$ rpki-client -vvf rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft File: UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft (raw, json) Hash identifier: dFT31BuTgAdhFhpO9iw+dcqzok4x/B6tCg2tfHzJqaA= Subject key identifier: 07:57:BC:25:9A:DD:4D:87:0F:B2:D0:4C:CD:24:BE:F1:2F:1E:65:EA Authority key identifier: 52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B Certificate issuer: /CN=A91A459D/serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft Manifest number: 0A0B Signing time: Thu 18 Sep 2025 20:02:49 +0000 Manifest this update: Thu 18 Sep 2025 20:02:48 +0000 Manifest next update: Thu 25 Sep 2025 20:02:48 +0000 Files and hashes: 1: UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl (hash: 1ybvvE4lL8Vfq7lI/cKjGMMg0M5HJChUoQixYL3ZJnQ=) 2: 21028CF67EF811EAAD47CD30C4F9AE02.roa (hash: +gB8ZHO5MMKVGP2yT3GNNhFPo53EwfTpImIrJ+ySljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A459D, serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B Validity Not Before: Sep 18 20:02:48 2025 GMT Not After : Sep 25 20:02:48 2025 GMT Subject: CN=68cc6568-f2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:85:fd:78:bf:5d:40:ac:e9:a8:25:8b:4c:68: 14:3f:4c:1d:81:0a:f8:80:3e:e9:76:1e:34:9a:51: 79:bb:c0:07:7b:59:dc:6b:09:be:ff:b5:c6:7e:07: 68:7d:f9:58:92:13:46:bd:84:78:02:32:14:5f:4d: fb:98:26:3b:cb:ff:9d:2f:c1:9d:bb:5b:c1:14:43: ac:b2:5b:8b:ea:4f:c4:cd:9b:9e:ec:39:04:5f:60: e5:43:71:bf:98:56:61:e9:8b:95:9c:52:12:0b:b9: ff:93:c2:88:c9:ad:84:eb:7c:13:ab:de:fc:47:97: 37:c6:92:74:fd:c8:f5:17:ca:14:14:39:18:00:1b: 60:de:91:54:9d:76:f7:a3:8c:de:18:8f:5b:36:7a: 88:b7:2d:55:d8:5b:97:7c:c8:7e:ab:ac:c4:aa:ca: b4:2e:3d:b4:a1:f4:4c:9f:3f:37:17:16:a3:5f:05: 6b:43:95:91:44:a6:cd:e1:da:97:4e:9e:a2:0e:22: 7f:64:d3:4a:eb:60:22:63:a6:04:59:4a:7d:35:59: 22:b7:12:ce:1d:c9:6a:da:dd:c3:ee:1f:ca:77:9d: af:79:41:bb:ad:69:3d:2c:50:fb:a7:2c:2b:a0:49: 81:c3:ab:41:77:16:26:f2:5f:7c:7b:c3:7d:52:83: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:57:BC:25:9A:DD:4D:87:0F:B2:D0:4C:CD:24:BE:F1:2F:1E:65:EA X509v3 Authority Key Identifier: keyid:52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:93:49:a4:ed:49:da:e7:12:34:f6:34:5b:cd:bd:01:6b:e0: cf:e8:25:77:7f:8c:f9:24:d4:b6:6e:35:bb:35:0f:93:db:b6: d4:39:b7:41:cf:a1:bb:03:18:43:68:c3:cb:89:39:80:6a:80: 85:6f:f3:88:7c:56:38:68:c1:09:14:3b:44:79:9f:c2:1a:d3: 19:a5:d8:3a:51:72:46:0e:90:71:6c:20:b9:b8:ca:06:31:d4: b7:e4:b9:9f:27:60:a8:8c:5f:fa:fc:b6:f6:fb:93:97:bc:1e: de:bf:5e:44:51:24:cb:c0:d9:6b:c1:26:32:64:18:8b:6c:d3: b7:9a:9f:ad:3b:ce:0a:70:da:e2:3f:cd:ca:60:9d:af:e2:a7: cf:b1:ef:41:dd:5e:ab:e6:99:a4:c8:e5:b7:2f:be:f2:b4:64: 89:2d:1e:e8:32:61:1e:75:c4:ae:20:b8:d8:fb:c4:4c:90:3e: 5a:ad:06:8d:c6:c9:f0:a7:c0:a2:87:d7:21:94:c5:3f:c1:5d: eb:33:ce:73:7b:ca:3c:a2:ec:f4:f1:34:18:26:f9:27:61:ad: 9e:72:e6:df:c6:6a:6a:3b:ce:46:b4:08:7a:c5:6a:3e:ec:4d: 54:8f:67:77:4f:3c:ec:d5:a8:30:f2:b6:38:00:40:ba:0e:41: db:d3:5f:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1OUQxMTAvBgNVBAUTKDUyQjIxOTk1NDI5QzQ0RjhBN0Y0RUM5OUU1MzA0MDg3 MEQ2RDM4NUIwHhcNMjUwOTE4MjAwMjQ4WhcNMjUwOTI1MjAwMjQ4WjAYMRYwFAYD VQQDEw02OGNjNjU2OC1mMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54X9eL9dQKzpqCWLTGgUP0wdgQr4gD7pdh40mlF5u8AHe1ncawm+/7XGfgdo fflYkhNGvYR4AjIUX037mCY7y/+dL8Gdu1vBFEOssluL6k/EzZue7DkEX2DlQ3G/ mFZh6YuVnFISC7n/k8KIya2E63wTq978R5c3xpJ0/cj1F8oUFDkYABtg3pFUnXb3 o4zeGI9bNnqIty1V2FuXfMh+q6zEqsq0Lj20ofRMnz83FxajXwVrQ5WRRKbN4dqX Tp6iDiJ/ZNNK62AiY6YEWUp9NVkitxLOHclq2t3D7h/Kd52veUG7rWk9LFD7pywr oEmBw6tBdxYm8l98e8N9UoNi0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdXvCWa 3U2HD7LQTM0kvvEvHmXqMB8GA1UdIwQYMBaAFFKyGZVCnET4p/TsmeUwQIcNbThb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU5RC81RkFCOTcyRTdF RjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQaW45T3laNVRCQWh3MXRP RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VySVpsVUtjUlBpbjlPeVo1VEJBaHcxdE9Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU5RC81RkFCOTcyRTdFRjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQ aW45T3laNVRCQWh3MXRPRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIk0mk7Una5xI09jRbzb0Ba+DP6CV3f4z5JNS2bjW7NQ+T27bUObdB z6G7AxhDaMPLiTmAaoCFb/OIfFY4aMEJFDtEeZ/CGtMZpdg6UXJGDpBxbCC5uMoG MdS35LmfJ2CojF/6/Lb2+5OXvB7ev15EUSTLwNlrwSYyZBiLbNO3mp+tO84KcNri P83KYJ2v4qfPse9B3V6r5pmkyOW3L77ytGSJLR7oMmEedcSuILjY+8RMkD5arQaN xsnwp8Cih9chlMU/wV3rM85ze8o8ouz08TQYJvknYa2ecubfxmpqO85GtAh6xWo+ 7E1Uj2d3Tzzs1agw8rY4AEC6DkHb01/F -----END CERTIFICATE-----Generated at Fri Sep 19 09:07:34 2025 by rpki-client