$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json) Hash identifier: YkAR+TY7waf9Tg7ktoYyGX2xFlwVvMmtfnHbgJ62mVE= Subject key identifier: E4:29:C4:FC:7B:C4:CF:3C:66:53:17:CA:8C:0E:27:15:D5:D2:18:01 Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft Manifest number: DC Signing time: Sun 19 Oct 2025 08:35:57 +0000 Manifest this update: Sun 19 Oct 2025 08:35:57 +0000 Manifest next update: Sun 26 Oct 2025 08:35:57 +0000 Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: rfxkYGEhkOVuAiqpjCfcXJLRDRelKE3vxdXdc0CHMdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Validity Not Before: Oct 19 08:35:57 2025 GMT Not After : Oct 26 08:35:57 2025 GMT Subject: CN=68f4a2ed-d87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:e0:72:a8:dc:79:79:4a:aa:03:d9:e7:34: 01:34:9c:b8:81:04:f3:dc:f5:09:ca:17:90:70:61: 27:d9:1a:c5:ec:6e:2f:3e:ec:c5:5f:cb:17:2b:cc: f1:77:30:ed:95:8c:5e:c7:aa:40:a0:2a:6a:b4:08: 81:e8:01:a6:bc:44:b6:ed:27:d8:ca:64:3e:19:97: 67:85:6b:69:7b:82:aa:4f:66:d2:7f:f8:ad:21:5c: 34:2f:1e:f8:ed:81:e8:40:38:11:29:de:5d:29:7d: bb:33:99:04:49:5b:20:1e:eb:1a:e0:f7:ff:80:87: 55:cd:a8:f9:8a:c2:88:5f:e0:8e:f1:49:f8:2a:f0: 51:b6:6d:d1:48:aa:12:54:7d:a1:35:96:d0:91:b3: c3:73:98:ca:ff:df:38:45:13:e9:bd:90:10:cc:40: 95:be:cf:c3:17:5b:b5:1a:93:73:97:6c:89:0d:ab: 19:60:b0:fa:c4:5a:dc:f0:82:9e:23:f1:be:5a:31: 75:6a:d9:2b:df:ac:b3:bd:ed:9e:09:75:c7:cd:25: fc:53:45:39:56:c5:a8:5a:32:ae:ee:2c:14:a4:82: 5a:39:76:f3:e0:a7:2d:9f:d1:d1:b0:36:bd:02:f1: 05:22:19:a3:c6:4d:fd:19:a8:f0:aa:d8:99:a6:fb: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:29:C4:FC:7B:C4:CF:3C:66:53:17:CA:8C:0E:27:15:D5:D2:18:01 X509v3 Authority Key Identifier: keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:77:61:67:7e:e8:14:af:a1:59:a9:bc:77:8d:d7:e9:7a:01: 1a:8c:a6:d4:2c:46:f1:91:a5:b9:27:62:78:ac:82:d2:67:53: df:c9:f3:e7:e8:c5:9e:a4:7b:52:6b:cc:56:6c:6c:06:03:2c: 2c:69:fc:8e:3b:18:9f:3f:99:3f:11:13:b5:d8:9d:81:87:fc: ec:56:72:8a:04:54:c0:97:36:70:0f:67:d4:f3:56:91:76:f3: c9:12:a3:5e:49:ef:c9:0d:1d:3d:f3:ee:aa:4f:15:33:8c:9e: d7:2a:1b:3f:86:ba:27:ff:a1:88:94:e7:1f:e0:cb:2f:e3:b4: cb:28:65:d4:ce:e6:e2:a1:44:6a:6e:6e:c5:1a:33:ec:92:97: 4c:c5:0c:48:d0:2f:a1:6d:8b:3c:b5:6c:e9:1c:a6:b5:9b:c4: 63:28:a2:af:39:7c:ae:f7:2b:1c:50:f2:34:78:21:e6:94:1e: 2f:69:50:b3:2b:96:22:c3:0c:a5:bf:24:d6:8a:a3:52:12:0c: 93:66:4d:9e:2a:ad:ad:be:51:80:e4:0e:da:d1:ae:cf:d7:22: 87:45:e2:0c:f8:a6:e6:61:a5:b5:7c:d9:3b:72:ed:b9:2e:20: 48:74:50:ea:d3:de:8a:60:e4:d6:9b:65:06:b0:8a:fb:ac:17: 4a:05:ca:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEJBNjBDMkY2MDg1NzdDRUU2QkJEMTQ5MzcyMUI3QUFF Q0EyODc2MkIwHhcNMjUxMDE5MDgzNTU3WhcNMjUxMDI2MDgzNTU3WjAYMRYwFAYD VQQDEw02OGY0YTJlZC1kODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvETgcqjceXlKqgPZ5zQBNJy4gQTz3PUJyheQcGEn2RrF7G4vPuzFX8sXK8zx dzDtlYxex6pAoCpqtAiB6AGmvES27SfYymQ+GZdnhWtpe4KqT2bSf/itIVw0Lx74 7YHoQDgRKd5dKX27M5kESVsgHusa4Pf/gIdVzaj5isKIX+CO8Un4KvBRtm3RSKoS VH2hNZbQkbPDc5jK/984RRPpvZAQzECVvs/DF1u1GpNzl2yJDasZYLD6xFrc8IKe I/G+WjF1atkr36yzve2eCXXHzSX8U0U5VsWoWjKu7iwUpIJaOXbz4Kctn9HRsDa9 AvEFIhmjxk39GajwqtiZpvv8SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQpxPx7 xM88ZlMXyowOJxXV0hgBMB8GA1UdIwQYMBaAFLpgwvYIV3zua70Uk3Ibeq7KKHYr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85Q0YwNEQzQzVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZPNXJ2UlNUY2h0NnJzb29k aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VtREM5Z2hYZk81cnZSU1RjaHQ2cnNvb2Rpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZGRi85Q0YwNEQzQzVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZP NXJ2UlNUY2h0NnJzb29kaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZd2FnfugUr6FZqbx3jdfpegEajKbULEbxkaW5J2J4rILSZ1PfyfPn 6MWepHtSa8xWbGwGAywsafyOOxifP5k/ERO12J2Bh/zsVnKKBFTAlzZwD2fU81aR dvPJEqNeSe/JDR098+6qTxUzjJ7XKhs/hron/6GIlOcf4Msv47TLKGXUzubioURq bm7FGjPskpdMxQxI0C+hbYs8tWzpHKa1m8RjKKKvOXyu9yscUPI0eCHmlB4vaVCz K5YiwwylvyTWiqNSEgyTZk2eKq2tvlGA5A7a0a7P1yKHReIM+KbmYaW1fNk7cu25 LiBIdFDq096KYOTWm2UGsIr7rBdKBcrl -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:09 2025 by rpki-client