$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft File: UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json) Hash identifier: cX3Yy2lytl65xnZLhs2p1y0m+gkCUaFg19kBb+2tylY= Subject key identifier: 23:FA:67:5A:CE:2A:E1:CB:4F:1E:3C:85:B6:57:05:84:79:C1:F9:3B Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft Manifest number: 40 Signing time: Fri 17 Oct 2025 11:13:40 +0000 Manifest this update: Fri 17 Oct 2025 11:13:40 +0000 Manifest next update: Fri 24 Oct 2025 11:13:40 +0000 Files and hashes: 1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: jKzMsLNcA1HtaCsLNW+thkszN146PE7RwLGHXIYs7ck=) 2: 99877EC2907F11F0BC6C6638C4F9AE02.roa (hash: o9b9ESFEEs1aF7CtI2I05ihVAB7xr51kgDbfpMmNTlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Validity Not Before: Oct 17 11:13:40 2025 GMT Not After : Oct 24 11:13:40 2025 GMT Subject: CN=68f224e4-19f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:ee:d8:7c:3a:8b:10:c9:fe:91:be:bc:ff: 0b:3f:2f:f9:21:62:f8:dc:15:cf:c6:e3:bc:8b:15: 20:c3:7e:79:ae:e0:c2:5c:e6:9d:b8:64:3f:ba:25: 59:03:7a:22:4d:1b:13:1d:aa:85:e5:d9:4c:b7:b6: 04:f6:e3:c9:e6:89:55:11:cd:3c:21:00:18:a3:44: 06:34:c4:01:9f:7c:e0:9d:6a:0a:a9:ed:d8:27:0a: 0e:35:51:48:4d:7a:3d:be:4f:27:89:7e:a6:8d:0d: 25:99:f2:1f:05:52:39:96:7e:6d:54:0b:ee:3b:ed: 40:29:a6:9d:d6:22:b8:98:73:e9:87:e0:8b:61:9f: 3f:97:1c:01:16:14:bf:19:0e:bd:18:bf:56:0f:88: b9:ed:d3:1e:8a:59:3c:58:9b:1c:00:e6:69:a7:3a: 25:89:fa:7f:7e:ed:aa:1e:e7:6a:b7:5c:9e:b3:dd: ec:b9:19:69:77:d0:ef:70:80:f2:84:17:14:2f:2d: 9c:e6:60:4e:b7:ae:58:5b:77:ae:18:65:d6:e8:55: 50:82:44:f6:6c:25:84:f0:47:54:ee:f2:3e:7e:c2: 52:6b:e6:f4:61:4f:e1:fc:86:04:fe:63:b1:ae:53: e4:52:cc:0c:12:76:28:94:ad:1b:c7:df:0d:5a:5c: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FA:67:5A:CE:2A:E1:CB:4F:1E:3C:85:B6:57:05:84:79:C1:F9:3B X509v3 Authority Key Identifier: keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c0:b2:60:c0:32:d4:66:46:6e:af:e9:0c:e9:2a:c6:b5:74: 69:52:73:d9:9c:a7:89:9f:cd:6b:0f:77:6a:b1:34:91:a5:76: 7e:4b:f2:ac:67:b0:05:6b:80:3c:d6:25:12:85:a8:0c:10:5a: ad:5d:ae:b9:48:30:47:a2:a9:4f:cb:92:9e:8d:bc:bc:6b:18: 58:43:74:bc:f6:c9:8c:32:96:0a:3a:1d:ea:8a:d5:ca:5a:2e: 69:06:1c:b5:74:0f:4e:cf:3b:ef:d2:66:7e:d8:b5:fe:7e:52: 84:19:ac:3a:55:90:cb:ef:6f:81:de:73:3c:0e:68:ea:c8:71: 1c:d4:fd:4c:02:c3:2d:12:0d:cb:df:1c:47:66:19:cd:65:d2: e6:6e:97:ab:12:d1:00:e6:d7:ed:d0:f0:ad:70:b2:39:e3:e5: 7b:b0:88:a0:0e:12:70:55:9c:ce:94:ab:3b:6b:ee:af:4a:d7: d5:a4:b9:a3:87:5c:91:d7:bf:47:53:c3:28:b9:77:74:4b:06: bf:82:40:8f:cd:28:7d:b9:bd:ec:77:de:bb:5e:59:e0:bc:40: f4:52:5c:7f:0f:76:9f:3f:fa:69:a1:d5:f7:8b:70:ff:f9:67: fd:83:e5:8b:35:84:4c:53:1c:90:df:58:ba:5b:e6:6a:2c:3f: ee:8a:1b:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNGRTExMC8GA1UEBRMoNTJBMUM0MjBEODI3QzE2Q0VBQTA0MjgzREQyOEI2NDBB MzE1NjM0RDAeFw0yNTEwMTcxMTEzNDBaFw0yNTEwMjQxMTEzNDBaMBgxFjAUBgNV BAMTDTY4ZjIyNGU0LTE5ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Bu7YfDqLEMn+kb68/ws/L/khYvjcFc/G47yLFSDDfnmu4MJc5p24ZD+6JVkD eiJNGxMdqoXl2Uy3tgT248nmiVURzTwhABijRAY0xAGffOCdagqp7dgnCg41UUhN ej2+TyeJfqaNDSWZ8h8FUjmWfm1UC+477UAppp3WIriYc+mH4Ithnz+XHAEWFL8Z Dr0Yv1YPiLnt0x6KWTxYmxwA5mmnOiWJ+n9+7aoe52q3XJ6z3ey5GWl30O9wgPKE FxQvLZzmYE63rlhbd64YZdboVVCCRPZsJYTwR1Tu8j5+wlJr5vRhT+H8hgT+Y7Gu U+RSzAwSdiiUrRvH3w1aXAJ5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI/pnWs4q 4ctPHjyFtlcFhHnB+TswHwYDVR0jBBgwFoAUUqHEINgnwWzqoEKD3Si2QKMVY00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzhEOEUyMkMyNTY0 MzExRjBCMTYyN0ExNUM0RjlBRTAyL1VxSEVJTmdud1d6cW9FS0QzU2kyUUtNVlkw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVXFIRUlOZ253V3pxb0VLRDNTaTJRS01WWTAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0ZFLzhEOEUyMkMyNTY0MzExRjBCMTYyN0ExNUM0RjlBRTAyL1VxSEVJTmdud1d6 cW9FS0QzU2kyUUtNVlkwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAzAsmDAMtRmRm6v6QzpKsa1dGlSc9mcp4mfzWsPd2qxNJGldn5L8qxn sAVrgDzWJRKFqAwQWq1drrlIMEeiqU/Lkp6NvLxrGFhDdLz2yYwylgo6HeqK1cpa LmkGHLV0D07PO+/SZn7Ytf5+UoQZrDpVkMvvb4HeczwOaOrIcRzU/UwCwy0SDcvf HEdmGc1l0uZul6sS0QDm1+3Q8K1wsjnj5XuwiKAOEnBVnM6Uqztr7q9K19WkuaOH XJHXv0dTwyi5d3RLBr+CQI/NKH25vex33rteWeC8QPRSXH8Pdp8/+mmh1feLcP/5 Z/2D5Ys1hExTHJDfWLpb5mosP+6KG64= -----END CERTIFICATE-----Generated at Sat Oct 18 23:39:01 2025 by rpki-client