$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json) Hash identifier: 9lqVNMqGkd3WP43TPi5xcGB+89wXpMkqyc70dlG79ao= Subject key identifier: 2B:D8:33:08:36:24:29:CD:D7:9E:D8:76:9E:14:7E:6B:CE:20:2D:FD Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft Manifest number: 20 Signing time: Sun 19 Oct 2025 11:18:54 +0000 Manifest this update: Sun 19 Oct 2025 11:18:54 +0000 Manifest next update: Sun 26 Oct 2025 11:18:54 +0000 Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: iF9jOl3J6sS8YWEZG17fRg6eHXDU+71kh4o7opzgAro=) 2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: E0HpiYi9oekDhMBwLHO28cWKce/Mgln+cFcKFRPDwlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Validity Not Before: Oct 19 11:18:54 2025 GMT Not After : Oct 26 11:18:54 2025 GMT Subject: CN=68f4c91e-42b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:4c:ab:4b:58:a5:16:b4:93:99:8c:2e:48: 5e:4e:9f:da:46:d3:7b:58:79:88:ac:57:86:7a:08: f3:a1:94:0f:93:83:cc:04:07:2b:8f:16:34:6d:24: dd:c6:17:46:de:c1:4d:2a:ef:f8:11:f2:9c:9e:05: 0a:18:d1:ac:f6:4a:a9:a9:92:8e:05:58:22:3e:01: e4:ec:be:f8:f1:e3:0b:44:26:45:b9:7e:44:5a:1f: 7b:1c:78:d0:d5:eb:23:22:1d:0d:4b:c6:9b:07:0f: 99:4d:2a:ed:4c:21:80:26:63:3c:30:c8:b3:2a:55: 34:31:2e:ef:c9:9d:4b:a7:a2:73:b4:d3:5c:4e:39: 36:23:e0:68:23:ba:eb:cb:9f:44:85:29:1f:0f:b4: d7:02:9e:9a:5f:c9:ad:07:5a:6f:f8:34:d7:61:21: f1:59:bb:bd:70:80:cf:22:55:d1:f6:53:03:53:2d: ac:7b:a3:95:a2:55:2b:06:c6:e2:aa:63:1b:30:76: 89:ce:f4:82:64:01:87:60:27:bd:e6:eb:19:f5:0b: cf:d1:9b:46:18:0f:b6:2c:d1:58:12:3c:ac:35:dd: 3d:71:e8:b9:1d:cd:7a:7a:d4:a2:ce:85:6e:f4:a0: ef:40:bd:ef:10:4a:28:67:b5:19:08:5c:a1:5b:26: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D8:33:08:36:24:29:CD:D7:9E:D8:76:9E:14:7E:6B:CE:20:2D:FD X509v3 Authority Key Identifier: keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e8:01:b2:9d:78:f2:fc:c4:7d:14:38:23:06:5b:8e:e0:d5: c1:2b:e6:c6:0e:2d:e9:0b:e8:7c:77:5a:97:de:fe:97:6c:ce: 1c:0b:ff:c5:8e:01:81:40:c3:47:ed:bb:2c:3b:70:0b:a7:d9: 25:36:18:ea:f8:05:fd:c5:94:23:8e:7e:e3:f9:09:71:d4:80: 00:f8:0e:cc:22:23:a2:05:85:9f:7b:81:e6:d4:4f:1d:0c:3f: 2f:3d:cd:e2:91:6d:38:4d:fa:8a:4d:0d:a4:f0:3d:0e:4a:00: 63:31:27:62:58:97:31:55:a4:03:39:a7:fe:56:7e:c9:eb:0c: fe:ee:d7:f7:5d:7f:57:29:7e:17:b7:73:55:e3:36:b2:22:83: 1b:c8:de:7e:81:0f:b6:2c:8d:2a:3f:19:8b:9f:22:f8:95:ee: 4a:5c:c5:5b:0b:03:c4:05:d8:a4:ad:56:89:42:29:4a:bd:19: 08:54:a4:3a:03:56:e8:87:74:11:f2:a3:e6:83:f0:a5:8a:42: d4:3e:d9:12:d3:0a:ea:0b:54:5f:cb:bb:f9:89:f4:3c:67:75: cb:dc:06:20:61:be:68:d5:b5:b9:a8:d8:cf:51:28:a7:7f:0c: 49:03:0b:a2:8a:d6:18:5f:99:63:7d:87:82:3d:66:b7:eb:c4: 04:31:2b:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzQwOTExMC8GA1UEBRMoNTIxNDkyMTA0QUIxQThCQkJFQkQ4MEE5OTYyOUQ0RTJF NjYzMjM3MDAeFw0yNTEwMTkxMTE4NTRaFw0yNTEwMjYxMTE4NTRaMBgxFjAUBgNV BAMTDTY4ZjRjOTFlLTQyYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzzEyrS1ilFrSTmYwuSF5On9pG03tYeYisV4Z6CPOhlA+Tg8wEByuPFjRtJN3G F0bewU0q7/gR8pyeBQoY0az2Sqmpko4FWCI+AeTsvvjx4wtEJkW5fkRaH3sceNDV 6yMiHQ1LxpsHD5lNKu1MIYAmYzwwyLMqVTQxLu/JnUunonO001xOOTYj4GgjuuvL n0SFKR8PtNcCnppfya0HWm/4NNdhIfFZu71wgM8iVdH2UwNTLax7o5WiVSsGxuKq YxswdonO9IJkAYdgJ73m6xn1C8/Rm0YYD7Ys0VgSPKw13T1x6LkdzXp61KLOhW70 oO9Ave8QSihntRkIXKFbJpEXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK9gzCDYk Kc3Xnth2nhR+a84gLf0wHwYDVR0jBBgwFoAUUhSSEEqxqLu+vYCplinU4uZjI3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NDA5LzQxRDUyRDQ2N0NC NjExRjA4QzVGNzc2OUM0RjlBRTAyL1VoU1NFRXF4cUx1LXZZQ3BsaW5VNHVaakkz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWhTU0VFcXhxTHUtdllDcGxpblU0dVpqSTNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NDA5LzQxRDUyRDQ2N0NCNjExRjA4QzVGNzc2OUM0RjlBRTAyL1VoU1NFRXF4cUx1 LXZZQ3BsaW5VNHVaakkzQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHXoAbKdePL8xH0UOCMGW47g1cEr5sYOLekL6Hx3Wpfe/pdszhwL/8WO AYFAw0ftuyw7cAun2SU2GOr4Bf3FlCOOfuP5CXHUgAD4DswiI6IFhZ97gebUTx0M Py89zeKRbThN+opNDaTwPQ5KAGMxJ2JYlzFVpAM5p/5WfsnrDP7u1/ddf1cpfhe3 c1XjNrIigxvI3n6BD7YsjSo/GYufIviV7kpcxVsLA8QF2KStVolCKUq9GQhUpDoD VuiHdBHyo+aD8KWKQtQ+2RLTCuoLVF/Lu/mJ9DxndcvcBiBhvmjVtbmo2M9RKKd/ DEkDC6KK1hhfmWN9h4I9ZrfrxAQxK8k= -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:18 2025 by rpki-client