$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: n00eifnjdhB5cz7OFgwFDKZfbAjjJStCAz9CuW+aS9w= Subject key identifier: 44:17:1B:B1:5B:9F:F5:C1:87:FE:41:BB:B3:45:32:7A:80:6D:DB:C4 Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0C36 Signing time: Tue 04 Nov 2025 18:46:20 +0000 Manifest this update: Tue 04 Nov 2025 18:46:20 +0000 Manifest next update: Tue 11 Nov 2025 18:46:20 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: XXVJnRq048MQNhTesWhgKGPp+EY0V5VqRbdY1Di+KsI=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: 44EICOrdULHxxmbJqfrzipdifGEHemkJ/PfPJGyHNtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: Nov 4 18:46:20 2025 GMT Not After : Nov 11 18:46:20 2025 GMT Subject: CN=690a49fc-9934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:b5:29:5e:a0:06:25:04:35:c4:ed:73:2b: 0c:27:9a:49:a7:fc:62:58:38:4b:79:46:08:b8:fe: 3d:08:f0:10:30:53:cb:8b:a1:ba:72:f1:fc:ab:bf: 9f:0c:4a:b4:d6:0a:2c:8c:71:bf:82:fd:40:ec:a2: 1f:f4:96:2d:55:3c:aa:a1:88:07:3d:09:f6:77:11: 24:e8:6c:57:b8:8c:b9:f6:23:e6:59:d1:98:8e:8d: 0c:65:a3:ac:7e:a2:de:94:32:6c:37:60:c1:21:d9: 59:c5:28:64:e7:99:bf:dd:1a:b1:45:d0:15:04:c8: c1:79:7d:8e:09:0c:38:1e:a6:a0:a3:30:92:d2:06: 5c:87:d7:fe:ef:39:e7:47:43:b7:7b:b4:b3:94:57: 10:1d:05:06:a8:80:e9:7a:a3:7d:e8:c0:3d:82:d1: ff:71:58:12:dc:25:e3:26:7e:82:4a:a4:cc:cb:e6: 05:b5:16:ae:2a:5b:af:3b:71:78:8f:e3:a0:f7:f2: 08:78:a2:07:c3:13:12:7c:b4:aa:40:51:4b:f7:89: 31:3b:78:62:7a:c0:79:8c:20:28:db:2a:6e:2b:98: f7:b2:26:dd:25:6e:11:9f:51:1a:93:08:32:70:32: 9e:0f:99:52:05:80:de:f7:8d:c3:e9:ec:69:65:34: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:1B:B1:5B:9F:F5:C1:87:FE:41:BB:B3:45:32:7A:80:6D:DB:C4 X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2d:13:14:d8:c3:91:89:2d:8c:0e:b4:73:7d:af:44:a7:5d: 25:af:be:bf:07:f6:7e:b5:f6:72:61:02:f5:15:da:b2:08:6a: 73:06:91:89:15:d5:a1:2d:a0:78:12:f6:d2:20:06:e0:86:02: 8e:88:f1:35:f5:13:d1:4b:96:fe:be:33:89:97:2b:be:ea:f3: 4f:ed:7e:83:0c:29:91:6d:3b:03:15:19:7f:1a:bb:84:e9:69: 67:96:6f:ed:50:30:d0:ef:72:dd:e0:0a:a1:08:78:8a:e6:c9: 94:e4:36:37:54:b5:ba:ee:21:1c:98:bb:1a:54:3f:78:2d:03: 5d:82:76:8d:17:27:3a:d1:8d:f7:ba:22:cb:6b:57:8d:f7:e8: 25:8b:72:f3:78:55:04:b8:95:07:cd:d5:3d:54:6d:ac:af:00: 67:5a:53:52:6d:b9:cc:b6:e2:0f:6d:cb:c6:10:31:e9:c1:82: 45:12:a2:34:d2:3c:dc:b9:83:43:dc:55:74:8a:a8:8f:66:d4: a1:5a:b5:95:d5:85:b9:0f:8e:8e:56:0d:79:6c:88:80:3c:b6: 00:fe:42:65:a8:a7:5a:b9:a6:17:79:83:06:c0:ec:56:eb:4d: 95:b1:46:b8:8b:ce:00:a8:cb:0d:72:a9:11:03:57:84:f2:6c: 9c:7c:09:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjUxMTA0MTg0NjIwWhcNMjUxMTExMTg0NjIwWjAYMRYwFAYD VQQDEw02OTBhNDlmYy05OTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrC1KV6gBiUENcTtcysMJ5pJp/xiWDhLeUYIuP49CPAQMFPLi6G6cvH8q7+f DEq01gosjHG/gv1A7KIf9JYtVTyqoYgHPQn2dxEk6GxXuIy59iPmWdGYjo0MZaOs fqLelDJsN2DBIdlZxShk55m/3RqxRdAVBMjBeX2OCQw4HqagozCS0gZch9f+7znn R0O3e7SzlFcQHQUGqIDpeqN96MA9gtH/cVgS3CXjJn6CSqTMy+YFtRauKluvO3F4 j+Og9/IIeKIHwxMSfLSqQFFL94kxO3hiesB5jCAo2ypuK5j3sibdJW4Rn1Eakwgy cDKeD5lSBYDe943D6expZTTVfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQXG7Fb n/XBh/5Bu7NFMnqAbdvEMB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABLRMU2MORiS2MDrRzfa9Ep10lr76/B/Z+tfZyYQL1FdqyCGpzBpGJ FdWhLaB4EvbSIAbghgKOiPE19RPRS5b+vjOJlyu+6vNP7X6DDCmRbTsDFRl/GruE 6Wlnlm/tUDDQ73Ld4AqhCHiK5smU5DY3VLW67iEcmLsaVD94LQNdgnaNFyc60Y33 uiLLa1eN9+gli3LzeFUEuJUHzdU9VG2srwBnWlNSbbnMtuIPbcvGEDHpwYJFEqI0 0jzcuYND3FV0iqiPZtShWrWV1YW5D46OVg15bIiAPLYA/kJlqKdauaYXeYMGwOxW 602VsUa4i84AqMsNcqkRA1eE8mycfAn8 -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:39 2025 by rpki-client