$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft File: U76BKLnP6HdJhH5kRfquGociydI.mft (raw, json) Hash identifier: b1J67uc5FiUkgflMYRnyOtJt1TbtIQDSSYnIcsu03Z0= Subject key identifier: 08:27:23:41:C8:3B:94:F0:52:CE:CA:0A:FD:60:54:9A:01:8B:08:AB Authority key identifier: 53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2 Certificate issuer: /CN=A91BDC6D/serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft Manifest number: 17 Signing time: Mon 03 Nov 2025 07:51:46 +0000 Manifest this update: Mon 03 Nov 2025 07:51:45 +0000 Manifest next update: Mon 10 Nov 2025 07:51:45 +0000 Files and hashes: 1: U76BKLnP6HdJhH5kRfquGociydI.crl (hash: NZvURbCdbWXvWARkJIoxcpGShvWWTdwwKBmxVnYXOXU=) 2: C6425B12981D11F093FE8643C4F9AE02.roa (hash: cHtHl0mfRr10cBG++S9xArUxnFAw0CPyJZEh1n1ePUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC6D, serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2 Validity Not Before: Nov 3 07:51:45 2025 GMT Not After : Nov 10 07:51:45 2025 GMT Subject: CN=69085f11-fc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:4c:94:27:35:d5:36:aa:52:02:d2:e1:4a: e9:df:11:09:b9:f9:75:3f:1c:51:1b:e4:86:18:4c: 10:56:f5:c9:6b:26:cf:39:ec:a9:c5:b3:45:2b:23: b0:9f:59:01:ae:56:74:01:a0:9d:5d:46:f6:6b:f3: 1d:45:54:54:bb:77:f7:89:3b:c0:82:42:71:7e:c3: 2f:bb:95:7c:88:4a:53:b6:05:5d:5b:1a:3f:78:f8: ab:2d:a4:cf:05:f5:40:b5:12:88:85:b4:11:23:b9: ba:7a:7c:b4:b7:aa:ae:e8:ea:18:fa:0c:d3:5c:7f: a1:e0:a5:80:3f:78:c1:3e:fd:b6:6f:f5:36:1e:57: 22:71:84:f3:c0:c1:73:f5:9b:00:c2:98:14:35:44: 96:c5:3d:4e:11:88:5a:05:7e:44:75:99:aa:32:10: 94:cc:fd:c1:02:32:37:1f:32:fe:ce:28:11:d1:0d: d1:60:a8:d6:1d:72:e9:7e:50:dc:df:1e:b7:3b:fc: fa:b8:01:be:da:c3:46:e5:bd:51:5a:ad:2a:c3:0d: cb:65:f6:e3:9e:31:76:8e:c5:db:a8:0f:2f:75:5b: dc:98:ff:b2:72:74:03:93:cb:91:d0:f6:56:c4:6f: 8c:b5:3b:79:29:63:d4:d3:9c:43:09:11:a1:6a:e9: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:27:23:41:C8:3B:94:F0:52:CE:CA:0A:FD:60:54:9A:01:8B:08:AB X509v3 Authority Key Identifier: keyid:53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d5:99:95:41:05:88:57:fe:98:c1:09:86:45:41:bc:93:e5: 9e:f0:4a:28:f3:d2:04:83:b6:b9:18:a8:04:60:a2:90:4f:0e: 1f:6d:c2:48:47:ca:6f:ef:8c:41:4b:8c:ba:a3:c7:20:e7:2b: 8a:af:b8:b4:80:b5:4a:e5:88:0f:75:aa:6c:5e:20:83:1e:c8: 57:48:5c:c1:33:f9:46:b1:94:43:a9:b4:c6:dd:29:c9:d8:cf: a4:8b:f6:df:ba:3b:64:63:77:f0:a7:c5:df:ca:23:a6:ff:92: 11:2c:b4:79:a1:83:02:e7:bd:30:cb:14:50:1d:cd:2d:07:64: 3f:27:3e:f4:69:50:f0:59:25:4a:c9:81:76:e0:87:b3:20:11: 38:9c:09:a5:ca:91:0a:f2:ac:f0:e6:20:d6:6b:38:6e:81:d2: 1a:67:85:43:81:69:a7:11:3f:57:d3:ae:15:2e:75:79:b8:1f: d7:ab:3b:cc:7a:7d:ea:49:16:78:45:bc:38:7f:8e:ed:1f:1d: ba:d1:ae:32:cb:fd:51:98:ce:03:ab:5d:ec:cf:b8:55:99:cd: 41:9a:a3:a8:b5:d9:c3:7d:cb:d4:32:eb:f0:f3:4b:95:b1:f8: 8c:7f:0a:5e:77:36:62:5e:e8:4b:88:57:f6:29:63:50:41:66: e2:2c:55:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2RDExMC8GA1UEBRMoNTNCRTgxMjhCOUNGRTg3NzQ5ODQ3RTY0NDVGQUFFMUE4 NzIyQzlEMjAeFw0yNTExMDMwNzUxNDVaFw0yNTExMTAwNzUxNDVaMBgxFjAUBgNV BAMTDTY5MDg1ZjExLWZjN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0nUyUJzXVNqpSAtLhSunfEQm5+XU/HFEb5IYYTBBW9clrJs857KnFs0UrI7Cf WQGuVnQBoJ1dRvZr8x1FVFS7d/eJO8CCQnF+wy+7lXyISlO2BV1bGj94+KstpM8F 9UC1EoiFtBEjubp6fLS3qq7o6hj6DNNcf6HgpYA/eME+/bZv9TYeVyJxhPPAwXP1 mwDCmBQ1RJbFPU4RiFoFfkR1maoyEJTM/cECMjcfMv7OKBHRDdFgqNYdcul+UNzf Hrc7/Pq4Ab7aw0blvVFarSrDDctl9uOeMXaOxduoDy91W9yY/7JydAOTy5HQ9lbE b4y1O3kpY9TTnEMJEaFq6dijAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCCcjQcg7 lPBSzsoK/WBUmgGLCKswHwYDVR0jBBgwFoAUU76BKLnP6HdJhH5kRfquGociydIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzZELzk3QkFFNTYwOTc2 NTExRjBCOEEyQ0MwQ0M0RjlBRTAyL1U3NkJLTG5QNkhkSmhINWtSZnF1R29jaXlk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTc2QktMblA2SGRKaEg1a1JmcXVHb2NpeWRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzZELzk3QkFFNTYwOTc2NTExRjBCOEEyQ0MwQ0M0RjlBRTAyL1U3NkJLTG5QNkhk SmhINWtSZnF1R29jaXlkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG3VmZVBBYhX/pjBCYZFQbyT5Z7wSijz0gSDtrkYqARgopBPDh9twkhH ym/vjEFLjLqjxyDnK4qvuLSAtUrliA91qmxeIIMeyFdIXMEz+UaxlEOptMbdKcnY z6SL9t+6O2Rjd/Cnxd/KI6b/khEstHmhgwLnvTDLFFAdzS0HZD8nPvRpUPBZJUrJ gXbgh7MgETicCaXKkQryrPDmINZrOG6B0hpnhUOBaacRP1fTrhUudXm4H9erO8x6 fepJFnhFvDh/ju0fHbrRrjLL/VGYzgOrXezPuFWZzUGao6i12cN9y9Qy6/DzS5Wx +Ix/Cl53NmJe6EuIV/YpY1BBZuIsVZY= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:44 2025 by rpki-client