$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json) Hash identifier: ng3cjX0AEMrWXe8Hc6Wtj/y9pQEDRfX00ZxPfhbh+rg= Subject key identifier: 5A:EA:F4:61:63:55:9A:57:D0:C6:7C:AD:22:2E:C1:87:25:85:76:93 Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft Manifest number: 0185 Signing time: Sun 19 Oct 2025 06:15:42 +0000 Manifest this update: Sun 19 Oct 2025 06:15:42 +0000 Manifest next update: Sun 26 Oct 2025 06:15:42 +0000 Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: v17MItjdrmcAWOeYAf7QCooCJNIJ+aifkHmaJhnPkKU=) 2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: y4oU/tmfDIcfKqPlw3m/SWCw2QZiYO8Vo2XRM+uGFBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Validity Not Before: Oct 19 06:15:42 2025 GMT Not After : Oct 26 06:15:42 2025 GMT Subject: CN=68f4820e-070b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:1d:75:e1:ad:29:f5:10:13:9a:c6:62:fe: 2e:b0:30:19:2f:75:c8:c0:bc:5e:31:df:1a:4b:47: 7d:b6:29:49:20:f6:43:de:c5:9e:33:f7:25:65:82: 5d:8a:0f:07:be:95:7d:c6:35:37:f1:23:11:a0:fb: 42:d8:86:42:6f:56:0c:89:f0:e4:a4:42:1a:3e:36: ae:cd:37:99:98:90:66:82:26:f9:cb:6d:4f:94:be: b5:dd:98:1f:20:ca:29:b8:fd:4f:7e:fd:ba:1d:fa: 72:db:5e:7f:64:45:2c:6e:6a:cd:d5:b5:9d:00:9d: 00:a9:e4:22:d0:b3:9a:2f:5f:87:b0:79:cc:27:00: 15:e4:21:2e:79:e0:87:1c:20:f0:db:6f:3d:17:e3: 26:ad:39:d4:12:6c:fa:df:0d:4c:81:c2:d4:c8:57: 26:a8:eb:d7:ba:70:ec:28:4d:65:f1:1e:75:82:bb: ab:f9:a0:cd:af:52:af:5b:83:9f:b5:ff:c1:b7:38: f5:f4:e0:04:00:5a:2d:55:4c:f7:be:89:23:00:37: ec:e8:63:51:11:39:2a:f6:06:27:83:76:15:01:49: f6:8a:70:11:b5:ba:72:f0:9b:9f:cd:a1:58:09:e8: 45:e8:36:0b:42:5b:e5:d9:64:c8:14:37:a7:c9:a9: 9a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EA:F4:61:63:55:9A:57:D0:C6:7C:AD:22:2E:C1:87:25:85:76:93 X509v3 Authority Key Identifier: keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8f:c5:bf:5e:01:95:ff:fa:c7:84:c7:6c:a7:47:ae:f1:32: 38:54:14:a9:d7:98:c1:36:de:22:47:55:91:46:d5:4e:86:cc: 33:6f:5e:3a:a6:74:13:4d:9b:97:0c:70:ec:1f:6c:e2:39:57: b0:20:c9:ff:ef:65:e3:c0:ee:d1:69:fe:5b:02:0c:c9:c3:1a: ab:72:08:01:94:74:64:0d:cc:8a:c3:23:93:65:57:ab:1a:aa: ff:69:b8:99:3e:17:16:50:2f:29:df:77:e0:84:37:6d:50:8e: 5d:68:e7:e6:b3:09:8f:bf:68:bb:9f:9c:90:00:46:e1:79:ed: 32:0d:95:8d:49:a0:2e:9a:34:88:f9:ed:c5:51:25:1d:6f:6e: 90:ac:67:aa:09:af:5d:ce:a2:ca:3c:2f:17:42:64:4a:6d:e8: b6:50:64:10:ba:75:b1:e1:58:9c:d6:43:38:08:d7:50:f2:f8: 07:09:99:eb:3e:07:e2:44:0f:fe:ad:27:d2:ad:98:f2:f0:6b: 84:48:20:db:f2:63:ec:dd:e1:3e:57:1d:02:f2:11:3e:e2:41: 87:73:30:76:99:f0:b2:1a:ce:5e:78:40:43:a7:41:a4:d0:e3: df:ef:48:2f:de:b9:4f:97:a1:d1:50:2c:b3:d6:59:b7:8e:c3: dc:d3:4d:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDU0NjRFNDlGNTYwRUMxMEQ0OTc2RjZFMjk2MTEzQkFG MjJBOENGNUYwHhcNMjUxMDE5MDYxNTQyWhcNMjUxMDI2MDYxNTQyWjAYMRYwFAYD VQQDEw02OGY0ODIwZS0wNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzwddeGtKfUQE5rGYv4usDAZL3XIwLxeMd8aS0d9tilJIPZD3sWeM/clZYJd ig8HvpV9xjU38SMRoPtC2IZCb1YMifDkpEIaPjauzTeZmJBmgib5y21PlL613Zgf IMopuP1Pfv26Hfpy215/ZEUsbmrN1bWdAJ0AqeQi0LOaL1+HsHnMJwAV5CEueeCH HCDw2289F+MmrTnUEmz63w1MgcLUyFcmqOvXunDsKE1l8R51grur+aDNr1KvW4Of tf/Btzj19OAEAFotVUz3vokjADfs6GNRETkq9gYng3YVAUn2inARtbpy8JufzaFY CehF6DYLQlvl2WTIFDenyamajwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrq9GFj VZpX0MZ8rSIuwYclhXaTMB8GA1UdIwQYMBaAFFRk5J9WDsENSXb24pYRO68iqM9f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy85NTUxM0JBNjVE QzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dRMUpkdmJpbGhFN3J5S296 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHVGtuMVlPd1ExSmR2YmlsaEU3cnlLb3oxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0YzQy85NTUxM0JBNjVEQzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dR MUpkdmJpbGhFN3J5S296MTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxj8W/XgGV//rHhMdsp0eu8TI4VBSp15jBNt4iR1WRRtVOhswzb146 pnQTTZuXDHDsH2ziOVewIMn/72XjwO7Raf5bAgzJwxqrcggBlHRkDcyKwyOTZVer Gqr/abiZPhcWUC8p33fghDdtUI5daOfmswmPv2i7n5yQAEbhee0yDZWNSaAumjSI +e3FUSUdb26QrGeqCa9dzqLKPC8XQmRKbei2UGQQunWx4Vic1kM4CNdQ8vgHCZnr PgfiRA/+rSfSrZjy8GuESCDb8mPs3eE+Vx0C8hE+4kGHczB2mfCyGs5eeEBDp0Gk 0OPf70gv3rlPl6HRUCyz1lm3jsPc000+ -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:26 2025 by rpki-client