$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: LwBAyA7S3/bQPbBbGXOe610alnW6xD4m6szHxA1XTBw= Subject key identifier: EE:A4:64:7A:B4:80:1F:6E:08:3C:45:97:C6:7E:16:2D:C6:DE:91:B1 Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 03AE Signing time: Wed 05 Nov 2025 00:50:43 +0000 Manifest this update: Wed 05 Nov 2025 00:50:43 +0000 Manifest next update: Wed 12 Nov 2025 00:50:43 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: kE+4nLxAy9f8bP2hcGStuubqNsXn7DjOXd3eQRdnO8A=) 2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: U5oQvcg4w4KLcI7rzHf7QE3coC6CkJg5TgXKnBGDWvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Nov 5 00:50:43 2025 GMT Not After : Nov 12 00:50:43 2025 GMT Subject: CN=690a9f63-de53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:45:18:be:01:56:4a:51:bf:5d:01:0b:aa: 0f:9e:95:26:ae:ce:f4:70:c9:0a:72:cf:cd:49:9a: 62:d0:de:16:6d:e8:51:e6:a4:59:b5:38:ea:64:bd: be:aa:3a:b6:5b:ff:2d:50:6c:48:d1:bd:77:13:de: 11:85:ce:03:be:3c:48:e1:f6:d1:bd:a8:8e:20:64: 0d:94:51:ff:35:98:2f:f4:1a:c6:bf:03:3b:5a:92: 59:37:59:ed:ae:54:db:a7:56:ae:5d:66:a0:b5:3d: c7:09:b0:0e:f9:ac:54:b1:92:ba:a7:b8:9e:3e:7b: 45:2e:e5:3b:bd:08:4c:31:fa:77:b5:58:04:bd:56: f2:d6:a8:92:52:96:f8:2b:83:06:b3:62:1a:f2:2c: 95:e2:ca:9c:33:db:75:de:91:23:9f:a6:7b:72:ae: af:b3:b2:71:10:64:05:a6:68:d3:f6:16:39:ae:b1: 06:7f:1c:45:61:b6:25:45:04:6f:2a:05:49:71:c4: 01:68:4b:0d:6c:42:25:5a:6f:80:9a:de:d5:8b:38: 60:90:35:2d:af:b7:c4:e0:7a:a0:c4:51:bf:aa:af: aa:cf:ac:af:31:23:2d:0a:4c:50:ca:e2:07:93:10: b4:ed:a4:dd:f3:dd:2e:5f:3e:39:9f:bd:d1:80:0b: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A4:64:7A:B4:80:1F:6E:08:3C:45:97:C6:7E:16:2D:C6:DE:91:B1 X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:76:c8:21:d9:e2:02:55:d3:5a:c9:49:3e:14:09:75:32:c8: 6b:c9:77:58:15:20:d3:f4:78:4d:9d:67:43:0e:48:a6:70:94: 31:6e:02:64:c8:97:17:75:f1:f9:7e:63:94:e6:8e:f5:b8:b7: ae:2e:15:d7:41:b9:68:19:bd:cb:3c:90:be:7d:82:93:b1:3b: f1:a1:4c:71:d7:81:b6:4b:4b:a6:da:d5:73:bc:21:5e:90:8a: 26:5a:9d:0d:52:5d:dd:ba:fd:fe:da:8d:a5:02:fd:5d:08:18: ce:49:cf:42:1c:e8:f7:64:7a:e1:f7:c4:94:ad:b2:f6:c2:bd: 95:91:0f:48:5b:f1:f8:25:1c:03:08:cd:c5:ee:b6:a4:29:14: b4:92:f3:44:35:68:4b:c0:89:9c:03:fa:ca:79:e4:54:71:f6: a1:1d:95:39:95:f7:50:d0:75:b6:35:33:35:70:10:b8:49:cc: 19:e2:b3:15:fa:61:20:17:9f:e4:22:3f:cf:d3:89:5d:44:3a: 07:00:75:65:df:c4:5b:64:1d:af:cf:cb:90:d8:73:f3:f4:d3: 38:79:49:91:dc:0d:97:48:2f:86:8c:ad:ee:5e:d5:27:d9:d8: 84:86:d3:79:c2:f0:26:b2:3c:dd:f2:fe:29:6c:36:a8:c6:48: 76:dd:13:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUxMTA1MDA1MDQzWhcNMjUxMTEyMDA1MDQzWjAYMRYwFAYD VQQDEw02OTBhOWY2My1kZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndRFGL4BVkpRv10BC6oPnpUmrs70cMkKcs/NSZpi0N4WbehR5qRZtTjqZL2+ qjq2W/8tUGxI0b13E94Rhc4DvjxI4fbRvaiOIGQNlFH/NZgv9BrGvwM7WpJZN1nt rlTbp1auXWagtT3HCbAO+axUsZK6p7iePntFLuU7vQhMMfp3tVgEvVby1qiSUpb4 K4MGs2Ia8iyV4sqcM9t13pEjn6Z7cq6vs7JxEGQFpmjT9hY5rrEGfxxFYbYlRQRv KgVJccQBaEsNbEIlWm+Amt7VizhgkDUtr7fE4HqgxFG/qq+qz6yvMSMtCkxQyuIH kxC07aTd890uXz45n73RgAscpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6kZHq0 gB9uCDxFl8Z+Fi3G3pGxMB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBodsgh2eICVdNayUk+FAl1MshryXdYFSDT9HhNnWdDDkimcJQxbgJk yJcXdfH5fmOU5o71uLeuLhXXQbloGb3LPJC+fYKTsTvxoUxx14G2S0um2tVzvCFe kIomWp0NUl3duv3+2o2lAv1dCBjOSc9CHOj3ZHrh98SUrbL2wr2VkQ9IW/H4JRwD CM3F7rakKRS0kvNENWhLwImcA/rKeeRUcfahHZU5lfdQ0HW2NTM1cBC4ScwZ4rMV +mEgF5/kIj/P04ldRDoHAHVl38RbZB2vz8uQ2HPz9NM4eUmR3A2XSC+GjK3uXtUn 2diEhtN5wvAmsjzd8v4pbDaoxkh23RMd -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:18 2025 by rpki-client