$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: JhKFICug0RKhpGrUOVpF6hbvojnB6Qgn0KXS6rsS71k= Subject key identifier: 13:42:72:41:A6:BF:19:E8:29:E3:95:F9:7E:7F:32:29:0B:64:F2:EB Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0B99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0B91 Signing time: Sat 18 Oct 2025 19:50:58 +0000 Manifest this update: Sat 18 Oct 2025 19:50:57 +0000 Manifest next update: Sat 25 Oct 2025 19:50:57 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: EMcWXfdwsLkl+uYQpxa8QpFb7DhghBIUwCiKhHBi2i4=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: e4wDPqjhV3r7vEA4MsvAFc5ifRump5FxJZTH+nviBcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2969 (0xb99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16, serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: Oct 18 19:50:57 2025 GMT Not After : Oct 25 19:50:57 2025 GMT Subject: CN=68f3efa2-06f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:fd:b7:66:35:69:26:e7:72:cc:7a:4a:b9: 71:32:d2:be:35:be:b0:ac:cb:4f:8f:aa:cb:31:3c: 99:39:24:88:06:be:96:b6:00:83:3e:04:15:26:08: 36:a7:e8:6e:cc:cb:f4:35:d2:c2:50:e7:81:5b:4a: a6:10:3f:21:b2:b8:d6:46:9d:6b:19:75:fd:83:69: fb:24:3a:c9:29:e7:20:3f:f4:e5:b4:03:a3:bb:29: 91:a4:ba:d0:bc:db:ba:73:69:e6:07:80:20:fb:54: 0d:09:03:0c:d7:e8:bc:33:fc:2c:1f:ed:c0:44:cf: 11:55:63:a7:3a:85:ac:fc:67:87:2a:70:c7:16:c9: 7a:a4:5a:93:ca:f8:01:4d:c2:d2:35:fc:6a:e9:1e: cf:bd:c8:7c:fb:80:60:86:a2:8a:5d:03:fc:82:a7: fc:dd:a1:64:08:42:72:f1:7c:22:22:05:1d:29:18: ac:47:03:f5:3a:4a:f4:b1:73:9f:89:47:8b:2d:d0: aa:22:3c:46:0a:31:50:b2:7e:83:ad:79:de:0b:81: 9f:c7:07:14:64:fb:6b:44:07:ff:ef:ce:56:29:cf: 7b:c8:34:fa:c8:47:b0:60:f3:68:12:35:75:7a:f1: 56:4e:67:4f:e1:06:5c:ca:06:e3:0c:4c:f5:d8:a8: fe:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:42:72:41:A6:BF:19:E8:29:E3:95:F9:7E:7F:32:29:0B:64:F2:EB X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fe:c2:15:aa:dd:6d:25:c0:db:fa:18:da:85:bf:22:44:6d: 34:24:68:a8:f1:a6:02:f5:fc:d8:9c:b1:50:5d:74:05:d7:91: 56:a4:26:ee:85:6b:6a:d0:9d:85:43:a1:58:68:49:a0:e8:8e: fe:b5:fe:c5:9b:0b:c2:3a:96:7d:e7:19:91:d1:92:ea:3e:86: 1c:14:fe:5a:a1:f5:1a:c6:a4:f4:52:81:90:55:eb:c5:15:c3: 82:fb:6b:35:2f:9a:82:d9:96:f6:a7:3d:ac:50:5f:a5:52:8a: 9a:36:ae:b5:74:d9:43:b5:17:34:8a:50:27:ab:58:78:3a:c0: ba:00:c8:b8:f8:d8:b3:0a:81:e2:f8:fe:97:f3:47:67:f1:69: 2f:6d:a3:75:c9:67:16:6d:c7:e5:aa:98:2f:0b:06:dd:eb:ea: 69:12:da:31:c7:23:b2:c3:6d:67:90:70:9e:1d:5a:b7:0d:69: 76:42:d3:28:9b:91:2a:df:42:13:c5:f7:6a:20:2f:e9:5e:05: 36:0c:f7:5e:56:8f:96:31:b1:bd:06:fd:b6:cc:57:e9:0a:2e: 4d:70:81:9e:99:83:01:f4:69:3f:f8:93:3c:0d:15:e5:48:9e: f1:12:16:2f:0a:89:bb:73:69:be:df:0a:6d:27:ce:cd:80:cc: 57:f6:5a:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjUxMDE4MTk1MDU3WhcNMjUxMDI1MTk1MDU3WjAYMRYwFAYD VQQDEw02OGYzZWZhMi0wNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdj9t2Y1aSbncsx6SrlxMtK+Nb6wrMtPj6rLMTyZOSSIBr6WtgCDPgQVJgg2 p+huzMv0NdLCUOeBW0qmED8hsrjWRp1rGXX9g2n7JDrJKecgP/TltAOjuymRpLrQ vNu6c2nmB4Ag+1QNCQMM1+i8M/wsH+3ARM8RVWOnOoWs/GeHKnDHFsl6pFqTyvgB TcLSNfxq6R7Pvch8+4BghqKKXQP8gqf83aFkCEJy8XwiIgUdKRisRwP1Okr0sXOf iUeLLdCqIjxGCjFQsn6DrXneC4GfxwcUZPtrRAf/785WKc97yDT6yEewYPNoEjV1 evFWTmdP4QZcygbjDEz12Kj+4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNCckGm vxnoKeOV+X5/MikLZPLrMB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq/sIVqt1tJcDb+hjahb8iRG00JGio8aYC9fzYnLFQXXQF15FWpCbu hWtq0J2FQ6FYaEmg6I7+tf7FmwvCOpZ95xmR0ZLqPoYcFP5aofUaxqT0UoGQVevF FcOC+2s1L5qC2Zb2pz2sUF+lUoqaNq61dNlDtRc0ilAnq1h4OsC6AMi4+NizCoHi +P6X80dn8WkvbaN1yWcWbcflqpgvCwbd6+ppEtoxxyOyw21nkHCeHVq3DWl2QtMo m5Eq30ITxfdqIC/pXgU2DPdeVo+WMbG9Bv22zFfpCi5NcIGemYMB9Gk/+JM8DRXl SJ7xEhYvCom7c2m+3wptJ87NgMxX9lqQ -----END CERTIFICATE-----Generated at Mon Oct 20 03:55:51 2025 by rpki-client