$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: 0E4yYONCYGlUW98+10M6NOj6eYXMAdh9TfMO8Y1IFrk= Subject key identifier: CB:7C:83:CC:97:0F:35:29:AC:85:EF:90:91:D8:96:94:98:2E:CD:D6 Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 062D Signing time: Wed 22 Oct 2025 23:51:15 +0000 Manifest this update: Wed 22 Oct 2025 23:51:14 +0000 Manifest next update: Wed 29 Oct 2025 23:51:14 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: EofsRZ2T6WxNN9sWraRm/pT7QwmqQzRs+k5ChU7xkY0=) 2: C9BA671C3A2611F0908A2B20C4F9AE02.roa (hash: hAsOFqLGhlXPlJQqq8o+TJ1lqU96PHU1fRQ8ll9kM1c=) 3: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=) 4: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=) 5: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: RB6HB76Hd37I1Qyua/UNLhe473Y5QaFhWKPCNvGT+Jc=) 6: DBF856463A3011F0B0C6F437C4F9AE02.roa (hash: 3y3NqdGA4Yb7KDxIbZnutCZORNmNgdB027E2G7UT98A=) 7: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=) 8: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: Oct 22 23:51:14 2025 GMT Not After : Oct 29 23:51:14 2025 GMT Subject: CN=68f96df3-d749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:bb:38:64:53:34:52:98:bf:8f:94:15:c7: af:55:68:d0:52:c7:26:e9:16:0d:70:fb:8d:ba:5b: 6e:f6:1d:65:3c:1e:33:8c:4c:7e:ad:3d:96:42:cc: e2:0b:c6:39:5d:4f:1d:b4:d2:41:8a:8e:35:2d:9b: d7:2a:74:77:98:3d:5e:6d:ba:9a:4f:c6:2a:63:9a: 08:16:a1:11:74:5e:86:94:14:8f:68:1a:0d:c7:c9: 7b:9d:fa:ae:8a:2f:ef:5f:53:ac:bf:0c:ca:62:f7: 24:65:dd:ae:03:79:74:bf:db:29:7a:6e:f6:8d:61: a6:fe:ef:1c:cc:62:49:bd:c8:06:93:8f:6b:20:0d: 3e:8f:1c:fa:ca:48:76:2c:c5:b5:b1:54:38:c6:df: cd:6c:1d:3f:df:a1:4e:73:b5:f2:dc:17:d5:7f:06: 30:f2:ee:ae:a2:db:c2:f3:82:d0:50:53:af:a2:6b: 03:c2:f7:ce:e6:f5:e7:89:3d:e2:88:3e:9e:a6:7d: 27:32:d5:73:61:ad:b3:b6:8c:c5:37:69:c7:71:f9: ee:21:aa:60:00:83:9f:26:52:af:5c:df:80:d8:5c: 42:94:27:3b:f1:a7:32:23:8a:6b:27:36:7a:ad:e5: c5:18:cc:de:22:f9:26:2e:46:35:20:60:b8:3b:bb: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7C:83:CC:97:0F:35:29:AC:85:EF:90:91:D8:96:94:98:2E:CD:D6 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:84:ad:32:62:e2:0a:0d:7e:bb:51:55:d8:d2:00:c2:47:3b: d5:48:4f:74:88:d9:12:72:4a:48:22:82:c5:0d:4c:9c:8c:c6: e8:4b:a4:26:40:40:ed:9d:43:4f:a6:3f:49:f3:49:ae:e4:d1: 19:1b:5c:2b:fa:b4:ad:f2:33:7f:27:2f:95:f9:1d:69:36:91: 1b:3c:f9:5c:d9:66:2d:54:f0:2d:eb:34:ec:94:48:a6:26:ce: ed:7f:67:c8:a9:03:69:c3:e6:dd:c8:f6:b8:64:45:41:59:ca: 2e:04:3b:39:2f:af:94:20:92:d3:ea:23:33:3d:cc:8f:d6:69: ef:31:0d:ea:cd:15:a8:e7:2c:14:a6:47:0b:4f:8c:2a:04:35: 34:03:65:f8:ca:5a:bd:ae:d2:40:c3:b6:e8:6f:9e:67:13:f2: 67:e8:8c:35:c6:6b:82:5f:a0:33:d7:4b:a0:38:f7:54:43:67: ff:7b:62:f8:c3:0f:64:63:15:43:a8:ed:5d:be:8c:cb:48:9a: c5:fe:a5:4c:60:4b:97:aa:94:eb:ec:74:96:8b:71:b2:cb:91: 83:c9:14:ca:6d:55:53:41:dc:92:31:80:81:2b:1d:58:97:d2: db:59:af:3a:5c:20:bf:95:62:58:c9:13:88:e7:bd:b6:a6:a9: 71:9d:61:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUxMDIyMjM1MTE0WhcNMjUxMDI5MjM1MTE0WjAYMRYwFAYD VQQDEw02OGY5NmRmMy1kNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgq7OGRTNFKYv4+UFcevVWjQUscm6RYNcPuNultu9h1lPB4zjEx+rT2WQszi C8Y5XU8dtNJBio41LZvXKnR3mD1ebbqaT8YqY5oIFqERdF6GlBSPaBoNx8l7nfqu ii/vX1OsvwzKYvckZd2uA3l0v9spem72jWGm/u8czGJJvcgGk49rIA0+jxz6ykh2 LMW1sVQ4xt/NbB0/36FOc7Xy3BfVfwYw8u6uotvC84LQUFOvomsDwvfO5vXniT3i iD6epn0nMtVzYa2ztozFN2nHcfnuIapgAIOfJlKvXN+A2FxClCc78acyI4prJzZ6 reXFGMzeIvkmLkY1IGC4O7sE9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMt8g8yX DzUprIXvkJHYlpSYLs3WMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6hK0yYuIKDX67UVXY0gDCRzvVSE90iNkSckpIIoLFDUycjMboS6Qm QEDtnUNPpj9J80mu5NEZG1wr+rSt8jN/Jy+V+R1pNpEbPPlc2WYtVPAt6zTslEim Js7tf2fIqQNpw+bdyPa4ZEVBWcouBDs5L6+UIJLT6iMzPcyP1mnvMQ3qzRWo5ywU pkcLT4wqBDU0A2X4ylq9rtJAw7bob55nE/Jn6Iw1xmuCX6Az10ugOPdUQ2f/e2L4 ww9kYxVDqO1dvozLSJrF/qVMYEuXqpTr7HSWi3Gyy5GDyRTKbVVTQdySMYCBKx1Y l9LbWa86XCC/lWJYyROI5722pqlxnWEr -----END CERTIFICATE-----Generated at Fri Oct 24 06:42:48 2025 by rpki-client