$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json) Hash identifier: hIm28fzOBwHQeI1eTbDjPUQrIHKVobCW/FU4y6t6bxU= Subject key identifier: 25:58:E8:A1:F9:F3:72:7F:CF:6F:F3:98:BD:D2:01:5A:9B:1D:7E:2C Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft Manifest number: 01BA Signing time: Wed 05 Nov 2025 03:15:51 +0000 Manifest this update: Wed 05 Nov 2025 03:15:51 +0000 Manifest next update: Wed 12 Nov 2025 03:15:51 +0000 Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: x/w+U2VHmYLc53PahNeWc5hFzmzMzzibnaQSxt6eu9M=) 2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: zmGvDkLZWGz3q65KV7fFcAzSPYGn5RW36x5tc4+EFL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Validity Not Before: Nov 5 03:15:51 2025 GMT Not After : Nov 12 03:15:51 2025 GMT Subject: CN=690ac167-90a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:bf:de:7b:94:e0:e0:fb:e9:5f:32:92:46: 17:a8:77:d9:59:66:c6:11:dc:cb:9c:00:8b:d1:56: f9:75:18:0a:7a:0d:77:54:1f:d0:03:e7:8c:a9:1a: 3a:f8:72:f6:4f:f7:01:f5:23:d2:1f:54:45:ee:c4: e0:80:70:dc:9e:f9:a1:76:47:17:0f:92:06:e1:c4: dc:fc:2b:8f:1b:a5:61:45:56:d3:f8:97:93:c2:09: e6:d3:a6:6a:0b:d9:60:73:96:3d:c7:18:fd:93:c4: 99:7d:ff:2e:d8:23:52:13:93:59:02:f1:90:36:18: 41:e1:7d:09:79:79:a3:31:38:83:79:3b:00:76:16: f7:43:29:2a:93:84:4d:24:34:cf:91:fd:81:69:63: 81:22:17:e5:ce:1f:73:a0:1b:e4:79:72:1c:02:60: 74:6f:be:6e:bc:1c:53:6f:c9:f8:11:42:48:5f:ca: 45:11:c0:d9:08:bb:5f:67:12:1f:ea:0c:6f:e3:70: 57:0b:6b:0d:07:34:c7:d7:87:32:da:5c:0b:7c:70: cc:d7:f4:a5:d9:37:8d:cf:d6:f4:24:82:e7:90:70: fd:27:c5:f1:65:7d:b8:cc:ec:94:63:7b:d5:94:de: 59:c0:8a:bf:c0:87:9c:d7:0b:c3:a3:91:d7:a3:df: 35:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:58:E8:A1:F9:F3:72:7F:CF:6F:F3:98:BD:D2:01:5A:9B:1D:7E:2C X509v3 Authority Key Identifier: keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1c:fb:60:45:6f:1f:ed:5c:cc:6e:cb:6f:36:5d:83:2b:b8: 29:8b:ab:43:90:49:5b:6a:7b:de:95:70:8a:b1:b4:06:db:f8: 49:ea:b6:59:8c:bc:ad:32:85:4a:f5:33:bc:92:39:e0:04:2c: c7:e6:67:bb:39:7f:0a:64:5c:dc:e9:82:81:af:aa:78:28:ae: 46:e5:5f:8c:95:7d:8c:66:18:74:a6:68:91:a9:3d:04:56:27: 5a:05:2b:54:5d:bc:85:ef:0e:55:01:f4:09:0b:82:93:9c:a2: 00:22:0d:c8:32:bd:93:8e:e3:69:d9:80:09:19:15:22:4b:20: 67:59:3d:7d:2d:90:b8:fa:a4:ac:b5:6b:e3:a7:7c:26:e2:df: 34:71:8d:01:d8:7c:98:3c:f8:34:6d:50:8d:a1:da:f1:c4:01: 19:5d:70:bb:b1:d7:9a:4e:83:93:02:51:29:2c:16:aa:0f:74: fa:e5:e6:5a:fc:43:6c:18:a4:78:be:18:38:4b:39:06:0d:8b: f2:e7:cf:d0:0b:79:8a:a4:15:2b:ad:71:69:7c:0a:98:f1:9b: 5e:8a:dc:77:2d:a7:24:9f:a4:8f:e0:ae:f5:bf:ed:2a:ab:7e: 49:19:ed:d2:a0:ce:40:73:cf:d0:80:91:65:cb:3c:bc:45:fe: 84:42:1e:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMjgxMTAvBgNVBAUTKEJCNTc1NTVGODJBQTIwQTUxQzFCNDhGN0IyNkMzNTY3 RjVBMUU3QkIwHhcNMjUxMTA1MDMxNTUxWhcNMjUxMTEyMDMxNTUxWjAYMRYwFAYD VQQDEw02OTBhYzE2Ny05MGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJ6/3nuU4OD76V8ykkYXqHfZWWbGEdzLnACL0Vb5dRgKeg13VB/QA+eMqRo6 +HL2T/cB9SPSH1RF7sTggHDcnvmhdkcXD5IG4cTc/CuPG6VhRVbT+JeTwgnm06Zq C9lgc5Y9xxj9k8SZff8u2CNSE5NZAvGQNhhB4X0JeXmjMTiDeTsAdhb3Qykqk4RN JDTPkf2BaWOBIhflzh9zoBvkeXIcAmB0b75uvBxTb8n4EUJIX8pFEcDZCLtfZxIf 6gxv43BXC2sNBzTH14cy2lwLfHDM1/Sl2TeNz9b0JILnkHD9J8XxZX24zOyUY3vV lN5ZwIq/wIec1wvDo5HXo9811wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVY6KH5 83J/z2/zmL3SAVqbHX4sMB8GA1UdIwQYMBaAFLtXVV+CqiClHBtI97JsNWf1oee7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQyOC9BRjkzRDE2MjIy MjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlLVWNHMGozc213MVpfV2g1 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxZFZYNEtxSUtVY0cwajNzbXcxWl9XaDU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQyOC9BRjkzRDE2MjIyMjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlL VWNHMGozc213MVpfV2g1N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqHPtgRW8f7VzMbstvNl2DK7gpi6tDkElbanvelXCKsbQG2/hJ6rZZ jLytMoVK9TO8kjngBCzH5me7OX8KZFzc6YKBr6p4KK5G5V+MlX2MZhh0pmiRqT0E VidaBStUXbyF7w5VAfQJC4KTnKIAIg3IMr2TjuNp2YAJGRUiSyBnWT19LZC4+qSs tWvjp3wm4t80cY0B2HyYPPg0bVCNodrxxAEZXXC7sdeaToOTAlEpLBaqD3T65eZa /ENsGKR4vhg4SzkGDYvy58/QC3mKpBUrrXFpfAqY8Zteitx3Lackn6SP4K71v+0q q35JGe3SoM5Ac8/QgJFlyzy8Rf6EQh6d -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:19 2025 by rpki-client