$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: RmVJcCxSj2RXQOINGqepDj5d43zsthffwQ72jeoiZyY= Subject key identifier: F4:C1:4F:95:A4:28:18:86:1A:A2:9E:90:5A:82:D3:57:0E:4E:36:E0 Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0EA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0E9F Signing time: Sun 02 Nov 2025 17:42:18 +0000 Manifest this update: Sun 02 Nov 2025 17:42:18 +0000 Manifest next update: Sun 09 Nov 2025 17:42:18 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: luhxkxdjGqL643q7Ubljom9p3N3XJhb81K8uWbuPeME=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: Gdmjy4eOm23bZo0u+QNI+KYIouesOlIiUyP5E+hvG08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3753 (0xea9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Nov 2 17:42:18 2025 GMT Not After : Nov 9 17:42:18 2025 GMT Subject: CN=690797fa-2ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:26:6e:4a:99:e3:35:95:19:27:d3:b1:a3:67: dc:cc:26:57:8b:fd:ab:68:37:ef:83:e9:67:58:35: 40:4e:8c:ff:fc:76:c9:57:77:6e:36:ca:93:2c:11: 01:b2:de:6d:b1:83:6b:cb:8b:1e:59:75:34:87:9d: 7c:a9:8b:af:5e:f3:d4:9b:07:f0:97:e1:63:22:6c: 00:ae:c0:9f:4f:62:20:bf:67:c1:5f:5e:dd:e0:51: 4d:9a:37:d5:2b:00:1f:2b:ce:30:16:bd:38:d5:a5: cb:6a:d0:dc:81:df:df:12:17:23:d2:a1:b5:5b:63: 01:9c:0a:4c:8b:4f:a3:88:79:65:4e:05:26:72:9c: 96:9f:b4:de:24:19:38:6c:3c:1f:0b:f9:40:40:45: c2:26:9d:26:28:67:1e:f7:73:8d:b1:3b:2c:6c:26: 64:43:d2:d4:3b:4e:bb:b0:3b:31:42:00:56:e8:78: 7d:33:e2:39:e1:9d:e4:f3:3c:21:8e:4e:ef:65:34: 27:18:23:e6:51:c5:5f:15:8c:d4:b7:6c:12:27:c8: 8a:97:4c:03:3d:aa:6e:ee:f2:95:07:df:6c:ff:0a: c9:4b:db:cd:eb:53:bd:a6:1a:64:e5:b9:b4:15:cc: 2e:4a:fe:c3:c4:96:22:4d:51:a5:be:f3:7c:3b:7c: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C1:4F:95:A4:28:18:86:1A:A2:9E:90:5A:82:D3:57:0E:4E:36:E0 X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3a:67:81:ce:91:7c:31:b0:dc:4c:99:b1:44:ed:cb:40:53: ae:49:21:16:bd:69:57:ee:44:98:83:da:f5:19:da:14:99:e2: e6:07:61:c2:d5:a7:34:2f:67:04:29:c1:32:b9:93:4f:53:19: c7:7e:63:6c:06:49:44:a2:65:46:f4:4f:7e:fc:8e:95:09:a9: 08:0a:63:a9:a1:52:a0:36:0d:a5:9b:ba:32:45:5e:cd:d4:30: 50:63:a6:fc:92:1e:c1:34:29:e1:ec:59:79:40:74:aa:bd:9d: df:c9:40:02:71:7e:b1:ff:f6:02:cd:04:b0:e6:f0:4f:e6:71: c2:15:36:36:13:08:d6:f0:81:1e:94:ee:cd:c4:a5:61:97:0c: bd:e9:22:e9:97:c8:6e:1e:3c:99:6f:19:5d:92:8a:da:02:d0: 7b:37:ef:72:c4:79:d9:b8:32:fb:78:3e:81:47:76:3a:84:a5: 0c:0d:5c:cc:88:c7:3d:29:02:fd:cb:9f:19:aa:7c:52:86:b6: b2:94:45:d2:2b:a3:00:a9:f6:62:96:ff:cc:86:f9:9e:98:8c: da:e2:21:07:ea:6d:35:0e:4a:c5:60:57:04:bc:22:37:24:58: 55:9a:73:14:00:59:fb:43:4a:57:09:29:99:da:1f:c7:ac:fc: a2:60:ec:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjUxMTAyMTc0MjE4WhcNMjUxMTA5MTc0MjE4WjAYMRYwFAYD VQQDEw02OTA3OTdmYS0yYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SZuSpnjNZUZJ9Oxo2fczCZXi/2raDfvg+lnWDVAToz//HbJV3duNsqTLBEB st5tsYNry4seWXU0h518qYuvXvPUmwfwl+FjImwArsCfT2Igv2fBX17d4FFNmjfV KwAfK84wFr041aXLatDcgd/fEhcj0qG1W2MBnApMi0+jiHllTgUmcpyWn7TeJBk4 bDwfC/lAQEXCJp0mKGce93ONsTssbCZkQ9LUO067sDsxQgBW6Hh9M+I54Z3k8zwh jk7vZTQnGCPmUcVfFYzUt2wSJ8iKl0wDPapu7vKVB99s/wrJS9vN61O9phpk5bm0 FcwuSv7DxJYiTVGlvvN8O3zlmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTBT5Wk KBiGGqKekFqC01cOTjbgMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPOmeBzpF8MbDcTJmxRO3LQFOuSSEWvWlX7kSYg9r1GdoUmeLmB2HC 1ac0L2cEKcEyuZNPUxnHfmNsBklEomVG9E9+/I6VCakICmOpoVKgNg2lm7oyRV7N 1DBQY6b8kh7BNCnh7Fl5QHSqvZ3fyUACcX6x//YCzQSw5vBP5nHCFTY2EwjW8IEe lO7NxKVhlwy96SLpl8huHjyZbxldkoraAtB7N+9yxHnZuDL7eD6BR3Y6hKUMDVzM iMc9KQL9y58ZqnxShraylEXSK6MAqfZilv/MhvmemIza4iEH6m01DkrFYFcEvCI3 JFhVmnMUAFn7Q0pXCSmZ2h/HrPyiYOzN -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:25 2025 by rpki-client