$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: fM8beOslzgCvJDgEDIkdadJLbFbnrLLxAeAi+fx1ato= Subject key identifier: 2E:46:64:EA:90:83:53:13:96:5E:91:EC:55:FA:C8:46:26:4F:DF:FC Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 018D Signing time: Sat 25 Oct 2025 06:56:07 +0000 Manifest this update: Sat 25 Oct 2025 06:56:06 +0000 Manifest next update: Sat 01 Nov 2025 06:56:06 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: 3ehjp8uN7dlyoItSD4Bf015L1G+8OiOdIfQBzUAkVgU=) 2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: ocKjYHSoFFeanr7nSrSoG6NZ1NK1GEX/tAPr3f25J2Y=) 3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 1HOv65dUJu9o7mPWP7pn54wayqG8zRXC99rSkS0sL90=) 4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: DDHsuGR9D/9rz8HARaoFh0MSMFheoZInmf9Cc8/ZZtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 06:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Oct 25 06:56:06 2025 GMT Not After : Nov 1 06:56:06 2025 GMT Subject: CN=68fc7486-5358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:e9:ac:2e:a3:dc:05:e3:b7:29:e9:c3:d3: 8f:b3:c2:3f:db:50:f3:af:5e:4b:d6:88:45:7f:dd: 42:2a:b3:59:d0:84:b9:15:40:eb:0a:96:05:f2:c8: b5:af:08:c3:01:20:ee:da:3a:c6:1d:89:2d:01:48: c3:53:b2:6e:a8:1a:17:97:c8:db:da:94:b5:f3:a5: 33:00:7b:93:80:39:26:b4:e4:64:26:4e:9e:bb:08: 20:fb:38:05:53:78:a9:a8:c0:67:de:eb:80:24:e5: 70:e4:92:29:c3:2f:98:66:2d:86:c7:53:00:14:65: 7b:46:61:4e:c1:cd:58:39:ef:1a:a2:8c:fa:fd:d6: df:ce:e1:a7:0e:82:9d:dc:28:63:aa:70:7d:03:ee: 76:fa:f4:63:1b:2f:03:7f:8a:f4:84:d1:76:2e:ff: 44:1c:df:3f:e2:cf:d9:ee:52:15:85:dd:1d:80:48: da:7a:cb:9a:69:9d:c5:2e:e4:5e:5c:a4:85:7b:46: dc:c8:22:ea:4e:e8:8a:f7:27:a8:64:85:a2:4c:f4: 6c:d2:7e:99:99:e2:d2:9c:14:f7:e4:34:bf:3d:72: b0:a9:d9:34:75:da:a3:cb:54:2a:e7:45:4b:68:76: b6:1e:13:17:61:62:71:c5:b7:29:09:d0:e5:ee:57: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:46:64:EA:90:83:53:13:96:5E:91:EC:55:FA:C8:46:26:4F:DF:FC X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0c:82:5b:3c:8b:25:f6:60:85:69:24:33:1b:3b:af:c3:3b: a8:2a:69:b5:7f:8b:e2:e1:15:35:58:93:43:ed:25:ae:9b:b4: 6b:8a:36:88:20:73:a9:66:62:6d:51:41:7a:c0:7f:36:ce:bb: e5:73:5a:59:8f:6c:aa:a3:06:33:32:74:4b:ef:96:31:9b:b7: 54:ff:c1:35:3a:1d:02:e6:fc:56:6b:c1:5c:48:0a:6c:aa:06: 24:9b:0e:54:27:2b:bb:d9:00:c0:6a:d6:0c:2b:04:31:75:ed: f8:21:96:d1:74:fa:93:d7:d0:29:ef:da:44:03:2e:b7:f7:29: 2e:1c:db:04:69:7a:d5:cd:1f:25:f3:25:80:5d:9b:00:0b:6d: e7:b9:db:8d:ea:6f:78:53:1e:02:a6:80:40:37:37:1e:18:0b: 85:af:c1:37:e1:29:97:08:6c:be:d1:27:ab:4e:88:38:85:23: 72:48:0d:89:04:07:17:f0:27:32:85:86:a2:19:46:c1:87:3d: 86:78:a4:e6:5a:d5:0f:d6:80:d6:a0:38:b8:0b:9e:5d:93:66: 68:ea:a8:db:27:8c:75:7f:8c:b4:13:85:cd:e2:33:a2:1a:f2: 21:79:ce:0b:b1:ba:dc:5c:3d:d0:91:54:8b:74:da:23:d0:d2: 95:cd:75:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjUxMDI1MDY1NjA2WhcNMjUxMTAxMDY1NjA2WjAYMRYwFAYD VQQDEw02OGZjNzQ4Ni01MzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAjprC6j3AXjtynpw9OPs8I/21Dzr15L1ohFf91CKrNZ0IS5FUDrCpYF8si1 rwjDASDu2jrGHYktAUjDU7JuqBoXl8jb2pS186UzAHuTgDkmtORkJk6euwgg+zgF U3ipqMBn3uuAJOVw5JIpwy+YZi2Gx1MAFGV7RmFOwc1YOe8aooz6/dbfzuGnDoKd 3ChjqnB9A+52+vRjGy8Df4r0hNF2Lv9EHN8/4s/Z7lIVhd0dgEjaesuaaZ3FLuRe XKSFe0bcyCLqTuiK9yeoZIWiTPRs0n6ZmeLSnBT35DS/PXKwqdk0ddqjy1Qq50VL aHa2HhMXYWJxxbcpCdDl7lcgYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5GZOqQ g1MTll6R7FX6yEYmT9/8MB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALDIJbPIsl9mCFaSQzGzuvwzuoKmm1f4vi4RU1WJND7SWum7RrijaI IHOpZmJtUUF6wH82zrvlc1pZj2yqowYzMnRL75Yxm7dU/8E1Oh0C5vxWa8FcSAps qgYkmw5UJyu72QDAatYMKwQxde34IZbRdPqT19Ap79pEAy639ykuHNsEaXrVzR8l 8yWAXZsAC23nuduN6m94Ux4CpoBANzceGAuFr8E34SmXCGy+0SerTog4hSNySA2J BAcX8CcyhYaiGUbBhz2GeKTmWtUP1oDWoDi4C55dk2Zo6qjbJ4x1f4y0E4XN4jOi GvIhec4LsbrcXD3QkVSLdNoj0NKVzXWZ -----END CERTIFICATE-----Generated at Sun Oct 26 20:30:56 2025 by rpki-client