$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: nh3qfbKVnAWeRO9N+NJW5S5GI5nq1d/MQrC6C9y96/k= Subject key identifier: E5:53:F4:DD:5E:25:19:CE:DB:EF:D2:A2:E3:00:A1:05:38:20:A5:8E Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 0202 Signing time: Mon 03 Nov 2025 02:35:26 +0000 Manifest this update: Mon 03 Nov 2025 02:35:25 +0000 Manifest next update: Mon 10 Nov 2025 02:35:25 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: WkO1WSugbXLcnL/bkLJw7wc2QNY0Gsu+onUo0cN0OdI=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Nov 3 02:35:25 2025 GMT Not After : Nov 10 02:35:25 2025 GMT Subject: CN=690814ee-4278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:d8:06:0b:73:ad:62:f3:86:08:62:a0:e2: f3:ce:17:8a:0f:1a:c0:d8:45:00:5c:93:be:7f:67: 09:ec:f7:61:d1:00:1a:52:4d:1b:93:f2:a9:ab:19: a3:4b:8a:a1:1e:3d:bf:2a:23:1d:d2:15:2c:d1:79: a6:bf:49:36:ac:5f:7e:fc:a1:6a:7e:23:40:7f:50: 31:6a:82:54:c5:9d:84:23:04:3e:bd:25:e1:87:3e: c9:70:bf:6f:7f:f1:c8:c2:13:c4:b8:75:b8:8f:a6: 81:68:4c:49:ad:27:82:e8:43:47:71:e1:36:da:99: cc:4c:a1:10:d9:0d:d0:ed:03:af:5d:c2:3c:68:3a: e1:dd:e2:7e:d7:31:9b:c2:f9:b5:a2:d4:03:77:35: 94:a8:98:26:9c:39:4e:b0:74:aa:61:f5:2b:c8:3f: 68:9e:bb:1e:23:b8:6d:97:f3:c6:5e:78:ea:56:28: 67:02:00:9d:ca:8b:03:89:d8:60:c2:fe:95:8c:17: 39:6e:64:5f:5e:0e:03:2a:c3:b0:08:be:cf:41:8c: 0c:f8:56:c6:f8:51:12:24:97:f2:0b:04:61:51:55: 5c:91:5e:b8:37:81:e1:12:ce:0b:1f:43:82:df:50: 38:fa:ce:65:d0:bf:5c:a2:8f:8c:42:ba:c2:15:c1: 19:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:53:F4:DD:5E:25:19:CE:DB:EF:D2:A2:E3:00:A1:05:38:20:A5:8E X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:80:fb:72:2b:d8:bc:3b:16:4d:1e:62:3b:7e:f9:c9:02:7f: a9:3a:25:98:a5:d2:2a:2e:d9:79:8d:25:91:8a:57:6a:16:a2: df:3a:6b:7a:11:9e:ce:72:a5:46:2c:f7:d5:ef:47:42:49:d4: ba:ba:2c:f4:d8:e8:c6:c9:ea:7e:92:49:4e:72:b6:ae:28:c3: 1d:04:52:bf:6a:bd:75:40:7a:ea:21:c7:b8:3d:54:e4:44:de: 37:31:f2:72:3a:9a:b4:75:ad:96:0d:74:68:07:34:59:ed:8f: 27:16:ee:96:fa:4b:67:b8:d9:79:03:94:63:e5:1c:42:b2:45: 0b:3d:8d:bc:b0:5e:ae:30:3f:6c:36:0a:7d:80:56:9d:ad:16: c0:30:39:6a:4c:6b:3a:6b:f7:fe:f2:2e:b7:38:f2:d2:74:df: 02:01:c6:35:5d:6c:ef:b4:35:21:05:f2:8b:97:da:ca:d8:c7: b5:a7:92:a9:06:75:77:6e:a2:74:47:d5:6e:91:f5:80:c2:93: 29:23:70:34:f9:f2:b9:29:51:10:d9:19:8b:7f:ea:20:39:c2: 70:48:b0:68:ce:ac:0e:ac:cf:56:cb:84:7b:14:77:3f:26:c1: 01:33:b2:37:6c:15:7a:dd:4f:22:91:25:71:0f:2c:79:59:0a: 6f:05:70:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUxMTAzMDIzNTI1WhcNMjUxMTEwMDIzNTI1WjAYMRYwFAYD VQQDEw02OTA4MTRlZS00Mjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JjYBgtzrWLzhghioOLzzheKDxrA2EUAXJO+f2cJ7Pdh0QAaUk0bk/Kpqxmj S4qhHj2/KiMd0hUs0Xmmv0k2rF9+/KFqfiNAf1AxaoJUxZ2EIwQ+vSXhhz7JcL9v f/HIwhPEuHW4j6aBaExJrSeC6ENHceE22pnMTKEQ2Q3Q7QOvXcI8aDrh3eJ+1zGb wvm1otQDdzWUqJgmnDlOsHSqYfUryD9onrseI7htl/PGXnjqVihnAgCdyosDidhg wv6VjBc5bmRfXg4DKsOwCL7PQYwM+FbG+FESJJfyCwRhUVVckV64N4HhEs4LH0OC 31A4+s5l0L9coo+MQrrCFcEZEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVT9N1e JRnO2+/SouMAoQU4IKWOMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5gPtyK9i8OxZNHmI7fvnJAn+pOiWYpdIqLtl5jSWRildqFqLfOmt6 EZ7OcqVGLPfV70dCSdS6uiz02OjGyep+kklOcrauKMMdBFK/ar11QHrqIce4PVTk RN43MfJyOpq0da2WDXRoBzRZ7Y8nFu6W+ktnuNl5A5Rj5RxCskULPY28sF6uMD9s Ngp9gFadrRbAMDlqTGs6a/f+8i63OPLSdN8CAcY1XWzvtDUhBfKLl9rK2Me1p5Kp BnV3bqJ0R9VukfWAwpMpI3A0+fK5KVEQ2RmLf+ogOcJwSLBozqwOrM9Wy4R7FHc/ JsEBM7I3bBV63U8ikSVxDyx5WQpvBXBe -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:18 2025 by rpki-client