$ rpki-client -vvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft File: cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft (raw, json) Hash identifier: OTDXvhzFPx55DWbPBHMRZYYX4VEgVaIIyxIkhVTn54A= Subject key identifier: A6:3C:73:CC:56:06:8B:7A:BE:A6:D3:CE:C0:5B:F5:D3:0D:6F:BF:07 Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0 Certificate issuer: /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0 Certificate serial: 22B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft Manifest number: 227E Signing time: Sat 18 Oct 2025 16:06:57 +0000 Manifest this update: Sat 18 Oct 2025 16:06:57 +0000 Manifest next update: Sat 25 Oct 2025 16:06:57 +0000 Files and hashes: 1: cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl (hash: fSkfgtMJR3NfqWMXSM6bIMm66ua8J4XQWCChBxCGSxs=) 2: BB62FBD82AEC11EA972CB627C4F9AE02.roa (hash: KdmEZEpKoLyIMn6+XZO0IZiKVzRjxKxZXmexqgggUFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8880 (0x22b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0 Validity Not Before: Oct 18 16:06:57 2025 GMT Not After : Oct 25 16:06:57 2025 GMT Subject: CN=68f3bb21-cf3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:f6:f9:32:25:d1:40:34:4d:b0:99:26:53: 14:8b:36:ea:0f:ec:b9:df:33:d3:47:fa:ab:30:ec: 6c:f6:12:b3:3a:88:ad:1a:c6:2a:35:01:07:05:a9: 04:c0:f8:e4:d4:1c:ee:13:cd:7d:a7:5d:0c:77:5b: 61:fc:47:0a:92:28:5a:f2:5c:72:21:96:c5:92:0a: cc:60:64:a1:78:7b:9a:13:47:d3:3f:37:5e:ab:5a: c8:8d:f7:96:5d:da:85:64:48:10:fe:24:f3:75:bf: 52:36:9c:86:d5:8b:1c:50:07:66:7e:0b:19:2c:0b: ea:59:54:ba:78:45:97:ce:67:34:ce:b7:48:16:0f: 35:23:28:ee:2e:f2:88:06:70:c2:86:1e:ea:08:70: 8f:cd:ca:2b:fa:a2:7c:99:24:ea:68:17:50:b2:ec: 0e:66:95:af:fa:97:58:b2:c4:13:fc:b3:7d:e8:a6: f4:c1:dc:d2:50:3d:d9:21:11:7e:6c:ad:58:48:d2: ac:b3:29:2f:6b:ed:46:56:0d:29:d7:42:80:88:2b: 25:38:ec:f3:25:c6:22:3c:19:32:dd:ca:0d:c2:13: e9:be:ba:c5:6d:58:32:b9:4d:69:78:16:44:c4:30: b3:83:9e:e5:59:d0:c2:62:15:0e:27:3b:9f:ec:c4: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3C:73:CC:56:06:8B:7A:BE:A6:D3:CE:C0:5B:F5:D3:0D:6F:BF:07 X509v3 Authority Key Identifier: keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:0e:08:02:2d:c5:3f:52:23:05:cc:2b:c4:19:b3:5f:b2:0b: d3:e5:2d:b9:cb:4f:a6:1a:8e:10:3b:95:49:fc:2b:69:9d:43: 94:0d:9b:95:4c:86:66:a2:62:5a:0e:88:7b:90:ca:d9:96:32: 28:2f:4b:e6:07:64:ca:88:51:e0:9f:56:8b:ba:77:cb:f2:52: 00:19:7b:a9:dc:b6:09:e8:e6:62:68:ea:46:0e:0d:07:4a:0c: 67:16:8a:af:da:98:96:5f:f9:22:4d:bf:3e:7c:ed:e9:a8:91: 5d:91:6e:44:71:8f:ad:1c:25:c3:1d:f9:90:83:07:0b:ef:55: e2:50:7a:52:c7:2e:e0:c0:79:42:b8:94:e8:f2:6a:dc:86:76: 88:a6:b6:18:45:94:95:3b:e2:68:b2:fe:fc:87:37:f1:86:d1: a7:ea:87:5b:3b:2a:88:e9:b9:4f:67:91:cd:51:3f:5f:57:c4: a2:36:52:09:6a:a4:00:d4:3c:82:78:ca:a6:8e:26:01:66:fa: 5b:9d:8f:23:d8:14:4d:c7:6e:7b:d8:ce:0a:13:1c:9a:43:80: b0:30:53:7d:28:57:ab:31:be:e5:ad:ca:ca:2a:a6:89:8f:b6: 4b:68:87:5b:54:7d:3c:96:0f:5b:f1:04:a8:bb:a5:0e:3f:7e: d6:f9:f8:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4RDYxMTAvBgNVBAUTKDcxNEJBMjhERDgzNUE3RDQxOTcwMUZBRDM3MkEzNEI3 QzY2Q0ZBQTAwHhcNMjUxMDE4MTYwNjU3WhcNMjUxMDI1MTYwNjU3WjAYMRYwFAYD VQQDEw02OGYzYmIyMS1jZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2H2+TIl0UA0TbCZJlMUizbqD+y53zPTR/qrMOxs9hKzOoitGsYqNQEHBakE wPjk1BzuE819p10Md1th/EcKkiha8lxyIZbFkgrMYGSheHuaE0fTPzdeq1rIjfeW XdqFZEgQ/iTzdb9SNpyG1YscUAdmfgsZLAvqWVS6eEWXzmc0zrdIFg81IyjuLvKI BnDChh7qCHCPzcor+qJ8mSTqaBdQsuwOZpWv+pdYssQT/LN96Kb0wdzSUD3ZIRF+ bK1YSNKssykva+1GVg0p10KAiCslOOzzJcYiPBky3coNwhPpvrrFbVgyuU1peBZE xDCzg57lWdDCYhUOJzuf7MQxQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY8c8xW Bot6vqbTzsBb9dMNb78HMB8GA1UdIwQYMBaAFHFLoo3YNafUGXAfrTcqNLfGbPqg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhENi8yODk5MDUzMEJF NTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5UVpjQi10TnlvMHQ4WnMt cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVdWlqZGcxcDlRWmNCLXROeW8wdDhacy1xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzhENi8yODk5MDUzMEJFNTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5 UVpjQi10TnlvMHQ4WnMtcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0DggCLcU/UiMFzCvEGbNfsgvT5S25y0+mGo4QO5VJ/CtpnUOUDZuV TIZmomJaDoh7kMrZljIoL0vmB2TKiFHgn1aLunfL8lIAGXup3LYJ6OZiaOpGDg0H SgxnFoqv2piWX/kiTb8+fO3pqJFdkW5EcY+tHCXDHfmQgwcL71XiUHpSxy7gwHlC uJTo8mrchnaIprYYRZSVO+Josv78hzfxhtGn6odbOyqI6blPZ5HNUT9fV8SiNlIJ aqQA1DyCeMqmjiYBZvpbnY8j2BRNx2572M4KExyaQ4CwMFN9KFerMb7lrcrKKqaJ j7ZLaIdbVH08lg9b8QSou6UOP37W+fiz -----END CERTIFICATE-----Generated at Mon Oct 20 00:23:45 2025 by rpki-client