$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft File: Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json) Hash identifier: ESBYMDBCHFBwAsXt2XhKkKrEkKsQA6me3gumNS/yhoQ= Subject key identifier: 93:3B:61:45:5E:2F:5C:77:17:97:7D:11:61:93:B3:EF:2E:13:35:F2 Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Certificate serial: 069E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft Manifest number: 0695 Signing time: Tue 04 Nov 2025 22:30:00 +0000 Manifest this update: Tue 04 Nov 2025 22:29:59 +0000 Manifest next update: Tue 11 Nov 2025 22:29:59 +0000 Files and hashes: 1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: YBRjaxLh2RwyLtn8ITAPT0gc2in1YUHX9am3oFppUvs=) 2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: rP6Pu7EfL4ZTfd4hkNZXRMND1x04kCFhfmQKKfFcDnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Validity Not Before: Nov 4 22:29:59 2025 GMT Not After : Nov 11 22:29:59 2025 GMT Subject: CN=690a7e68-bd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:5a:3f:10:91:f1:38:a3:91:9f:4a:f5:8a: 1d:ac:35:72:ce:40:ba:1a:5f:4e:33:31:49:72:46: 81:27:2d:46:66:40:00:bb:93:8f:fe:e3:90:4b:b7: 95:f4:83:2b:d4:ee:a9:4d:2b:cd:ec:15:b1:47:ff: 73:a9:14:ab:3a:43:43:29:7a:24:12:79:dc:d9:94: e6:b7:17:0d:96:dd:98:cb:c5:15:82:26:ab:30:50: 9d:2a:94:ce:a0:44:a8:64:0c:1b:7c:5e:a0:cd:cf: 63:da:c1:fb:fd:79:98:b4:da:e1:a5:b1:63:18:66: 41:fc:c4:42:a0:1b:c7:eb:d7:d6:62:83:b5:87:61: c1:c5:87:4b:ea:c2:6f:d2:1f:78:7b:a1:c0:d0:88: 59:6c:30:40:c8:6c:ef:5f:4f:58:70:8c:b7:1e:76: db:b4:6a:73:c0:be:c3:48:e3:ad:e2:43:a0:71:5f: f9:4a:56:ae:ef:90:16:28:11:b1:05:ca:ad:df:39: b7:54:f5:cf:58:f3:64:2e:1a:0f:3a:43:61:fd:7e: fe:f2:c5:51:88:12:40:44:0f:1b:f7:f1:03:95:54: 79:01:41:f3:c9:7f:2c:6b:62:e8:7f:62:9f:9f:54: 42:d7:79:b9:f2:60:bb:23:f5:cd:c2:23:93:ab:99: 30:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3B:61:45:5E:2F:5C:77:17:97:7D:11:61:93:B3:EF:2E:13:35:F2 X509v3 Authority Key Identifier: keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:42:bd:24:9f:9a:49:c8:62:1f:54:20:a7:af:7e:c8:40:27: c9:31:61:cf:7c:20:82:25:21:62:27:1b:b0:33:08:53:fe:2e: 66:57:dc:59:8f:6e:6b:2f:0a:84:86:32:80:ac:fe:0e:2b:78: 4d:16:d2:fa:01:74:f6:ac:91:66:fa:68:aa:a5:69:f3:84:38: e5:eb:75:5e:ab:1d:34:76:9a:16:28:08:05:c3:b9:62:2e:21: b4:ba:4d:5e:29:b8:90:ec:ed:5f:4f:95:2e:f7:c6:83:a1:ea: 20:39:bd:5c:b4:e8:f9:e8:d2:4c:e9:c8:10:5b:44:9e:79:5d: ec:4f:62:06:98:2d:b4:ba:92:9f:bf:f1:4e:a1:1f:d2:6a:8a: 1a:08:ab:ac:e9:38:37:e0:76:ec:70:00:1c:92:fc:6f:eb:7d: 3a:c6:45:0a:7c:cf:c1:b0:5b:e2:95:6a:0b:43:29:8c:ad:fe: 95:30:7b:89:ae:59:98:0d:5b:9a:cc:68:e8:39:0c:89:ff:13: c3:6b:82:9a:08:fe:77:64:96:8d:c9:aa:c4:b8:04:6f:93:6a: 95:6f:ba:0e:b7:07:ad:e6:e1:2e:8d:e7:59:a8:a8:23:ca:4f: 33:02:18:f1:cd:bc:6b:79:d0:cc:f1:3f:2a:57:77:bd:02:35: df:ea:19:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCMzMxMTAvBgNVBAUTKDUxQUVCQTIzRkI3NDVBNTUzQTVFNDk5NkRGMUM4MTcz NDczRjE3OTgwHhcNMjUxMTA0MjIyOTU5WhcNMjUxMTExMjIyOTU5WjAYMRYwFAYD VQQDEw02OTBhN2U2OC1iZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e9aPxCR8TijkZ9K9YodrDVyzkC6Gl9OMzFJckaBJy1GZkAAu5OP/uOQS7eV 9IMr1O6pTSvN7BWxR/9zqRSrOkNDKXokEnnc2ZTmtxcNlt2Yy8UVgiarMFCdKpTO oESoZAwbfF6gzc9j2sH7/XmYtNrhpbFjGGZB/MRCoBvH69fWYoO1h2HBxYdL6sJv 0h94e6HA0IhZbDBAyGzvX09YcIy3HnbbtGpzwL7DSOOt4kOgcV/5Slau75AWKBGx Bcqt3zm3VPXPWPNkLhoPOkNh/X7+8sVRiBJARA8b9/EDlVR5AUHzyX8sa2Lof2Kf n1RC13m58mC7I/XNwiOTq5kwYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM7YUVe L1x3F5d9EWGTs+8uEzXyMB8GA1UdIwQYMBaAFFGuuiP7dFpVOl5Jlt8cgXNHPxeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9DRDM1REIxQTkx MjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFdsVTZYa21XM3h5QmMwY19G NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhNjZJX3QwV2xVNlhrbVczeHlCYzBjX0Y1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0IzMy9DRDM1REIxQTkxMjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFds VTZYa21XM3h5QmMwY19GNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpQr0kn5pJyGIfVCCnr37IQCfJMWHPfCCCJSFiJxuwMwhT/i5mV9xZ j25rLwqEhjKArP4OK3hNFtL6AXT2rJFm+miqpWnzhDjl63Veqx00dpoWKAgFw7li LiG0uk1eKbiQ7O1fT5Uu98aDoeogOb1ctOj56NJM6cgQW0SeeV3sT2IGmC20upKf v/FOoR/SaooaCKus6Tg34HbscAAckvxv6306xkUKfM/BsFvilWoLQymMrf6VMHuJ rlmYDVuazGjoOQyJ/xPDa4KaCP53ZJaNyarEuARvk2qVb7oOtwet5uEujedZqKgj yk8zAhjxzbxredDM8T8qV3e9AjXf6hmy -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:50 2025 by rpki-client