$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: wYvMhd6MQNMRtjli10+Xe82RkOBtFK5HAYptR3NEo0w= Subject key identifier: F2:7A:46:4B:06:F0:0E:A6:8B:5D:C1:7A:B4:98:8E:BB:16:69:24:89 Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: 0100 Signing time: Wed 05 Nov 2025 05:16:18 +0000 Manifest this update: Wed 05 Nov 2025 05:16:18 +0000 Manifest next update: Wed 12 Nov 2025 05:16:18 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: ykqozex9L9+j/hIHboEemoSGxNO6xhqhQXZK/hmPoxc=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324 Validity Not Before: Nov 5 05:16:18 2025 GMT Not After : Nov 12 05:16:18 2025 GMT Subject: CN=690adda2-9b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:e2:d6:a6:fd:e9:bc:e5:63:f8:ed:7b:4a: e3:72:89:3a:6a:9a:9d:3b:d7:3e:99:a6:cc:ed:8e: 2b:5b:71:88:44:61:6c:9f:63:62:8f:ec:96:34:14: 9e:2c:09:f0:f7:19:38:f0:40:3e:d1:5e:4e:ee:f3: 47:91:15:46:db:46:67:07:f5:c1:a3:5c:a0:98:e1: 38:cf:88:d7:bd:e5:9f:af:ec:49:3d:a5:4f:94:2b: 91:ea:e0:1b:a9:86:66:0d:dd:c3:a4:43:8c:ba:32: 87:53:32:d4:0c:ba:a9:af:7d:b4:5e:59:dd:f4:dd: b2:5e:35:27:94:2c:ba:2a:7c:73:5a:4d:9d:59:2e: f5:7a:d0:42:0d:e3:ac:34:12:96:f7:00:a7:01:00: 8b:f7:e1:69:05:5f:e2:f9:84:8f:7c:69:fd:94:bb: 01:1f:2d:b9:c9:72:ce:91:5e:a1:c1:18:72:8a:a1: 68:44:0f:c5:a9:0b:6d:58:d1:30:07:17:cb:0d:87: ff:79:f9:d9:6c:44:3a:be:42:ba:dd:91:67:b0:78: 69:c0:57:de:06:9b:1c:1b:92:f9:d2:39:80:2c:d7: c9:3a:53:41:49:d3:cf:99:66:a9:1f:f6:f3:97:7a: 39:9d:3f:63:00:3c:d7:39:aa:2f:ed:86:37:1f:0d: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7A:46:4B:06:F0:0E:A6:8B:5D:C1:7A:B4:98:8E:BB:16:69:24:89 X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c9:fe:a7:57:78:be:52:66:55:42:ef:c4:3e:87:ed:8d:02: de:1a:c7:03:27:61:21:16:22:2d:c2:49:04:af:14:80:db:9f: 5b:85:1e:d4:34:9a:e1:15:a0:3f:99:f2:a0:c6:93:9b:64:a9: 7b:4c:43:76:d5:8c:28:9c:67:51:63:e4:e4:76:0b:b7:b7:6e: 45:0c:a2:a2:ba:09:78:9e:fd:0a:b4:ff:68:ff:4f:ec:11:44: f8:c4:96:ff:93:1c:8c:78:64:cf:d2:83:5d:56:c1:2b:05:ef: 53:0d:dc:1c:a0:98:2e:8f:1c:8b:27:5d:2b:39:ab:93:4e:f8: 07:47:73:af:b2:4c:72:de:b3:23:89:aa:f2:13:4f:7a:2d:67: 1e:21:a7:80:6f:cf:43:e7:6f:3f:1d:d1:fc:41:b2:e4:90:19: 00:73:7c:ea:94:7c:65:f6:a5:83:aa:d2:2d:64:b7:53:d3:29: bf:8d:32:6a:48:cf:a8:2d:47:4b:b2:62:9d:f7:82:c2:22:48: 95:65:c9:77:1c:25:20:2f:34:37:e4:f4:6b:55:76:ed:94:16: 33:7c:fa:89:3e:19:5e:19:1d:e0:da:7a:c5:83:ab:80:95:c9: 96:4c:34:3f:da:56:c3:d5:b9:5c:6f:c2:4a:d8:da:3f:79:84: 0e:48:25:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0 NjU0MTQzMjQwHhcNMjUxMTA1MDUxNjE4WhcNMjUxMTEyMDUxNjE4WjAYMRYwFAYD VQQDEw02OTBhZGRhMi05YjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtI/i1qb96bzlY/jte0rjcok6apqdO9c+mabM7Y4rW3GIRGFsn2Nij+yWNBSe LAnw9xk48EA+0V5O7vNHkRVG20ZnB/XBo1ygmOE4z4jXveWfr+xJPaVPlCuR6uAb qYZmDd3DpEOMujKHUzLUDLqpr320Xlnd9N2yXjUnlCy6KnxzWk2dWS71etBCDeOs NBKW9wCnAQCL9+FpBV/i+YSPfGn9lLsBHy25yXLOkV6hwRhyiqFoRA/FqQttWNEw BxfLDYf/efnZbEQ6vkK63ZFnsHhpwFfeBpscG5L50jmALNfJOlNBSdPPmWapH/bz l3o5nT9jADzXOaov7YY3Hw2h5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJ6RksG 8A6mi13BerSYjrsWaSSJMB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi83ODk3RjgxNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6 a0o5Wkhoa0pYeUpHVkJReVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIyf6nV3i+UmZVQu/EPoftjQLeGscDJ2EhFiItwkkErxSA259bhR7U NJrhFaA/mfKgxpObZKl7TEN21YwonGdRY+Tkdgu3t25FDKKiugl4nv0KtP9o/0/s EUT4xJb/kxyMeGTP0oNdVsErBe9TDdwcoJgujxyLJ10rOauTTvgHR3Ovskxy3rMj iaryE096LWceIaeAb89D528/HdH8QbLkkBkAc3zqlHxl9qWDqtItZLdT0ym/jTJq SM+oLUdLsmKd94LCIkiVZcl3HCUgLzQ35PRrVXbtlBYzfPqJPhleGR3g2nrFg6uA lcmWTDQ/2lbD1blcb8JK2No/eYQOSCXK -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:56 2025 by rpki-client