$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: TGFvQVxMd0uLF8X7TQqhVPhZC4MOU845kivI/Fo6cME= Subject key identifier: 4A:5D:82:8D:17:1A:9B:3F:18:3F:07:1B:9A:11:50:B2:22:64:6E:17 Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0B1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0B17 Signing time: Sun 02 Nov 2025 19:16:59 +0000 Manifest this update: Sun 02 Nov 2025 19:16:58 +0000 Manifest next update: Sun 09 Nov 2025 19:16:58 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: 5NHst+lAKnwG8am7b9bObmciq5G0/4UlsV1Hf+PIqDw=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2847 (0xb1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Nov 2 19:16:58 2025 GMT Not After : Nov 9 19:16:58 2025 GMT Subject: CN=6907ae2a-4943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8b:b6:b9:f7:64:43:a4:7f:1c:24:0c:8b:be: d9:49:c1:63:a2:ab:16:a7:b8:6a:4d:47:ca:3f:6c: 07:44:c5:d2:95:65:43:91:05:26:b5:3d:9a:5a:e2: 6f:22:e8:1c:ff:e3:86:15:08:18:69:8f:e1:cf:d4: 15:b8:6c:ae:dc:4b:57:5e:d1:96:f0:5b:b9:02:dd: d5:43:a8:59:d2:1a:b8:33:90:8a:07:3e:13:4d:d4: 6a:15:21:14:86:ac:15:b5:de:13:74:56:97:65:94: c6:bc:1a:c4:8d:db:ef:5b:a3:29:90:e1:36:64:df: 22:d8:dd:57:ae:af:6e:7b:ec:b3:a1:a8:bb:00:a7: 25:dc:44:11:2f:75:b4:3d:08:ef:f5:23:9c:57:fd: f4:5a:8a:b3:ce:90:06:1e:a4:80:94:5f:b9:50:0b: aa:c7:86:da:4c:62:5d:81:96:eb:2d:2d:0a:e2:3c: 0d:9d:4c:67:74:10:8a:66:30:0a:3c:96:be:5a:4d: 38:45:7c:b1:54:20:36:a3:86:8b:27:79:65:6a:e5: 51:f7:65:4e:8a:02:c1:28:b0:3a:aa:dc:26:20:d4: 65:e1:ef:4d:3b:2e:a1:c8:c1:42:3b:f2:44:2c:16: 87:5f:03:3e:2e:27:82:66:d1:8b:5b:d6:17:6c:0f: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5D:82:8D:17:1A:9B:3F:18:3F:07:1B:9A:11:50:B2:22:64:6E:17 X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b3:70:34:87:eb:d8:40:31:27:91:22:1c:d9:34:6f:9f:51: 62:5c:9f:8c:89:8f:f3:2e:4e:4d:37:6e:0b:eb:1b:e8:e0:37: 42:86:e2:38:b8:85:97:9a:c0:ca:ea:bc:19:f3:72:e9:b8:34: f9:b4:d5:8f:e5:14:8e:25:57:b7:29:ee:f3:ef:10:18:65:cf: 02:15:0e:18:ba:33:e4:33:ae:99:4e:3e:66:9a:be:aa:06:ce: f9:26:4a:de:87:15:0b:57:36:80:41:ed:8e:ac:fa:5e:b9:e2: 02:0e:67:d2:bb:88:af:65:89:15:6e:93:56:53:54:08:c9:c8: 4a:83:0c:72:c9:f1:3e:c9:a6:2b:43:e3:2e:ce:18:75:17:db: 52:63:88:64:bb:99:9e:98:ac:07:33:2d:94:c1:a7:02:23:49: d3:94:1f:12:23:1b:e4:bd:37:7d:be:9a:1d:7c:42:ae:92:e9: 2b:cb:cd:0c:98:22:b1:b4:fb:1e:fa:c0:77:e3:ec:6e:db:15: 24:1c:f1:3a:d5:bd:ca:14:82:85:d2:6a:9d:84:64:22:0e:3e: cd:c3:d0:6e:1b:f4:12:8c:ad:9b:6c:b9:7e:50:54:9a:7e:55: ed:e6:18:0c:ee:d7:1a:9b:c3:10:e1:61:42:62:76:12:0d:d4: 46:f8:0a:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUxMTAyMTkxNjU4WhcNMjUxMTA5MTkxNjU4WjAYMRYwFAYD VQQDEw02OTA3YWUyYS00OTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ou2ufdkQ6R/HCQMi77ZScFjoqsWp7hqTUfKP2wHRMXSlWVDkQUmtT2aWuJv Iugc/+OGFQgYaY/hz9QVuGyu3EtXXtGW8Fu5At3VQ6hZ0hq4M5CKBz4TTdRqFSEU hqwVtd4TdFaXZZTGvBrEjdvvW6MpkOE2ZN8i2N1Xrq9ue+yzoai7AKcl3EQRL3W0 PQjv9SOcV/30WoqzzpAGHqSAlF+5UAuqx4baTGJdgZbrLS0K4jwNnUxndBCKZjAK PJa+Wk04RXyxVCA2o4aLJ3llauVR92VOigLBKLA6qtwmINRl4e9NOy6hyMFCO/JE LBaHXwM+LieCZtGLW9YXbA+d9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpdgo0X Gps/GD8HG5oRULIiZG4XMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4s3A0h+vYQDEnkSIc2TRvn1FiXJ+MiY/zLk5NN24L6xvo4DdChuI4 uIWXmsDK6rwZ83LpuDT5tNWP5RSOJVe3Ke7z7xAYZc8CFQ4YujPkM66ZTj5mmr6q Bs75JkrehxULVzaAQe2OrPpeueICDmfSu4ivZYkVbpNWU1QIychKgwxyyfE+yaYr Q+Muzhh1F9tSY4hku5memKwHMy2UwacCI0nTlB8SIxvkvTd9vpodfEKukukry80M mCKxtPse+sB34+xu2xUkHPE61b3KFIKF0mqdhGQiDj7Nw9BuG/QSjK2bbLl+UFSa flXt5hgM7tcam8MQ4WFCYnYSDdRG+Aro -----END CERTIFICATE-----Generated at Tue Nov 4 12:21:15 2025 by rpki-client