$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json) Hash identifier: cC5L6OROA+txACcYjjtAgICeouF3hY9TwX+zTp6vjtE= Subject key identifier: E0:AE:11:1A:F5:D5:D4:3B:85:05:2A:C1:BD:B6:53:7F:1C:48:3C:44 Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft Manifest number: 0C85 Signing time: Sat 18 Oct 2025 19:08:52 +0000 Manifest this update: Sat 18 Oct 2025 19:08:51 +0000 Manifest next update: Sat 25 Oct 2025 19:08:51 +0000 Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: irAYwjfQMiP+wmNPpZsYmyTWYQbG09NXToXoeFzuz+c=) 2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: pC6YASmlOW3gbC5Njuzzo1yhASqi/WroinaiHpfVYXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Oct 18 19:08:51 2025 GMT Not After : Oct 25 19:08:51 2025 GMT Subject: CN=68f3e5c3-f04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:8b:a3:89:c8:92:8b:9c:0d:50:7d:00:fa: eb:04:35:8c:b8:47:e3:b6:2c:dd:12:f8:b7:00:70: a6:25:b6:5c:54:c1:7d:a7:69:6f:b4:53:fc:77:90: 4a:26:66:44:db:38:1e:a2:d5:42:1f:af:b2:bc:68: 50:31:42:30:a4:67:40:45:0b:de:4f:7a:28:eb:51: a8:8d:76:7b:f7:ae:bf:c2:17:7e:05:00:39:3d:8f: 56:cb:d4:f7:68:aa:28:a7:86:a8:c4:f4:be:9c:ae: 7f:41:41:76:b1:a2:41:62:9c:1f:25:de:18:10:0c: 69:c1:0a:17:c6:ac:0c:26:0e:8a:2d:f7:0c:e9:39: 4e:86:a2:27:8c:d8:9d:bd:cf:c8:7d:7f:bd:f0:8d: bc:33:51:ad:76:e1:ff:5c:f5:89:12:53:41:e1:12: 93:29:32:e3:77:71:04:6d:68:1c:71:9d:90:a1:cd: 85:17:6d:f9:cd:ae:05:b7:12:f6:b7:e2:a9:04:a0: be:7a:48:22:57:af:2d:0b:e5:29:a0:41:29:a3:ea: 92:58:a0:2e:6c:27:b9:f6:0d:fb:5c:da:4c:bd:55: ba:95:2d:de:a3:6d:a1:d3:7d:c9:a2:15:c1:b4:9a: 01:23:4c:c7:b0:6a:03:bb:32:da:85:30:ef:ce:76: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AE:11:1A:F5:D5:D4:3B:85:05:2A:C1:BD:B6:53:7F:1C:48:3C:44 X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:99:2b:7d:99:6d:8f:24:2b:c4:94:c7:e9:15:15:53:9e:8a: f5:be:70:4d:01:89:a3:ef:75:26:82:ab:fa:d9:b1:27:91:59: b2:2e:c2:de:79:65:30:1d:43:f4:df:20:2f:3c:4a:41:d7:4c: 0b:b0:74:9e:0e:d6:83:0e:9a:04:b1:9b:db:9c:0f:88:04:c5: ba:19:4f:df:31:4b:6a:05:e7:a4:44:24:50:86:97:d3:91:bf: 9f:4b:13:0a:72:14:3e:d6:66:5a:b9:df:66:7e:8c:a9:d5:92: 61:1f:bd:f5:17:cb:e8:42:df:1e:dd:00:c9:49:05:9f:22:19: 63:b5:86:27:da:df:5d:50:de:9b:48:a6:38:61:9f:e9:90:8e: cd:58:79:a0:91:f2:f9:d7:8b:85:21:9f:1e:0b:26:44:dd:30: 01:98:4e:48:fc:68:f4:a1:20:38:f9:fe:7d:3e:ce:54:de:f8: 06:96:56:de:b2:8f:c1:b6:e5:18:4c:75:2d:7c:92:61:53:23: 99:76:d4:80:e4:f3:92:42:12:fa:5f:cd:c2:85:9d:36:a0:38: 48:0b:12:db:bc:8f:6a:85:2e:82:a3:7d:d0:97:23:9c:fe:c3: 41:9f:6c:d9:f1:31:31:5c:0f:72:fd:da:03:58:7b:2f:b4:af: 15:bb:79:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjUxMDE4MTkwODUxWhcNMjUxMDI1MTkwODUxWjAYMRYwFAYD VQQDEw02OGYzZTVjMy1mMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuGLo4nIkoucDVB9APrrBDWMuEfjtizdEvi3AHCmJbZcVMF9p2lvtFP8d5BK JmZE2zgeotVCH6+yvGhQMUIwpGdARQveT3oo61GojXZ7966/whd+BQA5PY9Wy9T3 aKoop4aoxPS+nK5/QUF2saJBYpwfJd4YEAxpwQoXxqwMJg6KLfcM6TlOhqInjNid vc/IfX+98I28M1GtduH/XPWJElNB4RKTKTLjd3EEbWgccZ2Qoc2FF235za4FtxL2 t+KpBKC+ekgiV68tC+UpoEEpo+qSWKAubCe59g37XNpMvVW6lS3eo22h033JohXB tJoBI0zHsGoDuzLahTDvznYF1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCuERr1 1dQ7hQUqwb22U38cSDxEMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzNC9ERUNFM0VCQTA2QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0 eE1JZ1hza3A5Z0ctTlA1MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjmSt9mW2PJCvElMfpFRVTnor1vnBNAYmj73Umgqv62bEnkVmyLsLe eWUwHUP03yAvPEpB10wLsHSeDtaDDpoEsZvbnA+IBMW6GU/fMUtqBeekRCRQhpfT kb+fSxMKchQ+1mZaud9mfoyp1ZJhH731F8voQt8e3QDJSQWfIhljtYYn2t9dUN6b SKY4YZ/pkI7NWHmgkfL514uFIZ8eCyZE3TABmE5I/Gj0oSA4+f59Ps5U3vgGllbe so/BtuUYTHUtfJJhUyOZdtSA5POSQhL6X83ChZ02oDhICxLbvI9qhS6Co33QlyOc /sNBn2zZ8TExXA9y/doDWHsvtK8Vu3lO -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:15 2025 by rpki-client