$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft File: UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json) Hash identifier: CnoI0NYOZgY1JRyxqzrSo0KeR3/RvZ62u7xbbSPIYyw= Subject key identifier: A6:35:12:4A:AD:8E:7F:54:7E:59:61:F4:E3:63:58:0F:EE:45:94:84 Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 22DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft Manifest number: 2292 Signing time: Tue 04 Nov 2025 15:56:59 +0000 Manifest this update: Tue 04 Nov 2025 15:56:59 +0000 Manifest next update: Tue 11 Nov 2025 15:56:59 +0000 Files and hashes: 1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: jAAJflG85AmaQJ5IVyO+KiJ+7Q6oOop7X7u+ljOeat4=) 2: 681705C288C511F0B7A9672DC4F9AE02.roa (hash: fA0eOMPAM9yocHdllIn9x7eb0JYL2y6sI/CU560QASo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8927 (0x22df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: Nov 4 15:56:59 2025 GMT Not After : Nov 11 15:56:59 2025 GMT Subject: CN=690a224b-852d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:14:eb:bd:86:fc:1e:36:8c:52:93:bf:bc: db:90:12:50:a7:6c:03:d9:03:cc:19:23:39:c0:c7: 26:8f:fc:29:42:7e:2d:01:7b:38:5a:a9:6d:56:dd: 8a:47:24:52:af:b5:9c:ab:70:80:b1:48:ec:31:89: 32:6e:8b:df:e0:26:72:10:c9:86:60:6f:67:18:14: 25:3a:79:06:d8:a8:20:67:cc:86:86:cf:bb:cf:54: ed:0b:d1:fa:cb:9d:7d:63:98:79:d2:18:4c:b5:78: ba:a5:ff:2b:53:d3:77:f0:37:50:35:dd:17:0e:7c: e1:8c:85:64:75:ec:3f:7f:69:ae:f5:2b:21:88:1b: dd:b6:2c:d6:58:3f:dc:6a:f0:1a:fa:ea:95:42:9c: a9:d8:70:2c:c5:92:ea:00:79:b5:83:f5:b8:dc:d4: c3:64:d4:34:e0:2b:44:c1:90:34:e7:0d:07:18:53: 1c:63:87:41:88:d0:1c:0e:73:1b:b2:e5:a8:ec:7b: 8a:d7:33:42:6e:d6:37:8d:a8:6b:ee:19:80:90:45: ed:c0:28:4b:63:9e:ef:73:20:c5:6e:83:b5:cd:58: 45:5b:e2:86:10:15:50:eb:d4:4f:6d:52:f6:91:fb: 4e:12:25:04:f9:2a:ff:12:a8:af:e0:06:30:b0:52: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:35:12:4A:AD:8E:7F:54:7E:59:61:F4:E3:63:58:0F:EE:45:94:84 X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:79:5f:96:df:b0:10:ab:ef:4b:d9:ee:33:e1:98:a2:f7:b9: 17:55:7e:81:44:aa:c0:75:ec:bc:01:74:a6:d3:26:49:e8:2e: 14:28:fd:cc:82:51:d9:47:d7:fc:bf:9b:42:29:3d:77:ed:be: 57:8b:02:8a:dc:47:98:57:fb:cf:bf:30:90:9f:24:29:f1:88: 8b:10:ad:0b:59:16:b9:11:ed:4d:19:ff:19:ee:ae:fd:5f:81: 87:cf:b0:fc:2c:43:f4:66:08:07:20:7b:d5:79:d7:41:da:b8: 5d:5a:2f:38:92:7b:5f:cd:96:7d:16:b4:a9:7b:cb:59:da:d0: 58:36:6d:32:6e:d2:7f:d8:12:56:39:a8:f3:8b:f6:11:93:3c: 52:b4:63:c4:9e:e7:d1:04:cf:7e:7e:98:aa:71:8a:90:3d:fc: 33:5a:5b:fc:a9:35:68:87:1b:66:01:dc:e7:a3:1b:76:f2:cc: d4:35:64:1e:5a:3e:cd:01:12:30:71:40:ac:7e:1d:a8:40:86: 6b:4e:fe:be:ea:7b:ae:db:72:b8:73:e1:42:f2:ca:37:37:b1: 2f:66:27:f2:4f:18:c0:d7:f1:ac:5c:63:ae:4f:b9:bc:e3:1b: cf:98:c9:6e:47:27:ad:89:26:d9:d4:d7:98:ce:56:25:2c:af: df:9d:cf:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUxMTA0MTU1NjU5WhcNMjUxMTExMTU1NjU5WjAYMRYwFAYD VQQDEw02OTBhMjI0Yi04NTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr54U672G/B42jFKTv7zbkBJQp2wD2QPMGSM5wMcmj/wpQn4tAXs4WqltVt2K RyRSr7Wcq3CAsUjsMYkybovf4CZyEMmGYG9nGBQlOnkG2KggZ8yGhs+7z1TtC9H6 y519Y5h50hhMtXi6pf8rU9N38DdQNd0XDnzhjIVkdew/f2mu9SshiBvdtizWWD/c avAa+uqVQpyp2HAsxZLqAHm1g/W43NTDZNQ04CtEwZA05w0HGFMcY4dBiNAcDnMb suWo7HuK1zNCbtY3jahr7hmAkEXtwChLY57vcyDFboO1zVhFW+KGEBVQ69RPbVL2 kftOEiUE+Sr/Eqiv4AYwsFInhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY1Ekqt jn9Ufllh9ONjWA/uRZSEMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkExQy82M0IyMTRBMkM4MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFS R0RXbEZCLUs3bEF0T2ptdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOeV+W37AQq+9L2e4z4Zii97kXVX6BRKrAdey8AXSm0yZJ6C4UKP3M glHZR9f8v5tCKT137b5XiwKK3EeYV/vPvzCQnyQp8YiLEK0LWRa5Ee1NGf8Z7q79 X4GHz7D8LEP0ZggHIHvVeddB2rhdWi84kntfzZZ9FrSpe8tZ2tBYNm0ybtJ/2BJW Oajzi/YRkzxStGPEnufRBM9+fpiqcYqQPfwzWlv8qTVohxtmAdznoxt28szUNWQe Wj7NARIwcUCsfh2oQIZrTv6+6nuu23K4c+FC8so3N7EvZifyTxjA1/GsXGOuT7m8 4xvPmMluRyetiSbZ1NeYzlYlLK/fnc9I -----END CERTIFICATE-----Generated at Thu Nov 6 00:06:48 2025 by rpki-client