$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft File: uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json) Hash identifier: z2UsoyceytgtorzSd4469eh6lBKGq27Fi95eTNSOyz8= Subject key identifier: 35:E7:D0:D4:8F:49:10:E0:3E:90:1B:6D:2F:2D:4C:12:61:9F:70:2F Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Certificate serial: 270B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft Manifest number: 26EB Signing time: Sun 02 Nov 2025 15:41:40 +0000 Manifest this update: Sun 02 Nov 2025 15:41:39 +0000 Manifest next update: Sun 09 Nov 2025 15:41:39 +0000 Files and hashes: 1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: 9IhIs/kzPrYhbS27EWfrnti9yPhCptVg/BmwcmRelO0=) 2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: YuV1/atgnEaFCqu1mP7hP8CBn8yEYyO/tgyELx2LMIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9995 (0x270b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Validity Not Before: Nov 2 15:41:39 2025 GMT Not After : Nov 9 15:41:39 2025 GMT Subject: CN=69077bb3-a986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:bf:a4:59:6d:c5:89:6e:ab:f1:c5:f9:c9: ec:ad:e0:28:d5:e9:40:1a:ca:c0:48:02:07:80:51: 0c:58:b9:93:fd:54:82:6f:a6:21:0f:83:d1:e9:3a: 1a:50:21:37:25:70:fe:4c:0d:48:45:50:52:2d:fc: d6:41:f1:67:ad:2c:73:1f:80:85:e5:7e:4f:a2:fb: 63:4e:0e:78:2b:85:e7:52:46:f0:72:6b:e0:97:e3: 19:28:98:83:a7:95:4d:69:2e:4a:e5:d0:b7:0d:4b: e1:34:29:3a:f0:9b:b8:53:eb:b7:22:d0:d0:89:de: 62:79:ee:9a:d5:44:26:b0:3a:d5:0a:ea:2b:12:0f: 61:e5:57:20:cf:b0:3f:5c:48:d0:9a:67:1d:0d:57: ca:81:7e:55:37:93:49:5b:6e:2a:f5:ff:d6:a2:e1: 95:d9:fd:99:63:da:5e:46:f3:e9:5c:c9:e9:ee:21: 05:42:8f:b0:cc:97:0f:b8:3b:e1:c8:ba:e2:88:3c: 87:9d:5a:5b:6b:c0:5a:da:c1:70:f4:ce:d5:2e:9c: b5:ad:1a:a1:26:cf:be:b9:5e:b1:40:19:31:f6:11: aa:f4:91:9f:f3:11:06:21:4d:b6:67:04:6b:d1:07: 00:cd:01:d3:07:4b:fa:ef:22:4f:2e:ef:88:85:eb: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E7:D0:D4:8F:49:10:E0:3E:90:1B:6D:2F:2D:4C:12:61:9F:70:2F X509v3 Authority Key Identifier: keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:cf:65:d6:39:b9:db:54:b3:54:87:77:83:0b:0c:ac:be:a6: a2:e3:4c:9e:89:24:bb:3b:c2:c9:ab:da:f4:ed:4a:44:82:77: 73:e2:d3:10:02:e7:7d:c1:01:13:f5:b7:f6:8f:23:f4:d8:1e: 17:35:97:cc:df:06:e5:2b:dc:67:81:ea:cc:99:ea:0c:df:62: 35:6e:2c:c0:cd:6f:56:77:0c:59:cb:48:be:19:84:ec:b7:0a: 40:fa:22:89:ca:80:ab:c6:92:e7:dc:ba:87:a2:ec:bf:75:51: fe:fc:1d:94:c4:3b:04:b8:5f:cd:85:a6:09:55:c6:f2:f7:b6: 5d:a5:bb:95:fd:61:2d:50:3e:66:2a:1a:c6:bb:e7:52:bd:a2: 3f:9e:f9:0b:3e:a4:9e:42:19:53:c5:e2:70:e1:d9:d0:ee:1b: 2e:fd:ce:ab:d6:fe:3d:aa:a2:bc:a4:cc:64:92:98:81:98:80: 9f:1d:13:37:78:d4:f6:56:90:2e:f6:3a:2e:dd:b7:e6:31:68: 1c:3f:db:1e:32:f1:73:76:a3:0f:3a:32:02:d8:95:1a:90:3f: 56:02:9f:e5:7d:07:85:2f:8c:83:71:f1:f9:bf:a8:f0:e4:e6: 66:79:44:1d:b1:ab:67:e0:fb:b1:31:98:25:17:b6:8f:47:a7: f8:59:69:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy MUMzOEJGQ0MwHhcNMjUxMTAyMTU0MTM5WhcNMjUxMTA5MTU0MTM5WjAYMRYwFAYD VQQDEw02OTA3N2JiMy1hOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6e/pFltxYluq/HF+cnsreAo1elAGsrASAIHgFEMWLmT/VSCb6YhD4PR6Toa UCE3JXD+TA1IRVBSLfzWQfFnrSxzH4CF5X5PovtjTg54K4XnUkbwcmvgl+MZKJiD p5VNaS5K5dC3DUvhNCk68Ju4U+u3ItDQid5iee6a1UQmsDrVCuorEg9h5Vcgz7A/ XEjQmmcdDVfKgX5VN5NJW24q9f/WouGV2f2ZY9peRvPpXMnp7iEFQo+wzJcPuDvh yLriiDyHnVpba8Ba2sFw9M7VLpy1rRqhJs++uV6xQBkx9hGq9JGf8xEGIU22ZwRr 0QcAzQHTB0v67yJPLu+Ihesp7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXn0NSP SRDgPpAbbS8tTBJhn3AvMB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC9FNkNFRDcyMkUxQjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdk TkNmQkIycWZWOThodzR2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApz2XWObnbVLNUh3eDCwysvqai40yeiSS7O8LJq9r07UpEgndz4tMQ Aud9wQET9bf2jyP02B4XNZfM3wblK9xngerMmeoM32I1bizAzW9WdwxZy0i+GYTs twpA+iKJyoCrxpLn3LqHouy/dVH+/B2UxDsEuF/NhaYJVcby97ZdpbuV/WEtUD5m KhrGu+dSvaI/nvkLPqSeQhlTxeJw4dnQ7hsu/c6r1v49qqK8pMxkkpiBmICfHRM3 eNT2VpAu9jou3bfmMWgcP9seMvFzdqMPOjIC2JUakD9WAp/lfQeFL4yDcfH5v6jw 5OZmeUQdsatn4PuxMZglF7aPR6f4WWlp -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:12 2025 by rpki-client