$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: /QLzSi7uyFcUr1iZd0kOAPpNm3W/i42xA8zOyCuScV0= Subject key identifier: F3:32:0D:49:00:F9:47:D8:92:9E:67:00:71:46:7C:12:74:8C:E2:7A Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 091F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 19BE Signing time: Sun 02 Nov 2025 17:20:02 +0000 Manifest this update: Sun 02 Nov 2025 17:20:02 +0000 Manifest next update: Sun 09 Nov 2025 17:20:02 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: QJHhtYOlRtcSXANw6owwOtuJ7OdBCfiLKOLTrU4Zsnw=) 2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: mtUL6kpWcJ0s0WYAq9l26D9HLDGvLgZ5GCmZqFRcyjs=) 3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2335 (0x91f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Nov 2 17:20:02 2025 GMT Not After : Nov 9 17:20:02 2025 GMT Subject: CN=690792c2-aaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:02:31:70:aa:59:e0:cc:94:3d:ed:a9:ca: fe:bc:97:8f:54:e9:cc:29:1c:23:ff:7e:e1:01:e5: c2:6d:cb:b1:d9:66:48:b5:4a:c3:1a:a0:00:61:cb: 5c:40:c9:99:e8:33:f0:65:6b:3c:2a:26:c7:23:8f: 0f:dd:86:3f:45:d7:fc:9a:97:fc:4e:55:a0:73:b3: c8:26:8c:a8:1a:2c:5f:23:76:47:5e:66:dc:19:bc: cf:ee:e3:cb:3b:1b:ae:c5:a0:01:b7:18:49:21:46: 5d:19:af:01:b9:f7:28:f3:a7:f8:ab:af:2d:61:c4: 39:1c:63:8a:10:c8:48:fe:0e:a8:d2:06:1e:31:93: b5:50:7e:b2:d7:17:e0:d8:4c:44:d6:46:71:8c:e9: 47:17:96:b1:a8:9e:33:c7:09:4f:fa:fe:ac:66:61: ea:c5:52:f7:17:77:1c:c4:78:60:23:7d:2d:f5:5a: df:1b:62:6c:2e:19:a1:c9:42:7c:b8:ad:a1:0a:50: 33:5b:ed:d9:34:df:7c:c0:9e:15:c6:ef:7e:df:64: 3e:82:f5:48:db:8a:1c:23:57:33:ec:8b:5a:da:b4: e3:ef:af:d7:03:7c:c0:dc:ad:75:f6:ad:ac:32:91: 12:64:3c:4e:ce:d7:70:54:7e:23:2a:73:e7:eb:90: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:32:0D:49:00:F9:47:D8:92:9E:67:00:71:46:7C:12:74:8C:E2:7A X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:54:45:8c:2f:db:14:e4:16:fa:b3:b7:0d:e3:a3:78:4d:4f: bf:3a:4f:10:17:2b:ce:5d:1b:fe:8f:3c:4e:11:3a:8d:37:b2: 2f:98:4a:6f:7d:18:10:ea:86:92:bf:e3:a8:e6:50:71:da:16: d3:f0:57:0c:bc:4c:06:e6:77:46:81:63:8a:ad:c1:8c:c1:4f: 4d:4a:31:17:3d:05:88:cf:0d:e0:5a:7c:00:40:4b:50:85:de: 5b:dc:a6:c7:b8:9f:d8:3e:17:9e:e0:48:3e:bd:20:a9:bb:cb: bc:66:0f:c8:2a:14:bf:89:c1:37:27:87:36:68:60:ea:01:55: c1:65:6b:7b:c3:67:a4:87:c3:87:34:d4:4f:c0:4d:6f:11:a3: 42:9e:3e:5f:8c:bd:8a:f3:d1:3a:93:9e:8e:e5:78:5d:51:14: ac:b3:6d:35:7b:ad:b0:5a:c5:ea:59:b1:ce:33:32:4f:04:d2: f9:2e:ae:dc:48:32:0d:e7:f0:40:31:0a:92:85:77:30:26:49: 89:b4:a0:ab:eb:8b:1d:38:b0:84:a0:0a:83:b8:92:dd:5a:f6: 71:b4:7e:a3:5b:ae:8f:2f:5c:29:21:8f:13:48:41:a4:21:20: 4d:4c:05:3a:82:f3:5d:2b:49:38:94:6c:50:71:7f:99:79:42: 33:19:1d:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUxMTAyMTcyMDAyWhcNMjUxMTA5MTcyMDAyWjAYMRYwFAYD VQQDEw02OTA3OTJjMi1hYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrYCMXCqWeDMlD3tqcr+vJePVOnMKRwj/37hAeXCbcux2WZItUrDGqAAYctc QMmZ6DPwZWs8KibHI48P3YY/Rdf8mpf8TlWgc7PIJoyoGixfI3ZHXmbcGbzP7uPL OxuuxaABtxhJIUZdGa8Bufco86f4q68tYcQ5HGOKEMhI/g6o0gYeMZO1UH6y1xfg 2ExE1kZxjOlHF5axqJ4zxwlP+v6sZmHqxVL3F3ccxHhgI30t9VrfG2JsLhmhyUJ8 uK2hClAzW+3ZNN98wJ4Vxu9+32Q+gvVI24ocI1cz7Ita2rTj76/XA3zA3K119q2s MpESZDxOztdwVH4jKnPn65CRSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMyDUkA +UfYkp5nAHFGfBJ0jOJ6MB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfVEWML9sU5Bb6s7cN46N4TU+/Ok8QFyvOXRv+jzxOETqNN7IvmEpv fRgQ6oaSv+Oo5lBx2hbT8FcMvEwG5ndGgWOKrcGMwU9NSjEXPQWIzw3gWnwAQEtQ hd5b3KbHuJ/YPhee4Eg+vSCpu8u8Zg/IKhS/icE3J4c2aGDqAVXBZWt7w2ekh8OH NNRPwE1vEaNCnj5fjL2K89E6k56O5XhdURSss201e62wWsXqWbHOMzJPBNL5Lq7c SDIN5/BAMQqShXcwJkmJtKCr64sdOLCEoAqDuJLdWvZxtH6jW66PL1wpIY8TSEGk ISBNTAU6gvNdK0k4lGxQcX+ZeUIzGR0X -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:31 2025 by rpki-client