$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft File: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json) Hash identifier: qdapuhy8G3iVuswT3CTZH7W5OECdaa7ZKzLl/j27l7M= Subject key identifier: 51:F5:6B:17:64:0D:DC:AF:69:8C:16:9F:37:70:48:49:6A:7F:68:6F Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 Certificate issuer: /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft Manifest number: 01FE Signing time: Wed 05 Nov 2025 02:32:04 +0000 Manifest this update: Wed 05 Nov 2025 02:32:04 +0000 Manifest next update: Wed 12 Nov 2025 02:32:04 +0000 Files and hashes: 1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: Z6lzIXGcBrCMkOme4//H3L3BjNYovdX+1j6A5Qz+m/E=) 2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: ztxAi6NVLvlOVRaY5LiA8lZVY+4GBUWq8sHQO2NcSn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Validity Not Before: Nov 5 02:32:04 2025 GMT Not After : Nov 12 02:32:04 2025 GMT Subject: CN=690ab724-771c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:4f:fb:56:4f:1d:cb:69:26:b2:db:5e:35: 4b:78:87:bc:5b:ff:76:48:8e:05:c3:59:c7:a9:0c: 94:82:0e:e4:34:c3:65:e0:91:be:4d:88:05:55:65: 84:5b:59:81:4b:6f:ed:e6:66:f3:68:af:3a:15:60: 1d:e9:07:46:6c:09:4d:97:06:6f:ba:65:4f:29:01: d5:6d:96:00:cf:2d:4c:3d:1a:db:3e:f1:ce:6d:2f: 5c:7a:d4:f7:c3:b5:25:ab:75:12:a6:53:be:4d:a9: d0:ae:0d:2c:b4:5b:da:be:8f:20:2f:94:fc:0d:fe: 22:9b:3d:01:4c:4f:50:b5:8c:7d:a4:9c:88:d2:f6: a3:c5:29:45:57:5f:33:1a:d5:9d:ab:8e:df:b0:ce: b4:f7:87:14:62:23:38:61:dc:aa:e6:6e:ab:2c:7a: 33:bf:35:0a:92:fc:b0:c9:5a:ef:53:59:51:9b:76: 81:10:ed:c4:8f:7d:96:46:6d:cd:be:04:f5:fa:e3: ce:7b:dd:07:98:4f:c6:12:fa:e1:f1:00:60:7a:63: d7:61:0a:79:ad:9a:fb:1d:ed:44:74:5f:59:04:bc: c2:51:8c:f5:4d:94:06:ef:65:43:56:36:35:51:b7: 82:51:c0:0e:52:22:ea:0f:9b:7d:a5:fc:93:85:e6: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F5:6B:17:64:0D:DC:AF:69:8C:16:9F:37:70:48:49:6A:7F:68:6F X509v3 Authority Key Identifier: keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:83:e0:d3:48:f2:9e:f0:0f:3f:95:da:86:a3:f0:64:2c:5e: b6:15:67:c3:5b:78:56:1f:ff:e2:20:c1:c7:71:3a:35:98:03: 39:91:15:a9:7e:65:be:f6:fc:56:df:3a:90:05:b0:16:c0:2a: 9c:8a:8d:3f:d4:4d:7f:55:c2:45:06:60:a7:94:60:9f:63:bb: 51:1f:5e:a3:6e:4e:e6:19:e3:5e:10:7b:6f:40:39:de:88:c8: 6d:82:09:8d:37:4e:cb:e2:e0:d0:d3:ac:5c:c9:91:3b:96:98: 25:1b:ce:01:bb:83:03:b4:17:c1:c3:3b:35:99:ef:e4:f6:08: 08:fe:da:25:17:e8:5e:e4:79:e5:89:85:c2:39:60:01:f7:c4: b7:07:b0:12:b5:e9:01:d0:27:3b:3a:20:84:ee:14:25:5f:65: f0:13:2e:0a:92:54:b2:fd:af:cc:f1:a5:f1:8a:c6:7a:ba:bb: 35:43:86:f5:dd:91:59:9e:e7:6a:23:97:ed:70:37:d8:8c:4c: b4:91:1b:8b:e7:a2:e6:1a:1b:5e:c2:7a:91:6e:36:09:fd:b5: 21:dd:9f:f2:a7:bb:c6:c9:74:25:17:5a:37:b0:5e:86:ab:58: d0:cb:d7:05:25:88:2d:5d:ab:06:57:61:b8:42:06:15:73:bb: 2e:8e:39:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMjIxMTAvBgNVBAUTKEJCNEZBRTg1NTQwQTVBRDlGOTNDQjQ4MkM0NUM5NTc2 RjUyQTNCRjQwHhcNMjUxMTA1MDIzMjA0WhcNMjUxMTEyMDIzMjA0WjAYMRYwFAYD VQQDEw02OTBhYjcyNC03NzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoe1P+1ZPHctpJrLbXjVLeIe8W/92SI4Fw1nHqQyUgg7kNMNl4JG+TYgFVWWE W1mBS2/t5mbzaK86FWAd6QdGbAlNlwZvumVPKQHVbZYAzy1MPRrbPvHObS9cetT3 w7Ulq3USplO+TanQrg0stFvavo8gL5T8Df4imz0BTE9QtYx9pJyI0vajxSlFV18z GtWdq47fsM6094cUYiM4Ydyq5m6rLHozvzUKkvywyVrvU1lRm3aBEO3Ej32WRm3N vgT1+uPOe90HmE/GEvrh8QBgemPXYQp5rZr7He1EdF9ZBLzCUYz1TZQG72VDVjY1 UbeCUcAOUiLqD5t9pfyTheYdGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH1axdk DdyvaYwWnzdwSElqf2hvMB8GA1UdIwQYMBaAFLtProVUClrZ+Ty0gsRclXb1Kjv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEyMi8wRkQ0RUY0RUFF RUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0bjVQTFNDeEZ5VmR2VXFP X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UwLXVoVlFLV3RuNVBMU0N4RnlWZHZVcU9fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEyMi8wRkQ0RUY0RUFFRUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0 bjVQTFNDeEZ5VmR2VXFPX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5g+DTSPKe8A8/ldqGo/BkLF62FWfDW3hWH//iIMHHcTo1mAM5kRWp fmW+9vxW3zqQBbAWwCqcio0/1E1/VcJFBmCnlGCfY7tRH16jbk7mGeNeEHtvQDne iMhtggmNN07L4uDQ06xcyZE7lpglG84Bu4MDtBfBwzs1me/k9ggI/tolF+he5Hnl iYXCOWAB98S3B7AStekB0Cc7OiCE7hQlX2XwEy4KklSy/a/M8aXxisZ6urs1Q4b1 3ZFZnudqI5ftcDfYjEy0kRuL56LmGhtewnqRbjYJ/bUh3Z/yp7vGyXQlF1o3sF6G q1jQy9cFJYgtXasGV2G4QgYVc7sujjmx -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:35 2025 by rpki-client