$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: 4izp4ZZRe0zDvQNf2u83O97EW8xJy0v8MmU09T/WQJM= Subject key identifier: DA:9A:F2:FA:58:34:A5:93:2E:ED:FB:F8:58:03:90:D1:FA:D6:88:35 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 09D2 Signing time: Thu 30 Oct 2025 20:00:44 +0000 Manifest this update: Thu 30 Oct 2025 20:00:44 +0000 Manifest next update: Thu 06 Nov 2025 20:00:44 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: 99xezgbTMEC/yv/pD/Dp/qfK/6DFavAMFSY0G600XfE=) 2: 49DDFE0682F511F0B6DCE147C4F9AE02.roa (hash: XUn3CIuvEXS6KPUlF+3czLodjUH67iWEKRvo5E16IQw=) 3: 658C5D24A76B11F0A66F9138C4F9AE02.roa (hash: S630ws9prbiv+X73lkiriOtUneLfFYuwhIIx2uOXGSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Oct 30 20:00:44 2025 GMT Not After : Nov 6 20:00:44 2025 GMT Subject: CN=6903c3ec-0967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:bc:6d:b5:09:85:56:9a:8c:52:f0:78:83: 24:9a:e2:3a:72:72:62:01:0e:f0:6a:05:39:f3:08: 87:ea:2a:d0:a1:97:7b:1f:1f:16:a7:19:4e:be:00: 9d:94:3a:0a:57:27:0b:30:e3:f6:f9:48:c5:3a:31: c4:0a:a3:c9:a4:4a:f8:e9:0d:ad:45:4b:b3:2c:8d: 43:ba:a0:71:b1:e2:f7:64:04:12:17:41:cd:1b:53: 18:6f:c8:57:35:74:f1:2b:85:65:d3:2d:38:a2:f2: aa:66:60:cc:1a:38:fa:45:23:f0:bf:89:99:91:88: 29:06:e6:82:7a:b5:9a:f2:8d:91:c8:4f:c2:7b:0b: fe:01:64:78:71:9c:b6:38:9e:a6:74:e9:20:3b:55: 45:31:66:61:91:94:6c:7b:4f:3e:59:47:6e:a5:62: d7:32:af:f0:c2:23:a3:44:92:7f:c4:75:42:c9:fc: 26:9b:c6:9a:32:b1:63:ff:e7:45:c2:4d:2c:f7:df: 5b:d4:0c:d0:cf:20:2a:12:0e:3f:75:ae:22:5c:24: f2:36:fb:3e:4f:ac:e6:cc:a2:54:a8:07:cf:e5:95: 8c:11:f4:63:68:02:52:99:a2:b9:86:3b:49:e0:81: 39:b7:56:07:08:b8:a1:fc:fe:c8:e9:8f:dc:aa:7f: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9A:F2:FA:58:34:A5:93:2E:ED:FB:F8:58:03:90:D1:FA:D6:88:35 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ed:b6:9f:15:ce:00:94:04:3a:db:08:28:e8:ab:61:10:e8: d1:26:b0:7d:c1:cb:c5:84:0a:94:63:70:dc:3d:d6:0f:fe:50: 0b:1c:b1:ae:99:e8:58:5c:47:ef:a6:00:82:5e:3c:5b:f7:1b: 84:ad:dd:1a:48:e2:a9:33:61:78:84:8d:0d:91:c5:93:92:d7: 62:dc:1f:60:b3:0e:d5:65:45:a1:4f:6b:09:6e:d9:fa:b4:db: ae:3c:18:c0:84:c8:13:3c:3f:ce:3c:19:13:14:2a:b6:1d:6f: 2d:3b:31:65:36:d2:7c:dc:fb:7e:d9:27:15:60:49:cd:c7:9b: 4b:59:fa:49:0b:d2:6d:59:1b:ee:3f:00:00:7c:9c:0f:f5:fd: 70:56:22:c0:14:ce:97:e2:f7:c8:a7:59:0e:7b:34:cb:3a:8b: f1:66:48:cf:af:ac:99:a5:f5:3a:1a:31:42:ac:ea:39:89:a6: 84:e9:35:24:79:b2:0e:b5:09:f3:27:c5:a0:33:3a:46:2d:40: 67:71:c3:0b:ec:ae:83:81:fa:2d:3b:f2:90:60:d9:d7:51:a9: 7b:6a:4b:9f:bc:19:cc:7f:ee:d4:a8:4a:ef:dc:03:3c:bb:88: fa:5a:e2:2e:d0:44:eb:a5:e2:5c:e1:70:95:ad:21:80:8c:09: c0:ad:11:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUxMDMwMjAwMDQ0WhcNMjUxMTA2MjAwMDQ0WjAYMRYwFAYD VQQDEw02OTAzYzNlYy0wOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsK8bbUJhVaajFLweIMkmuI6cnJiAQ7wagU58wiH6irQoZd7Hx8WpxlOvgCd lDoKVycLMOP2+UjFOjHECqPJpEr46Q2tRUuzLI1DuqBxseL3ZAQSF0HNG1MYb8hX NXTxK4Vl0y04ovKqZmDMGjj6RSPwv4mZkYgpBuaCerWa8o2RyE/Cewv+AWR4cZy2 OJ6mdOkgO1VFMWZhkZRse08+WUdupWLXMq/wwiOjRJJ/xHVCyfwmm8aaMrFj/+dF wk0s999b1AzQzyAqEg4/da4iXCTyNvs+T6zmzKJUqAfP5ZWMEfRjaAJSmaK5hjtJ 4IE5t1YHCLih/P7I6Y/cqn9M5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqa8vpY NKWTLu37+FgDkNH61og1MB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu7bafFc4AlAQ62wgo6KthEOjRJrB9wcvFhAqUY3DcPdYP/lALHLGu mehYXEfvpgCCXjxb9xuErd0aSOKpM2F4hI0NkcWTktdi3B9gsw7VZUWhT2sJbtn6 tNuuPBjAhMgTPD/OPBkTFCq2HW8tOzFlNtJ83Pt+2ScVYEnNx5tLWfpJC9JtWRvu PwAAfJwP9f1wViLAFM6X4vfIp1kOezTLOovxZkjPr6yZpfU6GjFCrOo5iaaE6TUk ebIOtQnzJ8WgMzpGLUBnccML7K6DgfotO/KQYNnXUal7akufvBnMf+7UqErv3AM8 u4j6WuIu0ETrpeJc4XCVrSGAjAnArRGC -----END CERTIFICATE-----Generated at Fri Oct 31 18:36:39 2025 by rpki-client