$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: DiPJaiiSpMJUy2s7AXVHxvUwQ2DVQ1A29eTXno7Mtkk= Subject key identifier: 32:33:0A:28:D8:A0:0F:E5:97:1A:E6:44:17:61:50:A1:AB:05:6E:45 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: 0150 Signing time: Mon 03 Nov 2025 04:12:46 +0000 Manifest this update: Mon 03 Nov 2025 04:12:46 +0000 Manifest next update: Mon 10 Nov 2025 04:12:46 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: ODOp5tiAefhZvnJ0xPUhc9rdSB62gXiv01z4iTIVcdM=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: Nov 3 04:12:46 2025 GMT Not After : Nov 10 04:12:46 2025 GMT Subject: CN=69082bbe-caf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:ba:4e:e8:59:f7:8a:a7:10:18:30:a9:81: 88:3a:5c:13:d0:8f:ee:a9:07:6c:b8:ea:76:b6:12: 4e:81:0a:4d:8c:81:6a:17:8e:26:1b:81:91:62:8b: ae:30:6d:5a:9d:4e:1d:02:3d:f8:21:80:96:a0:e0: 0b:0c:e4:e6:8c:20:59:e1:8e:fe:cb:d7:20:58:84: 53:d7:12:77:95:3e:24:fe:4b:0d:9f:32:34:de:91: 2f:bc:f6:60:b4:5d:ee:71:52:c5:4f:4c:2e:77:ea: ba:16:e3:53:53:52:ef:b3:96:13:a7:39:9d:44:c3: 8c:53:23:fd:0b:3e:4e:8b:a8:24:cb:02:15:e6:39: 74:e3:3a:02:fa:79:ea:66:49:6d:51:16:d3:13:e0: 49:b6:33:58:5a:78:56:d1:c4:b2:2e:ce:1f:2b:8f: a4:0e:88:03:0f:a1:b0:5a:b9:54:87:82:30:6a:ec: f7:ab:88:8f:f5:b5:c1:01:3f:43:a6:65:38:bf:dc: 4f:fe:35:e0:cc:37:55:c0:4f:b1:97:72:e7:be:99: 24:3d:5e:56:d3:0f:cd:52:d7:a1:f9:3d:2c:59:52: fe:e8:c1:1e:56:54:89:4f:e0:5d:9f:03:72:96:b1: d9:87:76:72:28:f1:7b:7b:0a:ee:63:57:a1:de:c3: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:0A:28:D8:A0:0F:E5:97:1A:E6:44:17:61:50:A1:AB:05:6E:45 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4c:ee:eb:ba:e1:23:30:18:14:bc:04:8d:cc:e2:48:3a:b1: 32:79:a6:59:64:66:b5:a2:39:83:93:36:e1:c1:fd:ed:aa:23: 0a:d0:c2:bb:b1:68:e9:f0:e7:92:aa:b7:38:71:1c:fc:bc:c1: f7:37:6d:56:0d:4b:51:31:40:36:f4:4f:aa:34:ca:d8:33:8c: fc:7a:2f:c0:e8:80:b3:ef:46:63:0f:27:0f:84:a9:a8:e5:19: 18:09:50:0d:a7:99:b0:7c:e9:5e:dd:bc:71:68:7e:ad:3a:fb: 58:3d:f5:b2:eb:1b:c5:e2:fb:e6:6b:0a:f1:ad:af:6f:31:f7: 77:91:11:cf:e6:56:87:45:1f:65:83:08:ae:1d:7e:2a:31:65: 52:44:28:d8:af:e3:ca:77:4f:67:f8:3f:d8:ea:0b:c9:c2:57: c5:bd:dd:d9:fb:a1:e3:9f:b5:30:90:fe:ce:e6:16:f9:e7:ee: b5:fd:c8:e3:58:5e:64:4f:68:1f:34:11:a3:e3:2c:f7:c1:ca: 4c:19:01:77:fe:92:2e:58:76:67:7f:90:72:12:f4:05:e1:41: 25:dc:57:66:4a:22:66:ef:2f:25:63:d1:69:26:29:f0:51:c6: f7:ff:13:5d:25:a4:d9:77:e8:5f:c0:bd:20:a1:98:3f:3a:96: 05:f3:73:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjUxMTAzMDQxMjQ2WhcNMjUxMTEwMDQxMjQ2WjAYMRYwFAYD VQQDEw02OTA4MmJiZS1jYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiC6TuhZ94qnEBgwqYGIOlwT0I/uqQdsuOp2thJOgQpNjIFqF44mG4GRYouu MG1anU4dAj34IYCWoOALDOTmjCBZ4Y7+y9cgWIRT1xJ3lT4k/ksNnzI03pEvvPZg tF3ucVLFT0wud+q6FuNTU1Lvs5YTpzmdRMOMUyP9Cz5Oi6gkywIV5jl04zoC+nnq ZkltURbTE+BJtjNYWnhW0cSyLs4fK4+kDogDD6GwWrlUh4Iwauz3q4iP9bXBAT9D pmU4v9xP/jXgzDdVwE+xl3LnvpkkPV5W0w/NUteh+T0sWVL+6MEeVlSJT+BdnwNy lrHZh3ZyKPF7ewruY1eh3sPeSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIzCijY oA/llxrmRBdhUKGrBW5FMB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUTO7ruuEjMBgUvASNzOJIOrEyeaZZZGa1ojmDkzbhwf3tqiMK0MK7 sWjp8OeSqrc4cRz8vMH3N21WDUtRMUA29E+qNMrYM4z8ei/A6ICz70ZjDycPhKmo 5RkYCVANp5mwfOle3bxxaH6tOvtYPfWy6xvF4vvmawrxra9vMfd3kRHP5laHRR9l gwiuHX4qMWVSRCjYr+PKd09n+D/Y6gvJwlfFvd3Z+6Hjn7UwkP7O5hb55+61/cjj WF5kT2gfNBGj4yz3wcpMGQF3/pIuWHZnf5ByEvQF4UEl3FdmSiJm7y8lY9FpJinw Ucb3/xNdJaTZd+hfwL0goZg/OpYF83PN -----END CERTIFICATE-----Generated at Wed Nov 5 05:20:31 2025 by rpki-client