$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json) Hash identifier: Av8JgwhrwVXEmR4HhuUsMHKGqlfqiaXcs1ytOeYEMlM= Subject key identifier: 02:47:C6:6B:69:92:EA:45:DA:1D:55:D8:DB:99:43:A9:82:15:AD:F9 Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Certificate serial: 07BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft Manifest number: 07B8 Signing time: Sun 02 Nov 2025 21:20:17 +0000 Manifest this update: Sun 02 Nov 2025 21:20:16 +0000 Manifest next update: Sun 09 Nov 2025 21:20:16 +0000 Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: SM3WL7Zba2rOa2XrT89WDS71MB/wEIhSsiKs13fCo2w=) 2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: v+COy4aJ4vI2kVsinHUDpF8Q9iJxgP+snNqHCNRWWC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1983 (0x7bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Validity Not Before: Nov 2 21:20:16 2025 GMT Not After : Nov 9 21:20:16 2025 GMT Subject: CN=6907cb11-6c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:21:c0:4a:f9:66:dc:12:9b:68:20:54:9f: 95:70:81:f2:6a:09:cb:07:95:6b:d0:30:ce:59:06: 60:5f:c6:da:3b:19:1b:c2:25:81:13:9b:c8:10:32: aa:9b:9f:01:b9:62:39:3a:9c:10:ab:cb:ae:75:58: 18:dc:cd:75:5b:b6:8a:2c:fb:fc:92:74:5e:2f:17: 2d:b3:93:ea:6b:7d:94:e7:05:fe:d0:90:13:43:d8: bc:8a:a0:38:57:3e:b5:0b:87:74:9a:e3:fc:38:e3: 47:09:97:74:f1:cf:28:3d:37:b5:65:56:41:30:02: 9b:0a:c7:22:e6:b1:6e:d7:2d:76:25:95:3a:96:45: 49:5d:d7:e0:38:35:b1:bb:73:42:25:47:1b:75:2f: 3f:22:c1:35:77:c4:24:5c:dc:2b:48:bb:32:49:81: 66:b9:74:02:a9:b7:69:07:e2:a1:99:d1:5a:ec:1c: a0:a6:d3:72:13:3c:eb:f4:e0:a5:1b:a8:f7:8d:24: 8b:37:58:9c:5a:e2:e3:f8:07:ef:9c:73:51:83:c2: 6b:85:e3:a2:4f:d8:e5:76:f0:a8:71:d6:0a:32:e5: c9:7f:2d:97:64:86:ed:f6:d8:0a:c9:e6:e0:4c:c4: e4:7b:5f:db:45:9f:39:56:1a:08:7f:74:4c:1f:1b: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:47:C6:6B:69:92:EA:45:DA:1D:55:D8:DB:99:43:A9:82:15:AD:F9 X509v3 Authority Key Identifier: keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0d:c4:da:b7:9e:39:71:05:e7:44:59:73:0b:32:83:13:62: 83:30:86:f1:e7:4a:9f:e3:74:8b:b7:14:3a:3e:36:8b:c4:72: e6:34:cd:70:02:89:3a:01:bc:26:8d:5e:d2:fa:20:e4:f0:13: ef:42:02:29:3d:db:7a:78:0c:96:9e:92:b8:e9:b1:2e:94:3b: c7:7b:97:b3:7e:00:92:74:63:4c:01:3b:89:0e:a9:60:36:05: d7:14:b8:8b:1e:38:b2:63:57:b1:47:1c:53:9e:3f:f1:8e:99: c6:04:bc:a6:be:52:1e:f7:9e:a4:44:e5:7a:1d:23:bb:40:57: c2:64:b5:04:db:43:ea:f1:bd:5b:60:7e:e1:8c:7a:f7:4a:c2: bf:73:6a:8c:5e:d8:9e:79:99:08:58:8a:44:42:90:d1:ad:c7: ad:0a:ed:90:83:c5:b5:24:72:9e:ce:54:ca:d9:c5:b6:17:b8: 2b:b6:1d:6b:e3:13:93:92:d5:09:44:0e:b3:b3:ea:86:d2:b2: 84:8c:9e:00:d7:b6:6d:c5:61:b8:c6:91:f8:64:a0:a3:58:39: ef:6d:cf:cb:f3:ab:27:15:85:9e:e9:48:e6:05:a8:b6:41:fd: a6:92:6c:1c:eb:9f:c7:d5:30:6e:94:e5:74:22:51:19:8e:88: d5:0b:49:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC RTNFRjVDNDgwHhcNMjUxMTAyMjEyMDE2WhcNMjUxMTA5MjEyMDE2WjAYMRYwFAYD VQQDEw02OTA3Y2IxMS02YzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS0hwEr5ZtwSm2ggVJ+VcIHyagnLB5Vr0DDOWQZgX8baOxkbwiWBE5vIEDKq m58BuWI5OpwQq8uudVgY3M11W7aKLPv8knReLxcts5Pqa32U5wX+0JATQ9i8iqA4 Vz61C4d0muP8OONHCZd08c8oPTe1ZVZBMAKbCsci5rFu1y12JZU6lkVJXdfgODWx u3NCJUcbdS8/IsE1d8QkXNwrSLsySYFmuXQCqbdpB+KhmdFa7BygptNyEzzr9OCl G6j3jSSLN1icWuLj+AfvnHNRg8JrheOiT9jldvCocdYKMuXJfy2XZIbt9tgKyebg TMTke1/bRZ85VhoIf3RMHxuj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJHxmtp kupF2h1V2NuZQ6mCFa35MB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiDcTat545cQXnRFlzCzKDE2KDMIbx50qf43SLtxQ6PjaLxHLmNM1w Aok6AbwmjV7S+iDk8BPvQgIpPdt6eAyWnpK46bEulDvHe5ezfgCSdGNMATuJDqlg NgXXFLiLHjiyY1exRxxTnj/xjpnGBLymvlIe956kROV6HSO7QFfCZLUE20Pq8b1b YH7hjHr3SsK/c2qMXtieeZkIWIpEQpDRrcetCu2Qg8W1JHKezlTK2cW2F7grth1r 4xOTktUJRA6zs+qG0rKEjJ4A17ZtxWG4xpH4ZKCjWDnvbc/L86snFYWe6UjmBai2 Qf2mkmwc65/H1TBulOV0IlEZjojVC0l1 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:54 2025 by rpki-client