$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft File: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft (raw, json) Hash identifier: yUnWmquYT3qRg+sKHnQ0UXP4fxqFh0CG2YuXxcw7thc= Subject key identifier: B6:89:CA:9D:52:C7:01:82:2C:7C:5F:24:88:CA:CB:DC:86:8C:E7:DD Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 35AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft Manifest number: 352F Signing time: Wed 22 Oct 2025 14:25:40 +0000 Manifest this update: Wed 22 Oct 2025 14:25:39 +0000 Manifest next update: Wed 29 Oct 2025 14:25:39 +0000 Files and hashes: 1: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl (hash: qURZ5SOoLLUE9BgWGsZV4q6xdK5rOJ38SiSpqpWEGeg=) 2: DF8602D05E5B11ED994E491CC4F9AE02.roa (hash: KKCg2NooRoQGuF3KYpzz51c9C/45UUPObnLo2e5njhU=) 3: D0886954188811EC8E86754FC4F9AE02.roa (hash: yPv2xJqSMbxdqO3CUxzFvtSmE89AHilhOo/061TH8FU=) 4: AB9889725E5E11EDB5361D3BC4F9AE02.roa (hash: nfNjfg1IXDDhMM0k16fT6xDTUZvLHRQ/C+xvVXQFUFE=) 5: 99CF729E221011ED980A6F47C4F9AE02.roa (hash: iSQxLeiRN1fYoIns2yWqQhKW9w0d7Bh4Hi7g+FcoiAo=) 6: 491E49AECDCA11ED8F57D386C4F9AE02.roa (hash: GOobL3IcAmOzxEXI8Av9eECmrglVLT+e8Yk36aU9ns8=) 7: 9F3A919468D811EFB2FE405FC4F9AE02.roa (hash: ZaxlSh3XWBv2fOJrVopMAyhJjHEvnP8TGG96c6iuXcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13739 (0x35ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Oct 22 14:25:39 2025 GMT Not After : Oct 29 14:25:39 2025 GMT Subject: CN=68f8e963-0e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:48:2c:11:f6:2b:14:e2:b1:a5:5f:a5:1e: ea:3d:ef:2a:85:4b:83:c6:1b:cc:5c:d5:95:5e:a6: e0:d4:02:f4:6d:39:d4:0c:77:52:f7:05:77:4c:26: 47:d0:4c:c6:68:5f:47:92:3c:64:e8:ec:f7:b0:55: ee:6b:33:35:46:be:25:1d:52:d2:b2:df:4c:b1:46: 9d:3f:3e:26:6c:a8:72:53:eb:be:96:68:5c:ba:ec: 0f:4a:a8:f7:79:53:8d:b9:3c:5a:a8:67:ce:cb:a3: 71:08:a3:fd:aa:a8:12:25:15:35:5b:b2:3f:8f:95: 83:37:01:bb:49:01:81:e4:b0:34:80:5a:87:e8:1a: 3c:02:89:31:5c:67:1c:b7:5a:d3:81:d0:b8:28:b9: a9:34:32:d5:20:06:f2:55:1f:1f:70:03:74:33:37: 7b:bb:0c:29:80:14:07:d3:e8:1f:c0:99:21:42:00: a7:93:26:b0:db:09:3d:f5:1a:3b:be:af:1d:f7:ff: c0:98:35:26:66:c5:ec:c4:8d:0e:3d:2b:86:64:fb: d1:a1:04:9b:ac:cb:83:59:51:1c:9e:0d:34:1e:ca: e5:80:2b:47:d9:6d:f6:cf:3f:5d:4b:29:8e:23:bb: 96:8f:c9:39:07:a3:44:c7:af:24:56:e5:f0:90:a6: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:89:CA:9D:52:C7:01:82:2C:7C:5F:24:88:CA:CB:DC:86:8C:E7:DD X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:78:0e:1e:f4:af:b2:9a:87:88:9b:b9:e2:ab:98:14:9b:08: da:fa:78:7a:5d:7a:7f:d8:91:96:12:43:83:16:91:ff:6e:fd: a2:8e:1d:4b:65:1f:96:ce:73:7f:82:39:99:6c:f1:e8:64:8e: ff:6f:41:07:9d:1b:ea:da:3e:ad:f1:9f:d4:4a:81:0c:66:d6: 19:12:b1:5e:25:c0:67:d1:b2:0c:1e:53:6d:f8:98:84:00:ad: d3:59:c8:c5:bf:c6:ed:7d:9e:22:0b:f1:77:c0:c5:83:66:89: ad:84:ff:e6:68:39:c4:14:14:b2:3e:8d:83:be:31:eb:e5:80: b2:fe:e2:8e:3f:70:81:64:9c:5d:1a:43:42:d6:0a:18:e9:8d: 7b:d4:cb:b2:ab:a2:45:40:a3:3c:96:d4:b8:74:c0:64:10:11: 56:f7:e4:f1:fb:dd:7a:9c:91:ac:9e:be:b7:47:dd:59:71:e5: 80:b6:9b:75:2c:1b:12:11:42:a3:cb:6f:fc:8c:e6:44:e8:3f: c8:25:2d:bb:e0:d8:37:7d:c9:65:8d:65:f0:8b:1d:b3:3e:4f: 16:8e:e8:74:26:3a:1b:c7:61:02:0f:b1:33:39:95:b1:ec:d0: 1c:12:69:a5:71:c8:04:6f:53:61:3f:dc:91:03:88:b6:ec:bf: 8f:db:d4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjUxMDIyMTQyNTM5WhcNMjUxMDI5MTQyNTM5WjAYMRYwFAYD VQQDEw02OGY4ZTk2My0wZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVNILBH2KxTisaVfpR7qPe8qhUuDxhvMXNWVXqbg1AL0bTnUDHdS9wV3TCZH 0EzGaF9Hkjxk6Oz3sFXuazM1Rr4lHVLSst9MsUadPz4mbKhyU+u+lmhcuuwPSqj3 eVONuTxaqGfOy6NxCKP9qqgSJRU1W7I/j5WDNwG7SQGB5LA0gFqH6Bo8AokxXGcc t1rTgdC4KLmpNDLVIAbyVR8fcAN0Mzd7uwwpgBQH0+gfwJkhQgCnkyaw2wk99Ro7 vq8d9//AmDUmZsXsxI0OPSuGZPvRoQSbrMuDWVEcng00HsrlgCtH2W32zz9dSymO I7uWj8k5B6NEx68kVuXwkKZOMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaJyp1S xwGCLHxfJIjKy9yGjOfdMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY0Ny9CNEE4NkMzODFEODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQ cmlsd3lWUS1oSnFRX25OMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+eA4e9K+ymoeIm7niq5gUmwja+nh6XXp/2JGWEkODFpH/bv2ijh1L ZR+WznN/gjmZbPHoZI7/b0EHnRvq2j6t8Z/USoEMZtYZErFeJcBn0bIMHlNt+JiE AK3TWcjFv8btfZ4iC/F3wMWDZomthP/maDnEFBSyPo2DvjHr5YCy/uKOP3CBZJxd GkNC1goY6Y171Muyq6JFQKM8ltS4dMBkEBFW9+Tx+916nJGsnr63R91ZceWAtpt1 LBsSEUKjy2/8jOZE6D/IJS274Ng3fclljWXwix2zPk8Wjuh0Jjobx2ECD7EzOZWx 7NAcEmmlccgEb1NhP9yRA4i27L+P29R+ -----END CERTIFICATE-----Generated at Thu Oct 23 04:42:53 2025 by rpki-client