$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: l0hf7YjdAJJw+rKPjjqSU34lX1vvZgTFCNU+zm5G+6U= Subject key identifier: 2B:01:67:DA:74:2D:5D:3A:C5:E4:78:8D:E0:50:82:40:FB:F6:A5:71 Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 0343 Signing time: Sun 19 Oct 2025 04:31:11 +0000 Manifest this update: Sun 19 Oct 2025 04:31:10 +0000 Manifest next update: Sun 26 Oct 2025 04:31:10 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: rSYa+Wpr33n06h85F8n+eu1BwoUoE4Iocy6GRSFZ+v8=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: Ds7R3+sBBZEG01JWJaEnAvs9QgVWz9hGRIlkayRqHKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: Oct 19 04:31:10 2025 GMT Not After : Oct 26 04:31:10 2025 GMT Subject: CN=68f4698f-386c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:e3:0f:03:ce:81:22:33:be:eb:b1:17:b2: c9:55:3e:78:d6:c3:36:eb:66:d8:b7:e8:de:4b:e9: c2:33:7c:8d:66:35:d8:69:a1:7e:e0:97:b6:74:23: 95:38:ea:39:dd:a3:57:8c:1c:54:ab:f9:69:cb:d7: cb:16:14:68:d8:f6:59:13:f5:69:6a:25:8d:a7:c8: e4:19:6b:36:37:6f:d5:1f:71:e6:a0:85:57:a9:33: 8e:e1:14:53:e4:7f:7c:0e:4f:8b:db:24:b2:ee:14: 98:55:50:c9:54:32:b5:1c:70:49:62:dc:4d:b0:79: 8b:e6:d4:fd:67:60:20:22:54:c4:61:2b:ce:d2:62: 91:9b:79:12:5d:5c:1d:5e:5c:06:6e:46:b6:98:f1: c9:da:dc:d2:46:2a:c5:4b:b1:f6:d2:b0:8b:df:0d: b3:34:2c:86:8d:d9:b2:62:c6:70:8e:d1:ad:16:31: da:f8:b2:d9:c0:f3:41:e2:c6:7b:ae:9a:ed:de:de: f6:54:9d:98:ad:cc:c6:71:f3:0b:58:8a:2b:3b:f9: 0e:24:8d:c9:86:68:30:43:ec:7b:d7:03:de:fc:60: 39:4c:cd:d9:49:f1:01:9f:ea:2a:8f:99:70:53:f7: f8:51:dd:bf:83:51:15:f0:3c:fb:ab:e1:fe:4e:72: cd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:01:67:DA:74:2D:5D:3A:C5:E4:78:8D:E0:50:82:40:FB:F6:A5:71 X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:8b:5a:e4:30:95:53:fd:96:7b:5f:f0:01:75:c5:e5:6f:c2: 9a:e5:d4:e1:10:b7:a8:cf:8e:64:81:06:25:1d:86:a3:3f:2d: 1a:40:70:af:30:ce:d2:8d:38:03:cb:58:e5:74:ab:f9:f6:20: 69:a8:53:cc:d4:e4:fc:eb:d0:33:01:e3:a3:dd:02:5f:a7:67: 86:e0:f7:64:52:0a:a7:43:18:87:d5:ad:5a:2a:99:f0:c5:44: 96:13:00:31:cc:50:89:b9:1a:e2:e2:e1:d8:e0:cb:7d:85:c8: 5c:c7:19:5b:eb:e3:a9:71:85:35:65:89:0b:cb:36:ab:f4:34: dd:23:c0:06:9f:e0:bd:30:02:b9:ed:73:e6:7b:e9:3b:1b:7f: cc:57:e0:f7:e7:4f:4a:51:a9:6b:74:31:39:27:9a:54:9e:0b: 4c:20:3c:ef:b8:b2:30:dd:2b:6a:ae:61:b9:68:82:40:1d:1b: 19:f2:93:f9:4c:7c:62:0d:7d:1a:8a:de:20:e7:06:87:7d:17: 83:e7:63:0f:68:89:3e:89:3c:ef:4b:38:85:83:88:46:77:c3: 80:4f:97:1f:26:b8:04:86:87:a7:58:82:39:a6:cd:cf:02:9b: 9b:c3:93:ff:d2:16:8e:50:a1:25:74:f1:91:3a:30:f7:eb:e1: 7d:16:e9:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjUxMDE5MDQzMTEwWhcNMjUxMDI2MDQzMTEwWjAYMRYwFAYD VQQDEw02OGY0Njk4Zi0zODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0G3jDwPOgSIzvuuxF7LJVT541sM262bYt+jeS+nCM3yNZjXYaaF+4Je2dCOV OOo53aNXjBxUq/lpy9fLFhRo2PZZE/VpaiWNp8jkGWs2N2/VH3HmoIVXqTOO4RRT 5H98Dk+L2ySy7hSYVVDJVDK1HHBJYtxNsHmL5tT9Z2AgIlTEYSvO0mKRm3kSXVwd XlwGbka2mPHJ2tzSRirFS7H20rCL3w2zNCyGjdmyYsZwjtGtFjHa+LLZwPNB4sZ7 rprt3t72VJ2YrczGcfMLWIorO/kOJI3JhmgwQ+x71wPe/GA5TM3ZSfEBn+oqj5lw U/f4Ud2/g1EV8Dz7q+H+TnLNuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsBZ9p0 LV06xeR4jeBQgkD79qVxMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGi1rkMJVT/ZZ7X/ABdcXlb8Ka5dThELeoz45kgQYlHYajPy0aQHCv MM7SjTgDy1jldKv59iBpqFPM1OT869AzAeOj3QJfp2eG4PdkUgqnQxiH1a1aKpnw xUSWEwAxzFCJuRri4uHY4Mt9hchcxxlb6+OpcYU1ZYkLyzar9DTdI8AGn+C9MAK5 7XPme+k7G3/MV+D3509KUalrdDE5J5pUngtMIDzvuLIw3StqrmG5aIJAHRsZ8pP5 THxiDX0ait4g5waHfReD52MPaIk+iTzvSziFg4hGd8OAT5cfJrgEhoenWII5ps3P Apubw5P/0haOUKEldPGROjD36+F9Funb -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:59 2025 by rpki-client