$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: vZnvwpt6LyRCR8IXgd3jLpdmbJVrX7ViyJe+cdmYnvI= Subject key identifier: 84:02:84:B9:A6:9A:B2:25:A5:8D:E2:3B:EB:61:7C:F3:9B:40:0B:1F Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 018B Signing time: Sun 19 Oct 2025 06:06:42 +0000 Manifest this update: Sun 19 Oct 2025 06:06:42 +0000 Manifest next update: Sun 26 Oct 2025 06:06:42 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: 7+9kWcQpUrOzQoOJHrF3G6QZMXcFl3biUwEb1DpldbA=) 2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: ocKjYHSoFFeanr7nSrSoG6NZ1NK1GEX/tAPr3f25J2Y=) 3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 1HOv65dUJu9o7mPWP7pn54wayqG8zRXC99rSkS0sL90=) 4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: DDHsuGR9D/9rz8HARaoFh0MSMFheoZInmf9Cc8/ZZtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Oct 19 06:06:42 2025 GMT Not After : Oct 26 06:06:42 2025 GMT Subject: CN=68f47ff2-b3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:a8:10:42:06:55:0c:8d:e6:02:63:d1:81: 04:ca:4b:1c:2f:02:d8:55:d7:85:3e:95:bd:24:1d: 87:da:aa:d9:7e:71:1c:80:64:93:45:fb:32:12:fc: 80:c1:70:ff:f2:cc:30:3d:b1:9f:2a:7c:64:83:ca: eb:c4:83:5f:b9:c7:f4:a2:cd:67:66:6f:ee:b5:bd: e4:c3:94:13:6c:16:39:e0:49:e0:8a:f0:36:d2:6c: 5c:cd:7e:3b:b8:1f:65:e0:ee:1e:82:67:10:5c:57: 67:74:12:06:3a:68:e0:a3:a7:b9:41:af:38:61:58: 44:66:5a:61:27:88:0f:cd:ea:6e:b6:00:4f:92:0b: c2:eb:0b:73:43:bd:e5:2a:8e:b6:85:39:7f:88:c7: f6:84:8d:c3:50:9c:69:a0:1a:82:a2:b8:5d:8a:13: 40:d6:b1:de:39:1b:87:99:a4:b7:69:25:95:65:0b: c8:1f:21:53:ff:c9:08:94:33:f7:96:6c:c9:5e:ec: 87:c7:45:57:ba:39:fe:35:cf:c8:3c:f2:f9:0f:8a: 35:7a:17:f5:f5:07:f1:95:8f:9a:17:43:3c:73:94: a7:ad:0e:04:36:bd:15:18:6a:9f:07:4c:4e:6c:95: b5:c7:75:9f:fa:76:46:05:a0:1f:bd:10:0a:8c:4b: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:02:84:B9:A6:9A:B2:25:A5:8D:E2:3B:EB:61:7C:F3:9B:40:0B:1F X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f9:7a:64:e5:03:d7:f4:fe:d9:27:d1:5a:50:2b:c1:bb:ac: 4f:88:cc:12:81:34:1e:14:f2:b9:6f:03:ab:71:71:5d:af:9d: 3f:ca:61:66:15:d7:34:db:72:dc:07:b2:65:08:a6:4b:95:57: e1:7e:ac:2a:70:9f:66:aa:0f:52:88:9a:c9:5d:0c:e9:27:de: 4b:26:00:c4:b6:41:a1:f2:07:47:46:5a:ec:1f:ef:ad:a2:a3: 6d:ab:a4:0f:e8:57:10:ab:32:41:02:b3:90:ab:bd:60:f7:3a: d5:af:07:ca:0b:72:d7:d7:7f:65:05:cc:15:01:58:d0:44:0f: be:72:1e:83:f7:27:60:a7:16:d7:43:9a:26:17:7a:bd:29:7a: 41:2b:06:af:88:84:86:53:3f:a3:bd:d6:40:9c:b5:98:76:0a: 77:2e:94:a5:1d:38:1a:9e:16:a2:d0:a6:88:a2:81:b8:93:fe: 26:70:04:ac:d9:63:53:e2:f7:fd:ca:c3:2e:28:af:43:ea:1b: 7b:5f:a2:3f:55:1c:83:a0:37:b9:d0:da:91:3c:0a:86:0a:30: f0:79:fa:d7:a8:66:33:be:98:a3:66:b5:0c:17:25:5b:2e:7d: 88:44:19:76:1c:fe:71:65:bf:f9:e1:4f:7f:b9:e3:6e:a3:fe: b4:6a:88:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjUxMDE5MDYwNjQyWhcNMjUxMDI2MDYwNjQyWjAYMRYwFAYD VQQDEw02OGY0N2ZmMi1iM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXyoEEIGVQyN5gJj0YEEykscLwLYVdeFPpW9JB2H2qrZfnEcgGSTRfsyEvyA wXD/8swwPbGfKnxkg8rrxINfucf0os1nZm/utb3kw5QTbBY54EngivA20mxczX47 uB9l4O4egmcQXFdndBIGOmjgo6e5Qa84YVhEZlphJ4gPzeputgBPkgvC6wtzQ73l Ko62hTl/iMf2hI3DUJxpoBqCorhdihNA1rHeORuHmaS3aSWVZQvIHyFT/8kIlDP3 lmzJXuyHx0VXujn+Nc/IPPL5D4o1ehf19QfxlY+aF0M8c5SnrQ4ENr0VGGqfB0xO bJW1x3Wf+nZGBaAfvRAKjEv+PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQChLmm mrIlpY3iO+thfPObQAsfMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM+Xpk5QPX9P7ZJ9FaUCvBu6xPiMwSgTQeFPK5bwOrcXFdr50/ymFm Fdc023LcB7JlCKZLlVfhfqwqcJ9mqg9SiJrJXQzpJ95LJgDEtkGh8gdHRlrsH++t oqNtq6QP6FcQqzJBArOQq71g9zrVrwfKC3LX139lBcwVAVjQRA++ch6D9ydgpxbX Q5omF3q9KXpBKwaviISGUz+jvdZAnLWYdgp3LpSlHTganhai0KaIooG4k/4mcASs 2WNT4vf9ysMuKK9D6ht7X6I/VRyDoDe50NqRPAqGCjDwefrXqGYzvpijZrUMFyVb Ln2IRBl2HP5xZb/54U9/ueNuo/60aogp -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:19 2025 by rpki-client