$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: QH4pkihG5WdQYO4K7ag7UgzNb+7cBODjPuoKLiUO5YQ= Subject key identifier: 4A:41:F3:5F:3F:BF:32:04:A4:83:3C:73:6C:05:7C:BD:FB:71:B6:C8 Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 039A Signing time: Sun 19 Oct 2025 02:45:17 +0000 Manifest this update: Sun 19 Oct 2025 02:45:16 +0000 Manifest next update: Sun 26 Oct 2025 02:45:16 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: hKLnv0HJiGLci+B/gyD3uMzYRVYYkM4SmtiO2hjE/m4=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: Oct 19 02:45:16 2025 GMT Not After : Oct 26 02:45:16 2025 GMT Subject: CN=68f450bd-7e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:bc:04:20:da:77:7c:b7:f2:6f:92:8f:54: 3e:35:f9:44:26:39:ac:a4:2c:2b:6a:fd:8b:4c:c4: c0:83:08:fe:6e:9a:ba:aa:82:2c:54:01:4a:85:16: 85:5e:ed:5d:a3:b9:9a:62:f8:8d:2d:bb:f3:fe:ec: 5c:be:fa:92:3d:ed:d1:16:08:72:8c:f4:e6:bc:ab: ce:01:9f:bb:bc:e6:d4:bc:84:ea:60:20:f2:40:8d: 34:06:bf:2e:90:03:2f:e9:ad:34:9f:7b:48:08:2c: 34:50:12:67:59:27:db:3c:e9:b7:1d:68:00:6d:79: e2:d3:59:a2:a5:eb:62:98:f5:fb:91:54:68:48:cd: bb:57:5c:64:94:16:d3:1b:94:3d:72:78:e3:20:7d: 77:5e:91:b6:b6:c1:2b:0a:b6:fc:22:a2:34:cd:29: 90:00:d7:67:14:35:e0:3a:97:7a:65:b4:63:69:4d: 24:ea:ff:91:52:54:e3:fc:29:b3:d6:d2:42:5d:51: fd:70:b6:d9:3e:70:e4:7f:2a:7c:57:4a:b5:0c:7f: 30:7e:4a:41:ff:0e:80:d3:39:ce:65:e4:99:29:dc: 23:d2:cd:f2:fb:3a:61:a3:54:0d:83:f7:1e:c1:0d: d2:8e:33:95:0e:29:a7:58:be:07:ed:d7:43:ad:df: 08:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:41:F3:5F:3F:BF:32:04:A4:83:3C:73:6C:05:7C:BD:FB:71:B6:C8 X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:d2:f5:76:4c:bf:2f:25:7f:20:9e:de:69:7f:42:6e:8b:44: ea:96:ec:1a:f9:52:15:d4:91:d3:55:38:fd:e9:23:22:99:24: 96:38:a4:95:81:cc:d0:2e:5c:0d:b9:18:ed:f9:7e:e1:f6:04: a6:4b:c2:3f:f2:6a:94:8e:43:5b:90:02:b1:f1:b2:9c:9b:00: 15:de:e6:3a:b3:91:44:a6:8f:9d:e1:3a:9a:d0:fd:12:fe:96: 2d:79:1d:c8:59:6c:96:1c:30:2d:29:87:52:ab:92:1c:36:b1: e8:a5:92:44:cb:3c:d3:c9:22:66:91:86:77:c4:2f:5c:73:1c: a6:85:6f:9e:c4:c7:73:08:6d:09:0d:e6:b4:ba:e0:da:e8:2e: 50:e3:62:eb:40:99:00:9d:4d:94:0c:75:d4:91:dc:7e:b5:b4: a1:a5:c7:84:34:55:04:58:80:93:52:80:c2:a8:a5:91:73:42: ad:48:40:44:b9:bc:d6:a8:77:9d:52:55:be:25:9f:3e:d6:34: 2a:42:e7:5c:6f:59:a6:77:8b:9b:3f:4b:0e:7a:33:c1:a3:e1: c8:df:33:68:ff:47:35:ad:46:f4:b4:02:9d:9d:62:89:49:95: 86:55:88:93:df:87:7d:75:e1:d1:48:80:d3:63:03:2b:d8:fe: 9d:bd:07:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjUxMDE5MDI0NTE2WhcNMjUxMDI2MDI0NTE2WjAYMRYwFAYD VQQDEw02OGY0NTBiZC03ZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ne8BCDad3y38m+Sj1Q+NflEJjmspCwrav2LTMTAgwj+bpq6qoIsVAFKhRaF Xu1do7maYviNLbvz/uxcvvqSPe3RFghyjPTmvKvOAZ+7vObUvITqYCDyQI00Br8u kAMv6a00n3tICCw0UBJnWSfbPOm3HWgAbXni01mipetimPX7kVRoSM27V1xklBbT G5Q9cnjjIH13XpG2tsErCrb8IqI0zSmQANdnFDXgOpd6ZbRjaU0k6v+RUlTj/Cmz 1tJCXVH9cLbZPnDkfyp8V0q1DH8wfkpB/w6A0znOZeSZKdwj0s3y+zpho1QNg/ce wQ3SjjOVDimnWL4H7ddDrd8I+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpB818/ vzIEpIM8c2wFfL37cbbIMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA30vV2TL8vJX8gnt5pf0Jui0Tqluwa+VIV1JHTVTj96SMimSSWOKSV gczQLlwNuRjt+X7h9gSmS8I/8mqUjkNbkAKx8bKcmwAV3uY6s5FEpo+d4Tqa0P0S /pYteR3IWWyWHDAtKYdSq5IcNrHopZJEyzzTySJmkYZ3xC9ccxymhW+exMdzCG0J Dea0uuDa6C5Q42LrQJkAnU2UDHXUkdx+tbShpceENFUEWICTUoDCqKWRc0KtSEBE ubzWqHedUlW+JZ8+1jQqQudcb1mmd4ubP0sOejPBo+HI3zNo/0c1rUb0tAKdnWKJ SZWGVYiT34d9deHRSIDTYwMr2P6dvQel -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:41 2025 by rpki-client