$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: hDk0dEKLD+sFa5PubbGFWwOa8IKdU/vmGE0VeSao6Ok= Subject key identifier: 01:00:8C:7E:4C:22:6E:50:3A:D5:AA:16:4C:64:D7:97:50:BA:53:E0 Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0C97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0C8D Signing time: Sun 02 Nov 2025 18:22:47 +0000 Manifest this update: Sun 02 Nov 2025 18:22:46 +0000 Manifest next update: Sun 09 Nov 2025 18:22:46 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: LfJm+m3uOmX0nsToYyZG0U6MTD6FG4l+hkJVFX1PNt4=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3223 (0xc97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Nov 2 18:22:46 2025 GMT Not After : Nov 9 18:22:46 2025 GMT Subject: CN=6907a177-c51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:f4:b9:fa:ca:c4:31:94:f9:85:8a:67:50: 6e:44:b7:4b:62:a5:3a:cb:b0:45:c5:3d:c5:fb:8f: cd:7c:4c:d8:c8:e6:b3:8f:df:41:58:89:80:c6:7e: 9c:74:cd:9c:34:d8:f2:20:64:c8:b5:08:0e:78:32: bf:a3:37:cb:8c:d1:ba:d5:1e:6b:da:c6:c8:9a:66: d5:18:49:28:34:d3:09:37:bd:8d:f7:12:34:70:f0: b7:45:a1:ae:01:fc:ad:e2:62:3f:d1:2c:09:de:41: ca:4d:ef:86:71:b3:ad:15:74:e1:c7:82:84:84:07: ac:01:8d:2f:ad:5b:fb:12:4d:72:29:0d:7b:9d:88: 39:97:f1:f3:21:c0:02:5c:92:3b:34:21:9b:cd:41: 57:1a:4e:48:38:e3:fe:df:d5:00:c9:44:d0:29:b7: fb:19:23:7b:57:03:64:b8:d2:5f:67:59:7e:6d:83: 7f:a5:c3:75:4a:ee:8c:5c:79:db:ed:29:08:ee:8b: b1:ea:b4:2a:aa:e6:d0:fb:4a:86:62:a6:23:ce:34: ef:31:fc:df:c5:34:58:84:53:99:f5:56:e8:da:3d: 4f:63:a9:2a:33:3f:16:1d:1d:e2:b5:07:b6:b7:e6: 33:bb:2c:16:29:6e:4a:f4:a1:ec:1f:37:ad:ec:31: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:00:8C:7E:4C:22:6E:50:3A:D5:AA:16:4C:64:D7:97:50:BA:53:E0 X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:99:2b:6d:67:1c:6a:61:d0:52:7e:77:8b:da:bf:e1:b3:7b: 5f:af:6f:16:4e:cc:6e:49:33:e6:6c:72:cb:7c:72:e6:ac:5b: 43:b4:c3:6e:ea:ac:6e:56:86:e9:7f:91:54:67:77:eb:a0:a0: 1a:4b:aa:86:02:32:7a:0a:1b:ee:d7:34:c4:46:29:d6:33:28: c7:13:07:13:b2:23:ad:3a:4e:73:9b:21:b8:75:b9:e9:75:cd: a5:6c:12:d4:e6:e7:74:20:7e:bb:0a:c5:28:b0:8c:34:b3:b3: 96:45:a6:b7:3b:63:56:e4:2c:8f:d8:e6:86:a1:03:b4:dd:ab: f2:21:2e:9b:d0:49:8d:81:50:7a:9c:5e:6b:57:ed:81:26:98: 07:0d:5c:ad:95:9e:62:83:fa:e1:1e:79:50:4c:d7:5e:da:85: 27:84:6b:9a:55:38:d6:79:cb:e8:e6:ca:c4:82:10:d9:8c:a6: 11:ec:62:bd:3a:1f:56:aa:c1:a6:fd:33:42:10:3f:f7:c7:ae: e9:00:ce:e8:d2:a0:6c:49:92:f5:fe:0f:ea:70:06:e8:fe:c9: d9:ac:ed:49:92:92:01:39:47:8e:06:c3:81:48:c7:da:90:90: f3:8c:e5:1b:c3:3f:3e:25:02:82:1c:3b:24:45:08:52:da:10: be:cf:d2:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUxMTAyMTgyMjQ2WhcNMjUxMTA5MTgyMjQ2WjAYMRYwFAYD VQQDEw02OTA3YTE3Ny1jNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc70ufrKxDGU+YWKZ1BuRLdLYqU6y7BFxT3F+4/NfEzYyOazj99BWImAxn6c dM2cNNjyIGTItQgOeDK/ozfLjNG61R5r2sbImmbVGEkoNNMJN72N9xI0cPC3RaGu Afyt4mI/0SwJ3kHKTe+GcbOtFXThx4KEhAesAY0vrVv7Ek1yKQ17nYg5l/HzIcAC XJI7NCGbzUFXGk5IOOP+39UAyUTQKbf7GSN7VwNkuNJfZ1l+bYN/pcN1Su6MXHnb 7SkI7oux6rQqqubQ+0qGYqYjzjTvMfzfxTRYhFOZ9Vbo2j1PY6kqMz8WHR3itQe2 t+YzuywWKW5K9KHsHzet7DFAKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEAjH5M Im5QOtWqFkxk15dQulPgMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSmSttZxxqYdBSfneL2r/hs3tfr28WTsxuSTPmbHLLfHLmrFtDtMNu 6qxuVobpf5FUZ3froKAaS6qGAjJ6Chvu1zTERinWMyjHEwcTsiOtOk5zmyG4dbnp dc2lbBLU5ud0IH67CsUosIw0s7OWRaa3O2NW5CyP2OaGoQO03avyIS6b0EmNgVB6 nF5rV+2BJpgHDVytlZ5ig/rhHnlQTNde2oUnhGuaVTjWecvo5srEghDZjKYR7GK9 Oh9WqsGm/TNCED/3x67pAM7o0qBsSZL1/g/qcAbo/snZrO1JkpIBOUeOBsOBSMfa kJDzjOUbwz8+JQKCHDskRQhS2hC+z9Ix -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:11 2025 by rpki-client