$ rpki-client -vvf rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft File: UHRCEm0jxuW-SuMZdJsnbhcum1w.mft (raw, json) Hash identifier: YCQfllh1i1lAxJgr0dQOaum3AcLSV8bbQLmCnY2yN7A= Subject key identifier: A5:5A:3E:8E:D4:0C:D7:51:F4:EC:5B:28:23:B4:34:60:EA:85:DF:25 Authority key identifier: 50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C Certificate issuer: /CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C Certificate serial: 0E9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft Manifest number: 0E9A Signing time: Sun 02 Nov 2025 17:40:56 +0000 Manifest this update: Sun 02 Nov 2025 17:40:55 +0000 Manifest next update: Sun 09 Nov 2025 17:40:55 +0000 Files and hashes: 1: UHRCEm0jxuW-SuMZdJsnbhcum1w.crl (hash: 5sp4IkCodFcIPPv5t317QLy9PdT1gRAyKMkcuxPTrgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3738 (0xe9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790ED, serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C Validity Not Before: Nov 2 17:40:55 2025 GMT Not After : Nov 9 17:40:55 2025 GMT Subject: CN=690797a8-f42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:9b:a4:60:a1:0b:54:64:7b:d6:1c:91:96: f6:56:98:23:63:bc:00:88:aa:ea:1b:50:05:df:10: 86:16:07:69:94:15:63:5f:52:53:8e:56:b1:37:d3: a6:24:a1:ab:f0:e7:45:a0:cc:ba:9c:96:a1:12:a7: f2:b0:33:21:6b:85:16:13:9b:47:75:76:f9:77:e7: c8:29:62:55:86:60:eb:90:67:85:bb:9d:7d:d4:08: c5:c1:d8:41:8e:6e:72:e3:4d:77:27:67:1f:df:78: 06:cf:2b:04:e4:24:e8:ea:40:f5:a2:bf:d6:7a:31: e1:55:0b:55:75:f3:2f:4c:68:36:7f:c5:da:a1:3e: 39:e9:1c:17:78:2c:de:c9:0e:37:a9:2e:c1:5d:af: 50:b8:41:9a:b6:db:1a:f8:16:df:33:3d:f7:5a:65: c4:f5:54:0f:17:7c:ca:c4:39:85:f2:6b:52:e2:a3: c7:dd:ec:7f:68:3d:de:be:10:ee:27:1e:e1:f1:bb: 86:9f:8f:46:e8:fc:a3:12:33:e8:6c:1c:bd:83:54: 02:b2:bf:2c:c4:fe:7d:aa:64:40:3f:6e:6f:eb:33: c3:5f:84:1c:40:36:a4:ba:f2:d9:08:82:5f:85:d2: 2e:98:3d:7c:4d:93:ab:04:44:ad:11:fb:e0:49:ae: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5A:3E:8E:D4:0C:D7:51:F4:EC:5B:28:23:B4:34:60:EA:85:DF:25 X509v3 Authority Key Identifier: keyid:50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:eb:76:c0:b8:e2:c0:04:1b:76:8c:1a:76:36:4c:6f:a9:4d: d0:96:d2:bc:c6:08:60:a7:d7:2e:cd:87:ce:b2:41:d9:73:7b: 87:36:c0:8b:44:67:8b:3a:b6:a9:81:58:1f:03:44:57:d4:e0: d7:35:51:ef:f1:6d:32:e0:c4:6c:f0:ee:91:ae:e5:67:22:e1: 02:a9:32:fc:5e:68:17:3f:49:78:58:32:75:58:d5:93:28:d4: 62:a8:8e:3e:0a:9d:1f:7e:0e:17:70:79:cc:97:96:58:ff:83: 85:e0:99:91:9c:32:2e:bb:81:1c:16:24:06:f3:d7:2c:5c:fb: 3f:4d:47:31:74:e9:8a:96:a1:ba:7b:a2:e7:a2:0e:29:77:df: 63:4a:a2:1e:05:2e:24:2c:9f:10:1a:04:ae:8f:83:f8:af:58: ee:62:92:2d:1c:0d:de:e7:d3:6d:8b:6c:7e:db:0a:d6:31:e8: 33:ad:07:d1:f3:ac:80:91:79:db:57:de:03:a4:7c:c9:d4:8f: 80:c9:27:57:fb:d5:c6:f0:ee:f5:ab:af:7f:98:f8:2b:e4:46: 47:13:0d:5c:10:e8:39:27:45:46:b0:ac:a2:e4:5f:06:98:af: 9e:03:26:7a:2b:49:aa:e3:bc:0a:b7:0f:d3:2f:f5:9f:ad:8b: 83:e2:a8:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwRUQxMTAvBgNVBAUTKDUwNzQ0MjEyNkQyM0M2RTVCRTRBRTMxOTc0OUIyNzZF MTcyRTlCNUMwHhcNMjUxMTAyMTc0MDU1WhcNMjUxMTA5MTc0MDU1WjAYMRYwFAYD VQQDEw02OTA3OTdhOC1mNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTybpGChC1Rke9YckZb2VpgjY7wAiKrqG1AF3xCGFgdplBVjX1JTjlaxN9Om JKGr8OdFoMy6nJahEqfysDMha4UWE5tHdXb5d+fIKWJVhmDrkGeFu5191AjFwdhB jm5y4013J2cf33gGzysE5CTo6kD1or/WejHhVQtVdfMvTGg2f8XaoT456RwXeCze yQ43qS7BXa9QuEGattsa+BbfMz33WmXE9VQPF3zKxDmF8mtS4qPH3ex/aD3evhDu Jx7h8buGn49G6PyjEjPobBy9g1QCsr8sxP59qmRAP25v6zPDX4QcQDakuvLZCIJf hdIumD18TZOrBEStEfvgSa4ZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVaPo7U DNdR9OxbKCO0NGDqhd8lMB8GA1UdIwQYMBaAFFB0QhJtI8blvkrjGXSbJ24XLptc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBFRC8wQUJCODY0MjlE MUIxMUU5QkRENkU1NzRDNEY5QUUwMi9VSFJDRW0wanh1Vy1TdU1aZEpzbmJoY3Vt MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIUkNFbTBqeHVXLVN1TVpkSnNuYmhjdW0xdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBFRC8wQUJCODY0MjlEMUIxMUU5QkRENkU1NzRDNEY5QUUwMi9VSFJDRW0wanh1 Vy1TdU1aZEpzbmJoY3VtMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy63bAuOLABBt2jBp2NkxvqU3QltK8xghgp9cuzYfOskHZc3uHNsCL RGeLOrapgVgfA0RX1ODXNVHv8W0y4MRs8O6RruVnIuECqTL8XmgXP0l4WDJ1WNWT KNRiqI4+Cp0ffg4XcHnMl5ZY/4OF4JmRnDIuu4EcFiQG89csXPs/TUcxdOmKlqG6 e6Lnog4pd99jSqIeBS4kLJ8QGgSuj4P4r1juYpItHA3e59Nti2x+2wrWMegzrQfR 86yAkXnbV94DpHzJ1I+AySdX+9XG8O71q69/mPgr5EZHEw1cEOg5J0VGsKyi5F8G mK+eAyZ6K0mq47wKtw/TL/WfrYuD4qiR -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:56 2025 by rpki-client