$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: IMSJCJMzAnFf2V2AbkS2i7Ko4HeVdlqGpKaoTv58cQ4= Subject key identifier: AF:48:D3:BC:A1:A5:35:1D:3A:99:66:86:41:8B:CC:2A:A7:9E:2E:75 Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 0191 Signing time: Sun 19 Oct 2025 03:00:50 +0000 Manifest this update: Sun 19 Oct 2025 03:00:50 +0000 Manifest next update: Sun 26 Oct 2025 03:00:50 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: ocU+ZAqQrENjcUP+VXWyuMSLTnKHqY64Ve5XmP0a3J8=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: leuMzpLaxFsvYZtfj5XFjNm4DVLoebp+rvO2FUHNRVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Oct 19 03:00:50 2025 GMT Not After : Oct 26 03:00:50 2025 GMT Subject: CN=68f45462-9fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:a7:e3:d1:76:75:4c:3f:a2:1d:d8:c9:c3: c8:2b:88:a6:bb:ef:94:a8:f9:12:b0:eb:00:ad:ac: 56:be:ae:7f:cb:aa:32:20:14:10:e6:ae:42:cc:f8: 36:c5:2e:0b:c8:7a:49:04:a9:df:2f:38:e7:8e:99: c0:78:90:98:11:ba:5b:17:dc:78:dc:f7:29:9b:51: 2b:be:ed:e8:d0:00:c4:03:67:46:98:50:60:c1:38: e7:d5:01:e3:37:73:2e:6c:e1:e1:03:44:75:8c:d6: 59:83:e1:93:6d:ea:23:6d:f9:08:8d:b9:d3:36:2e: 25:fe:a9:4f:85:02:88:06:a4:52:52:c7:db:c5:50: b5:8b:50:b0:a2:79:4e:63:5e:91:55:a0:6d:7d:51: 1c:f4:9f:3f:f1:3f:e2:00:55:0a:a5:a6:8c:b6:86: 46:0e:bb:5f:47:da:74:d3:38:03:2f:54:94:bb:7b: eb:fc:d6:c9:ce:6a:e0:26:c8:56:4f:4d:b3:5f:c6: dc:a2:d1:ea:4a:3a:91:82:68:6a:24:3a:12:63:d7: 2b:8b:2d:60:30:d0:ee:93:ae:37:c1:88:fb:d8:d0: 71:65:34:01:2b:61:81:c1:6c:1b:78:df:34:5d:87: 4c:9f:86:f1:68:76:4b:7c:0c:3f:43:dd:ce:21:d4: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:48:D3:BC:A1:A5:35:1D:3A:99:66:86:41:8B:CC:2A:A7:9E:2E:75 X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3a:d2:34:47:8a:28:6a:84:64:ff:a2:bf:91:d8:52:cf:03: e8:79:b6:a0:33:7c:b3:f8:13:a3:09:48:d1:8c:33:25:19:19: 36:60:50:16:ba:4e:5a:c9:d1:51:55:2c:48:d8:60:cc:e5:a8: c7:2d:9a:f1:d9:5f:e0:2f:f4:31:60:93:a9:c8:fa:ea:a8:9d: 48:fc:2e:1e:0b:5f:dd:06:21:d1:26:82:e0:ec:e9:7d:b1:e2: cc:d3:4e:e7:18:f2:01:17:20:e9:ba:18:b5:6b:8d:d5:67:5d: e5:52:ec:01:56:7b:26:aa:bc:3a:42:7a:58:4b:e1:b9:70:16: 52:59:b1:10:f5:e2:da:9d:c8:bd:97:bf:1b:a1:42:f6:fc:6c: 14:12:9c:46:ff:5b:b4:26:7c:0c:42:55:51:c5:21:3a:25:a7: 37:c5:7c:bd:54:84:11:1a:6a:28:6d:c1:9c:aa:45:96:24:bd: 84:2a:f3:ca:a4:67:83:d3:85:be:14:f1:09:64:e3:52:c4:89: 47:6e:81:40:5f:07:cb:60:54:88:3b:90:e8:7e:ff:ce:9e:9b: 97:a4:dd:b4:b4:3b:d3:db:08:ec:1b:9e:6e:75:00:43:8f:3b: 8d:42:3f:3c:6e:34:03:8a:10:d9:64:fa:84:39:af:6c:60:df: a6:bb:94:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjUxMDE5MDMwMDUwWhcNMjUxMDI2MDMwMDUwWjAYMRYwFAYD VQQDEw02OGY0NTQ2Mi05ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLin49F2dUw/oh3YycPIK4imu++UqPkSsOsAraxWvq5/y6oyIBQQ5q5CzPg2 xS4LyHpJBKnfLzjnjpnAeJCYEbpbF9x43Pcpm1Ervu3o0ADEA2dGmFBgwTjn1QHj N3MubOHhA0R1jNZZg+GTbeojbfkIjbnTNi4l/qlPhQKIBqRSUsfbxVC1i1CwonlO Y16RVaBtfVEc9J8/8T/iAFUKpaaMtoZGDrtfR9p00zgDL1SUu3vr/NbJzmrgJshW T02zX8bcotHqSjqRgmhqJDoSY9criy1gMNDuk643wYj72NBxZTQBK2GBwWwbeN80 XYdMn4bxaHZLfAw/Q93OIdRecwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9I07yh pTUdOplmhkGLzCqnni51MB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsOtI0R4ooaoRk/6K/kdhSzwPoebagM3yz+BOjCUjRjDMlGRk2YFAW uk5aydFRVSxI2GDM5ajHLZrx2V/gL/QxYJOpyPrqqJ1I/C4eC1/dBiHRJoLg7Ol9 seLM007nGPIBFyDpuhi1a43VZ13lUuwBVnsmqrw6QnpYS+G5cBZSWbEQ9eLanci9 l78boUL2/GwUEpxG/1u0JnwMQlVRxSE6Jac3xXy9VIQRGmoobcGcqkWWJL2EKvPK pGeD04W+FPEJZONSxIlHboFAXwfLYFSIO5Dofv/OnpuXpN20tDvT2wjsG55udQBD jzuNQj88bjQDihDZZPqEOa9sYN+mu5SQ -----END CERTIFICATE-----Generated at Tue Oct 21 15:12:56 2025 by rpki-client