$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: DtS+wGkokk6yO7LzmI+juM/52EMKlEdl5vP/rYOPpBk= Subject key identifier: 0D:D0:87:F9:60:95:2E:38:0A:6A:7E:D3:B5:62:4F:A7:27:46:9E:AD Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0CD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0CBD Signing time: Sat 18 Oct 2025 18:54:01 +0000 Manifest this update: Sat 18 Oct 2025 18:54:00 +0000 Manifest next update: Sat 25 Oct 2025 18:54:00 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: WRRAXwZAvmr8yvnLrwx5vBOjdxU0xJEh2SCZ2Fffa1Q=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Oct 18 18:54:00 2025 GMT Not After : Oct 25 18:54:00 2025 GMT Subject: CN=68f3e249-9e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:25:20:e6:db:9d:d0:82:25:c2:c7:ba:3f: bb:41:98:a6:c4:85:c1:2a:be:fc:51:74:25:7a:4d: 7d:d1:bc:df:bd:2c:66:8b:5a:30:56:f6:9e:32:a2: 84:93:7e:8e:dc:cc:0d:e6:27:a0:af:c7:cc:32:f5: a4:a9:2e:a7:ae:29:7d:63:05:63:76:cd:98:c8:4b: 1e:0f:d9:78:72:0d:32:b6:f4:42:34:2a:24:18:92: b0:cc:b2:10:0f:29:bc:cc:8e:5c:06:b4:d8:f2:0c: 73:3d:d9:b6:4d:11:07:28:01:1a:c5:d6:c2:52:27: f8:ba:2f:4f:18:99:fd:4e:5f:8f:0c:a3:d5:c3:a0: 32:d8:c9:11:c3:e0:e3:7e:bc:a4:0c:69:6d:5f:ce: e9:0f:af:34:e2:01:94:bb:93:d3:39:cb:76:c4:b3: 5a:3b:0b:51:00:57:1f:58:11:8e:ae:2f:5f:75:5f: d9:20:d3:9f:2b:3c:57:2a:5f:2b:48:d4:6d:0d:4d: 2b:4e:5d:ea:bd:ba:80:c2:80:cb:62:a6:b0:e4:1e: 06:08:11:8e:1a:86:7d:9e:07:67:ac:d3:1d:74:45: 58:83:99:66:ca:04:dd:d6:60:06:74:83:f7:98:03: 20:a2:bd:5e:4a:11:84:fe:32:d4:e6:55:d4:4d:67: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D0:87:F9:60:95:2E:38:0A:6A:7E:D3:B5:62:4F:A7:27:46:9E:AD X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0f:4b:a3:1c:96:11:31:e8:f9:72:2a:f8:a1:41:1c:81:a4: ea:65:62:fb:da:c4:57:6b:83:ff:35:7e:f4:50:09:b7:f6:13: 00:ad:32:a0:f9:ce:77:f0:d9:c1:e6:90:eb:6b:e0:62:91:a9: e7:af:65:a4:31:82:86:6b:60:0e:2f:0b:b6:52:f0:f1:1d:31: b4:ff:02:77:ed:8f:fc:17:45:94:12:dc:93:60:35:3b:55:a6: dc:43:68:2a:b5:9b:ef:a1:a8:3f:d4:7b:5e:06:b3:28:f7:1b: 21:91:da:e3:be:29:b6:d6:7e:26:2d:fc:07:c1:8d:63:22:91: 81:f0:e4:3e:35:1a:22:72:d6:03:a3:87:52:d6:0e:1a:70:9b: 46:96:ae:fc:b7:60:6a:aa:cf:6d:9d:53:79:ed:a8:60:c8:98: 62:a7:e9:6b:c1:68:70:67:02:ff:77:d5:34:d0:b3:bb:18:92: fd:93:22:73:46:94:4a:96:29:71:c3:a1:60:75:fc:13:fe:1c: 70:b1:47:ab:02:a9:51:0f:53:68:4f:54:b2:c7:8f:1b:b2:83: 6c:b3:ab:d8:39:ef:61:2b:d8:f8:d2:6c:60:4f:1a:94:35:95: 95:c4:10:94:03:9f:ec:90:8f:ed:50:30:06:b7:71:cf:11:3c: 68:01:49:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUxMDE4MTg1NDAwWhcNMjUxMDI1MTg1NDAwWjAYMRYwFAYD VQQDEw02OGYzZTI0OS05ZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkIlIObbndCCJcLHuj+7QZimxIXBKr78UXQlek190bzfvSxmi1owVvaeMqKE k36O3MwN5iegr8fMMvWkqS6nril9YwVjds2YyEseD9l4cg0ytvRCNCokGJKwzLIQ Dym8zI5cBrTY8gxzPdm2TREHKAEaxdbCUif4ui9PGJn9Tl+PDKPVw6Ay2MkRw+Dj frykDGltX87pD6804gGUu5PTOct2xLNaOwtRAFcfWBGOri9fdV/ZINOfKzxXKl8r SNRtDU0rTl3qvbqAwoDLYqaw5B4GCBGOGoZ9ngdnrNMddEVYg5lmygTd1mAGdIP3 mAMgor1eShGE/jLU5lXUTWdMDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3Qh/lg lS44Cmp+07ViT6cnRp6tMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvD0ujHJYRMej5cir4oUEcgaTqZWL72sRXa4P/NX70UAm39hMArTKg +c538NnB5pDra+Bikannr2WkMYKGa2AOLwu2UvDxHTG0/wJ37Y/8F0WUEtyTYDU7 VabcQ2gqtZvvoag/1HteBrMo9xshkdrjvim21n4mLfwHwY1jIpGB8OQ+NRoictYD o4dS1g4acJtGlq78t2Bqqs9tnVN57ahgyJhip+lrwWhwZwL/d9U00LO7GJL9kyJz RpRKlilxw6FgdfwT/hxwsUerAqlRD1NoT1Syx48bsoNss6vYOe9hK9j40mxgTxqU NZWVxBCUA5/skI/tUDAGt3HPETxoAUkB -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:20 2025 by rpki-client