$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: teZPdqI0ATZgQ2TXLZ+1M8H/nbqfiPI0jPioqrb7JEg= Subject key identifier: 76:88:D8:54:5C:48:4D:48:78:42:68:95:EA:60:5F:1E:2C:62:D0:A0 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0BC9 Signing time: Tue 04 Nov 2025 19:00:49 +0000 Manifest this update: Tue 04 Nov 2025 19:00:48 +0000 Manifest next update: Tue 11 Nov 2025 19:00:48 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: 50Kh4Gd7tl0VsVpO3iMfjxwV2KEK7MOu2mNtNQpVtVY=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: VE/5lNULYXEEuWID4sAqexSIpx9InEaDo4uE/0apCfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3025 (0xbd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Nov 4 19:00:48 2025 GMT Not After : Nov 11 19:00:48 2025 GMT Subject: CN=690a4d60-965e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:1f:fd:69:e3:4b:ac:56:ef:b1:dd:91:92: b1:36:7a:0e:63:2c:8e:4b:7d:32:ac:fe:b2:69:40: b4:22:84:5c:d3:31:d0:e9:51:b8:dd:fe:e5:a4:5c: 09:85:04:2f:94:e7:bf:94:33:35:0d:ee:e6:17:49: 86:23:b8:2c:13:51:7c:16:a1:d0:6b:02:e4:2b:9d: f5:93:59:71:a7:02:1a:d6:6b:be:99:ed:17:49:dd: 75:8c:d4:fc:b0:91:a1:ea:8a:1b:3b:39:70:2c:b4: 74:03:04:ce:65:67:40:83:e6:3c:b1:6e:2c:23:89: 69:f1:47:e7:8c:d1:ba:12:24:a1:55:fd:36:d8:5b: e2:95:9d:59:20:2e:3b:ff:b7:bc:1f:77:5d:47:f9: 72:e9:b9:1c:73:7f:11:7d:ac:61:23:b5:bc:f4:c3: 0e:4d:2d:7e:66:8e:84:9e:97:e0:0f:86:0d:0f:a8: d2:86:3e:74:d0:cc:ad:b2:bd:36:b7:67:04:06:85: 0e:fa:49:cb:a9:72:33:14:23:10:c7:05:3f:a6:8d: 0c:b8:a1:76:48:df:32:96:a7:c1:8e:0b:a5:aa:c6: d2:a1:61:55:a8:3e:c0:cb:fc:5d:94:cf:d0:e1:74: ad:9f:3a:9f:fd:dd:cf:f5:d8:71:98:ae:ae:3b:ab: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:88:D8:54:5C:48:4D:48:78:42:68:95:EA:60:5F:1E:2C:62:D0:A0 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:08:ce:6d:fd:46:0a:fd:8a:7d:81:7a:03:18:06:6d:11:29: 93:9d:2c:73:f3:03:aa:4f:19:43:a8:ef:04:06:b1:67:aa:ca: 62:b0:47:30:bc:28:4e:b5:cd:aa:a3:f1:b6:29:c0:6f:cc:c6: d5:db:c0:13:7e:b1:67:d2:8f:79:fa:bb:98:9f:e7:5a:7d:a8: c4:dc:79:d7:3b:bf:46:03:c8:7e:4c:fa:b1:74:81:bb:4f:f6: 0c:c5:bc:b7:58:54:7d:8d:3d:10:a1:3d:73:7c:71:58:7b:4d: f6:74:ff:01:c2:f8:d2:c4:ee:b6:84:76:33:71:14:b6:b5:31: ca:54:76:51:67:b6:3a:e3:d8:7a:76:ea:0e:95:1f:70:1d:6b: 52:fe:2a:81:90:75:f9:36:78:06:35:07:76:b9:a1:f6:71:fb: 30:b1:2e:2f:45:c7:21:a6:49:c0:95:e9:3a:ba:d4:19:59:f8: 39:ee:87:a3:d4:5c:d2:3b:bf:b7:30:5d:77:ba:71:4c:96:a7: 40:2d:0b:8d:ab:20:b7:f5:be:cb:03:01:39:eb:2e:18:2d:dc: 03:fd:f5:37:86:2c:99:95:23:20:55:c1:20:7e:cc:7a:b1:8b: fb:e2:0e:aa:6c:76:14:de:da:27:d9:ee:01:25:a2:07:a2:7e: 82:f1:12:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUxMTA0MTkwMDQ4WhcNMjUxMTExMTkwMDQ4WjAYMRYwFAYD VQQDEw02OTBhNGQ2MC05NjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6of/WnjS6xW77HdkZKxNnoOYyyOS30yrP6yaUC0IoRc0zHQ6VG43f7lpFwJ hQQvlOe/lDM1De7mF0mGI7gsE1F8FqHQawLkK531k1lxpwIa1mu+me0XSd11jNT8 sJGh6oobOzlwLLR0AwTOZWdAg+Y8sW4sI4lp8UfnjNG6EiShVf022FvilZ1ZIC47 /7e8H3ddR/ly6bkcc38RfaxhI7W89MMOTS1+Zo6EnpfgD4YND6jShj500Mytsr02 t2cEBoUO+knLqXIzFCMQxwU/po0MuKF2SN8ylqfBjgulqsbSoWFVqD7Ay/xdlM/Q 4XStnzqf/d3P9dhxmK6uO6utXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaI2FRc SE1IeEJolepgXx4sYtCgMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVCM5t/UYK/Yp9gXoDGAZtESmTnSxz8wOqTxlDqO8EBrFnqspisEcw vChOtc2qo/G2KcBvzMbV28ATfrFn0o95+ruYn+dafajE3HnXO79GA8h+TPqxdIG7 T/YMxby3WFR9jT0QoT1zfHFYe032dP8BwvjSxO62hHYzcRS2tTHKVHZRZ7Y649h6 duoOlR9wHWtS/iqBkHX5NngGNQd2uaH2cfswsS4vRcchpknAlek6utQZWfg57oej 1FzSO7+3MF13unFMlqdALQuNqyC39b7LAwE56y4YLdwD/fU3hiyZlSMgVcEgfsx6 sYv74g6qbHYU3ton2e4BJaIHon6C8RKB -----END CERTIFICATE-----Generated at Wed Nov 5 19:30:16 2025 by rpki-client