$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft File: aUugcLYm4WhY1mDyEg50tvw_cuw.mft (raw, json) Hash identifier: U4rK+BTsQlE057v90KmHxh+r0Ii8ONWg7ivjlFEUeSw= Subject key identifier: 20:49:C9:16:89:D8:12:76:A3:A9:12:64:61:18:CC:D0:50:B8:BB:B1 Authority key identifier: 69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC Certificate issuer: /CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft Manifest number: 34D4 Signing time: Tue 04 Nov 2025 15:09:09 +0000 Manifest this update: Tue 04 Nov 2025 15:09:08 +0000 Manifest next update: Tue 11 Nov 2025 15:09:08 +0000 Files and hashes: 1: aUugcLYm4WhY1mDyEg50tvw_cuw.crl (hash: v6v05O5s+MzhsMjtotfLsxemH8AooTW0gMwSqFwHSYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7426, serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Validity Not Before: Nov 4 15:09:08 2025 GMT Not After : Nov 11 15:09:08 2025 GMT Subject: CN=690a1714-e79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:52:85:a3:b9:57:74:76:01:06:02:0a:6f: ca:ba:d7:98:5f:fe:5a:d7:fa:fa:b0:ff:3d:c5:3d: 0c:ed:58:08:44:2d:a5:0f:5a:7e:8e:96:7a:3d:0a: dc:56:16:d0:e3:c4:a7:48:27:9e:f0:87:6a:46:62: 35:a8:d0:9e:8c:71:ef:8d:19:66:43:7d:05:b2:58: d0:05:6d:8c:4c:07:6d:fd:7d:b2:75:a4:c1:da:87: 05:12:36:f8:2c:27:49:c0:73:32:28:ce:41:8c:ac: 89:17:3c:9c:dd:fe:ce:8c:4f:3a:34:25:eb:cc:3f: 89:ae:6d:fa:75:d9:f6:93:22:41:7d:65:e8:27:a1: b0:04:ae:16:e4:dc:c5:f0:64:bf:17:ca:02:00:4f: 23:79:44:78:43:4b:4c:b3:9b:38:ea:09:9f:d3:77: 86:89:37:31:c4:39:58:41:18:ae:26:f2:54:8d:f3: f5:76:83:1a:d2:1a:6a:b2:f9:b7:93:9f:da:f9:51: db:e2:bc:c4:a0:e4:55:9e:cc:75:1b:ed:37:e1:46: c3:67:61:8f:b3:16:2e:6c:a0:cc:28:93:de:92:85: 2b:26:a6:f2:9e:b4:b6:32:30:ad:27:cc:18:d1:8f: 6b:35:7b:ef:06:4b:74:4e:fb:7d:1c:8a:d6:bd:09: c4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:49:C9:16:89:D8:12:76:A3:A9:12:64:61:18:CC:D0:50:B8:BB:B1 X509v3 Authority Key Identifier: keyid:69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:72:66:b7:d5:4b:10:82:5c:ee:4b:e2:c0:f3:70:76:b3:c0: 5e:6f:93:c5:f6:13:bd:04:f0:9a:11:cf:2e:72:26:e7:3c:ea: 95:8d:8d:f7:87:05:cb:80:76:e9:ca:c8:03:fc:58:d0:cc:12: 4e:e6:a9:a0:55:b5:a2:4c:23:1c:6b:75:a7:44:0e:3a:48:06: bd:8f:3d:8f:a0:78:02:b9:9e:32:28:c4:e7:4f:e3:d6:b8:d4: 57:53:9c:5a:74:40:64:b6:2f:fd:ed:30:f8:90:7c:12:ea:bb: fc:e8:c9:a0:2d:e7:44:68:ca:92:4a:bb:ab:db:a2:5a:68:19: 4e:9b:db:b4:14:80:ac:1a:64:e9:76:4d:65:05:20:f7:69:22: 09:9d:e6:8f:7b:e6:35:5f:1b:e2:5d:ce:c4:8a:76:a5:32:c9: ae:63:0b:fd:00:de:1b:f8:e0:1d:11:c6:71:80:fa:5d:f5:a6: 1b:7e:80:ae:0b:5a:6a:24:f6:22:dd:39:09:6c:d8:53:f4:35: 69:9e:f7:ce:55:23:81:fb:f3:fe:d1:35:45:3a:3d:18:2c:a7: 97:a1:e7:23:4e:11:d5:6d:67:b1:cc:cb:e6:22:cb:c5:fa:56: c6:0b:3a:d3:7a:db:49:09:93:5d:8c:4a:92:36:fe:fb:f7:9b: ed:d9:6b:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0MjYxMTAvBgNVBAUTKDY5NEJBMDcwQjYyNkUxNjg1OEQ2NjBGMjEyMEU3NEI2 RkMzRjcyRUMwHhcNMjUxMTA0MTUwOTA4WhcNMjUxMTExMTUwOTA4WjAYMRYwFAYD VQQDEw02OTBhMTcxNC1lNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApW9ShaO5V3R2AQYCCm/KuteYX/5a1/r6sP89xT0M7VgIRC2lD1p+jpZ6PQrc VhbQ48SnSCee8IdqRmI1qNCejHHvjRlmQ30FsljQBW2MTAdt/X2ydaTB2ocFEjb4 LCdJwHMyKM5BjKyJFzyc3f7OjE86NCXrzD+Jrm36ddn2kyJBfWXoJ6GwBK4W5NzF 8GS/F8oCAE8jeUR4Q0tMs5s46gmf03eGiTcxxDlYQRiuJvJUjfP1doMa0hpqsvm3 k5/a+VHb4rzEoORVnsx1G+034UbDZ2GPsxYubKDMKJPekoUrJqbynrS2MjCtJ8wY 0Y9rNXvvBkt0Tvt9HIrWvQnE1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBJyRaJ 2BJ2o6kSZGEYzNBQuLuxMB8GA1UdIwQYMBaAFGlLoHC2JuFoWNZg8hIOdLb8P3Ls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQyNi8yMTI4Nzk2QzFE QTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRXaFkxbUR5RWc1MHR2d19j dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVdWdjTFltNFdoWTFtRHlFZzUwdHZ3X2N1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQyNi8yMTI4Nzk2QzFEQTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRX aFkxbUR5RWc1MHR2d19jdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfcma31UsQglzuS+LA83B2s8Beb5PF9hO9BPCaEc8ucibnPOqVjY33 hwXLgHbpysgD/FjQzBJO5qmgVbWiTCMca3WnRA46SAa9jz2PoHgCuZ4yKMTnT+PW uNRXU5xadEBkti/97TD4kHwS6rv86MmgLedEaMqSSrur26JaaBlOm9u0FICsGmTp dk1lBSD3aSIJneaPe+Y1XxviXc7EinalMsmuYwv9AN4b+OAdEcZxgPpd9aYbfoCu C1pqJPYi3TkJbNhT9DVpnvfOVSOB+/P+0TVFOj0YLKeXoecjThHVbWexzMvmIsvF +lbGCzrTettJCZNdjEqSNv7795vt2Wvt -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:06 2025 by rpki-client