$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: xPxH5iG2kk0ABjwYiL0oLyrsQpgd2aqTFa8+ZhA7SuM= Subject key identifier: C0:E1:A2:31:81:4B:A5:4C:4C:60:90:FC:E9:51:8A:E7:BB:E1:C8:D2 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0D8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0D34 Signing time: Sat 18 Oct 2025 18:47:06 +0000 Manifest this update: Sat 18 Oct 2025 18:47:04 +0000 Manifest next update: Sat 25 Oct 2025 18:47:04 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: 14H5RRiYqccs7zfoPkQ09CUuHr6Bdr2j3n5ciOjl2iM=) 2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: B9TNU/jgE/B9qF/pLkXeXHo28NX5WSHP3+HqoCXSOUM=) 3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: yXlaLhbx5YRuGCOCxZS+UVUBHLhciPfPZJOpJ77jS10=) 4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: 6pM1TQdNb79+DA6IOYbwXDIQvGxFIYUOEy7bg1GioZ4=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: KHH4guWZz2QPTGfSHIABOFeNEzmNYAkAEdSlj0Q8gIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3468 (0xd8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Oct 18 18:47:04 2025 GMT Not After : Oct 25 18:47:04 2025 GMT Subject: CN=68f3e0a9-c0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:66:8f:25:2d:69:64:11:6f:b8:0a:08:e6: 18:f2:ca:06:3c:7d:66:79:d6:94:62:de:a1:2f:46: 19:6a:60:c1:87:1a:48:61:0d:39:7a:7b:15:ee:cc: 93:71:71:6d:be:2e:50:77:3a:91:a2:39:0d:f6:45: 51:f1:4d:b8:00:be:c3:87:12:bc:ad:ef:db:2d:9c: 23:50:31:66:c9:18:cd:d3:ab:b3:55:0a:f7:1b:59: 2f:0d:8a:fa:32:a1:90:61:21:76:31:eb:77:7f:15: ab:9b:ed:1d:24:67:9a:a1:6c:5b:fa:42:67:e3:d0: 01:a3:c8:19:14:16:65:b6:42:60:22:d0:85:3d:e0: 95:be:a4:a9:99:0f:1f:3d:38:33:bd:0f:b2:cc:59: c0:15:2b:28:dc:9d:2f:4e:8c:8f:01:24:ad:b6:26: d3:f8:bf:75:9a:31:60:36:96:64:41:1d:75:01:2e: c1:ba:60:c0:1a:6b:cf:53:39:95:a4:47:2e:5c:8b: 2b:e7:58:4e:7b:65:a4:78:82:d9:a8:11:18:c6:43: 9a:5f:ce:17:92:40:1e:3d:24:2b:74:d3:25:ff:1e: 7c:36:28:93:7f:c0:5e:1f:d7:ae:ae:d2:a4:1d:fc: 85:d0:c4:9f:27:43:b8:d9:05:1c:e3:c7:5e:c4:63: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E1:A2:31:81:4B:A5:4C:4C:60:90:FC:E9:51:8A:E7:BB:E1:C8:D2 X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:83:81:02:38:76:13:f1:37:da:fa:9c:58:b6:db:80:2d:f1: 14:ec:b0:c5:1c:53:82:45:9d:22:2b:3d:fb:2e:1b:3d:ec:d8: 70:fc:ed:fc:d0:26:12:a5:dd:bd:4a:f6:d9:6a:96:0a:ce:9f: e0:cf:8b:25:44:dc:61:c3:45:1e:e3:23:41:38:53:47:ca:7a: 90:c9:d9:e0:fc:d6:ac:dd:3d:64:9d:c0:71:b6:01:1e:7a:db: 10:81:78:bd:4a:26:2f:2d:ef:f3:c8:c9:66:66:c1:16:06:4c: ef:da:33:49:cd:d9:d1:bd:a9:23:d2:3c:86:7e:53:bc:80:44: c5:83:45:c1:04:e5:8c:97:3f:5a:e7:0f:1e:dd:33:15:f0:bd: 99:01:d7:0d:25:b3:71:ae:43:8c:5a:5e:96:fe:3c:7f:16:df: a4:cb:6e:92:81:fd:ca:ee:29:27:3b:74:7f:18:57:b7:4b:f3: d3:86:d3:0d:6d:a9:a2:e2:cd:43:37:be:21:56:88:7b:35:d3: a9:01:e4:25:70:a6:ab:bf:ce:68:61:f6:ee:dd:4d:24:3f:70: b4:09:02:68:35:3e:90:fd:c4:57:77:a2:9c:7b:08:81:b5:a8: b4:9c:7d:9a:ec:77:9f:f5:96:0c:48:cc:c4:bd:49:3b:f2:37: 4e:9c:01:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUxMDE4MTg0NzA0WhcNMjUxMDI1MTg0NzA0WjAYMRYwFAYD VQQDEw02OGYzZTBhOS1jMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsw9mjyUtaWQRb7gKCOYY8soGPH1medaUYt6hL0YZamDBhxpIYQ05ensV7syT cXFtvi5QdzqRojkN9kVR8U24AL7DhxK8re/bLZwjUDFmyRjN06uzVQr3G1kvDYr6 MqGQYSF2Met3fxWrm+0dJGeaoWxb+kJn49ABo8gZFBZltkJgItCFPeCVvqSpmQ8f PTgzvQ+yzFnAFSso3J0vToyPASSttibT+L91mjFgNpZkQR11AS7BumDAGmvPUzmV pEcuXIsr51hOe2WkeILZqBEYxkOaX84XkkAePSQrdNMl/x58NiiTf8BeH9eurtKk HfyF0MSfJ0O42QUc48dexGPaKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDhojGB S6VMTGCQ/OlRiue74cjSMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlg4ECOHYT8Tfa+pxYttuALfEU7LDFHFOCRZ0iKz37Lhs97Nhw/O38 0CYSpd29SvbZapYKzp/gz4slRNxhw0Ue4yNBOFNHynqQydng/Nas3T1kncBxtgEe etsQgXi9SiYvLe/zyMlmZsEWBkzv2jNJzdnRvakj0jyGflO8gETFg0XBBOWMlz9a 5w8e3TMV8L2ZAdcNJbNxrkOMWl6W/jx/Ft+ky26Sgf3K7iknO3R/GFe3S/PThtMN bami4s1DN74hVoh7NdOpAeQlcKarv85oYfbu3U0kP3C0CQJoNT6Q/cRXd6KcewiB tai0nH2a7Hef9ZYMSMzEvUk78jdOnAGw -----END CERTIFICATE-----Generated at Mon Oct 20 16:12:50 2025 by rpki-client