$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: +2BYXTAdRThxv71Ie8TdvjxSkqWsBG7CB6WUTgNMGi8= Subject key identifier: 69:B1:25:80:A8:D5:9C:DA:C4:7A:BF:5A:40:19:A5:C8:8E:AC:D0:6F Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 039D Signing time: Wed 29 Oct 2025 00:32:45 +0000 Manifest this update: Wed 29 Oct 2025 00:32:44 +0000 Manifest next update: Wed 05 Nov 2025 00:32:44 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: LOC4Nut3mari6dIVpYPD2oLRHASvFUJuw/4uphTm3oA=) 2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=) 3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=) 4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 00:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Validity Not Before: Oct 29 00:32:44 2025 GMT Not After : Nov 5 00:32:44 2025 GMT Subject: CN=690160ad-085b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:22:ae:62:25:ca:19:b6:e3:d5:99:86:4c: 06:3d:1e:93:1f:7c:56:56:a3:97:af:87:ed:49:84: c6:74:cf:86:a6:45:12:a5:7d:4e:e9:2b:26:67:ac: 4f:de:34:27:77:c8:fe:e1:2a:2f:01:eb:07:2a:bf: 21:08:41:b0:f2:ac:41:77:f6:11:1b:68:8f:e1:47: fb:09:e5:c3:cd:a1:46:cb:d3:3a:4f:c5:08:93:30: 62:1c:08:d0:b6:b9:1e:90:cd:5d:ab:c7:41:0c:81: 85:0e:78:af:66:31:5f:a2:aa:2a:65:5b:3d:4a:93: f6:c0:69:05:4c:48:2b:65:68:20:6f:2a:ba:e7:74: d4:22:aa:e1:b0:87:e5:48:40:0c:00:45:ac:95:f9: 58:58:28:37:38:a7:a1:6a:dc:7f:95:ac:75:2d:84: 6d:94:e0:8a:d7:b1:67:32:3c:88:b9:95:fe:c8:2d: e4:d6:e0:63:11:a4:da:bb:9c:34:3c:2b:c9:e8:9a: 34:04:57:ed:a4:06:f7:f6:38:32:0b:88:84:af:61: f2:68:6b:f3:c4:eb:9d:40:d2:bf:17:98:fa:c5:2a: e6:4d:0c:d2:f9:a6:39:4d:d7:d3:cd:25:76:d5:4e: e3:b2:b6:a3:bc:ec:18:ba:12:ae:f8:3a:7c:0f:62: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B1:25:80:A8:D5:9C:DA:C4:7A:BF:5A:40:19:A5:C8:8E:AC:D0:6F X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:40:98:13:94:e1:e5:a6:39:24:0c:9e:38:e7:8e:3b:6e:b9: 81:98:58:e3:8e:5f:83:15:c1:61:c9:22:2f:69:82:41:86:9d: 2d:73:ef:20:7f:6b:e4:44:d5:09:4d:ba:e4:b8:8e:df:a5:fb: 63:5d:c2:5f:0a:a8:48:07:51:f9:ae:9d:09:a4:d9:0f:99:a9: 75:03:17:c6:df:bb:f5:bf:ea:98:cd:64:46:d0:d3:4a:7e:6b: 4f:ed:d0:1b:a4:6e:03:e0:3e:aa:5b:4a:43:7c:d6:1e:68:0c: 35:d3:3f:fd:bd:02:97:0d:1b:fe:12:b1:14:59:fa:b2:86:d2: 9a:f5:5a:3a:f2:32:48:45:16:9c:f8:55:c6:50:78:39:74:85: d1:ed:0b:f7:59:91:29:de:af:49:78:3e:3f:a4:71:74:5b:a5: 00:9e:f8:b2:55:3b:70:71:f4:f7:6e:44:f0:bc:83:4f:6c:97: e0:ef:82:31:87:96:c4:8a:5e:81:47:86:a5:05:37:9e:7e:9c: 41:8e:dc:65:af:33:95:86:26:14:5a:5b:74:44:0b:d2:c1:1a: 5c:bd:b6:66:9c:14:23:92:31:11:f7:97:cf:12:96:a0:52:48: 4f:31:ce:20:9b:0d:e5:42:9a:5a:16:b9:0f:e6:db:5e:32:2d: 84:dc:02:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjUxMDI5MDAzMjQ0WhcNMjUxMTA1MDAzMjQ0WjAYMRYwFAYD VQQDEw02OTAxNjBhZC0wODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KgirmIlyhm249WZhkwGPR6TH3xWVqOXr4ftSYTGdM+GpkUSpX1O6SsmZ6xP 3jQnd8j+4SovAesHKr8hCEGw8qxBd/YRG2iP4Uf7CeXDzaFGy9M6T8UIkzBiHAjQ trkekM1dq8dBDIGFDnivZjFfoqoqZVs9SpP2wGkFTEgrZWggbyq653TUIqrhsIfl SEAMAEWslflYWCg3OKehatx/lax1LYRtlOCK17FnMjyIuZX+yC3k1uBjEaTau5w0 PCvJ6Jo0BFftpAb39jgyC4iEr2HyaGvzxOudQNK/F5j6xSrmTQzS+aY5TdfTzSV2 1U7jsrajvOwYuhKu+Dp8D2KhPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmxJYCo 1ZzaxHq/WkAZpciOrNBvMB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqQJgTlOHlpjkkDJ445447brmBmFjjjl+DFcFhySIvaYJBhp0tc+8g f2vkRNUJTbrkuI7fpftjXcJfCqhIB1H5rp0JpNkPmal1AxfG37v1v+qYzWRG0NNK fmtP7dAbpG4D4D6qW0pDfNYeaAw10z/9vQKXDRv+ErEUWfqyhtKa9Vo68jJIRRac +FXGUHg5dIXR7Qv3WZEp3q9JeD4/pHF0W6UAnviyVTtwcfT3bkTwvINPbJfg74Ix h5bEil6BR4alBTeefpxBjtxlrzOVhiYUWlt0RAvSwRpcvbZmnBQjkjER95fPEpag UkhPMc4gmw3lQppaFrkP5tteMi2E3AJW -----END CERTIFICATE-----Generated at Wed Oct 29 05:21:44 2025 by rpki-client