$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft File: U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json) Hash identifier: aAxZRIlv+FFU1kIObeGD2MbNnJaRzKJY3+2iNSB0phU= Subject key identifier: 91:CF:5A:79:6A:73:26:64:F0:3E:B8:D6:7C:0D:3E:49:B6:16:3E:DD Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 Certificate issuer: /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft Manifest number: 0C9D Signing time: Sun 02 Nov 2025 18:17:10 +0000 Manifest this update: Sun 02 Nov 2025 18:17:10 +0000 Manifest next update: Sun 09 Nov 2025 18:17:10 +0000 Files and hashes: 1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: lc0Zd+LotrRGyVouO1WAPGmjmpCzxnZoTu49OmNrzn4=) 2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: NWXl0/HloQJgP5iTbQs1BacGndGc9HtR4LlBAy7UnRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Validity Not Before: Nov 2 18:17:10 2025 GMT Not After : Nov 9 18:17:10 2025 GMT Subject: CN=6907a026-5ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1d:4c:c0:21:14:f2:73:75:68:de:02:69:69: c5:9c:99:10:49:ad:5e:1a:d8:73:a9:6b:18:2a:38: 70:21:05:ee:e5:a8:18:29:a4:6f:2b:f9:c9:9a:4d: 96:fe:58:3c:4d:b9:3e:5d:30:1f:27:97:c2:d2:f5: c0:0b:4d:73:62:35:42:f9:da:9c:ef:05:b0:90:8f: f5:5a:5a:f8:58:e8:4b:11:64:b6:b6:fa:71:e4:14: cf:51:2d:21:49:e9:b2:26:67:d2:50:88:60:a1:73: c6:04:a5:28:9f:31:8b:ef:d7:63:3c:22:3d:10:5d: a5:24:f1:6f:70:86:5a:1c:3c:02:70:6e:99:ee:e3: c0:77:cf:74:24:16:44:5e:ea:da:3b:9a:65:21:be: 6b:4e:c7:f5:87:86:82:33:f0:45:5a:9f:39:d5:1f: ac:c6:7a:13:55:bc:95:75:64:03:e9:3f:ca:c8:41: c6:d9:39:c0:1f:d0:e5:0b:4d:8b:05:d0:a2:59:6d: 11:0b:17:fe:3b:75:6b:51:a5:cb:15:8b:80:8a:aa: 9e:5e:f4:54:4f:ce:05:bb:fe:b4:e4:42:59:2b:e9: b9:c9:f2:83:18:37:29:4e:de:c8:9f:61:20:e9:6c: 8e:e1:49:56:e3:50:47:73:e3:c5:23:45:fd:b2:4d: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CF:5A:79:6A:73:26:64:F0:3E:B8:D6:7C:0D:3E:49:B6:16:3E:DD X509v3 Authority Key Identifier: keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:fe:d4:58:83:0b:33:23:a8:94:17:f9:12:e0:88:b0:e8:f9: e3:cc:9d:71:c3:5a:ed:c7:8c:ef:f1:c3:c5:f4:b1:2d:e6:15: f1:3d:37:9c:4b:06:46:f8:32:87:78:50:57:ca:6c:a8:48:f1: 74:05:51:95:6b:82:27:e1:18:3d:e2:df:f5:68:cc:9d:58:a2: 05:88:cd:13:42:f1:6b:52:3f:07:13:1a:6f:1d:73:21:25:fb: ed:16:17:b0:54:05:9c:f8:be:aa:8c:69:48:22:92:73:86:a6: 0a:7b:aa:b3:6e:de:ce:c1:ce:eb:bf:bc:fc:8b:d3:c6:4f:f5: f4:54:30:54:d6:93:a5:62:9e:42:e5:58:44:59:f9:0d:39:c6: ca:23:d1:72:c8:ad:08:b3:f4:4c:3e:03:18:b4:69:03:34:4e: 6d:bd:d0:c9:75:d2:fd:47:5e:97:1a:d9:a3:d9:5b:06:0a:73: c9:21:05:71:c4:40:74:49:9e:21:97:fa:e3:ec:69:16:88:b7: 50:16:f1:3b:b2:2c:83:8a:43:48:97:5b:a1:a0:b7:20:55:d6: 84:be:21:95:90:6b:16:19:0b:80:1a:21:fb:51:5f:de:8e:95: ea:e4:05:4e:bc:da:c3:4e:1e:44:58:3b:1d:04:c6:ff:87:f3: 36:36:52:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2 NUI0REQ4ODUwHhcNMjUxMTAyMTgxNzEwWhcNMjUxMTA5MTgxNzEwWjAYMRYwFAYD VQQDEw02OTA3YTAyNi01Y2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR1MwCEU8nN1aN4CaWnFnJkQSa1eGthzqWsYKjhwIQXu5agYKaRvK/nJmk2W /lg8Tbk+XTAfJ5fC0vXAC01zYjVC+dqc7wWwkI/1Wlr4WOhLEWS2tvpx5BTPUS0h SemyJmfSUIhgoXPGBKUonzGL79djPCI9EF2lJPFvcIZaHDwCcG6Z7uPAd890JBZE XuraO5plIb5rTsf1h4aCM/BFWp851R+sxnoTVbyVdWQD6T/KyEHG2TnAH9DlC02L BdCiWW0RCxf+O3VrUaXLFYuAiqqeXvRUT84Fu/605EJZK+m5yfKDGDcpTt7In2Eg 6WyO4UlW41BHc+PFI0X9sk3K6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHPWnlq cyZk8D641nwNPkm2Fj7dMB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0 NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj/tRYgwszI6iUF/kS4Iiw6PnjzJ1xw1rtx4zv8cPF9LEt5hXxPTec SwZG+DKHeFBXymyoSPF0BVGVa4In4Rg94t/1aMydWKIFiM0TQvFrUj8HExpvHXMh JfvtFhewVAWc+L6qjGlIIpJzhqYKe6qzbt7Owc7rv7z8i9PGT/X0VDBU1pOlYp5C 5VhEWfkNOcbKI9FyyK0Is/RMPgMYtGkDNE5tvdDJddL9R16XGtmj2VsGCnPJIQVx xEB0SZ4hl/rj7GkWiLdQFvE7siyDikNIl1uhoLcgVdaEviGVkGsWGQuAGiH7UV/e jpXq5AVOvNrDTh5EWDsdBMb/h/M2NlLw -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:11 2025 by rpki-client