$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: ae122ONZvtXiwp/EwyON5hA4EDNduprqkZXJwf4/YA0= Subject key identifier: 35:97:A3:A7:78:F2:67:DE:EA:5F:CB:4D:F0:1D:37:CB:EF:4A:2D:FA Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 0230 Signing time: Thu 23 Oct 2025 03:26:16 +0000 Manifest this update: Thu 23 Oct 2025 03:26:15 +0000 Manifest next update: Thu 30 Oct 2025 03:26:15 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: IR7zdLXo7qryf1wrYkkyuiElCqJOISuuRGBt9Zfu9gM=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: CJJ1swHPV2FS2o94pZ274vtIWz1N4ntGwGv8bt1RfcY=) 4: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 5: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: MOy3nx724ovxMfijazGrKwrHh5j4BrBp6Yxw1lx+7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Oct 23 03:26:15 2025 GMT Not After : Oct 30 03:26:15 2025 GMT Subject: CN=68f9a058-09f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e3:50:0b:95:c0:3b:a4:c9:c4:f9:c5:23:fa: 3b:ed:b2:69:d9:df:31:71:79:48:b0:23:1e:21:4a: d1:ba:d5:46:2d:a9:dc:70:ce:04:8a:64:e6:7d:f7: 4a:83:dd:5d:5e:ba:a8:10:17:4d:25:d0:9b:85:d5: e3:3d:b6:f2:12:e9:70:20:cd:33:a6:e6:f7:09:56: e3:35:ff:5b:2d:e8:a4:28:87:fe:5d:b9:05:5e:b2: 6b:91:4d:42:6c:30:94:27:aa:19:83:f7:94:37:cc: d0:56:7d:86:d4:39:85:cd:8f:6d:b6:cd:87:d0:16: ca:f9:d8:1b:dd:f7:6c:fb:e0:56:f1:e9:d4:3a:18: d8:37:a0:84:b9:61:68:b2:06:9e:83:65:33:f8:85: 81:59:39:cc:d3:fc:cd:20:c6:40:6e:32:a3:74:08: e7:9a:2f:f7:ae:38:cd:a8:e0:60:84:97:e3:06:df: d3:da:ca:8b:b2:05:8e:12:2b:e1:22:9c:07:27:46: 2b:67:e9:fa:e5:90:79:89:44:22:98:34:ed:9f:a6: 68:c8:c1:b8:94:24:42:98:41:bb:59:d6:1d:a5:af: 66:72:3c:f2:71:c4:23:20:51:88:97:49:4b:06:8c: 80:05:34:55:72:f5:68:7d:14:09:ff:42:01:98:12: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:97:A3:A7:78:F2:67:DE:EA:5F:CB:4D:F0:1D:37:CB:EF:4A:2D:FA X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b8:97:29:ec:58:12:a9:be:a4:d9:da:98:8b:8a:41:10:ad: c3:77:50:de:03:ca:66:b9:1e:5a:2c:e3:1e:12:17:dc:96:64: da:5c:8f:27:75:76:ba:93:e1:58:87:85:ec:01:f0:da:1f:77: 77:7c:a3:28:1b:95:cb:ca:e3:c1:1d:26:2f:75:20:36:af:28: 32:c8:89:36:64:f4:0e:63:83:a1:1f:76:65:f3:0d:96:bd:d4: 7d:7e:d3:39:20:c2:b4:4c:8c:9f:34:0b:77:06:16:a8:b2:af: 51:e4:28:6a:64:39:3a:40:ca:33:0d:3a:4a:a5:4e:82:d9:c1: 67:77:17:3d:b2:5f:4b:da:15:e7:0f:27:3d:30:0e:86:5a:8e: 9a:36:e7:80:64:2a:47:50:5b:4c:37:63:8f:42:94:34:d5:31: 24:74:d1:7f:48:d7:53:40:a6:c5:98:8c:0f:38:ad:3b:48:1a: fc:49:21:0e:42:c5:6f:e0:7a:12:e8:24:fb:8c:97:12:a3:61: f3:ea:26:91:62:a8:c7:a9:9f:56:5c:44:7b:b9:49:be:8d:ab: ee:b4:6c:c2:f4:ea:a2:95:95:04:51:69:59:84:29:a4:f4:57: a8:d3:55:31:3b:9f:b9:d2:03:8f:da:37:52:01:ff:4b:fe:d3: 87:bb:0d:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUxMDIzMDMyNjE1WhcNMjUxMDMwMDMyNjE1WjAYMRYwFAYD VQQDEw02OGY5YTA1OC0wOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+NQC5XAO6TJxPnFI/o77bJp2d8xcXlIsCMeIUrRutVGLanccM4EimTmffdK g91dXrqoEBdNJdCbhdXjPbbyEulwIM0zpub3CVbjNf9bLeikKIf+XbkFXrJrkU1C bDCUJ6oZg/eUN8zQVn2G1DmFzY9tts2H0BbK+dgb3fds++BW8enUOhjYN6CEuWFo sgaeg2Uz+IWBWTnM0/zNIMZAbjKjdAjnmi/3rjjNqOBghJfjBt/T2sqLsgWOEivh IpwHJ0YrZ+n65ZB5iUQimDTtn6ZoyMG4lCRCmEG7WdYdpa9mcjzyccQjIFGIl0lL BoyABTRVcvVofRQJ/0IBmBI76wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWXo6d4 8mfe6l/LTfAdN8vvSi36MB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARuJcp7FgSqb6k2dqYi4pBEK3Dd1DeA8pmuR5aLOMeEhfclmTaXI8n dXa6k+FYh4XsAfDaH3d3fKMoG5XLyuPBHSYvdSA2rygyyIk2ZPQOY4OhH3Zl8w2W vdR9ftM5IMK0TIyfNAt3Bhaosq9R5ChqZDk6QMozDTpKpU6C2cFndxc9sl9L2hXn Dyc9MA6GWo6aNueAZCpHUFtMN2OPQpQ01TEkdNF/SNdTQKbFmIwPOK07SBr8SSEO QsVv4HoS6CT7jJcSo2Hz6iaRYqjHqZ9WXER7uUm+javutGzC9OqilZUEUWlZhCmk 9Feo01UxO5+50gOP2jdSAf9L/tOHuw3u -----END CERTIFICATE-----Generated at Fri Oct 24 09:09:57 2025 by rpki-client