$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json) Hash identifier: fv+7TZWgZdKm+4p01J5SZ1fXeReflDHPkXbikQZXd8c= Subject key identifier: 50:8F:93:AE:B1:90:BB:E5:6E:16:96:96:E3:2B:32:36:7A:22:EA:8D Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft Manifest number: 22 Signing time: Mon 03 Nov 2025 07:44:40 +0000 Manifest this update: Mon 03 Nov 2025 07:44:39 +0000 Manifest next update: Mon 10 Nov 2025 07:44:39 +0000 Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: qpcSO+nc/4SAHrx9lVUmZhYNCXE6aAXpHfxCJn8fPuA=) 2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: zLa9BDHDG7v+U27ctD90rRBbm+JhYqq8GC5uRJX34CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Validity Not Before: Nov 3 07:44:39 2025 GMT Not After : Nov 10 07:44:39 2025 GMT Subject: CN=69085d67-ef8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:04:51:0f:d2:77:f7:b6:5d:b4:fb:e0:f3: e3:84:c8:bc:cf:08:34:7e:e9:01:0e:33:2a:08:b3: ac:e0:a3:75:a5:f7:9e:f1:86:a7:1b:f3:73:14:f5: c4:a5:8c:0d:e7:d6:52:3b:63:f4:26:22:fc:6e:fb: 66:ae:9f:a7:9f:93:43:5e:4a:78:48:a8:a7:b0:ec: 59:ab:9b:9f:66:f9:73:0d:9f:8b:a8:ab:3c:d5:3a: c8:e6:be:85:a7:6a:fb:32:23:d0:88:34:97:15:00: fa:da:fb:5f:66:d5:34:e2:4e:a4:14:ad:04:0f:b5: 99:de:b1:81:f3:49:60:1f:41:10:0d:7c:42:88:04: 28:8b:4a:8f:92:5e:b8:c7:f6:39:ed:fe:b4:e3:3f: f8:8a:44:0c:89:93:82:7b:e7:ac:4e:a3:79:85:36: 3d:be:70:40:96:bf:fe:d0:23:52:62:75:dc:f1:5c: bf:21:02:4f:b3:42:88:64:1f:d4:fe:1b:2d:11:33: 58:05:72:8a:3b:05:1a:ab:e4:91:25:4c:a3:3f:9e: 20:2b:ee:e3:da:74:09:3c:69:b2:38:af:bd:d4:ce: 84:9f:74:13:ce:09:40:49:8a:ff:e7:49:1a:60:fa: d8:c1:e0:28:b8:1b:25:71:64:b3:24:ef:8b:0b:c0: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8F:93:AE:B1:90:BB:E5:6E:16:96:96:E3:2B:32:36:7A:22:EA:8D X509v3 Authority Key Identifier: keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:fd:8b:c6:91:10:3d:32:54:11:4f:90:84:f6:da:64:cd:c6: 62:e9:3f:2b:57:75:9f:43:37:f3:aa:61:e3:a7:ad:f7:ef:94: 2a:6f:55:e7:b8:71:54:e9:48:0a:45:6d:2f:61:e1:93:78:77: 76:3e:21:a0:eb:09:6a:17:50:78:e8:23:8b:4f:df:7f:8c:2d: ff:4e:4d:63:97:a6:be:f1:9e:71:49:a3:d2:9f:db:44:bb:ab: dd:5c:32:9a:5c:50:75:9f:cd:fa:56:b8:ec:66:dd:6e:3e:ce: ab:8e:a1:ac:88:7d:42:05:75:a1:e9:60:43:4c:9e:f0:cf:46: f6:05:0d:59:d7:9c:33:30:3a:a2:ab:56:d6:80:5f:b3:75:92: 3b:cf:68:56:09:df:93:b3:8e:ad:71:f4:57:d9:16:01:35:61: bf:3f:d5:f0:41:5f:8c:5e:2f:3a:12:8f:1c:b1:0c:7f:1b:e0: 8a:0e:85:fc:fa:a5:6e:84:63:c2:7e:60:1a:ed:d5:40:03:6f: c4:e7:cb:b6:f3:17:a0:8c:ec:9e:fd:7f:d0:99:f8:c0:b5:ad: 34:ed:cc:9a:f8:2f:f0:68:78:76:22:4e:03:65:8f:fb:a1:13: e5:88:fb:9b:6c:5f:e3:8f:a3:c1:70:e0:dc:1a:2f:d9:66:c9: 7d:ad:64:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFDRDExMC8GA1UEBRMoNTMyRTcwNTRDNDcxQkZGMkVEN0E2QTE4OEVEMzczNjM2 NUU0NjA4QTAeFw0yNTExMDMwNzQ0MzlaFw0yNTExMTAwNzQ0MzlaMBgxFjAUBgNV BAMTDTY5MDg1ZDY3LWVmOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5SARRD9J397ZdtPvg8+OEyLzPCDR+6QEOMyoIs6zgo3Wl957xhqcb83MU9cSl jA3n1lI7Y/QmIvxu+2aun6efk0NeSnhIqKew7Fmrm59m+XMNn4uoqzzVOsjmvoWn avsyI9CINJcVAPra+19m1TTiTqQUrQQPtZnesYHzSWAfQRANfEKIBCiLSo+SXrjH 9jnt/rTjP/iKRAyJk4J756xOo3mFNj2+cECWv/7QI1JiddzxXL8hAk+zQohkH9T+ Gy0RM1gFcoo7BRqr5JElTKM/niAr7uPadAk8abI4r73UzoSfdBPOCUBJiv/nSRpg +tjB4Ci4GyVxZLMk74sLwFylAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUI+TrrGQ u+VuFpaW4ysyNnoi6o0wHwYDVR0jBBgwFoAUUy5wVMRxv/LtemoYjtNzY2XkYIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QUNEL0Q4MzVBOTBFODRB RjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXk1d1ZNUnh2X0x0ZW1vWWp0TnpZMlhrWUlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QUNEL0Q4MzVBOTBFODRBRjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9M dGVtb1lqdE56WTJYa1lJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHb9i8aRED0yVBFPkIT22mTNxmLpPytXdZ9DN/OqYeOnrffvlCpvVee4 cVTpSApFbS9h4ZN4d3Y+IaDrCWoXUHjoI4tP33+MLf9OTWOXpr7xnnFJo9Kf20S7 q91cMppcUHWfzfpWuOxm3W4+zquOoayIfUIFdaHpYENMnvDPRvYFDVnXnDMwOqKr VtaAX7N1kjvPaFYJ35Ozjq1x9FfZFgE1Yb8/1fBBX4xeLzoSjxyxDH8b4IoOhfz6 pW6EY8J+YBrt1UADb8Tny7bzF6CM7J79f9CZ+MC1rTTtzJr4L/BoeHYiTgNlj/uh E+WI+5tsX+OPo8Fw4NwaL9lmyX2tZBw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:55 2025 by rpki-client