$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: 9OQ6s5EyqwDz6Ah9dS4zegbJkjlIn2d6bGOBEdiA7rE= Subject key identifier: 06:B8:9D:40:4C:AF:EB:7E:7F:4B:14:B4:94:F2:4D:83:24:C8:23:DC Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 0150 Signing time: Sun 19 Oct 2025 06:55:26 +0000 Manifest this update: Sun 19 Oct 2025 06:55:26 +0000 Manifest next update: Sun 26 Oct 2025 06:55:26 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: nkpmaEISJ905fV2O6wfCKQBCgadKcKpmquV/yDeyQck=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: Oct 19 06:55:26 2025 GMT Not After : Oct 26 06:55:26 2025 GMT Subject: CN=68f48b5e-886a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:24:b2:c9:ce:01:21:0c:9b:62:e4:e2:8a: 2e:8e:56:0c:27:ab:0f:f9:6e:e6:fe:d7:87:a9:16: 21:34:54:bd:46:82:3f:07:9f:7b:75:2d:8c:98:54: d3:df:ad:1b:7c:64:6b:b9:ab:e0:13:2e:42:ed:19: 00:4e:4d:92:42:b5:82:05:4d:fd:49:48:4d:5b:bf: 85:c8:4f:c6:99:14:51:f2:56:a0:7c:c5:95:12:dd: b6:2d:df:f6:38:d5:6d:eb:17:ec:52:1a:f4:cd:77: 80:a7:24:a5:7f:f5:dc:a1:d4:3a:51:33:78:7e:c5: 4e:15:a9:0e:57:8b:eb:1c:5c:26:da:14:1a:4e:b9: 6c:95:01:db:0f:81:0f:32:04:9c:ac:65:42:25:e0: 74:10:1e:3e:31:1a:5f:42:be:a0:b3:91:ac:a0:34: 11:f2:4d:82:bf:f0:96:e4:b7:f8:ad:f6:60:ec:47: 46:ef:58:36:b9:57:6c:c9:f1:67:60:83:d7:87:da: 9a:a3:27:13:b0:33:4c:79:f4:fe:b1:c6:7d:af:a4: 28:52:57:a4:ef:dc:66:42:58:83:30:2c:9e:c4:7e: 2e:50:9a:ae:61:de:9f:ab:b6:5c:4c:a0:ff:78:99: 64:96:98:a7:e3:ce:5a:84:b2:76:1f:9a:5d:42:61: 0d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B8:9D:40:4C:AF:EB:7E:7F:4B:14:B4:94:F2:4D:83:24:C8:23:DC X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d6:f1:31:c1:f2:5e:70:a6:02:f2:9a:66:3f:be:d0:92:10: 43:ca:18:77:a7:70:16:c8:bc:6e:cd:06:7d:f1:a3:ee:a9:6d: 2d:64:46:03:04:e2:b7:d8:aa:48:35:fb:4d:45:2a:ec:01:cf: d8:90:1b:cd:6e:f1:a5:90:ce:8a:1b:43:1e:d0:25:d5:56:ef: 0a:be:58:32:c3:18:7e:92:f0:75:0a:3e:77:3d:88:12:c5:1b: 11:a1:11:2b:9f:3c:ec:c0:ca:7a:2c:a5:89:84:2b:b0:a5:d1: a7:a5:89:25:a6:20:53:f1:6b:78:58:b5:d0:e7:0e:ab:a6:d4: a5:27:cc:a0:92:d2:25:08:63:13:67:09:b1:44:25:8d:6f:1d: a6:24:94:5a:23:ee:96:b8:da:93:ec:28:c3:91:95:37:69:67: 6c:c6:0f:38:fc:25:ed:ec:49:3d:4c:9c:ad:ea:76:50:d5:2e: 93:fe:af:02:ce:a0:d2:ee:dd:ce:e3:30:df:84:64:78:08:95: 28:1c:cc:05:d9:5a:94:e5:71:a6:40:1b:b7:94:67:20:79:cb: 45:13:e7:91:1e:fa:2d:e9:64:5f:22:8f:c0:35:ca:cb:26:b5: 3b:50:e5:5e:88:76:5d:8d:9a:14:47:89:40:91:7e:ff:f2:3a: 66:a2:9f:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUxMDE5MDY1NTI2WhcNMjUxMDI2MDY1NTI2WjAYMRYwFAYD VQQDEw02OGY0OGI1ZS04ODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/YkssnOASEMm2Lk4ooujlYMJ6sP+W7m/teHqRYhNFS9RoI/B597dS2MmFTT 360bfGRruavgEy5C7RkATk2SQrWCBU39SUhNW7+FyE/GmRRR8lagfMWVEt22Ld/2 ONVt6xfsUhr0zXeApySlf/XcodQ6UTN4fsVOFakOV4vrHFwm2hQaTrlslQHbD4EP MgScrGVCJeB0EB4+MRpfQr6gs5GsoDQR8k2Cv/CW5Lf4rfZg7EdG71g2uVdsyfFn YIPXh9qaoycTsDNMefT+scZ9r6QoUlek79xmQliDMCyexH4uUJquYd6fq7ZcTKD/ eJlklpin485ahLJ2H5pdQmENoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa4nUBM r+t+f0sUtJTyTYMkyCPcMB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd1vExwfJecKYC8ppmP77QkhBDyhh3p3AWyLxuzQZ98aPuqW0tZEYD BOK32KpINftNRSrsAc/YkBvNbvGlkM6KG0Me0CXVVu8Kvlgywxh+kvB1Cj53PYgS xRsRoRErnzzswMp6LKWJhCuwpdGnpYklpiBT8Wt4WLXQ5w6rptSlJ8ygktIlCGMT ZwmxRCWNbx2mJJRaI+6WuNqT7CjDkZU3aWdsxg84/CXt7Ek9TJyt6nZQ1S6T/q8C zqDS7t3O4zDfhGR4CJUoHMwF2VqU5XGmQBu3lGcgectFE+eRHvot6WRfIo/ANcrL JrU7UOVeiHZdjZoUR4lAkX7/8jpmop9t -----END CERTIFICATE-----Generated at Mon Oct 20 16:46:41 2025 by rpki-client