$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: ZXsBxc4KnqnBqgRHwQqsfkiES2RkDoS20BwCsa8daL4= Subject key identifier: FC:F4:6D:17:BF:9E:53:C5:8B:60:1C:A9:08:C6:E2:7F:D8:D4:37:86 Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0F71 Signing time: Tue 04 Nov 2025 21:25:02 +0000 Manifest this update: Tue 04 Nov 2025 21:25:02 +0000 Manifest next update: Tue 11 Nov 2025 21:25:02 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: tEcRLKHp2VpoiLOwEz9V0AmrwuMVZ4jvR7EHPJzIbLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: Nov 4 21:25:02 2025 GMT Not After : Nov 11 21:25:02 2025 GMT Subject: CN=690a6f2e-8552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:50:27:a0:e9:e1:50:d6:c8:d5:81:3b:87:41: 91:37:5c:a8:55:bd:38:fc:d3:26:6a:9a:6d:e8:ce: bc:20:66:43:43:4d:9d:c6:00:ed:4b:52:88:c2:31: c3:ce:10:93:58:47:8a:ea:1f:f0:9b:7a:ca:be:18: b7:61:ee:73:1c:1e:59:86:c6:5b:af:4a:2b:77:c9: 37:62:4d:3b:4d:41:12:f6:e5:02:b3:45:99:e5:86: dd:f3:d8:f2:05:04:6e:75:83:fd:03:d8:a0:fc:d5: 3a:f4:3c:61:10:6e:73:92:82:b9:cf:44:c3:52:9f: 82:2a:f6:23:65:c6:0b:9d:6f:89:f7:01:17:17:f1: 1c:00:ed:d3:d8:41:4b:f5:68:a6:e9:6e:bd:15:f5: 35:6d:3c:26:ba:e6:c8:bc:9e:af:78:2e:38:cc:61: 41:14:b1:7f:88:12:b4:25:2e:3b:f8:c1:2a:b5:a9: 52:9e:bf:af:5f:15:21:69:29:38:25:1d:ec:cb:76: c7:85:71:2a:41:ef:4e:6e:0b:f0:76:b4:47:0d:66: f3:e0:a3:10:47:c2:4a:9a:f4:d7:28:df:ae:08:c0: ac:b9:0f:f2:b0:25:66:7d:7d:39:f8:60:b0:75:d3: 55:91:51:03:b3:0d:93:1b:7c:66:52:44:79:b9:2f: 83:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F4:6D:17:BF:9E:53:C5:8B:60:1C:A9:08:C6:E2:7F:D8:D4:37:86 X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d5:9e:af:ad:41:89:a9:7d:10:b5:d7:c3:ff:66:4c:f7:26: e8:c6:cc:d9:15:1f:24:db:7d:e3:79:bd:27:c4:c8:76:dc:df: 1f:43:d7:51:ef:94:2a:22:2d:09:ee:8f:9f:19:ae:f2:3a:46: e5:a6:8e:c3:36:03:1e:ed:d1:94:fb:a1:6c:e1:b5:12:8e:61: d3:65:52:c7:39:f8:eb:8b:89:0b:8e:76:50:90:76:91:98:79: e0:93:ac:19:8b:1f:a4:53:9a:11:3e:bc:d9:19:93:07:78:d6: ca:dd:2e:25:2e:48:f5:3b:6f:f7:60:fa:08:da:b0:d3:9e:9a: b0:d7:14:33:a5:c2:a7:09:c1:cf:5e:9c:38:57:32:1d:4f:02: 5b:45:14:04:b9:77:92:e9:3c:52:f8:21:ef:12:27:b4:1c:f7: f7:9c:a6:20:53:24:d0:59:d3:cf:62:8c:79:1f:76:a8:fb:96: 4d:81:bf:0c:83:3c:47:a2:84:c2:b5:21:d2:bd:5a:e5:9f:f9: ea:27:27:29:11:45:bd:02:2a:b9:ac:b6:64:0f:d2:a5:b2:4d: 17:8f:4d:2b:cb:f5:b0:3c:2e:eb:f8:d3:6f:77:be:4f:6e:7a: 91:32:82:6b:c0:8e:3b:af:00:9a:42:b2:8a:dd:b0:fe:cc:b1: fe:03:41:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjUxMTA0MjEyNTAyWhcNMjUxMTExMjEyNTAyWjAYMRYwFAYD VQQDEw02OTBhNmYyZS04NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VAnoOnhUNbI1YE7h0GRN1yoVb04/NMmappt6M68IGZDQ02dxgDtS1KIwjHD zhCTWEeK6h/wm3rKvhi3Ye5zHB5ZhsZbr0ord8k3Yk07TUES9uUCs0WZ5Ybd89jy BQRudYP9A9ig/NU69DxhEG5zkoK5z0TDUp+CKvYjZcYLnW+J9wEXF/EcAO3T2EFL 9Wim6W69FfU1bTwmuubIvJ6veC44zGFBFLF/iBK0JS47+MEqtalSnr+vXxUhaSk4 JR3sy3bHhXEqQe9ObgvwdrRHDWbz4KMQR8JKmvTXKN+uCMCsuQ/ysCVmfX05+GCw ddNVkVEDsw2TG3xmUkR5uS+D5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPz0bRe/ nlPFi2AcqQjG4n/Y1DeGMB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx1Z6vrUGJqX0QtdfD/2ZM9yboxszZFR8k233jeb0nxMh23N8fQ9dR 75QqIi0J7o+fGa7yOkblpo7DNgMe7dGU+6Fs4bUSjmHTZVLHOfjri4kLjnZQkHaR mHngk6wZix+kU5oRPrzZGZMHeNbK3S4lLkj1O2/3YPoI2rDTnpqw1xQzpcKnCcHP Xpw4VzIdTwJbRRQEuXeS6TxS+CHvEie0HPf3nKYgUyTQWdPPYox5H3ao+5ZNgb8M gzxHooTCtSHSvVrln/nqJycpEUW9Aiq5rLZkD9Klsk0Xj00ry/WwPC7r+NNvd75P bnqRMoJrwI47rwCaQrKK3bD+zLH+A0Eg -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:47 2025 by rpki-client