$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: m9eh8n3PTa0fIy3usiUH/dDRx6mrXnTF0JlcNdhEVGI= Subject key identifier: 23:38:00:F6:8A:87:D7:1C:A3:7A:1D:CB:1C:29:A5:B1:E5:BF:EF:86 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0D90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0D38 Signing time: Sun 26 Oct 2025 18:27:05 +0000 Manifest this update: Sun 26 Oct 2025 18:27:04 +0000 Manifest next update: Sun 02 Nov 2025 18:27:04 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: 2Vtow++nOiinvRvS6SOtlHaXdREocTHivk7JKiyPBig=) 2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: B9TNU/jgE/B9qF/pLkXeXHo28NX5WSHP3+HqoCXSOUM=) 3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: yXlaLhbx5YRuGCOCxZS+UVUBHLhciPfPZJOpJ77jS10=) 4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: 6pM1TQdNb79+DA6IOYbwXDIQvGxFIYUOEy7bg1GioZ4=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: KHH4guWZz2QPTGfSHIABOFeNEzmNYAkAEdSlj0Q8gIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3472 (0xd90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Oct 26 18:27:04 2025 GMT Not After : Nov 2 18:27:04 2025 GMT Subject: CN=68fe67f9-15a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:28:66:0c:04:91:ed:f1:df:1d:34:d4:bb: 07:42:78:09:cd:87:2e:58:7b:f9:ef:e9:2e:1f:8c: 3b:6d:a0:82:05:18:89:9b:30:bc:a6:55:38:26:ef: 6e:a2:cb:79:be:06:65:91:28:c7:58:3b:aa:fd:87: d3:70:e6:70:0b:25:a7:df:9f:42:e7:6a:62:c6:28: 6f:31:09:6a:97:d6:98:cf:5b:30:42:72:58:0d:ca: 9a:ce:db:87:b6:55:e6:a7:6c:6f:b2:2f:e4:f7:e6: f3:04:33:f4:83:7c:eb:ea:9c:79:a9:ab:36:01:90: 1c:a3:bc:46:4e:74:ee:8f:a3:d3:57:f7:49:e1:2c: 78:07:4c:86:13:45:8b:c5:20:4a:47:aa:6b:20:ea: 3b:8d:b5:97:b4:2f:c9:e2:6d:69:2b:31:d1:93:49: 60:1d:85:7f:c1:1c:af:df:3a:bc:0c:77:fa:83:e6: ae:37:45:fa:57:db:d3:8b:79:86:4d:f8:3f:db:8f: 0f:08:98:82:48:69:b3:2f:39:66:e9:de:fa:9b:1b: bc:d5:16:68:b2:bb:b7:44:26:18:c4:57:86:2e:50: a4:cf:e2:98:3c:b6:a9:36:d7:41:1d:8e:41:eb:4b: e3:ac:0f:24:33:74:ac:1e:4f:6f:79:e7:4a:cf:e7: 87:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:38:00:F6:8A:87:D7:1C:A3:7A:1D:CB:1C:29:A5:B1:E5:BF:EF:86 X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a1:60:ce:5e:40:e1:6c:3b:d4:cb:19:01:34:99:8d:e5:42: 05:01:60:c3:6c:11:72:75:0b:3a:17:2a:68:a7:09:3a:3e:00: e6:24:bc:f7:8f:f1:f6:89:75:1e:0d:1b:8f:d8:5e:36:f3:0e: b4:b5:79:2d:0a:85:f6:cd:0b:08:03:bb:d7:0d:10:e1:83:82: da:a0:88:4e:67:5d:ce:a1:28:f7:ac:76:2f:6d:1e:35:0d:3f: e5:12:e3:8a:0e:5b:a2:9e:16:eb:fa:77:d2:1d:f3:f8:e3:60: 25:e3:d3:0e:01:f1:b2:cd:07:e7:44:b8:5c:72:af:a9:c1:d7: b4:82:d6:d2:7e:74:e3:9c:68:30:f1:d9:6c:84:55:56:21:66: 6c:f4:ff:94:97:20:46:36:34:c1:2b:2b:b1:c4:d7:e5:88:d4: 58:59:f4:3c:61:09:ed:ad:ed:f1:ed:42:df:ce:e0:f6:ed:44: f1:a2:7f:8e:71:5b:9b:45:41:07:90:36:51:78:f3:b7:27:39: 06:9b:c5:c9:fd:39:65:30:67:17:1b:0f:d5:6d:0e:9a:22:72: 7a:1e:d8:51:e8:9d:c6:33:c7:3b:9d:43:e6:1d:a4:19:12:27: 45:9f:76:6a:82:47:d4:c2:3f:44:b2:66:0a:cf:e7:ad:29:d1: d0:6a:88:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUxMDI2MTgyNzA0WhcNMjUxMTAyMTgyNzA0WjAYMRYwFAYD VQQDEw02OGZlNjdmOS0xNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya8oZgwEke3x3x001LsHQngJzYcuWHv57+kuH4w7baCCBRiJmzC8plU4Ju9u ost5vgZlkSjHWDuq/YfTcOZwCyWn359C52pixihvMQlql9aYz1swQnJYDcqaztuH tlXmp2xvsi/k9+bzBDP0g3zr6px5qas2AZAco7xGTnTuj6PTV/dJ4Sx4B0yGE0WL xSBKR6prIOo7jbWXtC/J4m1pKzHRk0lgHYV/wRyv3zq8DHf6g+auN0X6V9vTi3mG Tfg/248PCJiCSGmzLzlm6d76mxu81RZosru3RCYYxFeGLlCkz+KYPLapNtdBHY5B 60vjrA8kM3SsHk9veedKz+eHBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCM4APaK h9cco3odyxwppbHlv++GMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxoWDOXkDhbDvUyxkBNJmN5UIFAWDDbBFydQs6Fypopwk6PgDmJLz3 j/H2iXUeDRuP2F428w60tXktCoX2zQsIA7vXDRDhg4LaoIhOZ13OoSj3rHYvbR41 DT/lEuOKDluinhbr+nfSHfP442Al49MOAfGyzQfnRLhccq+pwde0gtbSfnTjnGgw 8dlshFVWIWZs9P+UlyBGNjTBKyuxxNfliNRYWfQ8YQntre3x7ULfzuD27UTxon+O cVubRUEHkDZRePO3JzkGm8XJ/TllMGcXGw/VbQ6aInJ6HthR6J3GM8c7nUPmHaQZ EidFn3ZqgkfUwj9EsmYKz+etKdHQaoi1 -----END CERTIFICATE-----Generated at Mon Oct 27 17:00:04 2025 by rpki-client