$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: gN+DyMN5vftjkvmvh4EnnxDbk3l/gqa2hNIwaCv5PZM= Subject key identifier: E7:B5:43:46:33:88:96:15:46:D3:7B:B2:8F:2C:AE:3C:51:A7:07:06 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 019C Signing time: Sun 19 Oct 2025 06:12:58 +0000 Manifest this update: Sun 19 Oct 2025 06:12:58 +0000 Manifest next update: Sun 26 Oct 2025 06:12:58 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: pxOHCEmqrV7YUCMWm8HkyJso1ouwHywX6ixBXqgZPhI=) 2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: x42cPOY42/ihAcwEOhbusv08pDLFkf2E5Qjxerl5aIk=) 3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: LAC2JzlZ9Cqk3BSRvYxm4bLahu0/0Fv8k3EO+q7V5PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Oct 19 06:12:58 2025 GMT Not After : Oct 26 06:12:58 2025 GMT Subject: CN=68f4816a-aa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:94:5c:c1:06:db:99:08:50:53:4b:67:c2: aa:f6:f1:49:76:f1:22:b0:c5:cc:bc:3f:62:f4:5a: a5:d1:ad:9b:72:6a:a4:29:d5:5c:31:59:77:9e:0d: 26:36:6f:df:a0:36:50:20:9f:76:fd:c3:2c:57:dd: 81:d3:6f:06:79:c8:12:6f:b8:95:19:7d:7d:3e:ca: 09:52:e4:5c:fe:b2:54:da:e2:ba:65:b6:f7:e2:66: b4:f6:9d:fc:b6:68:46:c3:76:b3:ee:0c:d8:1f:33: 52:66:59:c5:fb:4d:85:19:a3:c8:32:bb:f0:81:d4: 53:25:a4:ad:68:8f:45:b2:e9:1c:1c:8b:8e:c1:98: 8f:eb:98:28:2c:4d:07:a6:9c:f4:17:98:90:a5:a7: 77:98:26:ae:0b:6f:95:ee:af:84:cb:93:97:3a:0d: 36:24:9f:0b:86:d5:3a:b0:4f:4b:8d:73:8b:f6:44: cf:33:ff:3f:66:a9:2e:14:c7:61:bf:03:9c:14:79: 18:75:ec:d9:1b:95:f5:23:f6:68:20:b4:93:76:01: cb:85:c1:4a:a2:27:16:4e:b1:e2:06:77:4f:1f:04: b9:bd:19:e6:e3:ba:3e:ef:15:8e:4e:83:0e:b3:db: 07:3b:fe:8f:d1:4b:bb:a0:c2:79:e7:6c:7c:51:30: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B5:43:46:33:88:96:15:46:D3:7B:B2:8F:2C:AE:3C:51:A7:07:06 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:98:4e:a0:d2:0b:a5:8f:95:15:9a:47:12:4b:f7:82:94:b9: fa:23:67:30:e3:13:d1:fd:8e:2f:ab:f7:30:4b:f0:86:4d:eb: 83:40:6a:8e:6d:61:3d:c6:16:8f:4e:89:e1:c8:e4:dc:88:b4: ba:e1:6b:ae:b6:54:52:c2:f7:d9:a3:7d:3a:cc:88:5b:7d:f6: 41:1d:9b:04:82:20:86:1f:c6:b9:25:56:68:53:0c:40:40:fd: 66:c0:b6:f7:7d:a2:16:f6:99:92:d1:a3:99:4d:21:53:2b:34: 33:2f:7a:11:06:40:30:da:13:8e:c9:47:2b:7e:27:40:81:d0: f1:a7:60:ca:a0:fb:04:c9:69:2f:40:94:db:b7:8c:7b:e8:65: ac:74:04:90:1b:26:c6:b8:5f:68:91:c1:3b:bb:c4:de:e9:8e: 1e:18:70:8b:2c:f5:5f:30:02:e0:0b:b9:ba:0a:de:00:32:4f: ec:cf:36:77:7c:79:d2:ff:42:c0:35:a4:1e:98:d1:cd:38:ee: 3c:32:33:ad:af:84:d4:6e:ae:23:a2:78:5e:25:78:8d:d4:6a: 1b:a2:4e:2c:77:d9:74:e5:a1:e2:ac:f8:f2:e3:70:cf:21:83: 4d:ac:c1:87:7f:8a:d5:93:9e:e3:3a:18:1f:6e:72:96:4b:3a: af:0e:4c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjUxMDE5MDYxMjU4WhcNMjUxMDI2MDYxMjU4WjAYMRYwFAYD VQQDEw02OGY0ODE2YS1hYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGOUXMEG25kIUFNLZ8Kq9vFJdvEisMXMvD9i9Fql0a2bcmqkKdVcMVl3ng0m Nm/foDZQIJ92/cMsV92B028GecgSb7iVGX19PsoJUuRc/rJU2uK6Zbb34ma09p38 tmhGw3az7gzYHzNSZlnF+02FGaPIMrvwgdRTJaStaI9FsukcHIuOwZiP65goLE0H ppz0F5iQpad3mCauC2+V7q+Ey5OXOg02JJ8LhtU6sE9LjXOL9kTPM/8/ZqkuFMdh vwOcFHkYdezZG5X1I/ZoILSTdgHLhcFKoicWTrHiBndPHwS5vRnm47o+7xWOToMO s9sHO/6P0Uu7oMJ552x8UTCltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe1Q0Yz iJYVRtN7so8srjxRpwcGMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjmE6g0gulj5UVmkcSS/eClLn6I2cw4xPR/Y4vq/cwS/CGTeuDQGqO bWE9xhaPTonhyOTciLS64WuutlRSwvfZo306zIhbffZBHZsEgiCGH8a5JVZoUwxA QP1mwLb3faIW9pmS0aOZTSFTKzQzL3oRBkAw2hOOyUcrfidAgdDxp2DKoPsEyWkv QJTbt4x76GWsdASQGybGuF9okcE7u8Te6Y4eGHCLLPVfMALgC7m6Ct4AMk/szzZ3 fHnS/0LANaQemNHNOO48MjOtr4TUbq4jonheJXiN1Gobok4sd9l05aHirPjy43DP IYNNrMGHf4rVk57jOhgfbnKWSzqvDkxG -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:41 2025 by rpki-client