$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json) Hash identifier: mE0cmM9sxb712fTo+A86psoaZJZko/t0dyUhBJtLBfY= Subject key identifier: 1B:66:FC:68:74:B1:FC:B5:19:83:0F:99:ED:AA:1C:C8:7E:B3:52:60 Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Certificate serial: 058C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft Manifest number: 0582 Signing time: Sun 19 Oct 2025 00:56:47 +0000 Manifest this update: Sun 19 Oct 2025 00:56:47 +0000 Manifest next update: Sun 26 Oct 2025 00:56:47 +0000 Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: B3hsAFEprfvd+g2OxhDaHt/21NPQYs1STzZHj/bg0Yk=) 2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: bYFWsdvkvj/YP0lWqT722iQHX6ldCjoCu3l/f+mKfk8=) 3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: CWQZ2s8MFSjBmURLoXYowyPCs3y0c7wnZAfg2tROfa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1420 (0x58c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Validity Not Before: Oct 19 00:56:47 2025 GMT Not After : Oct 26 00:56:47 2025 GMT Subject: CN=68f4374f-6d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:70:cf:c7:45:90:a9:14:09:cb:19:ca:78:85: e2:4d:a8:43:00:25:7b:e0:5c:18:04:51:c6:f2:f7: 18:c6:f0:ae:a7:8d:30:a3:23:b4:6c:a7:f0:44:8f: a1:54:a2:a2:64:73:4d:b2:b0:b6:69:8a:24:e5:9d: cd:61:67:d3:35:52:d6:73:bd:ee:42:98:fd:28:b2: 82:0b:52:5a:12:f8:c7:dc:14:f1:91:82:e4:fa:65: ea:72:26:b9:29:d7:64:65:ca:1c:e5:ea:2c:24:11: d7:c6:e5:9c:c4:36:37:15:61:f6:5d:cd:c3:6a:a4: 9b:1a:8b:c7:24:fa:45:ee:da:bb:c0:71:3b:60:f4: d0:00:42:4d:f4:8a:de:c9:06:e9:e6:60:2e:44:96: 23:f4:3e:52:ec:21:61:f7:e7:fd:82:97:68:4b:6d: 56:cf:f0:01:43:a5:c6:58:22:ba:88:2a:da:f8:e9: 10:38:0c:94:0e:00:a0:20:a4:99:ae:c1:5e:ff:df: e8:a1:c1:a8:d2:2a:83:a0:b3:92:12:ae:d7:12:21: 13:2c:26:10:93:54:27:9e:a8:1e:8d:61:98:a0:f0: 3d:05:56:e8:02:fe:9b:e5:23:31:08:06:b8:10:a1: e2:19:f5:9c:94:50:c2:06:87:6f:da:bd:63:a0:73: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:66:FC:68:74:B1:FC:B5:19:83:0F:99:ED:AA:1C:C8:7E:B3:52:60 X509v3 Authority Key Identifier: keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:45:bb:4c:7e:55:40:08:13:eb:55:9c:0f:14:67:b3:b6:7f: 82:c2:e3:73:fa:39:de:98:e3:0b:1e:66:26:d2:01:a0:ff:7c: f5:2e:c3:a1:02:81:3f:3e:87:80:7a:56:8f:e5:f2:53:fc:3b: f0:fd:55:ae:68:27:c6:45:e2:b5:ae:67:07:4b:be:04:1a:74: b5:9f:fb:99:22:74:5b:73:96:3a:00:00:99:6b:a8:b5:fd:0a: dd:70:d9:44:d3:e2:53:65:74:d1:fe:ea:8b:69:55:73:07:e9: 66:46:90:45:74:fe:ab:cf:34:cb:7d:10:cf:59:87:87:37:72: bb:e6:21:29:24:a9:a0:7e:65:91:bd:da:1c:cc:a9:cf:d6:8a: 2a:5a:dc:f8:e0:08:a2:04:ed:92:b7:a7:d6:9b:bd:98:fb:01: 97:c9:a9:17:49:5d:43:5f:a1:f8:a2:c2:ed:07:3f:70:19:e5: 82:21:68:f0:f2:d9:ce:0a:1a:33:1b:60:18:25:c9:37:cb:ac: 79:dd:a2:d3:7a:82:ee:6a:4d:a2:bd:b1:1d:8f:3f:39:c2:6c: 0d:f2:c9:99:20:15:ab:0a:c3:fc:ec:1e:f7:16:b4:25:f7:2c: 9a:d1:0b:10:50:2b:4a:32:07:ab:19:67:c5:ac:32:1c:bc:0b: 46:d2:8c:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1 OTQ2QzJERDQwHhcNMjUxMDE5MDA1NjQ3WhcNMjUxMDI2MDA1NjQ3WjAYMRYwFAYD VQQDEw02OGY0Mzc0Zi02ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03DPx0WQqRQJyxnKeIXiTahDACV74FwYBFHG8vcYxvCup40woyO0bKfwRI+h VKKiZHNNsrC2aYok5Z3NYWfTNVLWc73uQpj9KLKCC1JaEvjH3BTxkYLk+mXqcia5 KddkZcoc5eosJBHXxuWcxDY3FWH2Xc3DaqSbGovHJPpF7tq7wHE7YPTQAEJN9Ire yQbp5mAuRJYj9D5S7CFh9+f9gpdoS21Wz/ABQ6XGWCK6iCra+OkQOAyUDgCgIKSZ rsFe/9/oocGo0iqDoLOSEq7XEiETLCYQk1QnnqgejWGYoPA9BVboAv6b5SMxCAa4 EKHiGfWclFDCBodv2r1joHMZdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtm/Gh0 sfy1GYMPme2qHMh+s1JgMB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3 NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV anBqWE5XRGIxZVpaUnNMZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKRbtMflVACBPrVZwPFGeztn+CwuNz+jnemOMLHmYm0gGg/3z1LsOh AoE/PoeAelaP5fJT/Dvw/VWuaCfGReK1rmcHS74EGnS1n/uZInRbc5Y6AACZa6i1 /QrdcNlE0+JTZXTR/uqLaVVzB+lmRpBFdP6rzzTLfRDPWYeHN3K75iEpJKmgfmWR vdoczKnP1ooqWtz44AiiBO2St6fWm72Y+wGXyakXSV1DX6H4osLtBz9wGeWCIWjw 8tnOChozG2AYJck3y6x53aLTeoLuak2ivbEdjz85wmwN8smZIBWrCsP87B73FrQl 9yya0QsQUCtKMgerGWfFrDIcvAtG0oyN -----END CERTIFICATE-----Generated at Mon Oct 20 22:44:47 2025 by rpki-client