$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft File: UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json) Hash identifier: uxLJ2MDSizEQlILDl5awXP4YaAm/c0r4a7bgPfoKWec= Subject key identifier: 12:76:AC:56:32:8B:BA:7C:AD:0A:30:D4:A5:E2:EC:67:06:E4:BC:84 Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Certificate serial: 20DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft Manifest number: 20BF Signing time: Sun 02 Nov 2025 15:58:12 +0000 Manifest this update: Sun 02 Nov 2025 15:58:12 +0000 Manifest next update: Sun 09 Nov 2025 15:58:12 +0000 Files and hashes: 1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: Hu/Iud+23kNHBxzNP56JyEBT04COXWUAZxQIRuAyAlE=) 2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ebbHAc3H1xs8yb83KOxdepldMzKZEG2KB/oj0PgrPl0=) 3: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: ISWHnAnupcgdEe8p2mboULpSfRcbxX3lISCXNa8ynQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8415 (0x20df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Validity Not Before: Nov 2 15:58:12 2025 GMT Not After : Nov 9 15:58:12 2025 GMT Subject: CN=69077f94-9042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:f0:af:8a:4d:22:ea:92:b3:7b:70:15:40: 98:70:9f:00:5f:d3:99:61:df:f8:cf:51:f5:8f:e6: 5e:7c:3f:df:33:7f:6c:b6:36:51:75:86:5c:23:de: 96:9b:d3:a3:38:61:8f:31:56:1e:5e:5b:ee:43:1f: f8:d4:b1:4d:d8:82:45:dd:78:d2:fb:30:a3:b8:d5: 28:53:22:07:c0:b7:44:8d:92:d6:af:94:10:bf:36: ee:0a:44:75:0a:4b:a4:7b:96:91:7a:4f:ae:55:ac: a0:94:10:22:93:ba:82:48:e1:d6:25:7b:bd:2c:48: 66:57:f8:5d:d9:85:b4:72:49:fc:61:15:bd:66:69: 6d:2b:6f:b0:e9:a6:7a:af:58:27:46:b3:2a:e6:c0: 79:fd:bf:0d:71:07:ec:63:cc:c1:84:c2:7f:3f:1e: 6b:c7:7d:49:e2:d8:8e:08:2d:0b:f9:2d:ee:4e:85: aa:28:71:2d:a3:f6:e0:97:ca:3b:c7:f2:7d:17:6f: 94:19:91:5e:70:bf:c1:f7:cb:fd:51:05:a4:14:a3: a0:bf:a3:95:43:5c:06:4f:33:5a:81:39:33:c5:dd: a4:7e:1d:71:91:2e:bd:d7:a6:2c:71:22:78:00:6b: 27:2f:c6:50:fb:d2:65:4b:8d:67:52:a6:10:e5:d0: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:76:AC:56:32:8B:BA:7C:AD:0A:30:D4:A5:E2:EC:67:06:E4:BC:84 X509v3 Authority Key Identifier: keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3e:2b:56:da:84:f5:0e:9b:48:1d:c6:4f:b9:97:f7:b7:d8: ba:f8:ae:9d:b4:73:6c:e9:8c:7f:1c:d0:6c:5f:5e:7b:7e:df: 07:af:23:8c:6a:a0:71:2d:31:b5:e3:a9:6d:e1:6f:11:03:4b: 19:c0:42:ea:9b:9f:70:5d:c4:bd:f7:ea:98:d8:d7:84:51:48: 02:0e:c6:93:ad:2c:7c:1d:bc:89:60:48:a3:a2:d8:f4:4a:14: 57:8b:76:9c:ba:0c:28:72:28:e7:35:17:f7:ca:a1:28:0e:8a: 9b:39:a6:32:3c:cf:1a:3b:a3:71:d1:a7:c9:db:ef:77:6d:03: 8a:cd:75:aa:ed:a3:13:35:54:31:2b:c5:31:68:df:9f:88:0f: 48:62:75:54:fa:42:8d:d4:40:cb:1c:a2:b8:eb:af:36:c2:a9: b4:e7:2c:4f:22:a2:c7:38:d6:61:9b:90:8a:31:30:82:59:07: 2a:29:12:89:a6:c7:04:f7:b4:32:9e:02:6a:41:d3:ef:55:1e: 39:2f:2a:70:f9:bd:76:b8:30:67:38:b9:35:c9:12:df:59:61: fd:1f:72:8a:2b:61:f2:d3:70:db:13:94:cb:01:34:fa:c9:94: 0d:f0:6e:f2:34:18:6d:9f:56:02:84:b6:51:95:70:92:5d:70: e9:a5:6e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5NjcxMTAvBgNVBAUTKDUzMzBFRUVFQjBEMEE5NTM1RkFDODUwNUU3MzU4NDNB RjZDRTYwQUYwHhcNMjUxMTAyMTU1ODEyWhcNMjUxMTA5MTU1ODEyWjAYMRYwFAYD VQQDEw02OTA3N2Y5NC05MDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/Pwr4pNIuqSs3twFUCYcJ8AX9OZYd/4z1H1j+ZefD/fM39stjZRdYZcI96W m9OjOGGPMVYeXlvuQx/41LFN2IJF3XjS+zCjuNUoUyIHwLdEjZLWr5QQvzbuCkR1 Ckuke5aRek+uVayglBAik7qCSOHWJXu9LEhmV/hd2YW0ckn8YRW9ZmltK2+w6aZ6 r1gnRrMq5sB5/b8NcQfsY8zBhMJ/Px5rx31J4tiOCC0L+S3uToWqKHEto/bgl8o7 x/J9F2+UGZFecL/B98v9UQWkFKOgv6OVQ1wGTzNagTkzxd2kfh1xkS6916YscSJ4 AGsnL8ZQ+9JlS41nUqYQ5dCewQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJ2rFYy i7p8rQow1KXi7GcG5LyEMB8GA1UdIwQYMBaAFFMw7u6w0KlTX6yFBec1hDr2zmCv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTk2Ny8wQkJGMjU3ODE1 QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFWTmZySVVGNXpXRU92Yk9Z SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6RHU3ckRRcVZOZnJJVUY1eldFT3ZiT1lLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTk2Ny8wQkJGMjU3ODE1QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFW TmZySVVGNXpXRU92Yk9ZSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2PitW2oT1DptIHcZPuZf3t9i6+K6dtHNs6Yx/HNBsX157ft8HryOM aqBxLTG146lt4W8RA0sZwELqm59wXcS99+qY2NeEUUgCDsaTrSx8HbyJYEijotj0 ShRXi3acugwocijnNRf3yqEoDoqbOaYyPM8aO6Nx0afJ2+93bQOKzXWq7aMTNVQx K8UxaN+fiA9IYnVU+kKN1EDLHKK46682wqm05yxPIqLHONZhm5CKMTCCWQcqKRKJ pscE97QyngJqQdPvVR45Lypw+b12uDBnOLk1yRLfWWH9H3KKK2Hy03DbE5TLATT6 yZQN8G7yNBhtn1YChLZRlXCSXXDppW6j -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:19 2025 by rpki-client