$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: 0UEcmKzNG9kc2IxYnxGzpXyDc0+VDtW0EeuEmXDpvck= Subject key identifier: 82:FF:58:72:5E:D4:B9:D9:34:86:EF:4D:49:08:5F:12:F0:9C:DB:C4 Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 016F Signing time: Sun 19 Oct 2025 06:31:32 +0000 Manifest this update: Sun 19 Oct 2025 06:31:32 +0000 Manifest next update: Sun 26 Oct 2025 06:31:32 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: +0weqjwOSC14kjCQOyUjNhhudxyrGOJVnJ2XXzrxr+w=) 2: 453686A272BA11F09A607433C4F9AE02.roa (hash: q2MSp4Q8sWvUE8k/uBLa7fJOiAjxmo9DC7/S2PYD4Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: Oct 19 06:31:32 2025 GMT Not After : Oct 26 06:31:32 2025 GMT Subject: CN=68f485c4-43f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:f0:fb:4c:5d:f5:94:cc:b9:da:e9:e8:bd: 6e:80:72:ec:68:45:67:9d:fd:23:da:a8:dc:b9:4b: 14:d0:bd:7d:ca:3f:cb:fa:b6:89:3c:27:7b:07:61: 8d:40:7e:f9:57:d2:bd:1b:a4:c6:54:53:44:8a:92: 99:1c:19:53:ee:c6:34:b7:62:cc:e2:9e:31:ca:4a: 7b:ec:33:99:87:96:65:56:29:f8:95:53:f6:d3:a2: 36:fe:46:2f:2e:98:e9:20:54:05:38:8f:8b:c1:52: cf:6f:a9:e7:4e:a5:92:83:56:49:76:a1:58:9f:7f: 0f:e4:12:ef:ea:ff:ec:a5:85:99:72:9b:ee:85:0b: ad:b4:31:47:80:37:f2:b5:c5:a7:04:0d:ec:4e:25: 1b:c6:ac:e2:01:94:81:c4:4f:fc:c2:6f:89:30:32: b7:29:c2:2f:e6:c2:aa:49:74:2d:7f:2b:bb:a7:2e: f0:da:1d:5e:83:8d:7b:d5:6d:7a:14:3e:92:80:b6: 7b:02:7b:1f:bf:f8:06:55:ce:8c:14:1b:b1:0b:6c: 6f:fa:bf:04:88:ed:0b:dd:4b:b8:b1:d8:3c:7d:c2: 77:6c:aa:00:09:c3:e7:31:d0:ad:6a:03:44:65:23: 47:e5:aa:33:5f:b9:1c:62:fd:53:df:51:c5:36:0d: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:58:72:5E:D4:B9:D9:34:86:EF:4D:49:08:5F:12:F0:9C:DB:C4 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:50:2e:a2:2c:0a:0b:87:4e:cb:75:bc:78:e4:e2:e0:b8:86: 5d:06:99:60:9f:1c:9f:5a:8d:fc:27:f4:f4:3c:26:db:81:83: fb:91:7f:cb:ff:e6:39:19:d3:05:f2:2f:f9:a7:02:e9:39:76: de:4c:71:c4:60:26:bb:b3:b6:33:9b:8e:6f:93:08:cd:2c:69: 98:f1:09:71:bc:7a:04:84:b1:9e:5c:d9:52:5d:19:c2:47:c4: 9f:b7:98:8d:40:2d:2d:b2:01:8c:94:d3:90:c3:6d:24:f6:e4: 79:be:79:36:cc:25:77:39:14:0c:12:bc:44:f5:56:ac:14:89: d5:81:33:68:7e:67:df:04:37:bd:9d:55:e3:88:c0:eb:1b:26: c4:b8:d5:88:cf:54:71:16:3c:82:0c:60:a1:33:1f:2b:b6:ca: d5:4e:1d:e1:74:99:d0:dd:35:c1:66:19:ff:27:06:c4:8e:35: 30:5f:7a:38:54:47:c0:aa:e0:d4:e1:95:cc:29:f9:fc:2f:cc: ff:ec:a2:b9:9e:f9:5d:c7:7f:7d:e8:34:03:8b:47:72:f4:73: 77:3e:83:25:cb:5d:f4:02:8f:a4:f6:03:64:a4:62:63:b8:c0: e3:a9:c8:4c:5d:bd:80:35:dc:97:b0:47:e6:31:07:b7:1d:58: 5a:47:bc:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUxMDE5MDYzMTMyWhcNMjUxMDI2MDYzMTMyWjAYMRYwFAYD VQQDEw02OGY0ODVjNC00M2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzzw+0xd9ZTMudrp6L1ugHLsaEVnnf0j2qjcuUsU0L19yj/L+raJPCd7B2GN QH75V9K9G6TGVFNEipKZHBlT7sY0t2LM4p4xykp77DOZh5ZlVin4lVP206I2/kYv LpjpIFQFOI+LwVLPb6nnTqWSg1ZJdqFYn38P5BLv6v/spYWZcpvuhQuttDFHgDfy tcWnBA3sTiUbxqziAZSBxE/8wm+JMDK3KcIv5sKqSXQtfyu7py7w2h1eg4171W16 FD6SgLZ7Ansfv/gGVc6MFBuxC2xv+r8EiO0L3Uu4sdg8fcJ3bKoACcPnMdCtagNE ZSNH5aozX7kcYv1T31HFNg2G9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL/WHJe 1LnZNIbvTUkIXxLwnNvEMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw elpyMWJOa2NXSHd1OEc2VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgUC6iLAoLh07Ldbx45OLguIZdBplgnxyfWo38J/T0PCbbgYP7kX/L /+Y5GdMF8i/5pwLpOXbeTHHEYCa7s7Yzm45vkwjNLGmY8QlxvHoEhLGeXNlSXRnC R8Sft5iNQC0tsgGMlNOQw20k9uR5vnk2zCV3ORQMErxE9VasFInVgTNofmffBDe9 nVXjiMDrGybEuNWIz1RxFjyCDGChMx8rtsrVTh3hdJnQ3TXBZhn/JwbEjjUwX3o4 VEfAquDU4ZXMKfn8L8z/7KK5nvldx3996DQDi0dy9HN3PoMly130Ao+k9gNkpGJj uMDjqchMXb2ANdyXsEfmMQe3HVhaR7zR -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:24 2025 by rpki-client