$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft File: UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json) Hash identifier: A2eZaG622KbsNrcFZ5G6qoJ7OZF6lbp6fPtdvrUwUGY= Subject key identifier: 87:BF:85:80:36:B7:2D:1B:6A:75:9D:63:04:AB:53:FB:5D:39:53:B2 Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 Certificate issuer: /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft Manifest number: 0113 Signing time: Wed 05 Nov 2025 05:02:57 +0000 Manifest this update: Wed 05 Nov 2025 05:02:57 +0000 Manifest next update: Wed 12 Nov 2025 05:02:57 +0000 Files and hashes: 1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: YeoWG/ZdIbNmEqBHWsSrcRkDA6/7pAT2eq6071g5ePE=) 2: C23053B019A911EF97366417C4F9AE02.roa (hash: YYki0NriwMd0PqjU0EOE6kz16/qKzKdVDNbbepKT0IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Validity Not Before: Nov 5 05:02:57 2025 GMT Not After : Nov 12 05:02:57 2025 GMT Subject: CN=690ada81-7404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:d2:11:15:0d:1d:b8:25:83:99:ee:3d:8e: e4:0d:ab:1a:f0:34:5f:de:36:a9:bf:77:92:89:9c: 8e:d6:8a:e8:0d:95:a4:6f:b2:8c:e4:8e:64:63:f4: 04:07:f5:b6:d6:ac:8c:1d:bd:b1:7d:c3:94:50:39: 42:cd:1f:c5:56:62:32:d6:a4:6e:44:45:9b:d2:83: 59:07:68:e0:11:ac:69:d8:3f:d2:54:41:32:f9:24: 41:8b:bc:aa:10:05:e7:bb:46:60:b0:92:0c:01:cd: 5b:69:d3:a6:dc:98:c5:8d:8e:5e:ac:d3:02:d0:66: 4b:49:4e:f0:c5:f1:7c:6e:7d:ff:2f:fa:65:36:d7: 66:3f:51:9b:a2:c1:39:e1:b0:26:08:ae:0c:92:90: 00:8b:98:5f:f9:c5:7f:cf:c3:b7:d6:3f:0a:bb:00: 07:87:d3:d8:2c:3c:90:3a:8f:9c:f4:c6:05:9b:8a: 6b:23:6e:9e:59:29:23:fd:13:53:99:0d:56:95:da: da:10:f3:5c:ee:a1:cc:1e:41:5a:cf:ca:26:04:fb: a9:67:3d:08:76:b1:c7:66:3e:e8:75:f6:44:f9:51: 0c:c5:fa:2b:5d:19:dc:8d:3a:9f:1a:31:0a:5d:a9: 94:92:55:c7:3d:c6:25:53:4d:c6:98:c8:b8:3a:e8: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BF:85:80:36:B7:2D:1B:6A:75:9D:63:04:AB:53:FB:5D:39:53:B2 X509v3 Authority Key Identifier: keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1c:34:13:56:85:f8:01:bc:8d:7c:58:b5:13:65:c3:1b:17: 46:70:5b:f7:d8:9a:5b:e0:47:9b:9e:03:82:91:12:0d:7a:34: c5:7c:d9:4f:26:72:b7:3b:58:cd:44:fd:f7:ff:16:45:36:b7: 07:77:65:06:1a:7d:e8:3a:50:d9:df:a5:e8:5d:1e:b5:00:9f: 3a:f6:e1:ed:da:e0:7e:36:32:31:cb:72:0f:12:4c:d7:30:ef: 1b:39:52:3f:6c:eb:12:15:59:52:d1:c1:f8:fb:fc:a1:82:d3: 5b:93:8a:8b:9b:12:23:a8:52:e0:6a:0c:80:0c:89:ca:de:2f: a0:63:52:83:4a:3c:04:a8:fd:87:30:89:86:02:be:c9:4d:29: 21:96:17:74:77:88:a5:be:47:b5:5a:93:3d:d4:cd:94:e7:0e: c7:07:d6:93:18:cc:62:5f:4f:3e:42:ab:3e:85:01:30:41:04: 64:8e:c7:9a:25:9d:86:d0:cf:d0:8b:0c:d6:b1:29:9c:0f:21: a0:cb:92:52:86:e0:16:ef:be:77:02:eb:fc:fa:70:6a:b6:dc: 21:65:21:2b:a9:28:f5:52:e4:4e:a8:59:c3:41:d0:12:24:f9: 2a:89:41:1b:0e:c3:f4:eb:96:e6:4e:2e:72:47:3a:e7:85:be: 8f:a1:0e:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQkYxMTAvBgNVBAUTKDUxQTQ4MjU4RDRDRDZFMDFEMjQ1OEM1QjkyMTZFRkE0 NTIxMEI2MjMwHhcNMjUxMTA1MDUwMjU3WhcNMjUxMTEyMDUwMjU3WjAYMRYwFAYD VQQDEw02OTBhZGE4MS03NDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrLSERUNHbglg5nuPY7kDasa8DRf3japv3eSiZyO1oroDZWkb7KM5I5kY/QE B/W21qyMHb2xfcOUUDlCzR/FVmIy1qRuREWb0oNZB2jgEaxp2D/SVEEy+SRBi7yq EAXnu0ZgsJIMAc1badOm3JjFjY5erNMC0GZLSU7wxfF8bn3/L/plNtdmP1GbosE5 4bAmCK4MkpAAi5hf+cV/z8O31j8KuwAHh9PYLDyQOo+c9MYFm4prI26eWSkj/RNT mQ1WldraEPNc7qHMHkFaz8omBPupZz0IdrHHZj7odfZE+VEMxforXRncjTqfGjEK XamUklXHPcYlU03GmMi4OuitNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe/hYA2 ty0banWdYwSrU/tdOVOyMB8GA1UdIwQYMBaAFFGkgljUzW4B0kWMW5IW76RSELYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCRi9GNjdDNjFFQTE5 ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJnSFNSWXhia2hidnBGSVF0 aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhU0NXTlROYmdIU1JZeGJraGJ2cEZJUXRpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCRi9GNjdDNjFFQTE5ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJn SFNSWXhia2hidnBGSVF0aU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdHDQTVoX4AbyNfFi1E2XDGxdGcFv32Jpb4EebngOCkRINejTFfNlP JnK3O1jNRP33/xZFNrcHd2UGGn3oOlDZ36XoXR61AJ869uHt2uB+NjIxy3IPEkzX MO8bOVI/bOsSFVlS0cH4+/yhgtNbk4qLmxIjqFLgagyADInK3i+gY1KDSjwEqP2H MImGAr7JTSkhlhd0d4ilvke1WpM91M2U5w7HB9aTGMxiX08+Qqs+hQEwQQRkjsea JZ2G0M/QiwzWsSmcDyGgy5JShuAW7753Auv8+nBqttwhZSErqSj1UuROqFnDQdAS JPkqiUEbDsP065bmTi5yRzrnhb6PoQ5m -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:48 2025 by rpki-client