$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft File: UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json) Hash identifier: 6wJf7vuiTEpbHnB/e/N6s2NuV8Z+NvMGa9EmXlwKv/g= Subject key identifier: 94:A1:6B:93:94:67:F3:46:CE:46:60:71:BF:1F:19:7F:CF:93:CE:8C Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Certificate serial: 101B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft Manifest number: 1012 Signing time: Sun 02 Nov 2025 17:27:57 +0000 Manifest this update: Sun 02 Nov 2025 17:27:56 +0000 Manifest next update: Sun 09 Nov 2025 17:27:56 +0000 Files and hashes: 1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: r0Rmrd1qsSTfZBXGsU3klS2Ds78kA6HIA1ddqvlnUjE=) 2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: gPm95k9B9IRjr3SYjHp0eLr7oEtltC4Q30ofIoBPOx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4123 (0x101b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CA20, serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Validity Not Before: Nov 2 17:27:56 2025 GMT Not After : Nov 9 17:27:56 2025 GMT Subject: CN=6907949c-6f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:d4:b7:c1:54:82:f1:c4:4a:73:47:b0:34: 30:a1:e1:cc:56:3f:9b:4d:1b:04:84:e4:4a:c8:ff: 52:7c:00:81:e1:f6:34:3f:dd:29:20:e5:00:75:f0: 0e:2f:f1:34:88:7b:be:71:1b:c1:c4:b0:50:78:b4: 29:2c:79:b4:87:b6:4c:94:b1:9d:e5:b5:f9:27:31: a9:d6:7b:30:55:71:38:29:4c:85:9a:6c:18:85:f2: a7:b9:e6:51:d5:c9:b2:a4:14:17:a6:73:fb:56:a0: 37:6e:6b:26:ed:e0:4b:54:a2:70:b5:5b:6b:b5:84: 26:84:2f:1f:7a:40:ab:a9:46:c7:5e:c6:3e:1a:1f: a0:3e:82:95:c4:fa:3f:12:5d:61:f6:fc:88:86:6c: f8:4a:48:00:07:25:69:b0:a6:10:e9:3a:6f:cf:75: c3:c1:97:06:5f:a7:e9:ed:a6:d4:17:2c:fe:da:b6: 61:00:de:af:7a:62:35:8c:25:a0:be:93:40:19:46: e7:a1:49:d1:ae:25:ab:86:c0:9c:64:8b:fa:2b:09: 1b:7c:58:3b:7e:33:09:16:92:39:37:4f:0f:64:67: 80:c7:94:46:80:3e:64:0a:da:7c:70:94:98:bd:fa: ad:22:04:34:08:3f:16:0e:21:09:87:95:8b:47:dc: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A1:6B:93:94:67:F3:46:CE:46:60:71:BF:1F:19:7F:CF:93:CE:8C X509v3 Authority Key Identifier: keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:af:42:a6:e0:75:11:7d:74:17:2f:82:b5:6f:b3:12:4f:03: 59:90:c8:71:ca:59:19:61:e3:ce:c8:98:57:fe:a2:41:19:fd: 99:e0:80:df:a0:0b:b2:30:86:55:2b:61:32:f4:33:0a:aa:d1: de:33:70:89:04:32:18:cf:3a:de:42:7b:b3:b1:92:e3:24:74: 7f:00:5f:81:14:91:d6:91:24:79:5a:0e:60:8f:4e:2a:c0:7d: 99:2f:ec:e1:2f:d2:cb:c9:de:75:82:48:3b:c6:4b:70:36:39: 50:c6:0c:58:59:9e:a8:a1:6e:bc:06:1b:cb:2c:99:c6:0f:d7: 5a:8b:6f:23:ba:6e:a7:82:70:3b:73:e5:cd:ed:96:83:3f:93: 30:bb:f7:a6:96:6a:2a:0c:06:fb:28:78:81:0c:b9:fe:7c:7b: 4f:9b:e7:b3:81:45:12:bd:9d:00:ec:98:d0:cd:3b:fd:df:bb: 4f:da:a8:b7:53:2e:4b:9f:f6:1c:4b:31:9f:32:d5:5f:3b:d3: dc:a1:47:ab:47:e9:cd:3e:0d:5f:04:1b:90:8b:07:55:9c:cd: c5:ef:37:29:1c:c7:3a:a5:ef:93:72:4d:1a:ec:e1:fb:04:7d: 3a:f0:ca:b0:bc:7a:d8:c0:22:56:36:57:3d:ff:d1:a1:d5:20: 80:a7:96:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNBMjAxMTAvBgNVBAUTKDUyRTE2QTlCODlBRUM4MkEwQ0YwODVDRjVBRTdEQzNF QjA4RjBDOTEwHhcNMjUxMTAyMTcyNzU2WhcNMjUxMTA5MTcyNzU2WjAYMRYwFAYD VQQDEw02OTA3OTQ5Yy02ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIjUt8FUgvHESnNHsDQwoeHMVj+bTRsEhORKyP9SfACB4fY0P90pIOUAdfAO L/E0iHu+cRvBxLBQeLQpLHm0h7ZMlLGd5bX5JzGp1nswVXE4KUyFmmwYhfKnueZR 1cmypBQXpnP7VqA3bmsm7eBLVKJwtVtrtYQmhC8fekCrqUbHXsY+Gh+gPoKVxPo/ El1h9vyIhmz4SkgAByVpsKYQ6Tpvz3XDwZcGX6fp7abUFyz+2rZhAN6vemI1jCWg vpNAGUbnoUnRriWrhsCcZIv6KwkbfFg7fjMJFpI5N08PZGeAx5RGgD5kCtp8cJSY vfqtIgQ0CD8WDiEJh5WLR9xIjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSha5OU Z/NGzkZgcb8fGX/Pk86MMB8GA1UdIwQYMBaAFFLhapuJrsgqDPCFz1rn3D6wjwyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0EyMC8yMjY2QUUyMjU1 MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlDb004SVhQV3VmY1ByQ1BE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1RnFtNG11eUNvTThJWFBXdWZjUHJDUERKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0EyMC8yMjY2QUUyMjU1MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlD b004SVhQV3VmY1ByQ1BESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqr0Km4HURfXQXL4K1b7MSTwNZkMhxylkZYePOyJhX/qJBGf2Z4IDf oAuyMIZVK2Ey9DMKqtHeM3CJBDIYzzreQnuzsZLjJHR/AF+BFJHWkSR5Wg5gj04q wH2ZL+zhL9LLyd51gkg7xktwNjlQxgxYWZ6ooW68BhvLLJnGD9dai28jum6ngnA7 c+XN7ZaDP5Mwu/emlmoqDAb7KHiBDLn+fHtPm+ezgUUSvZ0A7JjQzTv937tP2qi3 Uy5Ln/YcSzGfMtVfO9PcoUerR+nNPg1fBBuQiwdVnM3F7zcpHMc6pe+Tck0a7OH7 BH068MqwvHrYwCJWNlc9/9Gh1SCAp5Y2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:52 2025 by rpki-client