$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft File: uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json) Hash identifier: EDuu+1kHHAMI9+vPlFip4cNo+wldpyxUxUVOT2idF/A= Subject key identifier: 4D:02:4E:97:FB:78:73:D3:05:F1:7B:30:53:46:F6:44:E4:A4:33:C9 Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Certificate serial: 0FDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft Manifest number: 0FCC Signing time: Sun 02 Nov 2025 17:30:33 +0000 Manifest this update: Sun 02 Nov 2025 17:30:33 +0000 Manifest next update: Sun 09 Nov 2025 17:30:33 +0000 Files and hashes: 1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: HkKfvgqLxS0Wyt9oESYaOXbpiCWzlKBTE+pXVtZ0Bg8=) 2: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: IofhJ7EiHeyM1r1MV+JctpkNg1pbQMhCCkdpR4fk3JY=) 3: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: WDBmQN8GrovE0YfJl6NcfDbYlw4MdWA6w33AFuBSc4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4058 (0xfda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Validity Not Before: Nov 2 17:30:33 2025 GMT Not After : Nov 9 17:30:33 2025 GMT Subject: CN=69079539-82b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:fe:4e:eb:bc:bc:d0:7b:c1:82:18:6f:20: ca:da:41:36:d7:6a:6d:ee:ca:92:0a:cb:df:3f:1f: 3d:56:8f:fa:66:09:44:e2:13:cf:8c:9b:ac:8e:e4: 9d:59:d5:d1:b7:a2:8e:cc:9c:d0:13:d4:35:23:d2: 21:92:78:22:77:1a:91:cc:47:a9:1c:9c:a1:d7:22: 4b:d0:36:7d:9a:e8:0b:94:42:bf:60:7f:ab:b1:d6: 6b:90:0b:aa:22:f1:ed:8a:f5:47:87:8d:09:9c:70: 0f:33:48:bf:07:05:41:a5:b8:32:5e:0c:78:cb:7f: 55:3b:65:78:c3:35:d4:09:ff:b7:7f:03:e0:20:83: 5d:82:4f:13:5a:35:12:e2:05:de:8a:83:a0:dc:60: fe:06:0f:95:9c:b2:d9:69:35:45:c0:84:47:aa:c9: 70:ec:87:d1:f5:ea:02:7d:89:cd:2d:ad:d6:02:23: 13:2a:c9:ae:c0:5f:de:f2:e7:33:24:6d:7a:a0:3a: a6:e5:8b:85:62:bb:06:d2:44:30:36:84:88:fe:a0: a7:b0:54:3d:34:4d:31:8e:06:50:b9:c8:8e:df:22: 82:ef:01:6a:70:a8:5b:05:e2:0f:62:3b:eb:d6:ae: b2:7b:e5:0a:20:fa:83:43:36:4b:1d:87:1a:3a:9e: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:02:4E:97:FB:78:73:D3:05:F1:7B:30:53:46:F6:44:E4:A4:33:C9 X509v3 Authority Key Identifier: keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:44:c9:af:56:41:03:6c:26:70:49:18:0b:81:f3:6c:16:89: 97:2b:76:5b:df:41:15:f3:74:46:3a:47:fa:06:4b:93:6a:bd: 01:1f:29:52:de:4f:75:58:f2:36:a4:16:7a:15:89:67:e6:53: 9c:ae:07:f4:ff:39:9b:7b:eb:a7:e3:a6:ab:40:c1:d5:6c:bc: 41:96:5d:16:88:68:a9:3d:55:b5:52:94:43:52:93:e7:9f:92: ec:09:a9:46:ba:f1:d0:1c:77:eb:78:84:a3:9e:5f:3d:25:55: 51:5c:a9:47:83:db:ff:6f:7c:8d:d3:14:fc:0b:a1:ef:bc:f6: 5b:86:64:1f:29:9f:92:c4:d1:de:16:26:49:b7:7a:a4:d5:e5: b6:ee:84:f4:b0:64:59:ff:5f:2b:29:b0:57:64:fe:21:9c:01: 5f:57:d9:40:0e:9c:a2:63:6d:e8:96:ce:8e:b6:d1:31:09:38: a5:ec:92:81:99:50:6e:39:61:c5:4a:f8:36:6f:68:b2:3c:12: 3e:b0:55:f7:40:c0:64:f8:12:88:2c:df:ae:7b:69:f4:23:77: ca:0f:bf:dd:f4:9a:d9:72:93:6a:b8:51:ce:6f:77:bb:92:05: f1:5e:86:4d:1f:2f:12:d1:ad:16:88:90:16:99:76:66:7a:20: fb:da:3b:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD QzE0MURGOEYwHhcNMjUxMTAyMTczMDMzWhcNMjUxMTA5MTczMDMzWjAYMRYwFAYD VQQDEw02OTA3OTUzOS04MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfr+Tuu8vNB7wYIYbyDK2kE212pt7sqSCsvfPx89Vo/6ZglE4hPPjJusjuSd WdXRt6KOzJzQE9Q1I9IhkngidxqRzEepHJyh1yJL0DZ9mugLlEK/YH+rsdZrkAuq IvHtivVHh40JnHAPM0i/BwVBpbgyXgx4y39VO2V4wzXUCf+3fwPgIINdgk8TWjUS 4gXeioOg3GD+Bg+VnLLZaTVFwIRHqslw7IfR9eoCfYnNLa3WAiMTKsmuwF/e8ucz JG16oDqm5YuFYrsG0kQwNoSI/qCnsFQ9NE0xjgZQuciO3yKC7wFqcKhbBeIPYjvr 1q6ye+UKIPqDQzZLHYcaOp7yNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0CTpf7 eHPTBfF7MFNG9kTkpDPJMB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlBMy83NjQzNUZFRTYzODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXho cXVoQmVVREtQbW5NRkIzNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChRMmvVkEDbCZwSRgLgfNsFomXK3Zb30EV83RGOkf6BkuTar0BHylS 3k91WPI2pBZ6FYln5lOcrgf0/zmbe+un46arQMHVbLxBll0WiGipPVW1UpRDUpPn n5LsCalGuvHQHHfreISjnl89JVVRXKlHg9v/b3yN0xT8C6HvvPZbhmQfKZ+SxNHe FiZJt3qk1eW27oT0sGRZ/18rKbBXZP4hnAFfV9lADpyiY23ols6OttExCTil7JKB mVBuOWHFSvg2b2iyPBI+sFX3QMBk+BKILN+ue2n0I3fKD7/d9JrZcpNquFHOb3e7 kgXxXoZNHy8S0a0WiJAWmXZmeiD72jsw -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:26 2025 by rpki-client