$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: GSQgSQW2zewhmnqZkrznvNT026Dp66mp7COQlT8yveY= Subject key identifier: 70:9D:AD:CB:A6:38:EA:54:78:B4:2C:0E:34:19:BD:53:E3:93:2F:4C Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 021A Signing time: Mon 03 Nov 2025 02:09:32 +0000 Manifest this update: Mon 03 Nov 2025 02:09:31 +0000 Manifest next update: Mon 10 Nov 2025 02:09:31 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: O6LiZWGC05lSQa5Xxgg8JV7vKWkJ7C+yBw9n3cR2yys=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: WWuM765nOGpRARWICFdR3WrAuYsh9pXJlLffK+z2xm8=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: WdWxS6dCM7XMQ2LQO0o9GTTA7XcowvkD2iePT2v6AE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Nov 3 02:09:31 2025 GMT Not After : Nov 10 02:09:31 2025 GMT Subject: CN=69080edc-935b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ea:7a:c2:30:77:bf:89:ee:59:06:c1:69:d4: 86:a8:97:a5:7d:dc:92:5c:0e:c7:a0:0b:f0:b7:db: 1a:3d:16:af:98:61:a9:b3:f4:2f:7f:8e:89:6e:eb: b8:eb:36:64:57:de:2c:78:f3:8d:d9:3a:fa:e7:36: 4b:6f:a7:98:a2:ce:29:70:49:da:22:02:3c:d1:1e: fc:37:88:3d:77:ca:c0:fb:f8:03:49:3e:e9:df:db: d7:fa:25:2e:07:52:a7:c4:2e:07:55:b7:be:1c:e3: 51:93:95:c0:89:1b:2a:0f:10:6a:90:a6:30:6c:c8: 6e:50:43:9f:f8:50:84:0b:ef:b4:16:dd:35:f5:1a: ef:ba:92:a8:34:63:ff:0e:4b:f1:73:28:51:ab:b5: ad:7e:98:c9:d1:cf:2f:2e:80:34:b6:b8:43:08:35: d3:11:d6:b3:af:dc:72:4f:e9:eb:f9:15:8d:01:cb: 43:ab:8e:8c:51:60:3d:66:87:bd:7e:bf:2d:32:6d: 4c:05:3d:df:3d:1f:48:63:e3:09:50:60:11:e6:dc: c3:a9:1a:9a:03:f5:17:84:fe:fe:2c:32:f0:b6:d5: d4:c2:23:ac:31:7f:9f:6c:07:0d:d1:9e:22:18:3d: 81:a9:f3:22:24:94:8a:66:85:04:bc:7d:dc:35:73: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9D:AD:CB:A6:38:EA:54:78:B4:2C:0E:34:19:BD:53:E3:93:2F:4C X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:33:c0:1c:2e:e7:d1:f7:05:26:ed:9c:9f:18:c8:eb:d7:03: 43:88:5f:81:87:8c:83:7b:f8:d5:9e:66:59:af:b7:c8:51:7c: 7a:9e:b5:06:80:52:e9:e7:2f:6a:a5:43:7c:40:a1:6c:13:64: a4:bf:86:c5:5f:29:1d:09:ef:14:1b:51:21:b0:2d:ee:55:fb: e8:cb:f8:c9:d2:e4:1c:4a:c2:91:0f:b7:de:66:73:4a:27:37: 15:3f:79:b4:dc:f5:bd:db:c7:f3:0c:44:5d:5e:76:9d:af:8b: e1:d2:f8:84:3e:b0:39:89:7e:17:39:12:86:21:fa:d3:a2:02: 42:79:fc:e9:d8:fa:47:44:3e:8f:ac:a9:34:54:a0:ff:56:c7: ca:71:7e:b8:8b:18:42:91:7a:12:25:45:61:f8:ba:19:5d:87: 7a:14:32:56:eb:15:3b:83:17:36:69:86:1a:07:21:5e:8b:58: a0:6d:ed:be:08:a0:34:ef:ed:85:1c:56:5d:e1:1e:d0:76:af: 0f:9b:e4:f9:06:9a:ca:cf:c6:34:6d:d6:dc:7e:52:ac:19:bf: f8:b5:a8:89:a3:6c:d3:16:a8:e2:e7:bc:32:ea:9a:ab:eb:7a: dd:e2:8e:49:ac:d5:a3:99:3f:d2:f1:3c:34:15:92:ec:a8:03: f4:50:b7:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjUxMTAzMDIwOTMxWhcNMjUxMTEwMDIwOTMxWjAYMRYwFAYD VQQDEw02OTA4MGVkYy05MzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+p6wjB3v4nuWQbBadSGqJelfdySXA7HoAvwt9saPRavmGGps/Qvf46Jbuu4 6zZkV94sePON2Tr65zZLb6eYos4pcEnaIgI80R78N4g9d8rA+/gDST7p39vX+iUu B1KnxC4HVbe+HONRk5XAiRsqDxBqkKYwbMhuUEOf+FCEC++0Ft019RrvupKoNGP/ DkvxcyhRq7WtfpjJ0c8vLoA0trhDCDXTEdazr9xyT+nr+RWNActDq46MUWA9Zoe9 fr8tMm1MBT3fPR9IY+MJUGAR5tzDqRqaA/UXhP7+LDLwttXUwiOsMX+fbAcN0Z4i GD2BqfMiJJSKZoUEvH3cNXNg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCdrcum OOpUeLQsDjQZvVPjky9MMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdM8AcLufR9wUm7ZyfGMjr1wNDiF+Bh4yDe/jVnmZZr7fIUXx6nrUG gFLp5y9qpUN8QKFsE2Skv4bFXykdCe8UG1EhsC3uVfvoy/jJ0uQcSsKRD7feZnNK JzcVP3m03PW928fzDERdXnadr4vh0viEPrA5iX4XORKGIfrTogJCefzp2PpHRD6P rKk0VKD/VsfKcX64ixhCkXoSJUVh+LoZXYd6FDJW6xU7gxc2aYYaByFei1igbe2+ CKA07+2FHFZd4R7Qdq8Pm+T5BprKz8Y0bdbcflKsGb/4taiJo2zTFqji57wy6pqr 63rd4o5JrNWjmT/S8Tw0FZLsqAP0ULes -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:36 2025 by rpki-client