$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: kWUb1ZZ8W/uPkuaPqyzDx77JmXS9VJrkkKEVNxOBHKg= Subject key identifier: A1:A6:A2:5C:30:C6:A3:2B:FC:F4:11:7F:9D:E9:C5:3C:5F:7F:6C:DB Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: F0 Signing time: Sun 19 Oct 2025 08:18:54 +0000 Manifest this update: Sun 19 Oct 2025 08:18:54 +0000 Manifest next update: Sun 26 Oct 2025 08:18:54 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: QTOYKP5uBo3PNv+lcvqC+gzwmlf5QD5WfEjn3oQOOVU=) 2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: RhQloGXtcZHnLcoyU2Qhf/8Ls5h2TxH8G+0z0bjWi3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Validity Not Before: Oct 19 08:18:54 2025 GMT Not After : Oct 26 08:18:54 2025 GMT Subject: CN=68f49eee-e94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:df:b0:2c:45:ff:f1:30:4b:04:dc:e6:b7: 02:b3:e1:9a:7e:90:b8:d8:3c:ce:81:39:11:8d:34: c8:99:d8:66:35:bb:90:2f:96:05:a4:d2:e5:c0:c4: f5:a9:38:88:d7:58:a4:9f:55:c7:3f:ad:ae:02:db: 54:b7:47:4d:de:20:e1:de:26:e2:ba:c0:04:66:7c: c3:a6:c0:37:5e:a1:50:63:6f:23:c0:41:35:b5:41: 8a:c7:08:44:19:72:7b:12:37:c2:63:8d:c9:a2:a2: 64:28:21:b8:a5:63:93:c0:9a:54:8b:f2:77:ba:40: f3:c0:89:98:4a:0e:97:e0:15:2f:df:a9:c6:5a:df: bf:a0:a9:57:f8:c9:40:7b:ad:36:f0:da:19:69:da: 03:f1:86:a7:cb:ce:5d:d3:3d:a9:58:15:b9:d4:52: 23:ad:ad:d5:91:88:19:ef:5b:ee:dd:90:17:ae:2b: a8:08:3d:d8:4b:b9:e8:0d:a0:69:73:d8:a3:0d:c4: dd:64:51:30:b9:19:9c:9c:f3:f1:8e:3e:5b:d9:d9: 65:dd:5a:d4:4f:29:29:a3:3a:d0:6f:90:57:02:59: 17:c1:26:f4:a3:e3:12:07:2f:47:67:12:cc:be:dd: 83:b0:1f:f7:bc:3c:53:f9:03:8d:6a:57:92:ee:7f: c9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A6:A2:5C:30:C6:A3:2B:FC:F4:11:7F:9D:E9:C5:3C:5F:7F:6C:DB X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f0:cb:a2:18:e1:85:5d:4f:0c:07:07:89:72:13:72:ef:6a: c7:f3:24:a0:d1:8b:78:9a:ea:ae:50:c3:c0:ab:ef:b3:3d:f6: 1e:19:ca:4a:51:76:f5:65:6f:11:75:4b:58:1d:6b:81:8d:8c: c6:8e:26:58:f5:c2:eb:2b:91:a6:34:75:30:27:d3:76:97:6a: 82:10:b7:09:32:e0:68:c2:5d:4a:04:9f:65:fc:ff:42:d9:8a: 40:d3:2c:22:17:09:6e:a4:c8:5a:e5:dc:a5:7e:bf:a4:d8:e8: 6f:0b:1c:1b:ab:82:c3:25:ed:93:0a:5b:f1:49:a9:40:79:5c: e7:eb:64:1c:4e:1f:39:65:73:aa:be:8c:76:6b:84:78:08:61: f9:ac:ee:d3:e9:e4:cd:1c:50:e4:e6:86:68:c7:80:95:b4:cd: 81:27:d4:a7:cf:ec:94:12:ab:77:1d:45:29:ad:c0:3d:8d:86: a9:86:21:3f:14:e1:e8:8c:76:9f:a7:cb:ec:bb:ae:88:33:23: 0b:b9:0a:9f:46:3b:1b:55:6b:97:63:cb:a1:4b:73:e8:20:51: f4:5d:b6:c3:89:c4:80:6f:a0:55:81:9d:5e:3e:f0:44:cd:20: 43:b6:32:99:9d:45:be:5c:99:aa:c7:75:b7:fb:c9:9b:53:cd: 5c:d7:f2:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5 NzYzQTYyQkEwHhcNMjUxMDE5MDgxODU0WhcNMjUxMDI2MDgxODU0WjAYMRYwFAYD VQQDEw02OGY0OWVlZS1lOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWzfsCxF//EwSwTc5rcCs+GafpC42DzOgTkRjTTImdhmNbuQL5YFpNLlwMT1 qTiI11ikn1XHP62uAttUt0dN3iDh3ibiusAEZnzDpsA3XqFQY28jwEE1tUGKxwhE GXJ7EjfCY43JoqJkKCG4pWOTwJpUi/J3ukDzwImYSg6X4BUv36nGWt+/oKlX+MlA e6028NoZadoD8Yany85d0z2pWBW51FIjra3VkYgZ71vu3ZAXriuoCD3YS7noDaBp c9ijDcTdZFEwuRmcnPPxjj5b2dll3VrUTykpozrQb5BXAlkXwSb0o+MSBy9HZxLM vt2DsB/3vDxT+QONaleS7n/JGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGmolww xqMr/PQRf53pxTxff2zbMB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81MDgzNUU2ODQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3Fl bmdNUjVWTGI4M1dYWTZZcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK8MuiGOGFXU8MBweJchNy72rH8ySg0Yt4muquUMPAq++zPfYeGcpK UXb1ZW8RdUtYHWuBjYzGjiZY9cLrK5GmNHUwJ9N2l2qCELcJMuBowl1KBJ9l/P9C 2YpA0ywiFwlupMha5dylfr+k2OhvCxwbq4LDJe2TClvxSalAeVzn62QcTh85ZXOq vox2a4R4CGH5rO7T6eTNHFDk5oZox4CVtM2BJ9Snz+yUEqt3HUUprcA9jYaphiE/ FOHojHafp8vsu66IMyMLuQqfRjsbVWuXY8uhS3PoIFH0XbbDicSAb6BVgZ1ePvBE zSBDtjKZnUW+XJmqx3W3+8mbU81c1/KP -----END CERTIFICATE-----Generated at Tue Oct 21 06:58:29 2025 by rpki-client