$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json) Hash identifier: aQgPVlyM4RbQUecbrIdh3O/j8wDN1ZU6Hhd6PHQRGVc= Subject key identifier: 09:2A:D4:EC:DB:94:EA:46:C2:32:82:E7:75:52:39:21:07:98:47:CB Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft Manifest number: 045E Signing time: Mon 03 Nov 2025 00:11:02 +0000 Manifest this update: Mon 03 Nov 2025 00:11:02 +0000 Manifest next update: Mon 10 Nov 2025 00:11:02 +0000 Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: ouB7aQYy2MzQZvy4PCPDRlAX5a+mZbM9BdBq6giWodM=) 2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: tjoX2rKURmmp0SIpilUWla3AD/nRXhfocceVz0iL1og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Validity Not Before: Nov 3 00:11:02 2025 GMT Not After : Nov 10 00:11:02 2025 GMT Subject: CN=6907f316-e5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c7:94:6f:0d:83:a7:63:8a:b7:a7:b8:d1:1d: 40:e3:88:35:7f:11:84:7d:36:84:0f:1c:fa:d5:6c: bb:58:d9:e2:f0:09:23:41:f0:10:10:62:42:1f:8a: c8:31:db:c9:72:59:8c:ab:a7:5a:74:32:88:df:e9: 65:70:46:8e:1c:c1:b6:31:56:aa:5a:d3:88:98:b5: 3c:7b:2d:f7:64:6a:59:c1:3b:cc:ab:9e:3a:79:a2: 13:f5:07:0e:f1:67:ce:21:6c:c9:ca:71:73:9a:15: fe:a2:0f:29:09:1d:a5:67:a4:a4:2c:30:ab:c0:a8: 4f:ed:f4:c2:66:98:61:2b:a2:52:81:f6:06:31:68: fc:e0:2c:87:81:af:da:84:af:a5:7b:30:e8:05:9b: 8d:28:fe:b6:e9:cc:63:c5:7e:8d:80:42:3b:91:1e: ad:a5:25:ff:c2:6d:58:c3:e1:0b:95:65:a9:29:bb: ef:69:d6:ee:15:b9:1a:4a:23:fa:34:19:18:e1:24: b4:6b:ae:da:50:27:68:64:b0:38:0a:3e:ab:40:6d: 8f:3b:b1:49:a0:3c:25:d1:21:b2:01:97:ef:5a:f8: a0:82:45:ed:40:11:56:a0:2a:2f:c5:9f:05:c6:a3: ec:3f:11:64:d6:b2:f6:3a:b3:9a:14:96:16:5c:33: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2A:D4:EC:DB:94:EA:46:C2:32:82:E7:75:52:39:21:07:98:47:CB X509v3 Authority Key Identifier: keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:8b:09:c7:c9:8c:74:bc:08:80:99:ea:30:d9:7f:b1:04:2d: e7:5d:b7:8b:63:ab:f0:f2:10:e1:6f:11:e9:30:67:ac:08:9e: 54:8a:73:84:d9:2d:08:64:64:db:af:b9:b5:b4:fb:52:e9:fe: 14:2b:2d:de:cf:d8:37:37:5f:a6:71:c9:59:93:8d:1a:6d:bc: 04:e9:64:60:a2:95:4b:c3:e8:d2:ca:21:05:30:09:21:43:d2: ae:b8:61:9c:6a:59:e1:93:3b:e3:a8:bd:88:5c:27:3c:a1:28: 67:58:46:7e:22:c6:cf:ef:7c:cf:f3:06:10:9a:27:55:0e:8f: f6:7b:2e:6e:54:2f:e0:fc:b5:bb:14:75:18:c1:0e:2d:ea:21: b3:1c:9f:f7:7b:51:b5:d2:3f:68:79:c7:3c:d1:ce:01:61:03: 12:a5:02:c2:11:2f:12:ca:e5:a6:05:df:93:58:9f:ac:cc:eb: bc:77:1d:c2:5a:1a:bb:3f:f2:e5:cf:81:e2:3a:cc:51:a3:13: b3:40:10:63:17:b7:85:a3:8d:07:75:c6:c8:7e:76:90:21:18: 41:72:36:64:10:97:d0:5a:66:ad:08:86:35:71:f8:b5:99:a3: e1:1b:e4:16:86:ec:48:6c:df:b9:fc:4c:34:a2:e6:de:de:64: 22:a7:b2:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1 RjAwNDVENTgwHhcNMjUxMTAzMDAxMTAyWhcNMjUxMTEwMDAxMTAyWjAYMRYwFAYD VQQDEw02OTA3ZjMxNi1lNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ceUbw2Dp2OKt6e40R1A44g1fxGEfTaEDxz61Wy7WNni8AkjQfAQEGJCH4rI MdvJclmMq6dadDKI3+llcEaOHMG2MVaqWtOImLU8ey33ZGpZwTvMq546eaIT9QcO 8WfOIWzJynFzmhX+og8pCR2lZ6SkLDCrwKhP7fTCZphhK6JSgfYGMWj84CyHga/a hK+lezDoBZuNKP626cxjxX6NgEI7kR6tpSX/wm1Yw+ELlWWpKbvvadbuFbkaSiP6 NBkY4SS0a67aUCdoZLA4Cj6rQG2PO7FJoDwl0SGyAZfvWviggkXtQBFWoCovxZ8F xqPsPxFk1rL2OrOaFJYWXDOKgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkq1Ozb lOpGwjKC53VSOSEHmEfLMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0 NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY Vl9vay1PTTFlUnhmQUVYVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0iwnHyYx0vAiAmeow2X+xBC3nXbeLY6vw8hDhbxHpMGesCJ5UinOE 2S0IZGTbr7m1tPtS6f4UKy3ez9g3N1+mcclZk40abbwE6WRgopVLw+jSyiEFMAkh Q9KuuGGcalnhkzvjqL2IXCc8oShnWEZ+IsbP73zP8wYQmidVDo/2ey5uVC/g/LW7 FHUYwQ4t6iGzHJ/3e1G10j9oecc80c4BYQMSpQLCES8SyuWmBd+TWJ+szOu8dx3C Whq7P/Llz4HiOsxRoxOzQBBjF7eFo40HdcbIfnaQIRhBcjZkEJfQWmatCIY1cfi1 maPhG+QWhuxIbN+5/Ew0oube3mQip7Iv -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:35 2025 by rpki-client