$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: yZfrKTkqZ1lsvfu6tq70KtDpFBKrfZhdBqkKL/mOsaA= Subject key identifier: D1:4F:54:BA:77:59:D2:D3:C8:C6:9D:F8:FB:43:83:74:D6:E1:BC:EB Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 34E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 34E0 Signing time: Tue 04 Nov 2025 14:18:28 +0000 Manifest this update: Tue 04 Nov 2025 14:18:27 +0000 Manifest next update: Tue 11 Nov 2025 14:18:27 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: hCcFHbTpuitY8vBdMa6iA9D2JH9Zb2/FhwrYMpwqdMQ=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: oI8UmPtI+e/lNHKPjl/mA09y7Gr50NMbgC5wn6SXx2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: Nov 4 14:18:27 2025 GMT Not After : Nov 11 14:18:27 2025 GMT Subject: CN=690a0b33-62ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:af:fa:54:35:8d:01:9a:67:e3:e6:c4:a8: c2:63:e9:69:9f:e2:22:80:e8:62:0d:2a:7a:3b:97: 6d:cb:04:cc:48:22:a6:b6:fa:b4:f7:29:fb:b2:19: c2:32:96:2e:8b:b8:89:1c:ad:3d:9e:65:ee:4c:54: e1:85:c6:1a:e1:71:d6:c7:6b:32:30:be:8e:89:7b: 22:c6:b0:01:c6:5b:ee:41:cf:aa:72:5e:58:1e:e8: 5d:fd:6f:af:88:68:ce:85:16:56:73:9d:73:0a:82: 0d:19:35:f8:b0:ca:0f:af:57:96:87:1a:be:2b:7a: 53:d3:03:5f:57:c5:ff:f2:d5:05:b4:29:49:7c:61: ff:93:7b:9c:0e:a3:3f:dd:d3:a0:ae:0b:75:5e:3b: 3b:59:16:7b:2f:d3:e0:10:d7:ae:99:a5:21:50:be: 57:06:e6:f3:2d:df:3c:09:17:6e:1f:a9:e9:60:bb: 9a:61:f7:91:9e:3e:5f:85:1e:f4:4b:03:15:6c:ea: 52:e5:2e:0d:cb:cb:a2:e4:80:89:f2:01:39:89:a6: fd:a3:42:f2:e5:8d:c8:bb:51:c6:f4:5c:d0:b4:92: a4:3b:8f:45:b1:6d:5f:60:3a:59:81:37:30:71:8f: 50:20:ee:e8:c1:d7:84:05:4f:38:31:36:9f:0b:7e: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4F:54:BA:77:59:D2:D3:C8:C6:9D:F8:FB:43:83:74:D6:E1:BC:EB X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:82:d1:4e:fd:fc:81:02:4d:a0:ac:3e:36:f2:22:23:a6:8c: 0c:c7:c0:71:62:bb:86:84:4e:fe:a1:9e:a2:cd:4f:54:56:57: 2c:be:80:de:f0:2c:08:3d:6e:17:75:65:ec:cb:aa:7f:f3:27: 66:d4:ed:01:a3:58:b8:5e:65:13:d9:1a:d9:d9:8e:f7:c6:37: a2:83:f8:6b:e9:34:15:01:dc:ae:8f:36:ca:d2:d5:75:ed:c7: ec:68:d3:31:14:84:dc:e0:cb:bb:a0:e7:cc:86:ec:72:19:68: 9b:40:62:7f:71:87:57:94:d0:6a:a1:65:01:0d:e5:b0:bb:86: a9:30:1f:0d:3b:70:c8:35:0e:e3:7c:3e:3d:27:35:79:ed:74: 43:74:4e:ad:96:67:ea:8d:ec:84:98:e5:47:8c:07:9e:5c:5f: c8:cb:4b:c0:93:70:c8:d3:e8:7a:f7:b2:78:6e:57:04:9b:de: 9c:9d:ed:15:88:ac:72:4b:3b:f6:fd:51:db:03:d1:33:38:c0: 61:c6:ce:70:0a:80:cd:36:7c:b3:a7:d0:41:3c:f1:47:c5:60: 7b:1c:6c:fa:65:a8:a4:6a:36:98:16:ed:5c:f8:cd:2d:ba:c5: 1c:85:51:34:14:8f:e8:2d:14:fc:d7:65:75:7c:05:28:73:27: 78:0f:9f:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjUxMTA0MTQxODI3WhcNMjUxMTExMTQxODI3WjAYMRYwFAYD VQQDEw02OTBhMGIzMy02MmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRCv+lQ1jQGaZ+PmxKjCY+lpn+IigOhiDSp6O5dtywTMSCKmtvq09yn7shnC MpYui7iJHK09nmXuTFThhcYa4XHWx2syML6OiXsixrABxlvuQc+qcl5YHuhd/W+v iGjOhRZWc51zCoINGTX4sMoPr1eWhxq+K3pT0wNfV8X/8tUFtClJfGH/k3ucDqM/ 3dOgrgt1Xjs7WRZ7L9PgENeumaUhUL5XBubzLd88CRduH6npYLuaYfeRnj5fhR70 SwMVbOpS5S4Ny8ui5ICJ8gE5iab9o0Ly5Y3Iu1HG9FzQtJKkO49FsW1fYDpZgTcw cY9QIO7owdeEBU84MTafC35KQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFPVLp3 WdLTyMad+PtDg3TW4bzrMB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmgtFO/fyBAk2grD428iIjpowMx8BxYruGhE7+oZ6izU9UVlcsvoDe 8CwIPW4XdWXsy6p/8ydm1O0Bo1i4XmUT2RrZ2Y73xjeig/hr6TQVAdyujzbK0tV1 7cfsaNMxFITc4Mu7oOfMhuxyGWibQGJ/cYdXlNBqoWUBDeWwu4apMB8NO3DINQ7j fD49JzV57XRDdE6tlmfqjeyEmOVHjAeeXF/Iy0vAk3DI0+h697J4blcEm96cne0V iKxySzv2/VHbA9EzOMBhxs5wCoDNNnyzp9BBPPFHxWB7HGz6ZaikajaYFu1c+M0t usUchVE0FI/oLRT812V1fAUocyd4D5/a -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:34 2025 by rpki-client