$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json) Hash identifier: LYYNJ5UnPld25MmnYTz3YBAB8ovFKPaq+nj9REKRReM= Subject key identifier: CA:D6:F9:14:96:12:85:37:E0:B9:37:41:54:77:19:5D:80:0B:20:41 Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft Manifest number: 01D1 Signing time: Wed 05 Nov 2025 02:57:27 +0000 Manifest this update: Wed 05 Nov 2025 02:57:27 +0000 Manifest next update: Wed 12 Nov 2025 02:57:27 +0000 Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: 81fegJW/2aAuThdM+rYkIxISKZXlUXpEFAq3Mu9J210=) 2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: RiSzecgrf2L+I7okqYMacDikMwDpRb3b5jlgRjgQGAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: Nov 5 02:57:27 2025 GMT Not After : Nov 12 02:57:27 2025 GMT Subject: CN=690abd17-b0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:35:a5:42:8c:6b:e4:72:e6:c7:17:cd:2e:10: b7:6f:db:0d:94:9c:26:60:9d:d0:24:c4:81:30:ae: 0d:54:0e:96:df:1f:c5:0f:7c:c0:24:e4:9c:9a:c9: 97:31:2f:4e:a7:3a:f9:3e:54:a2:e0:7e:31:c7:e6: a7:34:17:d6:6b:0e:89:0c:88:51:b9:66:e6:dd:76: 0d:8d:b4:09:4d:3a:e1:dd:81:0d:34:47:a8:5a:27: 35:85:1b:51:5b:9f:0d:dd:b1:31:52:19:45:0e:9d: c2:77:22:40:b3:a0:87:bc:6e:b6:6f:0e:56:d9:95: 53:34:60:91:04:46:ac:78:d8:6d:92:61:5c:93:ea: d3:6d:08:2f:03:8c:04:6c:ab:5f:a1:e8:c7:12:a7: 2c:15:c7:bf:cf:e5:d0:c0:58:0c:19:11:fb:8e:75: 3a:b8:8e:18:7d:ab:7d:ac:cb:dc:be:fd:e6:68:f5: 2f:20:69:c6:ce:c7:cb:00:70:a3:60:fb:aa:ec:2f: 3c:f3:53:ff:53:c3:ad:f1:dc:95:5d:78:88:57:79: e5:76:22:cc:a4:75:7b:04:4f:1d:2e:87:3f:47:fe: 5c:47:9f:8b:6b:22:91:1f:f8:80:33:17:e7:64:01: 26:54:3e:a8:48:7f:bb:bf:af:d9:b4:a1:67:f7:08: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D6:F9:14:96:12:85:37:E0:B9:37:41:54:77:19:5D:80:0B:20:41 X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:2d:77:de:f5:b0:7c:32:a3:f9:d5:0f:b9:8f:7f:84:45:6f: 38:09:4f:57:4d:3a:ca:85:d4:38:39:03:15:c7:5f:ce:6d:57: e2:fa:8f:16:d9:48:a4:e0:ff:86:e9:02:5d:05:68:55:04:7d: cd:4f:e5:8c:27:c5:a4:5c:23:7a:15:6c:7d:60:af:4a:78:d5: 8c:20:f6:18:71:0a:28:de:6b:12:4a:6c:49:19:e5:4d:10:84: a4:60:60:1a:fe:ad:9f:a5:a1:1c:35:f8:24:17:2f:88:0c:5d: 3e:62:f5:77:a0:f9:c0:a6:04:d2:82:ba:cc:ad:8e:f9:29:84: 33:18:01:20:81:ec:e5:2c:fe:3f:f6:dc:27:9c:86:f4:f8:42: 0c:7e:ce:18:85:7c:0a:79:5d:7e:93:2d:5f:66:8c:18:76:8c: 04:2f:cc:51:24:a7:ec:a4:d8:0c:d4:56:82:3d:3e:e8:26:ae: 07:21:61:7f:99:97:52:a1:96:5e:c3:24:77:5c:9a:38:e1:c4: d5:60:cd:51:7f:fd:dd:3b:39:c3:12:ce:e3:b1:a8:5a:fe:bb: db:e1:13:2a:f7:c8:ee:25:a1:10:89:52:d8:d0:ca:c4:68:9e: 6e:18:62:29:5b:53:ae:8c:09:95:e4:6a:2a:8a:d6:e5:1d:6c: 68:e3:01:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjUxMTA1MDI1NzI3WhcNMjUxMTEyMDI1NzI3WjAYMRYwFAYD VQQDEw02OTBhYmQxNy1iMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDWlQoxr5HLmxxfNLhC3b9sNlJwmYJ3QJMSBMK4NVA6W3x/FD3zAJOScmsmX MS9Opzr5PlSi4H4xx+anNBfWaw6JDIhRuWbm3XYNjbQJTTrh3YENNEeoWic1hRtR W58N3bExUhlFDp3CdyJAs6CHvG62bw5W2ZVTNGCRBEaseNhtkmFck+rTbQgvA4wE bKtfoejHEqcsFce/z+XQwFgMGRH7jnU6uI4Yfat9rMvcvv3maPUvIGnGzsfLAHCj YPuq7C8881P/U8Ot8dyVXXiIV3nldiLMpHV7BE8dLoc/R/5cR5+LayKRH/iAMxfn ZAEmVD6oSH+7v6/ZtKFn9wg6mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrW+RSW EoU34Lk3QVR3GV2ACyBBMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEyQS8xNDc3MTFCMkYzQkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIz alZULXE2RzJCdmhVb2tDOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXLXfe9bB8MqP51Q+5j3+ERW84CU9XTTrKhdQ4OQMVx1/ObVfi+o8W 2Uik4P+G6QJdBWhVBH3NT+WMJ8WkXCN6FWx9YK9KeNWMIPYYcQoo3msSSmxJGeVN EISkYGAa/q2fpaEcNfgkFy+IDF0+YvV3oPnApgTSgrrMrY75KYQzGAEggezlLP4/ 9twnnIb0+EIMfs4YhXwKeV1+ky1fZowYdowEL8xRJKfspNgM1FaCPT7oJq4HIWF/ mZdSoZZewyR3XJo44cTVYM1Rf/3dOznDEs7jsaha/rvb4RMq98juJaEQiVLY0MrE aJ5uGGIpW1OujAmV5GoqitblHWxo4wHb -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:23 2025 by rpki-client