$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json) Hash identifier: 6cIbOnew1JGReq+13IbEVcud4zPTg4jIjC87zVvDIKA= Subject key identifier: 87:C1:68:FE:C3:B5:5C:45:41:8C:1B:3C:F7:29:CF:4A:3F:A4:F7:9D Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Certificate serial: 0A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft Manifest number: 0A83 Signing time: Sun 02 Nov 2025 19:33:29 +0000 Manifest this update: Sun 02 Nov 2025 19:33:28 +0000 Manifest next update: Sun 09 Nov 2025 19:33:28 +0000 Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: EokfKFgDa5IvoD8VB8ifv3YC6JMuVkav9E7pw2tqvvI=) 2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: c9rYpxrekHk5Vx/e81a0t1Y6tqcx2DAB/IWGqPFZTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2698 (0xa8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Validity Not Before: Nov 2 19:33:28 2025 GMT Not After : Nov 9 19:33:28 2025 GMT Subject: CN=6907b208-4ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:e5:ad:bc:f8:9d:75:f3:9f:af:28:60:ad: b4:cf:b6:f3:84:31:05:9d:6a:da:84:b8:2e:e8:f4: 3a:9a:ac:e3:36:64:27:57:30:40:9f:d9:7c:28:6e: 80:67:83:15:7c:81:05:b1:1e:97:ed:2f:dc:fe:77: a0:f5:61:a5:c8:96:49:0e:e6:16:fe:83:b7:c6:b6: 84:a3:38:ef:f0:b8:76:eb:e6:9e:9d:22:87:21:78: b6:98:ad:e6:85:fb:46:df:44:9b:07:81:51:de:3c: 59:e7:7e:e6:b8:51:54:8a:4c:e4:5e:4b:a0:04:86: 33:de:7c:3f:4b:ff:49:66:b5:0f:81:be:a2:68:c0: 0f:3a:36:9e:aa:66:7f:42:dc:43:de:1a:d7:21:eb: 47:cf:28:26:34:8c:fc:87:bf:e0:c6:ec:7c:02:5e: d6:15:a9:e7:d1:81:b3:ea:a4:18:39:2e:2c:80:9c: bf:9e:68:6f:a4:28:00:0f:aa:3e:09:55:17:24:5a: db:f6:b2:42:14:e6:26:35:f0:d3:d4:d8:c5:0e:95: ff:f3:1b:64:12:0c:79:da:f4:17:82:49:13:ff:50: 5b:01:87:38:7d:5f:98:bf:6d:b9:a4:07:81:b5:3a: 1e:38:f4:68:cc:15:50:91:18:ed:98:92:93:75:1f: 10:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C1:68:FE:C3:B5:5C:45:41:8C:1B:3C:F7:29:CF:4A:3F:A4:F7:9D X509v3 Authority Key Identifier: keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:16:b5:73:d4:c9:ba:42:21:32:bf:27:2c:38:e9:34:a8:4b: 69:47:43:2a:94:ae:a7:e2:7b:58:8a:97:22:29:1d:32:3f:e9: e0:82:6f:10:54:d8:87:d7:58:d4:ac:c5:34:93:bf:54:b4:66: 91:da:4e:e1:05:d2:b9:b9:e5:8d:ca:88:f7:ce:83:38:e6:1e: 0b:da:7f:77:cc:8e:92:72:f2:68:ec:5f:90:ae:d7:d1:f0:a0: 7b:44:55:42:0a:7d:fa:c1:91:35:ea:ba:bd:f0:c6:97:52:0b: ca:b6:90:12:55:6e:87:23:45:d9:02:61:a0:89:fd:d8:3d:78: e4:b1:dd:80:9c:12:67:96:2c:b2:ba:ef:b4:70:df:59:49:cb: 9c:e7:f6:17:1d:08:99:82:23:a1:3e:7f:c6:da:21:9f:ee:8c: b0:7c:32:cd:3f:8b:1f:c4:29:b4:03:fa:6f:73:e3:ba:32:77: e4:8b:a8:27:00:2c:0f:96:b4:38:45:67:9c:1c:0c:e6:56:a3: 24:8d:96:68:18:28:fb:5a:2a:4e:ce:cd:95:d2:4e:a2:a9:c2: de:f7:cb:b1:65:35:64:92:36:a0:7e:84:17:2d:90:29:9a:d3: 5c:6e:f5:96:6e:75:b3:2c:b2:06:06:ab:4b:bd:c6:1f:c8:cd: e1:a6:56:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE REMwM0VFNkIwHhcNMjUxMTAyMTkzMzI4WhcNMjUxMTA5MTkzMzI4WjAYMRYwFAYD VQQDEw02OTA3YjIwOC00ZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIPlrbz4nXXzn68oYK20z7bzhDEFnWrahLgu6PQ6mqzjNmQnVzBAn9l8KG6A Z4MVfIEFsR6X7S/c/neg9WGlyJZJDuYW/oO3xraEozjv8Lh26+aenSKHIXi2mK3m hftG30SbB4FR3jxZ537muFFUikzkXkugBIYz3nw/S/9JZrUPgb6iaMAPOjaeqmZ/ QtxD3hrXIetHzygmNIz8h7/gxux8Al7WFann0YGz6qQYOS4sgJy/nmhvpCgAD6o+ CVUXJFrb9rJCFOYmNfDT1NjFDpX/8xtkEgx52vQXgkkT/1BbAYc4fV+Yv225pAeB tToeOPRozBVQkRjtmJKTdR8QMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfBaP7D tVxFQYwbPPcpz0o/pPedMB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3 bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjFrVz1Mm6QiEyvycsOOk0qEtpR0MqlK6n4ntYipciKR0yP+nggm8Q VNiH11jUrMU0k79UtGaR2k7hBdK5ueWNyoj3zoM45h4L2n93zI6ScvJo7F+QrtfR 8KB7RFVCCn36wZE16rq98MaXUgvKtpASVW6HI0XZAmGgif3YPXjksd2AnBJnliyy uu+0cN9ZScuc5/YXHQiZgiOhPn/G2iGf7oywfDLNP4sfxCm0A/pvc+O6Mnfki6gn ACwPlrQ4RWecHAzmVqMkjZZoGCj7WipOzs2V0k6iqcLe98uxZTVkkjagfoQXLZAp mtNcbvWWbnWzLLIGBqtLvcYfyM3hplaW -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:20 2025 by rpki-client