$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft File: VmpvNEQKySle2KAC1QSfV0zxbIg.mft (raw, json) Hash identifier: 24Z8eIgOyvvt9Ut7WfPBOTOXlpDl835sjeN0uL8NHkA= Subject key identifier: 5A:13:4F:52:6E:DB:F8:CF:6E:BE:01:FA:01:9F:38:1C:5A:AB:04:BF Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 Certificate issuer: /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft Manifest number: 01CE Signing time: Sun 19 Oct 2025 05:23:56 +0000 Manifest this update: Sun 19 Oct 2025 05:23:56 +0000 Manifest next update: Sun 26 Oct 2025 05:23:56 +0000 Files and hashes: 1: VmpvNEQKySle2KAC1QSfV0zxbIg.crl (hash: jT+jI9/Y58yK7RffRKM4g0yCrhHgrn8HCPJNkIp0s6U=) 2: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (hash: NxTIAEmzVEkhnPtaZCQQUJAnARHilUKNCFgj1AKD+gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Validity Not Before: Oct 19 05:23:56 2025 GMT Not After : Oct 26 05:23:56 2025 GMT Subject: CN=68f475ec-d3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:51:71:a0:77:85:7a:d6:bb:a4:41:2a:df: 91:aa:04:55:55:46:28:27:90:7c:ae:0b:a5:f2:8d: 7f:ff:66:7b:a9:bf:b7:0e:0e:bb:b8:4e:e5:8a:58: d9:4a:05:13:14:ab:43:6f:b0:8a:83:45:42:ab:6c: ad:50:bb:75:76:7a:db:ce:e3:87:c3:a8:25:16:aa: 75:10:79:d6:ff:34:87:eb:d3:1a:4d:4b:59:5e:29: 96:89:0a:a2:68:d6:3e:76:b3:e1:79:fa:e6:f7:f8: 61:a3:63:64:92:58:0d:20:5d:3c:24:1d:fa:aa:bd: 08:e0:2f:54:ba:a6:1e:cf:f5:c4:a7:3e:bb:c9:1f: 79:e8:d8:21:d9:e3:31:a8:da:e8:7c:cf:d7:01:84: 73:07:48:fe:bf:8e:7e:e6:ef:7e:0e:fc:b2:24:ff: 6e:6e:c2:56:33:c9:de:a6:e8:b1:e0:9c:61:41:8f: 72:ce:7e:97:b2:a4:20:d1:e2:2c:2d:1e:e5:14:6c: 79:c2:ba:7a:4a:da:c8:fb:07:8d:a6:09:6e:5b:f5: ac:94:84:ce:95:e8:7d:59:5f:20:a3:23:40:9d:57: 7a:a3:13:cc:5a:17:66:af:94:16:15:30:87:57:57: 54:89:3c:30:32:8e:a9:0b:88:1a:68:4b:8b:95:78: f5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:13:4F:52:6E:DB:F8:CF:6E:BE:01:FA:01:9F:38:1C:5A:AB:04:BF X509v3 Authority Key Identifier: keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:51:c1:6d:02:cd:34:3d:af:e1:5f:ed:f1:1a:80:25:bd:be: 58:e3:72:bb:34:58:5c:02:9e:10:85:e8:e6:4e:f6:d2:36:06: cd:fb:f7:0d:69:13:47:70:f6:ca:06:0e:33:f7:cf:3b:79:2b: f3:88:58:31:fe:df:46:71:65:fc:00:43:b7:3e:74:3d:71:d9: 0b:8b:a5:05:a7:22:9c:9d:97:6f:91:87:3e:57:3d:6e:ce:45: f5:da:61:9b:82:2c:80:3c:d2:60:fe:26:c6:e3:98:46:b4:3e: 00:a0:03:f2:ec:64:61:cf:15:bf:86:0f:fc:07:8f:63:d5:c0: 5d:aa:d2:91:95:b4:99:4c:a2:f3:ea:2d:be:72:b9:54:51:96: 51:9d:37:9c:f1:01:53:82:9a:98:1f:e1:d7:b0:44:cd:3f:56: ec:0d:12:44:aa:a7:71:1f:a6:78:09:6e:3d:99:59:39:27:5d: 52:fa:fe:02:a7:b6:6d:92:a3:cd:8e:92:6e:92:e1:aa:74:f7: 08:06:1f:8a:50:7b:ca:44:46:f0:3d:6d:03:52:de:e1:b4:ee: 2f:a3:10:3c:4d:96:32:75:d5:37:a2:95:a0:4f:38:12:9c:9c: 7d:22:36:d0:1c:9c:4a:83:bb:36:48:90:ea:f9:84:a3:e8:63: b9:b4:d4:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NEMxMTAvBgNVBAUTKDU2NkE2RjM0NDQwQUM5Mjk1RUQ4QTAwMkQ1MDQ5RjU3 NENGMTZDODgwHhcNMjUxMDE5MDUyMzU2WhcNMjUxMDI2MDUyMzU2WjAYMRYwFAYD VQQDEw02OGY0NzVlYy1kM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXZRcaB3hXrWu6RBKt+RqgRVVUYoJ5B8rgul8o1//2Z7qb+3Dg67uE7liljZ SgUTFKtDb7CKg0VCq2ytULt1dnrbzuOHw6glFqp1EHnW/zSH69MaTUtZXimWiQqi aNY+drPhefrm9/hho2NkklgNIF08JB36qr0I4C9UuqYez/XEpz67yR956Ngh2eMx qNrofM/XAYRzB0j+v45+5u9+DvyyJP9ubsJWM8nepuix4JxhQY9yzn6XsqQg0eIs LR7lFGx5wrp6StrI+weNpgluW/WslITOleh9WV8goyNAnVd6oxPMWhdmr5QWFTCH V1dUiTwwMo6pC4gaaEuLlXj1cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoTT1Ju 2/jPbr4B+gGfOBxaqwS/MB8GA1UdIwQYMBaAFFZqbzRECskpXtigAtUEn1dM8WyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0Qy9FMUE1NDYyNkY3 OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lTbGUyS0FDMVFTZlYwenhi SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZtcHZORVFLeVNsZTJLQUMxUVNmVjB6eGJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY0Qy9FMUE1NDYyNkY3OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lT bGUyS0FDMVFTZlYwenhiSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaUcFtAs00Pa/hX+3xGoAlvb5Y43K7NFhcAp4QhejmTvbSNgbN+/cN aRNHcPbKBg4z9887eSvziFgx/t9GcWX8AEO3PnQ9cdkLi6UFpyKcnZdvkYc+Vz1u zkX12mGbgiyAPNJg/ibG45hGtD4AoAPy7GRhzxW/hg/8B49j1cBdqtKRlbSZTKLz 6i2+crlUUZZRnTec8QFTgpqYH+HXsETNP1bsDRJEqqdxH6Z4CW49mVk5J11S+v4C p7ZtkqPNjpJukuGqdPcIBh+KUHvKREbwPW0DUt7htO4voxA8TZYyddU3opWgTzgS nJx9IjbQHJxKg7s2SJDq+YSj6GO5tNRL -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:55 2025 by rpki-client