$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft File: UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json) Hash identifier: t6JgMwQ1pGs7KmDbQsBjQHC0quGwob3VKv++K0/IeSQ= Subject key identifier: 63:03:77:2F:7D:8B:5D:FF:0F:28:5F:F5:3A:47:7C:DD:77:63:DE:E9 Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft Manifest number: 43 Signing time: Tue 07 Oct 2025 07:43:27 +0000 Manifest this update: Tue 07 Oct 2025 07:43:27 +0000 Manifest next update: Tue 14 Oct 2025 07:43:27 +0000 Files and hashes: 1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: +Pu18968TVLVp7QGgaIVdYFfJ3yJ5o+acLgq78BRu+Y=) 2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: WcSNu1HK0gGCU7aORSHhSulUdwLctmKgMDS1dq0RYbQ=) 3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: pgsw/lIIAC86SHOBUAFVHyyezuLYZcEiwQh3Fbl1fpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 07:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Validity Not Before: Oct 7 07:43:27 2025 GMT Not After : Oct 14 07:43:27 2025 GMT Subject: CN=68e4c49f-5e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:3e:3f:19:7a:08:85:ff:ef:ed:1d:49:1e: 7a:fe:5e:d2:a1:2e:08:80:af:a6:4d:c4:10:3c:ce: 95:5e:a3:16:c6:91:d9:df:c0:e4:2a:a6:c3:77:a3: 8c:a6:2d:63:5a:37:4e:04:a2:9f:2e:ce:5a:13:ea: 1c:5f:f9:25:4a:8a:99:2a:bf:c0:71:67:4f:59:51: bd:5a:76:e4:f2:3e:59:c1:ab:ac:4a:4c:9f:2a:42: 37:3d:99:8a:4b:e4:b0:14:09:71:01:e4:c4:df:b0: 26:39:51:29:3a:2b:28:79:90:12:94:16:0f:8f:cb: 93:22:e0:c5:a1:fa:81:72:ad:44:68:8b:10:31:c2: 97:66:6b:3f:bb:17:40:30:e8:6d:78:f3:c9:26:95: e8:1a:a1:ba:0d:ea:39:fb:74:64:08:7c:9e:38:50: 47:25:65:56:8e:52:6c:8c:be:bc:ea:e6:ad:5f:4b: 4a:81:e5:9f:da:b2:11:9b:41:fe:3c:89:ae:17:c8: 90:f9:90:ba:2c:ff:6e:52:72:73:33:87:8e:9a:ff: e9:ee:3f:2a:d4:06:c0:16:82:ff:05:10:e6:b0:6d: 42:4b:48:0a:d8:16:15:5c:3e:da:66:a7:8a:75:0e: 72:54:89:fd:75:03:f2:d5:ba:02:83:d4:36:96:bc: 03:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:03:77:2F:7D:8B:5D:FF:0F:28:5F:F5:3A:47:7C:DD:77:63:DE:E9 X509v3 Authority Key Identifier: keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:40:3f:93:b5:a1:08:bc:25:65:5a:bb:a5:25:18:d5:9b:d2: 99:6f:b2:06:63:74:45:bf:a8:f9:c2:f1:0f:e3:34:be:74:aa: d4:5c:68:8e:d0:19:0c:45:4d:58:5c:8a:85:86:5c:bc:da:8e: be:eb:52:dd:fb:d9:8f:fb:6e:e4:4f:ca:1a:1d:49:60:c3:0b: 34:c6:2f:f5:68:b6:26:72:52:ad:6a:e4:97:0f:27:b5:f1:75: ae:01:43:48:95:22:08:83:a6:ec:de:61:1e:d0:d5:60:6f:dc: f8:b0:18:0d:bd:1a:9a:76:a1:63:95:3d:e6:d7:87:77:04:0a: 8c:66:9d:9b:5a:b5:c4:f8:97:aa:7d:d7:27:82:16:6b:de:3a: 2e:f7:4b:8a:9c:9d:5f:0b:fc:06:5b:e5:55:34:b4:11:31:d3: 8e:47:b7:f3:a5:bb:8a:da:82:b2:06:94:d3:e3:b5:93:bc:e9: 13:82:75:a8:e6:d9:98:d0:88:20:0b:8e:0e:55:87:3e:94:f6: 5b:c1:c0:92:b3:a8:f3:67:d4:69:a2:aa:f2:50:ed:b2:b5:9c: a4:74:c3:51:32:b1:31:9b:01:30:ca:ea:e1:b1:eb:09:a9:3e: 07:49:8c:aa:a2:1e:56:4f:29:e8:4f:32:01:d1:0d:96:b4:39: 26:36:41:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjRFOTExMC8GA1UEBRMoNTBBRTcxNkYzRDM2QjlCRUVBRTI3RjEwMDY4RjlFMzZB MjMzQUI5MTAeFw0yNTEwMDcwNzQzMjdaFw0yNTEwMTQwNzQzMjdaMBgxFjAUBgNV BAMTDTY4ZTRjNDlmLTVlNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNzT4/GXoIhf/v7R1JHnr+XtKhLgiAr6ZNxBA8zpVeoxbGkdnfwOQqpsN3o4ym LWNaN04Eop8uzloT6hxf+SVKipkqv8BxZ09ZUb1aduTyPlnBq6xKTJ8qQjc9mYpL 5LAUCXEB5MTfsCY5USk6Kyh5kBKUFg+Py5Mi4MWh+oFyrURoixAxwpdmaz+7F0Aw 6G1488kmlegaoboN6jn7dGQIfJ44UEclZVaOUmyMvrzq5q1fS0qB5Z/ashGbQf48 ia4XyJD5kLos/25ScnMzh46a/+nuPyrUBsAWgv8FEOawbUJLSArYFhVcPtpmp4p1 DnJUif11A/LVugKD1DaWvAOpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYwN3L32L Xf8PKF/1Okd83Xdj3ukwHwYDVR0jBBgwFoAUUK5xbz02ub7q4n8QBo+eNqIzq5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNEU5L0QzODYxMzQ0NDBF RTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3cTRuOFFCby1lTnFJenE1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUs1eGJ6MDJ1YjdxNG44UUJvLWVOcUl6cTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NEU5L0QzODYxMzQ0NDBFRTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3 cTRuOFFCby1lTnFJenE1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADxAP5O1oQi8JWVau6UlGNWb0plvsgZjdEW/qPnC8Q/jNL50qtRcaI7Q GQxFTVhcioWGXLzajr7rUt372Y/7buRPyhodSWDDCzTGL/VotiZyUq1q5JcPJ7Xx da4BQ0iVIgiDpuzeYR7Q1WBv3PiwGA29Gpp2oWOVPebXh3cECoxmnZtatcT4l6p9 1yeCFmveOi73S4qcnV8L/AZb5VU0tBEx045Ht/Olu4ragrIGlNPjtZO86ROCdajm 2ZjQiCALjg5Vhz6U9lvBwJKzqPNn1GmiqvJQ7bK1nKR0w1EysTGbATDK6uGx6wmp PgdJjKqiHlZPKehPMgHRDZa0OSY2QQ4= -----END CERTIFICATE-----Generated at Wed Oct 8 21:27:45 2025 by rpki-client