$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: 6NSSuSWgVAjNJ15Ncy0aBgDolgoWwj/MgzTVUJrjX8Y= Subject key identifier: E3:7F:60:8A:8B:1F:0C:FA:CB:2A:E7:FE:F6:09:45:A5:66:60:B4:FF Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 01A1 Signing time: Wed 05 Nov 2025 03:27:05 +0000 Manifest this update: Wed 05 Nov 2025 03:27:05 +0000 Manifest next update: Wed 12 Nov 2025 03:27:05 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: Z8U+zFawZJlGzGVqyg7fe5KkQh8Nd4NhMhC1KQm7eC0=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: GStxXDpLNAyrWojxGnePR9AnSIRyNnzZz6qC/jLrshI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Validity Not Before: Nov 5 03:27:05 2025 GMT Not After : Nov 12 03:27:05 2025 GMT Subject: CN=690ac409-0ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:7c:7c:98:84:48:32:a4:46:31:f4:be:70: ed:70:fa:3a:67:86:e5:70:28:9f:ea:30:bf:5b:51: 3f:8f:79:d2:9c:11:1c:43:86:9d:71:b4:22:25:cf: c3:3a:94:69:9f:8e:a0:45:d8:68:27:b6:1c:99:40: 97:8f:95:a9:9c:04:03:64:a9:5a:57:45:99:2a:d3: 37:e6:2f:05:83:b4:c5:b4:ee:c3:ad:44:66:4e:fd: b1:1c:d3:f4:03:8c:9b:f5:28:69:9a:02:1e:8c:01: 90:43:a3:0f:88:0b:90:f2:1e:52:6b:bb:08:22:4e: 49:5e:83:6d:13:97:01:00:62:3e:ca:2c:d9:d4:01: 01:52:75:03:51:02:42:99:e5:a6:33:5a:0c:88:ea: 98:76:72:17:e3:6b:5a:95:3a:2d:2f:b6:5b:12:79: 75:f2:ba:fb:1f:66:c1:bb:88:de:45:82:66:0e:c9: 0b:a6:c8:00:ee:f8:93:cb:8e:0e:89:49:dc:ff:98: 7a:ff:4b:89:4e:69:fc:8a:7c:88:d9:c4:bd:67:a9: fe:4c:7c:b2:5a:24:45:6f:ab:79:9a:ca:75:cc:f5: 00:a9:cb:54:62:b8:5c:b0:b5:e6:62:4d:c0:59:6b: 00:d7:7f:6d:aa:28:aa:49:e5:1d:36:bf:c7:4a:5a: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7F:60:8A:8B:1F:0C:FA:CB:2A:E7:FE:F6:09:45:A5:66:60:B4:FF X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:42:61:92:90:23:7f:13:b0:5b:6f:52:10:bf:2d:d3:61:5b: f2:98:59:e7:9d:f1:67:a8:3a:68:76:3f:c7:bd:46:aa:b9:34: 8f:e1:e8:4e:28:d7:f8:1b:ac:85:03:b9:39:f2:9e:d8:73:2d: af:26:7e:00:95:3a:98:85:49:26:10:ad:50:bd:2a:ee:91:b9: 0e:ef:66:b4:50:ff:79:43:dd:6a:e4:a7:6d:b0:a6:60:c7:2f: 07:bb:64:43:57:0b:aa:8c:57:31:b6:6c:db:41:3f:c8:61:21: be:7b:83:ce:43:99:40:a6:66:e8:a5:d6:5e:eb:66:0e:46:d3: e1:bd:46:37:ed:a5:62:19:91:92:82:e2:da:50:e3:d0:d7:7b: c3:62:3e:d4:82:4f:7d:fa:e7:d0:5e:d1:5d:0d:59:75:5c:06: 78:11:3e:89:5e:25:82:ce:1c:8e:13:1b:50:e0:c2:a6:8a:5e: 5b:84:42:dd:b0:f8:5b:4b:7c:fe:16:36:c4:ed:f0:09:1a:c7: af:90:34:2c:88:44:c9:5f:60:04:f7:8f:8c:77:fe:71:ac:34: 9f:b9:73:12:1e:fc:92:f8:48:f6:e0:4d:85:5f:6b:b5:60:4b: 1a:d3:7d:1d:98:c7:22:3e:86:ca:63:28:9a:d0:26:17:bc:a3: 18:b6:ec:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjUxMTA1MDMyNzA1WhcNMjUxMTEyMDMyNzA1WjAYMRYwFAYD VQQDEw02OTBhYzQwOS0wZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eF8fJiESDKkRjH0vnDtcPo6Z4blcCif6jC/W1E/j3nSnBEcQ4adcbQiJc/D OpRpn46gRdhoJ7YcmUCXj5WpnAQDZKlaV0WZKtM35i8Fg7TFtO7DrURmTv2xHNP0 A4yb9ShpmgIejAGQQ6MPiAuQ8h5Sa7sIIk5JXoNtE5cBAGI+yizZ1AEBUnUDUQJC meWmM1oMiOqYdnIX42talTotL7ZbEnl18rr7H2bBu4jeRYJmDskLpsgA7viTy44O iUnc/5h6/0uJTmn8inyI2cS9Z6n+THyyWiRFb6t5msp1zPUAqctUYrhcsLXmYk3A WWsA139tqiiqSeUdNr/HSlo+DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFON/YIqL Hwz6yyrn/vYJRaVmYLT/MB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnQmGSkCN/E7Bbb1IQvy3TYVvymFnnnfFnqDpodj/HvUaquTSP4ehO KNf4G6yFA7k58p7Ycy2vJn4AlTqYhUkmEK1QvSrukbkO72a0UP95Q91q5KdtsKZg xy8Hu2RDVwuqjFcxtmzbQT/IYSG+e4POQ5lApmbopdZe62YORtPhvUY37aViGZGS guLaUOPQ13vDYj7Ugk99+ufQXtFdDVl1XAZ4ET6JXiWCzhyOExtQ4MKmil5bhELd sPhbS3z+FjbE7fAJGsevkDQsiETJX2AE94+Md/5xrDSfuXMSHvyS+Ej24E2FX2u1 YEsa030dmMciPobKYyia0CYXvKMYtuwh -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:33 2025 by rpki-client