$ rpki-client -vvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft (raw, json) Hash identifier: yEb2HgJ/t6LbVtCJP5OXbXmp6jntavYZYyV196tYhtk= Subject key identifier: E0:13:7D:07:EA:A4:CD:C7:9F:71:90:C0:2F:98:DD:E9:92:68:DD:89 Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Certificate serial: 03E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft Manifest number: 03D9 Signing time: Mon 03 Nov 2025 00:35:45 +0000 Manifest this update: Mon 03 Nov 2025 00:35:44 +0000 Manifest next update: Mon 10 Nov 2025 00:35:44 +0000 Files and hashes: 1: uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl (hash: kTy8GwKaiyFN+ZRVxe6w0zlyFTsYJDHdxP0GLy7wiuo=) 2: 931A51C07F5811EE82ECE456C4F9AE02.roa (hash: WWLeH3632fyjkdTa5V1Kbc7nqGm176NLqMwGAoiNN0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Validity Not Before: Nov 3 00:35:44 2025 GMT Not After : Nov 10 00:35:44 2025 GMT Subject: CN=6907f8e0-f6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:0e:08:e4:c2:68:e9:60:af:d5:74:e2:05: e4:bb:7f:c5:15:39:9a:f5:ea:f6:d2:f7:9d:fd:c2: 2a:fb:5d:3c:dc:50:61:84:9a:93:d7:10:3e:5a:99: cd:33:8b:d5:8f:e5:c1:0f:0d:34:0c:63:98:c0:9b: ea:fc:dd:1b:95:11:a6:41:2e:b9:32:a5:b2:b2:05: 39:bf:aa:a6:e9:3c:c9:1e:37:a5:71:a0:19:db:80: 3e:34:12:f7:d5:f2:23:74:71:6e:fe:ad:81:56:f5: c0:3e:e3:77:e8:ea:c5:43:de:c7:82:ce:96:f4:b9: 1b:44:88:fb:de:5d:e3:fe:c7:96:6f:1d:6f:03:5d: b9:5f:6b:6b:3b:c0:31:b7:82:71:6c:ef:24:d5:8e: 9d:e8:96:2c:ba:c1:f5:f9:74:d4:96:c8:10:bc:53: b3:d3:7a:a5:1c:29:7d:f1:00:b6:2a:36:30:e7:2a: e7:ef:a4:d5:d5:c6:1c:b6:7f:3d:87:a6:eb:d2:60: e5:84:15:49:29:86:1a:ce:12:73:cb:26:2f:8f:df: 0b:00:57:4a:6f:a3:43:c3:29:65:96:69:ae:99:bd: dd:ab:42:81:09:a4:83:d9:2b:19:13:46:ce:bb:18: 73:80:85:d9:e8:81:15:4d:97:8c:5e:69:db:9f:15: d7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:13:7D:07:EA:A4:CD:C7:9F:71:90:C0:2F:98:DD:E9:92:68:DD:89 X509v3 Authority Key Identifier: keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d9:a3:e8:97:fa:33:f9:d4:62:64:4d:f0:83:0b:99:73:3b: e1:d5:c1:2b:3e:a6:a2:b0:b2:f7:46:2a:fe:b6:22:62:8b:5f: e9:26:6c:e6:3f:3a:b8:45:94:19:ab:8c:8b:da:78:0f:51:7c: e8:70:bf:05:ce:f6:52:4a:b4:ff:67:a7:d3:92:5e:64:a4:89: 27:3e:8d:e0:51:60:6b:8a:28:34:c8:6b:b9:06:81:7d:81:67: 66:cc:4b:71:eb:52:c2:2c:cb:11:03:f7:11:3f:c9:f6:88:8f: ef:d1:fb:cb:a4:05:52:bf:9b:2f:ce:d1:eb:bb:c2:fb:a2:99: 30:6f:83:c7:31:c3:b0:86:11:1b:88:ff:1f:b7:2a:7c:12:3d: 63:4a:25:e8:3d:1b:22:2a:75:11:36:08:a2:99:81:9a:01:69: f6:14:ea:a6:90:43:15:15:8d:60:03:f3:db:fb:9e:72:34:f8: ae:f8:a8:d6:1a:6d:a3:b6:08:e6:9d:bb:a3:59:7a:bc:d9:f9: 6a:2f:a1:80:9f:e9:b8:1b:a4:94:91:56:9f:7b:01:84:e2:61: a6:e0:93:81:90:dd:70:33:68:16:4a:c2:72:4d:6e:69:27:3a: b9:6e:2b:24:35:28:c4:d3:d9:cf:dc:e0:b9:ce:c4:9a:ae:0e: f7:30:12:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzQ0YxMTAvBgNVBAUTKEI4QUQ4RDkxNkNEOTQ4MkI2REE1NUQzMDdDRTk1QzA3 QTk1QjJGNzQwHhcNMjUxMTAzMDAzNTQ0WhcNMjUxMTEwMDAzNTQ0WjAYMRYwFAYD VQQDEw02OTA3ZjhlMC1mNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYUOCOTCaOlgr9V04gXku3/FFTma9er20ved/cIq+1083FBhhJqT1xA+WpnN M4vVj+XBDw00DGOYwJvq/N0blRGmQS65MqWysgU5v6qm6TzJHjelcaAZ24A+NBL3 1fIjdHFu/q2BVvXAPuN36OrFQ97Hgs6W9LkbRIj73l3j/seWbx1vA125X2trO8Ax t4JxbO8k1Y6d6JYsusH1+XTUlsgQvFOz03qlHCl98QC2KjYw5yrn76TV1cYctn89 h6br0mDlhBVJKYYazhJzyyYvj98LAFdKb6NDwylllmmumb3dq0KBCaSD2SsZE0bO uxhzgIXZ6IEVTZeMXmnbnxXXaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOATfQfq pM3Hn3GQwC+Y3emSaN2JMB8GA1UdIwQYMBaAFLitjZFs2UgrbaVdMHzpXAepWy90 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDNDRi8xN0Q2RTRDMkE2 OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlNDdHRwVjB3Zk9sY0I2bGJM M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLMk5rV3paU0N0dHBWMHdmT2xjQjZsYkwzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDNDRi8xN0Q2RTRDMkE2OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlND dHRwVjB3Zk9sY0I2bGJMM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo2aPol/oz+dRiZE3wgwuZczvh1cErPqaisLL3Rir+tiJii1/pJmzm Pzq4RZQZq4yL2ngPUXzocL8FzvZSSrT/Z6fTkl5kpIknPo3gUWBriig0yGu5BoF9 gWdmzEtx61LCLMsRA/cRP8n2iI/v0fvLpAVSv5svztHru8L7opkwb4PHMcOwhhEb iP8ftyp8Ej1jSiXoPRsiKnURNgiimYGaAWn2FOqmkEMVFY1gA/Pb+55yNPiu+KjW Gm2jtgjmnbujWXq82flqL6GAn+m4G6SUkVafewGE4mGm4JOBkN1wM2gWSsJyTW5p Jzq5biskNSjE09nP3OC5zsSarg73MBK0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:09 2025 by rpki-client