$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: ueT7T1TDdFW+//ARcFzYu05BPvPfBi9n2UUeiNbN648= Subject key identifier: 2D:4C:DA:98:FA:8E:AB:11:70:1E:A5:FB:A2:60:FB:74:7B:73:0F:DB Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: 0140 Signing time: Mon 03 Nov 2025 04:23:46 +0000 Manifest this update: Mon 03 Nov 2025 04:23:46 +0000 Manifest next update: Mon 10 Nov 2025 04:23:46 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: idFa9YqegedIYTb4r0Phs9+SdLHvZRcY/DXidf1qGTI=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: YjW6NRyoT2Yd6bOqBMqlNLXFCINZXzceER+JobJKz/s=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: yJ7MqVkk1tgytYWvBl1+oFmFkyxkl54djaWZOByH5xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: Nov 3 04:23:46 2025 GMT Not After : Nov 10 04:23:46 2025 GMT Subject: CN=69082e52-4219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:4c:c9:b4:38:de:bb:c8:36:b5:13:e3:04: d8:1e:cd:57:6e:bd:c5:e0:c7:0a:86:1b:a3:5f:b4: 6c:29:06:1f:e4:aa:48:7a:31:91:ae:88:f3:37:60: 55:6b:c9:98:40:37:9b:6c:9b:4a:95:33:e2:cd:e2: ba:de:bf:19:2c:f3:64:58:4c:03:cf:8b:df:91:fb: f7:ab:af:d6:66:72:bf:17:47:4a:20:bc:36:aa:e9: 2d:04:ee:46:45:c7:84:f2:be:8a:4a:c9:1b:a7:0c: 25:dd:f6:dd:b2:ae:ac:53:57:14:50:99:f1:63:dd: f9:06:7c:8a:f1:68:54:ee:c1:41:b9:14:8c:f0:74: dc:63:2f:f9:a7:3e:51:b9:9b:b7:6f:93:fa:98:e9: 1e:86:4e:3e:8a:6f:6c:d8:6c:16:86:f1:e6:35:85: 0c:fe:0b:df:5d:34:62:4a:00:4b:52:f7:1b:0e:b7: f8:3a:6b:c1:e1:52:4f:32:26:74:3c:40:65:03:5b: 96:25:2e:bf:b7:30:75:da:89:52:21:5a:73:f3:95: 06:1b:f4:92:8b:1d:e4:02:03:42:f1:8f:23:ea:40: 9f:de:12:04:fd:67:6e:4a:42:3d:c2:92:63:03:ea: 6a:a5:69:63:a8:0f:62:a3:56:a3:07:f0:01:e4:fa: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4C:DA:98:FA:8E:AB:11:70:1E:A5:FB:A2:60:FB:74:7B:73:0F:DB X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:8a:74:65:58:d5:d9:6f:bd:ce:9b:16:47:87:a7:82:e8:a4: ab:90:49:29:62:fe:76:de:b5:a2:18:8f:6f:04:d7:ca:76:12: b4:8e:8d:84:3a:bc:85:d8:6a:3c:2f:e7:da:fd:5b:33:82:cc: f2:27:b8:ab:b9:5e:e9:6e:ae:7f:27:b4:b7:21:f0:0b:a9:c7: c9:61:c5:11:27:bd:6e:09:1f:f1:74:6b:c5:8c:de:f9:43:dd: de:fa:14:57:b6:43:b3:59:3a:2b:a2:56:cd:ee:90:22:fe:3d: 1c:62:c3:18:56:55:c8:6e:5b:be:a8:05:3a:b8:e1:f5:80:a3: 89:e1:c8:b0:bf:dc:a0:b0:43:1d:0d:a8:7c:7f:94:5c:4d:da: 81:05:80:c8:b7:6f:3d:c0:b5:ee:80:1d:02:62:0d:d9:4c:5c: f2:35:e8:5a:60:f6:0b:d5:fd:93:bc:a3:6f:a4:ec:c1:38:89: 56:92:1a:aa:f2:5e:0d:64:55:30:53:7b:7b:39:29:64:5a:62: a0:b2:2b:27:72:77:b2:46:e6:79:30:aa:21:3d:41:3d:0d:ac: 8e:b0:3f:00:f6:b8:76:ae:a5:97:6f:b0:72:16:fa:32:8d:df: 8c:74:c5:f6:a1:65:c5:bd:d7:25:38:89:47:ee:8c:16:38:46: bc:e4:2a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx Mjc3Q0IyRjMwHhcNMjUxMTAzMDQyMzQ2WhcNMjUxMTEwMDQyMzQ2WjAYMRYwFAYD VQQDEw02OTA4MmU1Mi00MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqtMybQ43rvINrUT4wTYHs1Xbr3F4McKhhujX7RsKQYf5KpIejGRrojzN2BV a8mYQDebbJtKlTPizeK63r8ZLPNkWEwDz4vfkfv3q6/WZnK/F0dKILw2quktBO5G RceE8r6KSskbpwwl3fbdsq6sU1cUUJnxY935BnyK8WhU7sFBuRSM8HTcYy/5pz5R uZu3b5P6mOkehk4+im9s2GwWhvHmNYUM/gvfXTRiSgBLUvcbDrf4OmvB4VJPMiZ0 PEBlA1uWJS6/tzB12olSIVpz85UGG/SSix3kAgNC8Y8j6kCf3hIE/WduSkI9wpJj A+pqpWljqA9io1ajB/AB5Pq34wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1M2pj6 jqsRcB6l+6Jg+3R7cw/bMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4 cUtxNzljSkJjbUFTZDhzdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDinRlWNXZb73OmxZHh6eC6KSrkEkpYv523rWiGI9vBNfKdhK0jo2E OryF2Go8L+fa/VszgszyJ7iruV7pbq5/J7S3IfALqcfJYcURJ71uCR/xdGvFjN75 Q93e+hRXtkOzWTorolbN7pAi/j0cYsMYVlXIblu+qAU6uOH1gKOJ4ciwv9ygsEMd Dah8f5RcTdqBBYDIt289wLXugB0CYg3ZTFzyNehaYPYL1f2TvKNvpOzBOIlWkhqq 8l4NZFUwU3t7OSlkWmKgsisncneyRuZ5MKohPUE9DayOsD8A9rh2rqWXb7ByFvoy jd+MdMX2oWXFvdclOIlH7owWOEa85Cph -----END CERTIFICATE-----Generated at Tue Nov 4 19:03:52 2025 by rpki-client