$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: yFIP9i+0DVso7scvRNe063hKj6hF5KRSbCHXXU+hNWc= Subject key identifier: AF:02:D5:C1:4D:E8:E8:7A:3B:15:A2:A4:11:DE:C0:DD:A1:AE:3A:34 Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 0587 Signing time: Sun 19 Oct 2025 00:55:39 +0000 Manifest this update: Sun 19 Oct 2025 00:55:38 +0000 Manifest next update: Sun 26 Oct 2025 00:55:38 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: MLB7SbX83XxbCWlK+9kMDreNzbPVM2eLwQ8/xGCPY74=) 2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: edmH+zoE3tcqcciZuFe0JER5V1TWvNXJvKg0Me+DQ90=) 3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: amAbeNg9WhoR9LiBcCPddN+usabEY60TrC7LxRq3i34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: Oct 19 00:55:38 2025 GMT Not After : Oct 26 00:55:38 2025 GMT Subject: CN=68f4370a-9d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:0b:98:24:b5:fa:7d:c9:15:40:57:3a:68: 7a:f4:8c:7b:d4:90:e2:98:96:00:3a:72:c0:c8:5d: 62:d1:a3:3f:83:61:68:88:5d:b0:00:e1:ef:c7:9d: 8a:f6:67:64:7f:1b:39:bc:db:03:09:c6:05:98:6f: c3:96:4d:fc:b6:fa:68:c4:d0:ce:39:6a:ec:39:54: a4:87:7b:ab:d6:60:dd:a0:e2:84:c6:49:be:a5:de: 3f:7a:3c:2f:43:73:03:19:d7:02:3a:fb:93:1f:2c: 7a:68:41:cf:cf:0f:cb:e1:ee:c9:0b:32:61:6f:89: dc:ee:e1:42:06:87:73:1e:5c:5a:5b:86:03:87:6a: a9:90:1b:0c:b7:a8:39:55:ed:2e:5f:96:88:df:54: 82:b9:5b:4a:bf:80:e8:47:a0:bc:46:46:df:2c:95: 04:c8:0a:5e:bb:d4:df:10:17:e8:cf:fa:45:d0:8e: d7:2d:55:27:82:71:c7:61:ad:d9:e5:34:0c:9c:5f: 29:56:59:e1:cc:f5:67:8c:74:35:b2:7c:94:33:3a: 2d:f9:3f:35:65:c5:5b:5e:eb:d0:2b:53:0a:dd:0c: 96:33:92:35:6b:69:e4:a1:81:75:d6:bf:74:a4:8b: 26:5c:ef:42:63:99:b3:9c:7b:b1:2e:20:84:71:3c: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:02:D5:C1:4D:E8:E8:7A:3B:15:A2:A4:11:DE:C0:DD:A1:AE:3A:34 X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:06:26:1b:22:29:79:57:51:3e:1a:c4:2e:da:9d:8d:22:be: 8a:61:22:f1:19:45:fe:0f:1f:6f:73:7d:f1:c9:91:06:01:6b: 3b:60:d5:4f:db:73:16:b9:31:8a:4d:c7:e0:62:fe:67:7b:01: 1a:b1:2c:7a:d6:25:5c:8e:04:0b:39:22:75:d4:c3:0b:2e:fd: 16:22:ab:71:1d:c7:46:d4:e2:6d:e1:2c:b7:14:ac:5c:f7:81: 5a:d1:fa:9b:ec:97:4a:ff:ee:87:a3:a7:06:3b:ad:d7:c9:f7: c0:dc:7b:4b:51:96:2f:34:c3:4e:76:2d:91:b4:4f:02:c6:68: 2c:c1:19:dc:93:0e:c1:f7:98:1e:e4:f8:ed:85:03:e0:c3:ea: 03:e2:9a:79:9c:8d:a4:84:f6:e8:a6:bf:08:78:e5:df:39:c2: aa:10:c2:a2:1d:44:45:d7:18:8e:7a:81:01:26:ee:9c:e4:fb: 22:b0:4a:12:b7:ca:b2:01:55:1b:32:4f:ac:a6:bc:41:10:2a: 6b:07:be:a1:7e:fe:9b:87:6a:23:ba:bc:70:e0:68:c5:ee:e1: 53:cf:6e:78:2c:9a:b3:e8:db:89:24:2b:b2:3b:06:e4:a4:8a: b7:80:2c:7b:1a:c1:64:cb:f5:48:6c:2b:0a:0c:8e:4a:98:7e: 08:cd:49:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjUxMDE5MDA1NTM4WhcNMjUxMDI2MDA1NTM4WjAYMRYwFAYD VQQDEw02OGY0MzcwYS05ZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HULmCS1+n3JFUBXOmh69Ix71JDimJYAOnLAyF1i0aM/g2FoiF2wAOHvx52K 9mdkfxs5vNsDCcYFmG/Dlk38tvpoxNDOOWrsOVSkh3ur1mDdoOKExkm+pd4/ejwv Q3MDGdcCOvuTHyx6aEHPzw/L4e7JCzJhb4nc7uFCBodzHlxaW4YDh2qpkBsMt6g5 Ve0uX5aI31SCuVtKv4DoR6C8RkbfLJUEyApeu9TfEBfoz/pF0I7XLVUngnHHYa3Z 5TQMnF8pVlnhzPVnjHQ1snyUMzot+T81ZcVbXuvQK1MK3QyWM5I1a2nkoYF11r90 pIsmXO9CY5mznHuxLiCEcTyAnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8C1cFN 6Oh6OxWipBHewN2hrjo0MB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClBiYbIil5V1E+GsQu2p2NIr6KYSLxGUX+Dx9vc33xyZEGAWs7YNVP 23MWuTGKTcfgYv5newEasSx61iVcjgQLOSJ11MMLLv0WIqtxHcdG1OJt4Sy3FKxc 94Fa0fqb7JdK/+6Ho6cGO63XyffA3HtLUZYvNMNOdi2RtE8CxmgswRnckw7B95ge 5PjthQPgw+oD4pp5nI2khPbopr8IeOXfOcKqEMKiHURF1xiOeoEBJu6c5PsisEoS t8qyAVUbMk+sprxBECprB76hfv6bh2ojurxw4GjF7uFTz254LJqz6NuJJCuyOwbk pIq3gCx7GsFky/VIbCsKDI5KmH4IzUlY -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:02 2025 by rpki-client