$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: fu1+GXQcwbozWvub37p0DljgOxp8vcISn7YTxH+I15c= Subject key identifier: B2:74:D1:C9:9A:2F:CD:30:08:DD:D0:FC:F0:48:3B:A5:33:58:00:4D Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0B33 Signing time: Fri 24 Oct 2025 19:57:52 +0000 Manifest this update: Fri 24 Oct 2025 19:57:52 +0000 Manifest next update: Fri 31 Oct 2025 19:57:52 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: 72uYshHggTiZMWDVd/Ji/ei/aP3MDPeba8qFz/ajWHE=) 2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=) 3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=) 4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Oct 24 19:57:52 2025 GMT Not After : Oct 31 19:57:52 2025 GMT Subject: CN=68fbda40-0f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7b:3b:5a:44:98:f1:d8:a9:ce:f9:3c:97:89: b6:35:29:6f:bd:5b:14:2c:3f:fe:86:5e:1d:ac:61: 3c:05:a2:b5:08:4b:e6:11:0b:67:9b:a2:67:80:f3: 81:aa:8a:cc:88:26:2b:17:58:b9:04:b3:ae:ad:76: af:93:56:f4:ec:a6:2b:31:32:16:73:80:33:b4:86: 4c:b6:75:56:ed:c9:14:3d:b2:c8:56:f0:ab:14:d0: 6f:d4:28:25:8c:3c:ef:67:6a:7e:cd:f0:bc:62:73: eb:54:38:99:02:2c:ea:8c:12:44:4d:f0:90:07:64: 0a:b9:67:64:42:b6:0b:b5:0d:ab:d0:62:b2:88:8c: 91:ae:92:48:7b:09:b8:70:cb:8e:4c:e9:09:55:e9: ee:a3:f2:14:b2:b4:d9:b4:9a:ca:a8:c5:ea:c4:a3: 95:c5:17:5b:c4:e9:9a:2b:e8:27:55:04:d8:15:c0: 1a:69:75:31:1b:b5:e7:5c:1f:96:4a:be:ea:e0:f1: 1e:12:8e:46:52:65:f2:c8:96:13:3e:1a:2f:df:24: 28:ee:f8:3f:a6:ce:16:6a:70:25:99:e9:c5:b4:19: 9a:7a:e7:a9:d5:c9:49:55:f2:73:ac:7c:67:43:c8: dc:71:81:8c:e1:ff:4c:36:2a:3f:11:01:7f:8a:e7: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:74:D1:C9:9A:2F:CD:30:08:DD:D0:FC:F0:48:3B:A5:33:58:00:4D X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a7:7e:a2:7f:ff:68:52:e8:61:84:c9:82:46:b0:de:73:44: d1:a1:22:86:83:75:4f:47:42:f6:f2:ed:eb:d8:97:34:6a:da: 90:c1:0d:21:f8:d2:39:f8:5c:e0:fa:df:52:95:1f:90:ee:0a: 06:1f:b8:f1:ca:fc:03:53:91:5b:b5:58:01:bd:cb:91:0a:a6: 84:75:56:6c:67:f1:47:51:3d:9d:4e:37:5f:d4:9b:83:a7:ac: 14:7e:ac:41:22:21:eb:ac:f7:ae:ac:6f:17:66:f6:a3:22:d3: dc:e4:96:8d:0d:7f:e3:21:89:68:2e:04:de:64:3f:69:7b:3f: e2:c5:d2:f8:7a:33:0e:52:45:f1:9b:2a:e3:04:ae:ab:79:e3: 5f:26:16:be:4d:77:1f:ff:04:6f:cf:e4:1a:ff:03:17:a3:f3: a1:a0:86:48:e8:9e:cf:29:1e:ac:23:98:84:2d:71:b0:55:32: d3:61:5d:85:c2:3f:57:15:25:d7:ee:df:67:d5:e7:8f:54:7d: 3b:a7:73:fb:81:48:7e:c3:b0:7a:2d:ac:bd:c4:19:e7:3b:a2: 7f:a9:1f:c9:e9:12:56:78:d1:e7:b1:86:5b:04:92:0c:98:b2: f5:30:c8:ad:61:f8:f3:30:d4:5d:04:24:48:ee:6f:e3:cb:1a: 70:b0:21:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjUxMDI0MTk1NzUyWhcNMjUxMDMxMTk1NzUyWjAYMRYwFAYD VQQDEw02OGZiZGE0MC0wZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3s7WkSY8dipzvk8l4m2NSlvvVsULD/+hl4drGE8BaK1CEvmEQtnm6JngPOB qorMiCYrF1i5BLOurXavk1b07KYrMTIWc4AztIZMtnVW7ckUPbLIVvCrFNBv1Cgl jDzvZ2p+zfC8YnPrVDiZAizqjBJETfCQB2QKuWdkQrYLtQ2r0GKyiIyRrpJIewm4 cMuOTOkJVenuo/IUsrTZtJrKqMXqxKOVxRdbxOmaK+gnVQTYFcAaaXUxG7XnXB+W Sr7q4PEeEo5GUmXyyJYTPhov3yQo7vg/ps4WanAlmenFtBmaeuep1clJVfJzrHxn Q8jccYGM4f9MNio/EQF/iudgFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJ00cma L80wCN3Q/PBIO6UzWABNMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnp36if/9oUuhhhMmCRrDec0TRoSKGg3VPR0L28u3r2Jc0atqQwQ0h +NI5+Fzg+t9SlR+Q7goGH7jxyvwDU5FbtVgBvcuRCqaEdVZsZ/FHUT2dTjdf1JuD p6wUfqxBIiHrrPeurG8XZvajItPc5JaNDX/jIYloLgTeZD9pez/ixdL4ejMOUkXx myrjBK6reeNfJha+TXcf/wRvz+Qa/wMXo/OhoIZI6J7PKR6sI5iELXGwVTLTYV2F wj9XFSXX7t9n1eePVH07p3P7gUh+w7B6Lay9xBnnO6J/qR/J6RJWeNHnsYZbBJIM mLL1MMitYfjzMNRdBCRI7m/jyxpwsCHD -----END CERTIFICATE-----Generated at Sat Oct 25 17:42:03 2025 by rpki-client