$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft File: UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json) Hash identifier: OgVEG3/h2KTCHkRZdeErlMm5rB2PZMMZzT7OB+KM1r4= Subject key identifier: 4A:F6:43:01:44:C9:89:88:F7:9C:E8:3A:86:63:7A:43:6C:58:5A:91 Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4 Certificate issuer: /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft Manifest number: 06 Signing time: Mon 03 Nov 2025 08:03:14 +0000 Manifest this update: Mon 03 Nov 2025 08:03:13 +0000 Manifest next update: Mon 10 Nov 2025 08:03:13 +0000 Files and hashes: 1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: lMM1TZY4XC8xGMDgY+22Y+POo0+F7KYLILdKAOV1j8U=) 2: 8BA5F114B33C11F0B890EE54C4F9AE02.roa (hash: NE2eXCQMzk7qVx293u2lcJ27LjuwxAu1DrsesQw1Ntw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4 Validity Not Before: Nov 3 08:03:13 2025 GMT Not After : Nov 10 08:03:13 2025 GMT Subject: CN=690861c2-8b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:98:31:97:9b:fb:0f:22:3e:76:af:6c:7c:7a: 9b:eb:47:bf:75:63:2f:4b:55:bb:7f:95:34:c5:05: 24:40:08:ad:ce:ef:10:80:c5:0d:ff:51:db:28:b0: d9:d1:03:ed:d4:e2:80:70:2a:c2:61:29:fb:ab:aa: ac:be:3f:32:51:33:15:da:df:9b:13:a5:57:ff:c7: 38:9a:3c:9c:42:90:1e:b9:59:7e:00:73:57:cf:ae: 27:c7:20:80:68:37:21:39:fe:0c:94:eb:30:cb:fd: fa:e7:ca:74:07:a5:94:8c:af:1d:2c:8d:60:a7:cc: eb:50:f7:08:98:76:88:de:1f:3d:0b:a7:de:5c:24: b0:58:20:6c:fd:d8:e3:fa:2d:97:6e:dc:da:08:8b: d4:b3:5c:81:c1:ab:85:e8:90:02:8b:0b:73:af:b4: 42:f2:18:77:b9:15:62:40:70:a5:1e:80:13:cf:95: 1a:52:11:15:36:e4:53:8d:dc:63:03:40:8f:2d:2e: 9b:c3:fc:f3:80:37:cf:33:ab:42:a9:c8:34:e4:ea: 7b:d6:1e:33:97:41:1e:cf:0e:00:99:cb:1d:e1:72: 4e:90:37:16:fc:b9:83:15:3d:8f:59:99:ce:e0:b5: b0:d4:df:82:27:88:7c:25:89:d5:b2:cf:a6:13:62: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F6:43:01:44:C9:89:88:F7:9C:E8:3A:86:63:7A:43:6C:58:5A:91 X509v3 Authority Key Identifier: keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:50:5b:e3:82:fa:e4:c3:07:cd:b5:fc:61:7b:7e:ef:8e:4c: 74:c2:3c:5a:ac:93:39:27:b8:09:f8:db:38:1a:e2:ea:80:70: 4d:1a:10:e2:66:d3:3f:e2:db:ed:08:ea:5f:e1:7d:c2:74:35: dc:11:d1:12:32:fb:dc:46:c5:1f:e0:58:3a:4b:8a:64:d3:1f: 1f:4b:8c:46:d3:ca:97:07:8b:ba:7d:d9:8c:49:7b:74:1c:f2: 52:a1:25:91:86:88:d7:d7:94:65:56:c1:3e:20:72:41:d5:08: ad:01:a6:1a:60:2d:32:99:2a:45:1d:4d:85:73:9e:5d:5f:b8: 91:53:3f:76:1d:5b:38:93:55:00:79:4c:25:ea:f9:47:a0:57: 66:07:3c:24:a8:ba:76:06:9b:53:2e:b3:72:7d:98:70:26:03: c7:4a:4e:eb:ad:54:df:b7:13:2c:b9:fc:02:dc:3c:3c:7e:2d: 4c:e0:56:60:b6:f6:3c:5c:5c:c6:e3:12:14:db:52:33:22:17: e9:88:33:5b:62:b2:bd:53:af:84:3b:e6:92:80:91:59:e7:88: c5:a8:72:d8:1f:90:82:90:0e:e6:29:3c:d8:ce:d1:f0:c8:f5: 6c:e9:c1:3b:22:13:39:66:1f:ae:85:4d:60:3d:7f:45:a6:91: 09:50:db:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MERERDExMC8GA1UEBRMoNTFBNjhFREQyREYyQjdCRkY2N0E2NjEwOUJENzM5Q0E5 QkIyMzhDNDAeFw0yNTExMDMwODAzMTNaFw0yNTExMTAwODAzMTNaMBgxFjAUBgNV BAMTDTY5MDg2MWMyLThiMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfmDGXm/sPIj52r2x8epvrR791Yy9LVbt/lTTFBSRACK3O7xCAxQ3/UdsosNnR A+3U4oBwKsJhKfurqqy+PzJRMxXa35sTpVf/xziaPJxCkB65WX4Ac1fPrifHIIBo NyE5/gyU6zDL/frnynQHpZSMrx0sjWCnzOtQ9wiYdojeHz0Lp95cJLBYIGz92OP6 LZdu3NoIi9SzXIHBq4XokAKLC3OvtELyGHe5FWJAcKUegBPPlRpSERU25FON3GMD QI8tLpvD/POAN88zq0KpyDTk6nvWHjOXQR7PDgCZyx3hck6QNxb8uYMVPY9Zmc7g tbDU34IniHwlidWyz6YTYngvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSvZDAUTJ iYj3nOg6hmN6Q2xYWpEwHwYDVR0jBBgwFoAUUaaO3S3yt7/2emYQm9c5ypuyOMQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwRERELzM0ODI0QjlFQjMz QzExRjBCOTVENDA1NEM0RjlBRTAyL1VhYU8zUzN5dDdfMmVtWVFtOWM1eXB1eU9N US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWFhTzNTM3l0N18yZW1ZUW05YzV5cHV5T01RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw RERELzM0ODI0QjlFQjMzQzExRjBCOTVENDA1NEM0RjlBRTAyL1VhYU8zUzN5dDdf MmVtWVFtOWM1eXB1eU9NUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJQW+OC+uTDB821/GF7fu+OTHTCPFqskzknuAn42zga4uqAcE0aEOJm 0z/i2+0I6l/hfcJ0NdwR0RIy+9xGxR/gWDpLimTTHx9LjEbTypcHi7p92YxJe3Qc 8lKhJZGGiNfXlGVWwT4gckHVCK0BphpgLTKZKkUdTYVznl1fuJFTP3YdWziTVQB5 TCXq+UegV2YHPCSounYGm1Mus3J9mHAmA8dKTuutVN+3Eyy5/ALcPDx+LUzgVmC2 9jxcXMbjEhTbUjMiF+mIM1tisr1Tr4Q75pKAkVnniMWoctgfkIKQDuYpPNjO0fDI 9WzpwTsiEzlmH66FTWA9f0WmkQlQ22A= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:42 2025 by rpki-client