$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json) Hash identifier: iHTTo0403GE2LQaSWb518w/zxPyMIBZriCOB+HK/UMk= Subject key identifier: 06:F9:B4:C8:28:23:28:60:D6:E9:36:82:A0:9C:36:AC:78:8B:77:1C Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft Manifest number: 014F Signing time: Mon 03 Nov 2025 04:14:52 +0000 Manifest this update: Mon 03 Nov 2025 04:14:52 +0000 Manifest next update: Mon 10 Nov 2025 04:14:52 +0000 Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: NzueIhdOJjFMW4GYloQU9A3NG/cKj+XuFLTlvTIK9JM=) 2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: L0qfyKxG6EHzysnGwaUqdqXIinzIkFTO2ksscDrrvZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Validity Not Before: Nov 3 04:14:52 2025 GMT Not After : Nov 10 04:14:52 2025 GMT Subject: CN=69082c3c-2c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:c1:57:dc:dd:d4:56:19:5d:8f:74:ec:f8: f0:26:a7:50:0c:d7:f9:77:7d:19:76:bc:72:57:c0: 3f:55:44:c3:44:02:c5:a7:4b:c2:2e:46:06:63:a5: 9f:84:d4:b1:d7:3b:56:4e:71:c2:6e:ff:8f:f6:3c: a5:bf:16:a0:44:14:f9:28:eb:68:aa:ed:ad:0a:34: f6:23:27:0d:2e:cf:61:a9:36:d9:11:cd:ef:5d:92: 19:ec:a4:d3:92:df:0d:0d:b2:a3:23:b2:a0:73:34: 4c:10:43:60:4c:04:a9:1c:27:64:76:c1:01:cf:f9: f1:59:2e:f5:a3:7b:f6:1a:5a:4d:de:eb:20:a7:10: cb:3e:19:05:ad:93:cb:e2:04:f1:42:5a:3f:e6:ae: 92:b9:31:fe:a1:f6:31:d9:08:7f:7f:ba:81:1d:64: db:0d:12:73:5d:3e:14:63:73:a1:02:10:58:87:a5: 42:8a:cd:82:7d:9d:12:b5:d6:3d:47:48:a5:97:c4: f7:87:dd:4a:d1:e5:23:c3:2f:06:9e:6b:34:95:be: 57:41:93:21:87:fa:3d:8a:fd:88:ce:cb:aa:48:f9: f0:f2:c5:e7:4f:a2:d6:52:85:8c:cd:70:da:97:b7: 11:d9:48:4d:91:f5:c9:6d:b8:f6:2c:f8:3d:89:e4: a9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F9:B4:C8:28:23:28:60:D6:E9:36:82:A0:9C:36:AC:78:8B:77:1C X509v3 Authority Key Identifier: keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:fb:42:83:44:be:8a:75:6a:25:f5:19:b9:cd:ce:44:38:97: 4b:f8:78:d3:4c:e4:d3:e2:01:88:93:ca:44:7a:6c:01:a6:88: 99:d3:a0:53:97:73:bb:88:8b:47:d8:b4:90:7c:6e:59:0a:fe: b9:23:34:b4:41:4a:ec:56:e1:a6:f0:bc:a0:e6:3e:0c:15:a6: 10:ce:9a:d6:7c:f2:f7:64:07:01:e4:1f:2a:d8:8e:29:45:c1: b5:0f:8c:98:e8:03:3f:41:06:f0:1d:8e:d0:0e:1f:d4:e6:78: 51:42:9a:da:ee:9a:10:2c:46:6e:10:09:89:35:4f:cc:6f:95: 72:e5:88:83:41:d3:87:fb:d1:27:76:e5:3e:c8:26:d3:9a:a0: 2f:7c:ae:8c:63:29:bc:ce:94:4e:69:a5:bd:e2:8b:47:be:83: b1:46:18:3b:d6:a5:7f:c2:9b:bd:d7:cd:36:43:a9:a4:6a:f7: 97:1e:c9:ba:78:46:2f:f0:c3:03:20:29:b7:17:7f:a2:70:60: 19:04:c5:80:d1:56:2c:d6:db:37:75:1b:72:85:a1:37:1e:63: 9e:52:36:61:39:72:23:7a:2e:fa:6a:3e:e9:65:47:89:fb:fe: e3:f7:42:6c:6d:8d:6c:56:8d:64:bc:b8:17:ba:a2:aa:57:ed: 8d:5c:b6:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND NEI0Qzg5NjgwHhcNMjUxMTAzMDQxNDUyWhcNMjUxMTEwMDQxNDUyWjAYMRYwFAYD VQQDEw02OTA4MmMzYy0yYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGzBV9zd1FYZXY907PjwJqdQDNf5d30ZdrxyV8A/VUTDRALFp0vCLkYGY6Wf hNSx1ztWTnHCbv+P9jylvxagRBT5KOtoqu2tCjT2IycNLs9hqTbZEc3vXZIZ7KTT kt8NDbKjI7KgczRMEENgTASpHCdkdsEBz/nxWS71o3v2GlpN3usgpxDLPhkFrZPL 4gTxQlo/5q6SuTH+ofYx2Qh/f7qBHWTbDRJzXT4UY3OhAhBYh6VCis2CfZ0StdY9 R0ill8T3h91K0eUjwy8Gnms0lb5XQZMhh/o9iv2IzsuqSPnw8sXnT6LWUoWMzXDa l7cR2UhNkfXJbbj2LPg9ieSpeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAb5tMgo Iyhg1uk2gqCcNqx4i3ccMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFa LWxZSUl3X3FlaVBFdE1pV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY+0KDRL6KdWol9Rm5zc5EOJdL+HjTTOTT4gGIk8pEemwBpoiZ06BT l3O7iItH2LSQfG5ZCv65IzS0QUrsVuGm8Lyg5j4MFaYQzprWfPL3ZAcB5B8q2I4p RcG1D4yY6AM/QQbwHY7QDh/U5nhRQpra7poQLEZuEAmJNU/Mb5Vy5YiDQdOH+9En duU+yCbTmqAvfK6MYym8zpROaaW94otHvoOxRhg71qV/wpu91802Q6mkaveXHsm6 eEYv8MMDICm3F3+icGAZBMWA0VYs1ts3dRtyhaE3HmOeUjZhOXIjei76aj7pZUeJ +/7j90JsbY1sVo1kvLgXuqKqV+2NXLYM -----END CERTIFICATE-----Generated at Mon Nov 3 13:35:53 2025 by rpki-client