$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json) Hash identifier: Sk7y9pfy7YQoWlKYqsiUaPBfSiw7GvlYHcFwfJweUi0= Subject key identifier: 96:0D:52:FF:16:0D:A4:7E:16:B0:CF:18:D4:4B:0C:27:B2:B6:96:8B Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft Manifest number: D8 Signing time: Wed 05 Nov 2025 05:46:30 +0000 Manifest this update: Wed 05 Nov 2025 05:46:29 +0000 Manifest next update: Wed 12 Nov 2025 05:46:29 +0000 Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: jPilTknbtIAhg2VZuQcOWJK86xSnq5NoJBR0ByivmzE=) 2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: tWu30mK1rtW914jLoVkC7fN3rjLvGIdCamq6YbBhF8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Validity Not Before: Nov 5 05:46:29 2025 GMT Not After : Nov 12 05:46:29 2025 GMT Subject: CN=690ae4b6-1fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:41:2e:e8:39:b5:75:32:1b:51:36:2f:9c: a1:86:9b:f2:2d:ae:e8:05:77:1f:0d:ab:3f:4e:f9: f2:bf:e2:51:57:fb:be:a1:d8:2b:a0:14:ec:b9:fd: 29:2c:92:37:0a:ed:86:b2:4a:80:fc:9d:a0:63:31: 62:6b:3f:09:66:2b:e4:a8:1f:15:33:db:fb:8c:6e: 4b:45:18:fe:1a:a0:0a:7a:fe:4b:8f:6e:82:01:49: 0d:d1:31:ac:3c:e8:47:a3:60:65:fc:0d:12:2e:68: eb:cd:6b:e4:9a:03:4c:3b:96:3d:ed:90:ca:c9:af: 32:7e:d8:34:82:6c:c1:77:b9:3d:46:f3:72:67:81: 56:4d:79:26:60:22:e4:12:1c:38:20:b3:d9:df:3e: 19:5b:cd:9f:84:91:7a:67:18:18:a2:54:49:a1:0f: 65:85:e6:ba:cf:58:2b:67:a1:ee:54:00:58:bb:f9: 1c:57:08:81:cf:df:30:a7:a6:9e:3a:3a:32:3c:35: 9e:fc:0e:b4:cf:0a:0b:7d:f7:0b:c7:16:d4:cc:73: 21:07:7f:bf:f0:62:92:05:cc:9a:df:0a:d7:b9:1a: 7c:69:24:f7:d4:91:a2:9f:66:a1:88:a6:62:a5:5e: eb:65:2b:de:da:3a:75:53:9a:a5:96:ec:e9:cd:03: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0D:52:FF:16:0D:A4:7E:16:B0:CF:18:D4:4B:0C:27:B2:B6:96:8B X509v3 Authority Key Identifier: keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:40:46:42:83:a0:dc:9d:7c:76:6b:51:5c:60:de:22:4f:83: 68:8b:8f:6b:8a:de:c4:30:c2:6a:d6:8a:4e:a3:51:2b:d4:12: 9a:cb:48:a8:c2:c8:c0:04:1f:c4:35:27:b5:62:08:1c:ee:99: 3d:d8:35:43:21:57:45:74:28:d2:c8:58:53:d4:e6:8c:64:9e: d1:3c:89:26:69:c0:25:af:71:30:8d:3e:f2:7e:01:16:a4:e9: a0:fb:81:9f:12:39:57:fd:89:6e:74:90:80:47:45:9b:0f:a8: 98:b2:4d:e3:72:7d:ae:88:2e:b7:c8:06:92:5b:e3:bf:0d:85: e2:7a:36:6b:e2:24:88:9e:37:71:78:5a:ba:ee:22:a8:e1:56: a6:26:ea:5d:0f:f4:21:b0:30:b0:43:f2:f4:0d:d7:5a:72:c7: 88:89:06:83:9a:c4:2f:8e:de:d8:f9:8c:1f:a1:c5:03:44:90: 56:f5:f9:76:3e:ba:7a:18:45:9a:c5:f8:62:d0:e4:17:e4:6c: 06:e2:fb:b6:c9:ac:d7:5c:30:36:1e:4b:bb:5e:eb:82:6e:19: a4:6a:cf:23:2f:14:8e:74:f6:d9:06:c7:23:2a:a0:36:76:3c: b9:8d:15:73:60:3b:f1:cc:bf:b1:9b:0c:0a:f1:86:47:bf:93: 2b:c7:df:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQyQUExMTAvBgNVBAUTKDczRUI4QUQyQTNBNUYzOEFCRkUxQUUyODA3NEYyODMx QzI3MzFCQTkwHhcNMjUxMTA1MDU0NjI5WhcNMjUxMTEyMDU0NjI5WjAYMRYwFAYD VQQDEw02OTBhZTRiNi0xZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIdBLug5tXUyG1E2L5yhhpvyLa7oBXcfDas/Tvnyv+JRV/u+odgroBTsuf0p LJI3Cu2GskqA/J2gYzFiaz8JZivkqB8VM9v7jG5LRRj+GqAKev5Lj26CAUkN0TGs POhHo2Bl/A0SLmjrzWvkmgNMO5Y97ZDKya8yftg0gmzBd7k9RvNyZ4FWTXkmYCLk Ehw4ILPZ3z4ZW82fhJF6ZxgYolRJoQ9lhea6z1grZ6HuVABYu/kcVwiBz98wp6ae OjoyPDWe/A60zwoLffcLxxbUzHMhB3+/8GKSBcya3wrXuRp8aST31JGin2ahiKZi pV7rZSve2jp1U5qlluzpzQNCrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYNUv8W DaR+FrDPGNRLDCeytpaLMB8GA1UdIwQYMBaAFHPritKjpfOKv+GuKAdPKDHCcxup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDJBQS9FNDA3QjMzMDcw MDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0cV80YTRvQjA4b01jSnpH NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MtdUswcU9sODRxXzRhNG9CMDhvTWNKekc2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDJBQS9FNDA3QjMzMDcwMDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0 cV80YTRvQjA4b01jSnpHNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+QEZCg6DcnXx2a1FcYN4iT4Noi49rit7EMMJq1opOo1Er1BKay0io wsjABB/ENSe1Yggc7pk92DVDIVdFdCjSyFhT1OaMZJ7RPIkmacAlr3EwjT7yfgEW pOmg+4GfEjlX/YludJCAR0WbD6iYsk3jcn2uiC63yAaSW+O/DYXiejZr4iSInjdx eFq67iKo4VamJupdD/QhsDCwQ/L0DddacseIiQaDmsQvjt7Y+YwfocUDRJBW9fl2 Prp6GEWaxfhi0OQX5GwG4vu2yazXXDA2Hku7XuuCbhmkas8jLxSOdPbZBscjKqA2 djy5jRVzYDvxzL+xmwwK8YZHv5Mrx9+d -----END CERTIFICATE-----Generated at Wed Nov 5 16:40:56 2025 by rpki-client