$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft File: U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json) Hash identifier: 7Iajpc8xZqRl5nq4pP+Q9dX/BzYwQsLIktklhhSaDl0= Subject key identifier: 26:1B:08:EC:81:65:F6:47:7D:D2:D4:D4:06:C6:EC:F6:65:FC:4B:60 Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft Manifest number: B8 Signing time: Mon 03 Nov 2025 06:04:30 +0000 Manifest this update: Mon 03 Nov 2025 06:04:29 +0000 Manifest next update: Mon 10 Nov 2025 06:04:29 +0000 Files and hashes: 1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: Gw8vDOWtKNhTdFk3EfP6P1MjTsigrU7IMqJayL2nL1o=) 2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Nov 3 06:04:29 2025 GMT Not After : Nov 10 06:04:29 2025 GMT Subject: CN=690845ee-2728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:7c:87:70:0c:12:f5:95:44:22:2b:cf:67: e9:f1:00:48:cf:bd:19:26:aa:76:7c:35:e2:1c:b2: 9c:bd:d8:db:a2:b7:f6:c0:d4:7e:23:cf:48:98:ef: c4:d1:6b:ec:34:99:65:1d:b3:2f:24:7a:2d:9b:42: b5:bb:4c:62:6a:48:39:d6:72:ac:4f:0e:51:4d:0d: 7d:da:1e:50:8d:65:a5:ec:05:35:c5:f1:88:3f:0c: e3:2a:02:7d:24:03:cb:c4:50:3d:8b:db:bc:b2:e0: f6:12:17:c4:90:32:1a:f1:42:f4:e9:c7:e9:dc:d7: f0:7d:45:be:2a:a5:f0:25:f0:77:fb:f1:d6:b6:ad: 08:f1:64:06:67:31:c0:90:af:97:9f:f7:db:82:49: cc:5c:2b:6a:1f:9d:35:79:24:47:4f:60:21:77:2e: 5a:a5:30:8a:d6:9d:4d:35:5e:8b:92:f7:d9:7a:eb: fb:a6:c0:3c:be:c4:cd:28:07:5a:17:95:2b:0e:64: fb:11:f4:7f:00:b2:3c:fc:e4:60:2d:bc:c2:61:4f: 3d:71:a0:b4:13:8e:05:0e:f4:52:5f:fe:88:b0:a7: 9c:7e:1c:ab:97:81:61:c4:d6:1f:c7:e8:1d:89:80: 3f:9d:ea:ce:d0:88:49:39:ef:e4:4e:fd:cc:6a:3a: 14:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1B:08:EC:81:65:F6:47:7D:D2:D4:D4:06:C6:EC:F6:65:FC:4B:60 X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:db:97:1b:af:44:ec:37:ad:ed:c5:0c:ed:81:d4:7a:1e:65: b0:5e:6c:7c:73:2d:28:27:34:a9:b6:0d:81:28:2c:d7:d9:8d: 4c:a2:70:de:0b:b5:48:02:63:6c:6f:c0:63:a7:2d:65:39:0f: bd:e0:91:04:b0:6a:92:5d:36:e8:e0:46:c7:fb:48:56:f9:91: 9e:e5:15:12:7c:29:78:6c:11:a9:79:1e:eb:2d:38:7d:0b:b9: 58:25:af:a8:09:e8:9f:5c:c7:d0:09:eb:d7:19:da:45:03:5d: c6:99:f0:55:ce:3b:d5:95:87:19:a2:ca:ee:8a:9f:51:15:57: 6a:95:28:13:fd:26:43:e7:e4:23:b5:9c:77:d7:31:db:a9:44: 37:bc:b9:fc:09:8d:89:04:6d:da:59:85:ff:59:ee:52:b8:13: f3:c2:7a:a3:a5:74:6c:29:a6:c8:fa:de:19:68:21:68:32:87: 7f:ac:1d:9e:e1:1d:2d:da:a5:c6:aa:73:5d:9c:f0:14:f8:50: b1:9c:69:36:03:4f:2b:68:bd:bf:e1:46:01:3b:78:b3:8d:29: 77:8b:44:35:8d:d9:27:3b:6a:07:22:af:e1:c4:28:85:82:e0: 1e:45:ca:18:de:ff:e2:68:bc:13:77:bf:40:a4:ab:d3:82:a3: d1:3a:7b:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDUxMTAvBgNVBAUTKDUzNDRENkJCMzdFQTBDQzM5MUQxMjQyMDdBRDk5NUZD RDc3QjlFOTUwHhcNMjUxMTAzMDYwNDI5WhcNMjUxMTEwMDYwNDI5WjAYMRYwFAYD VQQDEw02OTA4NDVlZS0yNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlCR8h3AMEvWVRCIrz2fp8QBIz70ZJqp2fDXiHLKcvdjborf2wNR+I89ImO/E 0WvsNJllHbMvJHotm0K1u0xiakg51nKsTw5RTQ192h5QjWWl7AU1xfGIPwzjKgJ9 JAPLxFA9i9u8suD2EhfEkDIa8UL06cfp3NfwfUW+KqXwJfB3+/HWtq0I8WQGZzHA kK+Xn/fbgknMXCtqH501eSRHT2Ahdy5apTCK1p1NNV6LkvfZeuv7psA8vsTNKAda F5UrDmT7EfR/ALI8/ORgLbzCYU89caC0E44FDvRSX/6IsKecfhyrl4FhxNYfx+gd iYA/nerO0IhJOe/kTv3MajoUHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYbCOyB ZfZHfdLU1AbG7PZl/EtgMB8GA1UdIwQYMBaAFFNE1rs36gzDkdEkIHrZlfzXe56V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFENS82NjVEQjdDNkE3 QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURNT1IwU1FnZXRtVl9OZDdu cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFENS82NjVEQjdDNkE3QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURN T1IwU1FnZXRtVl9OZDducFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH25cbr0TsN63txQztgdR6HmWwXmx8cy0oJzSptg2BKCzX2Y1MonDe C7VIAmNsb8Bjpy1lOQ+94JEEsGqSXTbo4EbH+0hW+ZGe5RUSfCl4bBGpeR7rLTh9 C7lYJa+oCeifXMfQCevXGdpFA13GmfBVzjvVlYcZosruip9RFVdqlSgT/SZD5+Qj tZx31zHbqUQ3vLn8CY2JBG3aWYX/We5SuBPzwnqjpXRsKabI+t4ZaCFoMod/rB2e 4R0t2qXGqnNdnPAU+FCxnGk2A08raL2/4UYBO3izjSl3i0Q1jdknO2oHIq/hxCiF guAeRcoY3v/iaLwTd79ApKvTgqPROnuo -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:13 2025 by rpki-client