$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft File: Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json) Hash identifier: bqcWpQOY5Sq2CBjp3lgCCzChvvVGJS4DJNjtBzBEE00= Subject key identifier: 28:23:DA:34:0C:42:72:77:15:FC:EB:13:2D:8F:BE:94:91:48:2A:00 Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Certificate serial: 06FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft Manifest number: 06F4 Signing time: Sat 18 Oct 2025 23:23:31 +0000 Manifest this update: Sat 18 Oct 2025 23:23:30 +0000 Manifest next update: Sat 25 Oct 2025 23:23:30 +0000 Files and hashes: 1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: tyqsDtKjxiEk0Qc2/Bvcw3Bm967n5d9GgMiFTZoIxHA=) 2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: vDTtnYK0urRCnkWdVJaHunlHhYBCBiIEuZyHl4rL/x4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659 Validity Not Before: Oct 18 23:23:30 2025 GMT Not After : Oct 25 23:23:30 2025 GMT Subject: CN=68f42173-a75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:72:4b:d4:67:fa:70:3a:60:59:fe:91:e1: e6:c7:d1:80:db:33:49:9a:ee:51:20:6c:75:97:0c: 14:54:c5:65:93:d8:f2:89:e7:b0:f1:53:71:e5:3a: a9:07:b4:14:99:0e:ad:56:1f:a7:ab:5f:44:ef:96: fc:c2:ab:78:ee:5e:9f:34:21:48:5e:73:5c:b0:f3: 7d:58:bd:31:21:3b:b2:52:60:d1:67:7a:4b:d5:52: 97:13:b2:7d:6b:2a:ff:75:2a:a4:13:aa:a4:50:0f: 08:64:ae:16:48:d0:59:2c:33:ce:c6:4f:97:fe:c3: c1:29:6f:22:9e:b3:50:a4:fb:ab:3a:fc:f8:13:18: 2f:c2:0b:ef:13:90:6a:f4:a6:78:d3:c6:4b:b0:56: 67:e6:32:69:ac:6c:92:4f:09:35:b8:ca:53:90:2a: 63:64:92:b7:16:ec:51:89:a0:24:c0:6d:00:4f:0b: ac:c5:10:6d:45:b5:c5:cd:ba:ad:7d:c3:d3:56:0c: 96:d5:0a:86:36:82:02:fe:c2:9b:35:60:2a:14:2b: ff:c4:11:aa:7d:8e:f9:23:5e:73:da:60:29:35:ce: a8:f0:ce:19:a9:0b:f9:31:43:c0:c1:23:58:98:84: 85:e8:19:af:af:fe:00:32:d6:a6:5d:bb:c9:95:e8: 8b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:23:DA:34:0C:42:72:77:15:FC:EB:13:2D:8F:BE:94:91:48:2A:00 X509v3 Authority Key Identifier: keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fd:b5:b5:f6:6a:3d:80:f2:c3:54:79:0f:20:3a:8e:4d:99: d9:d6:67:1a:5c:b8:ff:70:c0:90:32:fd:86:1a:6f:fe:63:b9: 50:6b:fc:2d:6e:08:d9:3b:17:99:8f:58:f0:b4:68:af:a2:34: 79:27:95:71:ab:d0:86:cc:be:4a:41:9b:5d:44:f0:b8:3a:17: 56:a2:f7:47:57:75:10:10:ec:58:b9:52:b7:0f:7b:2c:e0:18: cb:82:51:38:82:df:ce:e5:6e:b4:3b:db:f9:e5:da:63:93:fa: c8:3d:4a:b2:f2:be:37:13:9b:b3:90:19:9a:ce:4f:e8:ba:c9: 1c:94:0f:4a:f2:21:f1:8d:60:b2:e2:d1:69:0e:50:b0:28:f5: 98:34:af:00:ed:42:84:bd:2a:bf:86:16:ce:b0:46:2d:47:bb: a6:5f:f5:72:c0:66:38:24:cf:d9:b2:d2:2f:0a:e3:40:29:28: da:0a:c6:d9:0b:d7:1a:f1:c7:63:22:9a:01:57:5b:d2:2c:7b: ed:d5:85:dc:fc:07:83:7b:14:fd:0a:63:6d:c7:91:64:e7:46: f5:54:15:1a:90:31:bb:cc:07:90:5a:ee:12:3d:19:3b:a0:8f: 64:f3:2f:e9:8b:f2:ec:57:bb:e9:3b:84:b9:63:c8:dd:ff:1d: e4:09:8a:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy ODY2QkU2NTkwHhcNMjUxMDE4MjMyMzMwWhcNMjUxMDI1MjMyMzMwWjAYMRYwFAYD VQQDEw02OGY0MjE3My1hNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApc1yS9Rn+nA6YFn+keHmx9GA2zNJmu5RIGx1lwwUVMVlk9jyieew8VNx5Tqp B7QUmQ6tVh+nq19E75b8wqt47l6fNCFIXnNcsPN9WL0xITuyUmDRZ3pL1VKXE7J9 ayr/dSqkE6qkUA8IZK4WSNBZLDPOxk+X/sPBKW8inrNQpPurOvz4ExgvwgvvE5Bq 9KZ408ZLsFZn5jJprGySTwk1uMpTkCpjZJK3FuxRiaAkwG0ATwusxRBtRbXFzbqt fcPTVgyW1QqGNoIC/sKbNWAqFCv/xBGqfY75I15z2mApNc6o8M4ZqQv5MUPAwSNY mISF6Bmvr/4AMtamXbvJleiLUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgj2jQM QnJ3FfzrEy2PvpSRSCoAMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1 MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo/bW19mo9gPLDVHkPIDqOTZnZ1mcaXLj/cMCQMv2GGm/+Y7lQa/wt bgjZOxeZj1jwtGivojR5J5Vxq9CGzL5KQZtdRPC4OhdWovdHV3UQEOxYuVK3D3ss 4BjLglE4gt/O5W60O9v55dpjk/rIPUqy8r43E5uzkBmazk/ouskclA9K8iHxjWCy 4tFpDlCwKPWYNK8A7UKEvSq/hhbOsEYtR7umX/VywGY4JM/ZstIvCuNAKSjaCsbZ C9ca8cdjIpoBV1vSLHvt1YXc/AeDexT9CmNtx5Fk50b1VBUakDG7zAeQWu4SPRk7 oI9k8y/pi/LsV7vpO4S5Y8jd/x3kCYra -----END CERTIFICATE-----Generated at Tue Oct 21 02:09:21 2025 by rpki-client