$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json) Hash identifier: x/aGZl0FkgX5CjjbmZXenu3zEhN5Sp93nUCOzqb5Y2s= Subject key identifier: C4:A0:0C:D7:42:90:E9:82:32:79:00:A3:E1:A6:AB:53:83:95:A5:B9 Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Certificate serial: 0A94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft Manifest number: 0A7E Signing time: Sun 02 Nov 2025 19:36:12 +0000 Manifest this update: Sun 02 Nov 2025 19:36:11 +0000 Manifest next update: Sun 09 Nov 2025 19:36:11 +0000 Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: 2qmAfyk/WsVZxbAcEI1Hv2caK643msPDXD193OaDLKk=) 2: 834C938A12C711F09998A234C4F9AE02.roa (hash: M4mfahqMzwmq58j++0Teybq9n4Aqspe3mvfksixkbgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2708 (0xa94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Validity Not Before: Nov 2 19:36:11 2025 GMT Not After : Nov 9 19:36:11 2025 GMT Subject: CN=6907b2ac-9da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2b:32:ad:4b:e7:85:f7:81:50:6d:37:ed:8f: bc:94:fd:ec:6f:04:85:a1:f7:c9:ce:79:ef:36:c9: 5b:15:12:39:52:83:cd:26:9d:a4:e5:2f:99:3e:3b: 7b:2b:60:ff:ef:86:12:6f:8f:c4:ef:6a:18:c1:69: 4a:45:01:28:22:15:2f:31:76:21:0d:7f:8d:3c:78: 19:c4:fd:70:8e:49:1e:7d:55:0f:bf:b4:39:92:e8: e0:51:51:3f:f1:ca:e5:07:c3:eb:63:fe:a4:f1:c6: 19:c9:f0:8d:60:44:22:ce:64:2c:a9:42:05:2a:a4: 01:ad:61:e8:88:bf:1d:71:ce:5e:3f:70:ec:d5:91: 00:21:91:20:4e:09:32:95:92:65:9b:f8:0e:7f:4c: 57:bf:c1:aa:ed:cb:7e:48:ab:8e:77:32:88:f4:4e: d1:00:ba:cf:5a:c7:d5:d2:c9:8d:62:95:ea:7c:ec: 8b:d6:62:49:32:54:6a:ae:37:78:dc:17:cf:14:5c: 41:cb:0d:26:fd:48:e3:f1:dd:81:0f:57:6b:bd:64: ae:0d:de:22:d0:44:b3:cc:db:96:b0:01:aa:bb:d5: 87:5c:a0:d7:01:bd:0d:59:42:19:3b:51:8e:c5:eb: 2b:1b:40:4c:98:1e:2c:3e:0a:bd:6c:28:ef:fa:5f: 8c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A0:0C:D7:42:90:E9:82:32:79:00:A3:E1:A6:AB:53:83:95:A5:B9 X509v3 Authority Key Identifier: keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:59:0c:80:21:b5:18:e7:00:ff:3c:99:3f:2f:88:36:ee:6f: 07:32:a7:20:91:84:1e:c8:34:b6:d8:cb:b1:ce:8f:b7:37:ce: 7b:77:15:6a:fd:de:85:c6:68:9b:60:02:12:e9:aa:c3:d9:a9: 2b:0b:be:35:9f:cf:31:41:43:ff:eb:90:ce:ed:1f:95:f7:ed: 25:d5:ac:e1:04:cb:7b:5a:70:24:ed:df:f8:3a:33:f7:d0:f5: 0e:a1:1a:bb:59:b3:d3:b6:0c:66:3a:0c:bf:f6:a4:19:fd:27: b7:4f:20:a7:59:d8:8a:48:4c:42:92:e6:c8:52:52:b0:f1:6d: 13:26:b0:14:31:48:3d:21:6a:1e:7e:d0:4c:95:da:bd:a7:89: 42:91:dd:46:6a:49:89:02:6b:ca:f0:91:ff:f6:54:f1:9b:63: 56:b5:ee:36:19:2f:a7:33:87:44:fa:71:dd:da:e7:0d:5d:35: 22:6f:72:b0:cb:58:da:c2:05:77:60:66:b9:6f:b7:21:44:5a: 17:e5:48:d4:09:a3:92:09:04:ab:a3:e8:61:91:8c:ec:e5:53: d1:2c:ca:d5:f4:05:71:0a:fc:53:f2:bb:bf:a1:f9:1f:6a:5d: 18:8a:58:b3:81:95:a7:7c:9b:6c:83:9d:6a:87:19:69:6c:fa: 6e:95:2b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz MjUxOTQ0QjIwHhcNMjUxMTAyMTkzNjExWhcNMjUxMTA5MTkzNjExWjAYMRYwFAYD VQQDEw02OTA3YjJhYy05ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7isyrUvnhfeBUG037Y+8lP3sbwSFoffJznnvNslbFRI5UoPNJp2k5S+ZPjt7 K2D/74YSb4/E72oYwWlKRQEoIhUvMXYhDX+NPHgZxP1wjkkefVUPv7Q5kujgUVE/ 8crlB8PrY/6k8cYZyfCNYEQizmQsqUIFKqQBrWHoiL8dcc5eP3Ds1ZEAIZEgTgky lZJlm/gOf0xXv8Gq7ct+SKuOdzKI9E7RALrPWsfV0smNYpXqfOyL1mJJMlRqrjd4 3BfPFFxByw0m/Ujj8d2BD1drvWSuDd4i0ESzzNuWsAGqu9WHXKDXAb0NWUIZO1GO xesrG0BMmB4sPgq9bCjv+l+M3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSgDNdC kOmCMnkAo+Gmq1ODlaW5MB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiWQyAIbUY5wD/PJk/L4g27m8HMqcgkYQeyDS22Muxzo+3N857dxVq /d6FxmibYAIS6arD2akrC741n88xQUP/65DO7R+V9+0l1azhBMt7WnAk7d/4OjP3 0PUOoRq7WbPTtgxmOgy/9qQZ/Se3TyCnWdiKSExCkubIUlKw8W0TJrAUMUg9IWoe ftBMldq9p4lCkd1GakmJAmvK8JH/9lTxm2NWte42GS+nM4dE+nHd2ucNXTUib3Kw y1jawgV3YGa5b7chRFoX5UjUCaOSCQSro+hhkYzs5VPRLMrV9AVxCvxT8ru/ofkf al0YilizgZWnfJtsg51qhxlpbPpulSss -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:10 2025 by rpki-client