$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: MGXn7ldXzKrKCx1Cl9l9iCor0YKFmueuAosBQqhaTuo= Subject key identifier: 9C:F3:E5:59:97:76:FD:5E:D9:7D:2A:CA:89:31:06:4D:B6:1C:F5:56 Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 03A4 Signing time: Sun 19 Oct 2025 02:49:22 +0000 Manifest this update: Sun 19 Oct 2025 02:49:21 +0000 Manifest next update: Sun 26 Oct 2025 02:49:21 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: zEwj0zZ8kPrCd7T82IlmCNonMmDloc0XhT9ka3QagXY=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=) 4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Oct 19 02:49:21 2025 GMT Not After : Oct 26 02:49:21 2025 GMT Subject: CN=68f451b1-3104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:ff:db:70:76:5e:32:a4:0c:c3:d4:b7:7f: 8a:79:c6:60:ec:2a:c9:82:d4:e3:1b:c8:f8:94:b4: 68:50:f5:36:42:60:d3:7e:14:e3:d2:f4:fa:b6:e1: a2:21:7c:24:0e:8c:74:70:0b:27:d6:9f:2f:62:08: 18:f0:a5:c8:43:fb:37:94:71:cc:51:ee:37:d0:18: 15:0a:90:56:a4:0c:e6:af:6d:47:c9:0a:7c:d4:ed: dd:bd:18:03:34:0b:06:5a:6c:c2:2a:72:57:0d:29: 61:d5:45:6d:8b:74:58:1f:e0:76:3d:35:76:ba:12: 57:1c:be:bc:16:e8:75:2c:ed:78:83:3a:ed:95:0d: f1:e3:5e:73:2f:28:39:e3:f8:e7:63:97:89:d4:77: 5f:81:65:ab:6f:9b:d7:c3:b5:f7:48:59:fe:99:08: d9:e9:11:b2:64:c9:67:fa:75:65:1d:3e:35:ee:2a: da:cb:03:b8:0d:5a:61:b9:30:07:17:73:f9:53:c9: c2:f7:a0:ed:67:af:f6:ad:35:16:b4:57:f7:d9:d8: e2:6a:dc:e3:a2:45:e4:f7:c2:fd:39:f8:2a:86:71: cb:ca:6d:6f:a0:56:eb:cb:62:09:3c:b2:5c:65:a7: e2:ed:45:08:a4:8c:61:1a:0f:72:7b:dd:d0:b5:3a: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F3:E5:59:97:76:FD:5E:D9:7D:2A:CA:89:31:06:4D:B6:1C:F5:56 X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:db:df:db:37:51:aa:ed:f0:95:62:89:78:4e:0e:7d:31:a4: 04:25:e4:04:0b:3d:9c:ce:d7:91:02:76:45:5e:9d:48:4e:7c: 16:bc:7a:cb:09:a7:26:8f:05:80:ea:53:9a:13:59:b1:3d:d9: a3:00:6f:db:05:07:de:6b:cb:3b:4a:7b:58:0a:fe:47:ec:42: 11:20:ee:79:c6:89:59:d2:c0:77:96:2a:ca:a6:0f:ad:78:f4: fd:8b:4c:08:2d:cf:1a:d2:9c:f3:82:a7:ee:04:5a:e0:2b:91: 03:4e:74:75:d0:97:7e:c3:02:03:26:aa:ad:2f:c1:64:9a:08: f3:9b:f6:28:11:dd:dd:d2:12:88:fe:7b:04:5f:49:85:91:4e: ba:4d:4d:07:d7:9f:fa:17:e0:87:48:65:51:0a:33:98:88:78: 73:af:3b:ea:72:d0:95:5c:b7:a4:b5:ea:cd:65:cc:b2:a8:d0: ca:fe:bf:ed:d8:2d:5b:10:c5:67:86:c4:09:6c:72:ba:51:a4: 3a:f3:09:02:e4:42:3e:91:49:e2:22:86:53:50:ab:0b:60:7a: 8e:e5:3f:bd:92:19:6a:83:69:72:79:f3:47:8a:55:c6:96:0c: ac:5e:4b:9f:d2:c5:a3:f0:ca:96:c8:a6:94:f0:a7:04:8d:0f: 1b:e0:d3:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjUxMDE5MDI0OTIxWhcNMjUxMDI2MDI0OTIxWjAYMRYwFAYD VQQDEw02OGY0NTFiMS0zMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsun/23B2XjKkDMPUt3+KecZg7CrJgtTjG8j4lLRoUPU2QmDTfhTj0vT6tuGi IXwkDox0cAsn1p8vYggY8KXIQ/s3lHHMUe430BgVCpBWpAzmr21HyQp81O3dvRgD NAsGWmzCKnJXDSlh1UVti3RYH+B2PTV2uhJXHL68Fuh1LO14gzrtlQ3x415zLyg5 4/jnY5eJ1HdfgWWrb5vXw7X3SFn+mQjZ6RGyZMln+nVlHT417iraywO4DVphuTAH F3P5U8nC96DtZ6/2rTUWtFf32djiatzjokXk98L9OfgqhnHLym1voFbry2IJPLJc Zafi7UUIpIxhGg9ye93QtTprwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzz5VmX dv1e2X0qyokxBk22HPVWMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl29/bN1Gq7fCVYol4Tg59MaQEJeQECz2czteRAnZFXp1ITnwWvHrL CacmjwWA6lOaE1mxPdmjAG/bBQfea8s7SntYCv5H7EIRIO55xolZ0sB3lirKpg+t ePT9i0wILc8a0pzzgqfuBFrgK5EDTnR10Jd+wwIDJqqtL8Fkmgjzm/YoEd3d0hKI /nsEX0mFkU66TU0H15/6F+CHSGVRCjOYiHhzrzvqctCVXLekterNZcyyqNDK/r/t 2C1bEMVnhsQJbHK6UaQ68wkC5EI+kUniIoZTUKsLYHqO5T+9khlqg2lyefNHilXG lgysXkuf0sWj8MqWyKaU8KcEjQ8b4NOe -----END CERTIFICATE-----Generated at Mon Oct 20 07:54:45 2025 by rpki-client