51 2025 GMT Not After : Oct 25 18:07:51 2025 GMT Subject: CN=68f3d777-b177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:53:af:f5:e9:b8:b2:37:9d:3c:d9:c0:1e: f4:55:c7:66:f7:7d:ca:ec:d8:fe:e1:18:9f:c6:9d: 05:1f:a4:5c:f3:bc:63:1a:82:94:17:41:ed:f1:73: 25:c5:dd:3f:03:19:43:41:37:06:7f:f1:cc:45:20: f6:9a:3d:82:67:e7:2e:1d:24:bc:f9:b9:f2:56:04: 8f:3e:64:a9:1c:0e:6f:ad:28:b0:9f:d0:9f:37:e2: 3a:3d:26:c9:6e:8a:39:0d:fd:c3:2c:37:aa:d9:a4: 3e:1a:37:e8:dc:a5:a3:7f:22:25:13:ac:ac:ca:09: a9:6f:72:4d:17:cc:1d:86:1a:a3:f8:6d:53:23:22: 66:25:b9:7b:2f:b4:2a:74:69:0b:27:77:12:c4:04: f3:d1:87:3c:5d:e3:bc:4c:02:fa:56:15:ed:e0:9a: 7b:9c:98:ae:5f:60:12:0b:4c:10:b9:a1:d8:f1:34: 50:b6:18:41:c5:2d:dc:d3:a2:71:7f:8e:82:76:46: a1:4e:88:ff:19:f9:0f:a9:83:3a:0d:a8:8c:af:76: c5:c5:82:a1:4c:f0:e9:61:37:d2:20:95:17:de:d0: ef:03:5b:59:8c:5c:b2:0f:4b:0a:a1:25:18:ec:d5: 64:8c:1b:5b:11:fb:d0:5d:f1:e0:55:b7:80:56:20: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9B:A1:14:94:A5:68:48:DD:35:57:2D:2C:85:D4:F3:E5:85:F7:6B X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e3:12:3b:9d:18:e2:7f:6a:a9:88:f9:db:56:be:aa:3c:a7: af:de:9c:13:28:93:7d:21:31:a1:ca:c3:4d:4b:ef:65:43:54: 98:88:09:49:f4:41:9d:e0:e5:37:4e:ab:fb:66:8b:33:c2:67: 97:99:c5:2b:38:aa:22:53:0d:a5:ae:75:14:15:98:6a:a9:93: f3:6b:9e:d3:3b:2e:7f:94:b7:c0:de:70:1e:ea:cc:51:cf:53: 12:f0:db:74:10:7e:af:93:ba:12:0d:45:b3:5c:60:9b:79:1f: 33:3e:58:34:59:99:63:60:b2:ea:20:78:08:aa:9a:63:ea:de: e2:5a:bb:91:9e:f6:91:b8:56:ae:a3:dd:71:2a:5a:fb:e3:5b: c9:ba:55:17:d7:b4:04:bf:10:88:63:75:92:67:32:89:9e:72: 3f:33:73:ad:a9:f8:b8:c7:6e:7e:2f:61:05:18:5a:8a:a1:12: e2:46:da:ea:5c:d1:65:cb:b4:05:b1:e2:db:81:07:76:c6:b8: 8f:91:53:66:f4:e0:07:ef:9a:32:1c:6e:c8:15:b3:39:a2:e2: 17:24:81:bb:40:8b:d0:37:f3:4d:09:f2:d1:2f:1d:1b:ab:2b: a3:63:89:d1:61:1f:b1:f9:aa:88:86:e4:d9:d7:f7:83:71:f7: 7b:f9:6d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUxMDE4MTgwNzUxWhcNMjUxMDI1MTgwNzUxWjAYMRYwFAYD VQQDEw02OGYzZDc3Ny1iMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS1Tr/XpuLI3nTzZwB70Vcdm933K7Nj+4Rifxp0FH6Rc87xjGoKUF0Ht8XMl xd0/AxlDQTcGf/HMRSD2mj2CZ+cuHSS8+bnyVgSPPmSpHA5vrSiwn9CfN+I6PSbJ boo5Df3DLDeq2aQ+Gjfo3KWjfyIlE6ysygmpb3JNF8wdhhqj+G1TIyJmJbl7L7Qq dGkLJ3cSxATz0Yc8XeO8TAL6VhXt4Jp7nJiuX2ASC0wQuaHY8TRQthhBxS3c06Jx f46CdkahToj/GfkPqYM6DaiMr3bFxYKhTPDpYTfSIJUX3tDvA1tZjFyyD0sKoSUY 7NVkjBtbEfvQXfHgVbeAViDrFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+boRSU pWhI3TVXLSyF1PPlhfdrMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC04xI7nRjif2qpiPnbVr6qPKev3pwTKJN9ITGhysNNS+9lQ1SYiAlJ 9EGd4OU3Tqv7ZoszwmeXmcUrOKoiUw2lrnUUFZhqqZPza57TOy5/lLfA3nAe6sxR z1MS8Nt0EH6vk7oSDUWzXGCbeR8zPlg0WZljYLLqIHgIqppj6t7iWruRnvaRuFau o91xKlr741vJulUX17QEvxCIY3WSZzKJnnI/M3Otqfi4x25+L2EFGFqKoRLiRtrq XNFly7QFseLbgQd2xriPkVNm9OAH75oyHG7IFbM5ouIXJIG7QIvQN/NNCfLRLx0b qyujY4nRYR+x+aqIhuTZ1/eDcfd7+W0F -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:13 2025 by rpki-client