$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: gVU6m6TeCKVsmFEUEEowhtnxoOYECg2/2EsPzmj8mCU= Subject key identifier: 91:CF:9E:6D:82:09:F9:C0:8D:95:90:37:24:3A:24:56:EA:79:C9:74 Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 83 Signing time: Sun 19 Oct 2025 10:02:55 +0000 Manifest this update: Sun 19 Oct 2025 10:02:54 +0000 Manifest next update: Sun 26 Oct 2025 10:02:54 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: ZSa29nnSIJkUtK9mv4u39vQCo882NlsG+FpRfSxC9Qo=) 2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: WTYmLvNpyq/A5Kbra5mtKRBFCjY1e4fS3rGmshvrNGY=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: d1zImNClufU6mQa0qsoJOx/6gPAzww6pSPXhwifVLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Oct 19 10:02:54 2025 GMT Not After : Oct 26 10:02:54 2025 GMT Subject: CN=68f4b74e-5733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:2a:91:62:22:60:c7:46:88:94:27:d1:01: 51:ae:14:f5:52:fe:0d:fc:7a:35:5f:2d:06:6b:c6: 50:76:65:fd:4e:b9:cc:98:73:db:d7:14:23:ff:6b: 93:ec:b0:f2:37:d7:3d:61:2a:ed:85:0c:b1:1b:02: 42:44:c3:6d:6e:35:34:7b:ad:b6:e3:de:4f:5f:e0: ac:81:76:0d:c6:ba:f6:9f:e3:5e:b8:e0:6d:5b:34: 5c:d9:53:be:ff:20:59:7f:50:77:04:bf:79:65:9e: 56:91:dd:6b:33:08:d6:90:f9:fc:b6:85:96:4a:6c: 4e:fd:73:8d:d1:de:8b:2c:62:bb:bb:b2:dc:bf:4e: d6:9b:30:2a:6c:6b:bc:79:3c:09:b7:03:05:d9:fc: 35:72:f1:0d:e2:84:8b:35:5d:40:ce:9b:ea:cb:44: 4b:3e:25:b5:dc:30:bb:1d:3f:77:29:64:ed:b1:f4: 93:52:25:f2:8e:cc:0f:ed:8e:dd:c6:b4:73:38:23: d6:b7:71:4a:78:8a:af:e6:1a:7e:b3:ff:18:4a:47: ca:60:70:e2:b4:0d:1b:63:2c:ca:2f:2b:bc:4b:ea: 53:1e:c4:18:06:bd:0a:a9:0a:3d:31:61:74:2d:f9: 3b:46:56:cc:30:ce:06:bd:4b:33:c6:60:db:18:b0: cf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CF:9E:6D:82:09:F9:C0:8D:95:90:37:24:3A:24:56:EA:79:C9:74 X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:54:50:10:a0:a9:5f:70:31:ae:e2:e4:93:ae:ed:94:bb:e0: 6c:00:b3:7d:44:43:aa:24:bb:52:4f:e0:6b:47:0b:88:7a:dc: 94:11:ca:ef:0d:4d:41:8b:5a:e0:85:3d:b6:50:05:af:1b:b7: 50:ed:5a:77:3a:c8:67:1a:2a:32:a1:22:65:50:a4:92:bb:7d: 00:7b:c5:bc:a4:a4:ff:aa:90:06:66:93:63:fd:6d:c4:b6:2c: ca:dc:b6:ae:dc:61:32:39:e2:51:0b:8d:cd:26:a6:1b:50:0d: ea:9b:6d:5e:b4:e3:e0:c1:20:9a:3a:e7:9e:67:07:b9:0e:5a: 39:43:2a:5d:25:a5:29:07:2c:5f:c9:0f:26:9f:e6:db:fd:a9: f7:e1:39:b9:4a:e2:f4:9e:b2:78:d7:09:c0:c0:00:c4:6e:27: 6d:c0:e1:0a:a1:b4:38:83:91:95:b8:ed:06:9a:91:91:69:c4: 72:c4:4b:9b:c5:9b:a5:a9:64:0f:dc:7e:cc:6f:e0:d2:d8:0d: 05:da:5d:99:45:03:71:62:5a:9f:1f:b3:db:e2:31:5a:75:48: 96:52:7e:7a:90:02:e0:b7:e6:34:b8:d5:d4:a7:58:c1:a1:c5: 05:67:77:ac:99:1b:d3:df:73:8d:cb:ce:f2:23:2c:f4:3f:97: 67:8a:a6:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDQ0NkZBRjkyM0JFQkFGOTYzNTcyODdGRTI1MDk5MUM3 NTQ5MTQ1NEQwHhcNMjUxMDE5MTAwMjU0WhcNMjUxMDI2MTAwMjU0WjAYMRYwFAYD VQQDEw02OGY0Yjc0ZS01NzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8cqkWIiYMdGiJQn0QFRrhT1Uv4N/Ho1Xy0Ga8ZQdmX9TrnMmHPb1xQj/2uT 7LDyN9c9YSrthQyxGwJCRMNtbjU0e622495PX+CsgXYNxrr2n+NeuOBtWzRc2VO+ /yBZf1B3BL95ZZ5Wkd1rMwjWkPn8toWWSmxO/XON0d6LLGK7u7Lcv07WmzAqbGu8 eTwJtwMF2fw1cvEN4oSLNV1Azpvqy0RLPiW13DC7HT93KWTtsfSTUiXyjswP7Y7d xrRzOCPWt3FKeIqv5hp+s/8YSkfKYHDitA0bYyzKLyu8S+pTHsQYBr0KqQo9MWF0 Lfk7RlbMMM4GvUszxmDbGLDP9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHPnm2C CfnAjZWQNyQ6JFbqecl0MB8GA1UdIwQYMBaAFERvr5I766+WNXKH/iUJkcdUkUVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy8zQUZDMzNFMkVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1WTFjb2YtSlFtUngxU1JS VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy8zQUZDMzNFMkVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1 WTFjb2YtSlFtUngxU1JSVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSVFAQoKlfcDGu4uSTru2Uu+BsALN9REOqJLtST+BrRwuIetyUEcrv DU1Bi1rghT22UAWvG7dQ7Vp3OshnGioyoSJlUKSSu30Ae8W8pKT/qpAGZpNj/W3E tizK3Lau3GEyOeJRC43NJqYbUA3qm21etOPgwSCaOueeZwe5Dlo5QypdJaUpByxf yQ8mn+bb/an34Tm5SuL0nrJ41wnAwADEbidtwOEKobQ4g5GVuO0GmpGRacRyxEub xZulqWQP3H7Mb+DS2A0F2l2ZRQNxYlqfH7Pb4jFadUiWUn56kALgt+Y0uNXUp1jB ocUFZ3esmRvT33ONy87yIyz0P5dniqZq -----END CERTIFICATE-----Generated at Tue Oct 21 10:43:22 2025 by rpki-client