$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: 7vZe/FjOzOVHpm107km313r9/yhBBdjD7bBv3OTejiA= Subject key identifier: 05:E6:32:AF:BF:FB:AD:50:1E:37:E5:CF:06:50:15:3F:23:53:BD:A8 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0895 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 2028 Signing time: Wed 22 Oct 2025 16:51:47 +0000 Manifest this update: Wed 22 Oct 2025 16:51:47 +0000 Manifest next update: Wed 29 Oct 2025 16:51:47 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: fFtQ8rWfIlmadPsygC+jfvfCn/El3DwmQEFICYRHVoI=) 2: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: hgO4m8NBFvCWTk/xZ7lTPgH3uo1aBC3KP8OdcPsjkbo=) 3: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: XzzXA6m5Sfbs0sLhTPVckgYHL3ZiipFrwRLSzgKZ33U=) 4: 172C2B96197711F0A993397AC4F9AE02.roa (hash: 8Qo70bxIag9X+h+p9rkvEiGVmiiK66r021Qwo1g6tkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Oct 22 16:51:47 2025 GMT Not After : Oct 29 16:51:47 2025 GMT Subject: CN=68f90ba3-89d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:79:60:17:ee:c0:26:61:fb:fd:c4:f3:95: 59:95:20:83:f1:a7:06:eb:89:bb:88:f7:77:3c:8f: fe:c1:04:1f:9d:37:7f:41:9b:66:b5:ae:e6:ee:6a: 3b:7f:b6:a2:1a:fa:1d:6d:6e:1c:d8:f9:a8:3c:2d: c7:a1:aa:52:06:b9:75:65:39:9e:bc:13:27:f1:56: f6:fd:11:e5:50:cc:81:61:0d:57:32:9a:99:d7:31: 9c:af:8e:65:7c:bc:a9:90:2c:40:e6:41:b4:e8:02: 97:0f:66:05:90:68:c0:fa:63:ed:8b:c2:cb:6f:ed: a8:66:b9:59:77:0b:80:21:35:6a:5d:63:89:1f:7c: 77:de:f4:ef:6a:77:14:98:0c:4b:ab:e1:5d:5a:52: 6f:3d:5e:a1:8f:78:3b:63:8e:de:76:72:b2:e5:c2: e9:c8:aa:36:4e:02:63:37:23:e8:8b:20:23:9f:d8: 96:fd:e6:45:63:5f:0a:13:36:67:7c:e9:63:3b:ec: 57:ef:8e:11:b5:42:58:4d:05:77:7a:25:3a:92:a2: 0e:97:a6:34:33:af:ae:4e:ab:65:4c:9d:e5:d0:53: 41:f1:46:d1:69:87:7f:d0:9f:ab:e7:12:58:b0:56: a0:eb:8c:03:d2:8c:56:8b:b0:4d:a5:2e:f4:91:3e: 97:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E6:32:AF:BF:FB:AD:50:1E:37:E5:CF:06:50:15:3F:23:53:BD:A8 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b1:9c:b7:8a:e6:4c:94:e3:4c:d7:cc:9e:fa:95:80:93:ee: f7:a9:15:07:b0:4a:56:1d:ca:a0:06:16:f4:84:8c:41:1c:d9: 27:ba:4e:a4:c1:91:da:0d:74:57:d7:ef:68:58:ba:d6:62:5a: 9c:ee:68:cc:31:66:6d:33:2e:c9:00:99:21:86:83:30:bb:2e: f5:5c:b3:a4:1a:55:26:f5:76:17:51:a0:0f:3c:f4:a8:a3:1a: 8d:ee:61:81:06:8d:25:e7:36:2e:c4:52:6b:0d:5d:68:82:32: 14:e2:fe:88:a4:f8:d3:59:82:33:a6:5b:18:a4:6a:38:91:49: 6f:12:be:07:55:2b:14:1d:f7:b3:35:73:d1:bf:86:c8:07:78: 09:15:c6:68:25:ca:d2:fc:6e:c2:60:5d:6d:c7:8a:27:12:c9: 26:39:95:00:81:a2:c2:04:d8:9a:b5:c2:da:88:ba:d0:6a:d7: 8d:5c:37:d1:c4:54:94:b4:94:14:f1:cf:cd:ef:b7:a9:67:1c: 2e:88:fa:c4:cb:bc:81:e8:63:c2:69:d2:8e:9b:e2:53:e4:d8: 52:dd:20:fa:73:35:3f:95:72:27:19:91:d9:d8:77:1e:41:7c: b3:29:b1:64:f3:6d:e1:fd:27:95:f1:bf:53:23:76:e6:95:9b: 16:8c:76:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjUxMDIyMTY1MTQ3WhcNMjUxMDI5MTY1MTQ3WjAYMRYwFAYD VQQDEw02OGY5MGJhMy04OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunV5YBfuwCZh+/3E85VZlSCD8acG64m7iPd3PI/+wQQfnTd/QZtmta7m7mo7 f7aiGvodbW4c2PmoPC3HoapSBrl1ZTmevBMn8Vb2/RHlUMyBYQ1XMpqZ1zGcr45l fLypkCxA5kG06AKXD2YFkGjA+mPti8LLb+2oZrlZdwuAITVqXWOJH3x33vTvancU mAxLq+FdWlJvPV6hj3g7Y47ednKy5cLpyKo2TgJjNyPoiyAjn9iW/eZFY18KEzZn fOljO+xX744RtUJYTQV3eiU6kqIOl6Y0M6+uTqtlTJ3l0FNB8UbRaYd/0J+r5xJY sFag64wD0oxWi7BNpS70kT6XKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXmMq+/ +61QHjflzwZQFT8jU72oMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChsZy3iuZMlONM18ye+pWAk+73qRUHsEpWHcqgBhb0hIxBHNknuk6k wZHaDXRX1+9oWLrWYlqc7mjMMWZtMy7JAJkhhoMwuy71XLOkGlUm9XYXUaAPPPSo oxqN7mGBBo0l5zYuxFJrDV1ogjIU4v6IpPjTWYIzplsYpGo4kUlvEr4HVSsUHfez NXPRv4bIB3gJFcZoJcrS/G7CYF1tx4onEskmOZUAgaLCBNiatcLaiLrQateNXDfR xFSUtJQU8c/N77epZxwuiPrEy7yB6GPCadKOm+JT5NhS3SD6czU/lXInGZHZ2Hce QXyzKbFk823h/SeV8b9TI3bmlZsWjHZu -----END CERTIFICATE-----Generated at Thu Oct 23 20:31:37 2025 by rpki-client