$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft File: VU9dfGbsUOhKiru6mWgXfkcp02Y.mft (raw, json) Hash identifier: orSSbWFCTQcbbKGyb4gE3nf1uODGi45q6VsxvwDfNls= Subject key identifier: C0:CA:8D:4B:83:9C:AD:42:AB:E0:0E:CE:1A:84:FD:F8:8D:96:7D:F2 Authority key identifier: 55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66 Certificate issuer: /CN=A91E8BE3/serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft Manifest number: 9D Signing time: Sun 19 Oct 2025 09:35:10 +0000 Manifest this update: Sun 19 Oct 2025 09:35:09 +0000 Manifest next update: Sun 26 Oct 2025 09:35:09 +0000 Files and hashes: 1: VU9dfGbsUOhKiru6mWgXfkcp02Y.crl (hash: 9dgSV6suLuxoy51WHnHHtmiTBlo+DTUUcbpZ3dbCfT8=) 2: 0AC098846EDA11F08D404571C4F9AE02.roa (hash: XUaCHo7ISEfVt8zg4dz4qiHM8RTC6XTgDTg25gi/BRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BE3, serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366 Validity Not Before: Oct 19 09:35:09 2025 GMT Not After : Oct 26 09:35:09 2025 GMT Subject: CN=68f4b0ce-028f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:55:31:c2:9b:88:12:84:3e:98:96:83:30:2f: 8d:47:3a:6a:da:9f:81:ea:1b:7b:01:c8:35:9e:e5: 57:e7:13:b7:8c:95:52:90:9a:a5:f4:37:cf:1a:a6: 83:69:5c:47:dc:4c:14:f2:12:db:92:03:3d:6f:7b: 95:71:44:db:27:02:f5:54:5d:7f:62:ec:70:71:b5: 29:9c:ec:49:8b:48:7e:da:eb:3e:dd:65:d9:6c:db: 63:c8:f4:d3:d9:d1:75:96:2d:ef:21:b9:c5:41:5e: 36:f4:11:c5:b2:17:32:ad:d3:dc:21:7a:9a:54:d2: 7e:88:23:a3:0b:cb:f1:ea:ad:43:81:43:2c:27:58: 19:25:44:2e:44:54:04:3c:9e:b6:14:84:69:e8:4b: e2:cd:83:18:12:d5:41:98:88:87:2c:ff:c8:8d:9a: 60:5b:d9:02:f7:ab:e5:75:f6:7a:d0:43:c0:51:94: 38:e9:6c:9f:a7:c0:31:34:c2:5e:da:52:e0:2d:af: 5d:90:a7:93:6c:9d:ae:84:f3:ca:01:3a:6d:9d:60: 0f:55:c5:84:09:d7:d1:dc:fa:6d:96:dd:f8:ac:70: 1b:49:da:83:1d:50:d5:46:4d:1c:a8:88:00:92:1a: 0a:5f:1c:64:9d:4b:dd:61:b4:e2:de:d1:33:3d:06: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CA:8D:4B:83:9C:AD:42:AB:E0:0E:CE:1A:84:FD:F8:8D:96:7D:F2 X509v3 Authority Key Identifier: keyid:55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e2:88:f9:74:4a:2a:c2:ad:10:e3:d7:ef:5f:2c:b2:69:cd: 12:b0:ae:63:12:a4:3c:d9:b7:a9:e2:2c:08:11:d4:bb:95:fa: 20:e4:47:dd:ff:56:ab:e0:18:a4:62:43:ed:dd:17:0f:8a:6c: 0c:77:a9:3e:2a:34:7a:1c:67:0b:1b:91:ef:e4:a8:46:ca:7e: ee:dc:13:2a:b3:53:79:98:8c:55:09:91:d9:42:1b:c9:c7:83: 98:82:51:b5:06:89:5f:af:12:bf:a4:c8:ca:e6:78:99:f5:42: f2:92:1f:e3:9c:05:f6:f8:d4:d7:db:5a:ef:30:29:43:c5:09: 29:70:e2:87:54:10:e4:b3:0d:d3:d6:92:97:17:de:e0:fd:9c: 08:43:02:05:4b:f3:82:a3:0e:10:47:9f:da:e9:93:ff:60:5f: a1:db:b3:21:db:a3:a2:f0:4e:c9:55:19:70:2e:3c:84:87:72: 54:46:33:c2:32:0a:73:46:2f:62:f6:d2:ee:b4:bf:65:73:63: 03:dc:f9:a6:48:cd:1a:f3:6e:1e:a6:85:e9:b0:87:c9:83:80: 7b:8d:7e:4d:4f:8f:f0:01:65:7a:92:e0:e5:62:93:79:02:65: 36:fa:05:8e:53:c7:7c:6b:6e:00:1d:18:c6:36:4a:4a:a7:2e: c9:70:6c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCRTMxMTAvBgNVBAUTKDU1NEY1RDdDNjZFQzUwRTg0QThBQkJCQTk5NjgxNzdF NDcyOUQzNjYwHhcNMjUxMDE5MDkzNTA5WhcNMjUxMDI2MDkzNTA5WjAYMRYwFAYD VQQDEw02OGY0YjBjZS0wMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lUxwpuIEoQ+mJaDMC+NRzpq2p+B6ht7Acg1nuVX5xO3jJVSkJql9DfPGqaD aVxH3EwU8hLbkgM9b3uVcUTbJwL1VF1/YuxwcbUpnOxJi0h+2us+3WXZbNtjyPTT 2dF1li3vIbnFQV429BHFshcyrdPcIXqaVNJ+iCOjC8vx6q1DgUMsJ1gZJUQuRFQE PJ62FIRp6EvizYMYEtVBmIiHLP/IjZpgW9kC96vldfZ60EPAUZQ46Wyfp8AxNMJe 2lLgLa9dkKeTbJ2uhPPKATptnWAPVcWECdfR3Pptlt34rHAbSdqDHVDVRk0cqIgA khoKXxxknUvdYbTi3tEzPQZN4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDKjUuD nK1Cq+AOzhqE/fiNln3yMB8GA1UdIwQYMBaAFFVPXXxm7FDoSoq7uploF35HKdNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FRUVGN0ZFQUJG OUMxMUVGOURBODgyODJDNEY5QUUwMi9WVTlkZkdic1VPaEtpcnU2bVdnWGZrY3Aw MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZVOWRmR2JzVU9oS2lydTZtV2dYZmtjcDAyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJFMy9FRUVGN0ZFQUJGOUMxMUVGOURBODgyODJDNEY5QUUwMi9WVTlkZkdic1VP aEtpcnU2bVdnWGZrY3AwMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB54oj5dEoqwq0Q49fvXyyyac0SsK5jEqQ82bep4iwIEdS7lfog5Efd /1ar4BikYkPt3RcPimwMd6k+KjR6HGcLG5Hv5KhGyn7u3BMqs1N5mIxVCZHZQhvJ x4OYglG1BolfrxK/pMjK5niZ9ULykh/jnAX2+NTX21rvMClDxQkpcOKHVBDksw3T 1pKXF97g/ZwIQwIFS/OCow4QR5/a6ZP/YF+h27Mh26Oi8E7JVRlwLjyEh3JURjPC MgpzRi9i9tLutL9lc2MD3PmmSM0a824epoXpsIfJg4B7jX5NT4/wAWV6kuDlYpN5 AmU2+gWOU8d8a24AHRjGNkpKpy7JcGz9 -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:47 2025 by rpki-client