$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: 1xKZH761RbsuMRLjomxBPD5vvvtiikgkzSisyalbuIo= Subject key identifier: A0:8F:DB:13:7E:C6:E6:F8:06:5D:70:19:9C:D7:BF:B0:B0:FC:5F:84 Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 095D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 095D Signing time: Sun 02 Nov 2025 20:05:12 +0000 Manifest this update: Sun 02 Nov 2025 20:05:12 +0000 Manifest next update: Sun 09 Nov 2025 20:05:12 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: I12+UI7rrhVwAbhl3Xcz7dleD6mefTn7ihUs8RSSmYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Nov 2 20:05:12 2025 GMT Not After : Nov 9 20:05:12 2025 GMT Subject: CN=6907b978-1df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:0d:b7:b1:15:20:fc:96:36:7a:62:0d:7f: 2a:c4:13:99:88:b9:1c:9f:30:f7:34:d2:71:ad:55: 22:44:09:4c:61:a2:93:34:67:75:b2:e4:2c:51:a7: 23:9e:21:ad:51:19:c9:b3:ef:88:88:55:b6:e2:c3: d1:eb:49:19:5a:c4:92:9b:14:72:9f:d9:5a:33:ab: 79:42:a3:7c:f3:12:96:ff:16:31:19:0e:27:f2:7c: ca:45:e0:85:e0:6e:1a:2b:f9:7a:9d:7b:b9:38:db: 64:c7:6d:00:8e:63:ec:1c:66:86:6a:6b:88:0b:5d: b7:33:69:bc:f4:d8:2d:40:1a:bd:5f:28:a1:7b:42: 34:9f:74:93:69:64:d1:1b:88:cf:c2:8d:ed:84:4b: 22:81:91:40:72:73:7f:ac:64:07:43:74:61:d4:10: f8:81:ec:14:f4:5e:5f:69:97:d1:4f:71:8f:92:e3: 35:94:7b:21:6c:95:a9:25:27:34:2a:54:ca:ef:c3: d6:8b:18:a2:0c:90:34:dc:0f:79:64:ed:1e:b3:f4: 0d:e9:55:60:52:b8:62:4d:51:b2:d4:52:94:29:35: 8a:72:b9:f4:12:eb:a6:9d:6e:82:14:c6:3d:41:e6: 29:bb:f8:50:82:9e:67:89:92:d0:69:61:58:5f:8c: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:DB:13:7E:C6:E6:F8:06:5D:70:19:9C:D7:BF:B0:B0:FC:5F:84 X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7b:b2:74:1a:cd:ea:7d:cb:e0:18:71:cc:cd:b0:58:cd:64: d5:4c:21:d5:ed:ab:e0:55:31:5c:b9:23:49:10:9c:6b:a8:47: 28:01:33:d2:f9:94:41:da:d7:da:e2:5b:53:0f:c9:20:27:82: 89:e7:df:71:1c:58:e3:1c:fe:04:ff:97:96:64:98:01:dc:d3: 11:92:ed:4a:5e:67:a5:40:e9:7b:8c:41:73:b3:fa:8e:bf:6b: 2a:4f:9b:ec:3e:a4:69:75:0f:37:1e:60:8c:9b:c2:5b:7d:7c: 1e:9b:8d:a2:2e:90:d3:05:1d:81:55:d3:a0:2b:c0:26:e9:78: 84:26:98:d1:b8:43:be:76:c9:e2:31:8e:e6:a1:66:f5:d8:3c: 20:38:87:c1:cc:b8:03:04:88:2e:86:82:6c:e1:2f:80:b0:85: fd:73:a1:ea:19:87:ed:d5:1e:36:ff:02:bd:d1:9a:78:92:66: fe:72:2a:77:ba:fd:04:35:e2:30:19:e9:38:5f:11:bc:14:13: fd:26:87:fa:6c:b4:f9:da:c3:23:58:8b:12:a3:70:69:89:fc: 20:e1:58:35:02:f8:74:d4:a6:90:ac:b5:d6:06:0c:fc:2e:0b: 37:5a:02:1d:6f:c3:6b:b7:8e:0c:ac:ee:37:39:80:8a:db:2d: a2:44:01:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjUxMTAyMjAwNTEyWhcNMjUxMTA5MjAwNTEyWjAYMRYwFAYD VQQDEw02OTA3Yjk3OC0xZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0ANt7EVIPyWNnpiDX8qxBOZiLkcnzD3NNJxrVUiRAlMYaKTNGd1suQsUacj niGtURnJs++IiFW24sPR60kZWsSSmxRyn9laM6t5QqN88xKW/xYxGQ4n8nzKReCF 4G4aK/l6nXu5ONtkx20AjmPsHGaGamuIC123M2m89NgtQBq9Xyihe0I0n3STaWTR G4jPwo3thEsigZFAcnN/rGQHQ3Rh1BD4gewU9F5faZfRT3GPkuM1lHshbJWpJSc0 KlTK78PWixiiDJA03A95ZO0es/QN6VVgUrhiTVGy1FKUKTWKcrn0EuumnW6CFMY9 QeYpu/hQgp5niZLQaWFYX4wkbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCP2xN+ xub4Bl1wGZzXv7Cw/F+EMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbe7J0Gs3qfcvgGHHMzbBYzWTVTCHV7avgVTFcuSNJEJxrqEcoATPS +ZRB2tfa4ltTD8kgJ4KJ599xHFjjHP4E/5eWZJgB3NMRku1KXmelQOl7jEFzs/qO v2sqT5vsPqRpdQ83HmCMm8JbfXwem42iLpDTBR2BVdOgK8Am6XiEJpjRuEO+dsni MY7moWb12DwgOIfBzLgDBIguhoJs4S+AsIX9c6HqGYft1R42/wK90Zp4kmb+cip3 uv0ENeIwGek4XxG8FBP9Jof6bLT52sMjWIsSo3Bpifwg4Vg1Avh01KaQrLXWBgz8 Lgs3WgIdb8Nrt44MrO43OYCK2y2iRAEY -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:25 2025 by rpki-client