$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft File: UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json) Hash identifier: wkPFX3WVCJMqKMC8bi9zkWoGA+UdIiS3wpNmLe9KtI0= Subject key identifier: 9D:BB:B9:DE:07:8E:DF:0D:0E:DB:82:CC:D3:85:73:EF:50:CE:8D:C7 Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft Manifest number: 49 Signing time: Sun 19 Oct 2025 10:48:25 +0000 Manifest this update: Sun 19 Oct 2025 10:48:24 +0000 Manifest next update: Sun 26 Oct 2025 10:48:24 +0000 Files and hashes: 1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: bqgeb+yRwMIfpQwREoP52cyre/4plBl8DIkuY7kSXCQ=) 2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: WcSNu1HK0gGCU7aORSHhSulUdwLctmKgMDS1dq0RYbQ=) 3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: pgsw/lIIAC86SHOBUAFVHyyezuLYZcEiwQh3Fbl1fpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Validity Not Before: Oct 19 10:48:24 2025 GMT Not After : Oct 26 10:48:24 2025 GMT Subject: CN=68f4c1f9-5f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:1b:2a:14:bf:b4:83:45:af:40:58:91:f9: 35:5b:6d:18:c3:5d:f4:41:55:c7:6d:91:0d:3b:33: 00:d6:d2:c0:e1:f8:a8:7b:da:bc:10:c3:44:3c:be: cc:19:be:46:26:c7:70:a3:1b:bb:6e:7c:5e:4d:a5: 57:62:2d:a7:24:b3:d1:dc:82:11:af:a3:56:1c:6f: 6d:06:c5:70:2c:aa:a8:00:19:a7:25:ff:0e:ad:e4: 23:47:1d:40:9c:30:76:7f:f4:80:2c:72:e6:5b:8b: d1:74:b6:60:c4:6b:2d:c3:b5:c2:67:0e:4d:5a:4f: 36:7a:f2:0c:4b:e2:17:db:12:67:99:38:3b:60:8c: eb:83:7a:77:c9:2d:5b:97:b3:a4:f5:ab:25:88:ca: 75:79:ea:15:38:ba:10:1b:30:8f:f4:f9:00:51:33: a5:b7:46:ad:53:c8:55:f7:92:c4:8b:66:2f:c1:c7: 0f:e4:b9:a1:92:c2:61:bf:4a:ca:b0:57:08:6b:c4: 9c:a3:d5:65:44:ad:ee:d9:43:1c:8a:65:fc:de:06: 1b:f0:83:4b:5f:67:1e:af:3c:f6:7f:0e:99:d5:c0: f0:cb:2c:8b:cf:0b:80:a9:8a:30:d4:27:35:4f:fa: a9:de:3f:dc:ed:b4:f2:1e:b9:3f:7d:db:05:5c:bc: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BB:B9:DE:07:8E:DF:0D:0E:DB:82:CC:D3:85:73:EF:50:CE:8D:C7 X509v3 Authority Key Identifier: keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:53:5f:78:fc:e8:2d:0e:d1:ca:f1:d1:29:16:5c:4e:0c:9b: 83:ab:43:4c:9b:46:36:a8:cc:49:84:6e:d8:58:2e:1c:bc:cb: fc:9b:26:52:c7:78:b3:78:9b:c3:32:a7:ef:1e:54:a9:f4:27: 92:a0:19:a5:75:6c:3b:bc:f6:14:a9:29:98:00:3f:ab:db:02: 2e:ef:da:8f:ad:f7:6c:85:4c:a1:b7:9c:05:45:66:31:c7:65: 69:ce:4b:e7:ee:6c:15:28:cc:bd:31:92:ac:82:71:f6:f8:96: 6f:57:84:47:10:a5:cc:14:b9:e9:93:2b:4b:68:70:28:04:fa: a3:93:d0:9f:fc:e2:29:02:ea:0e:06:98:5e:16:82:9c:0a:f3: 88:b2:1d:90:76:00:e4:aa:ad:a1:ab:9b:ad:61:29:b6:4e:0f: db:a9:aa:d7:7d:45:78:9b:d9:3d:df:cc:00:3e:31:bc:e5:d3: ff:1e:db:72:85:a7:2c:b2:c5:36:8a:bc:cc:4d:37:20:d9:88: af:c8:97:46:3f:09:57:4e:39:8c:5a:5e:db:64:4c:65:9c:6b: 6a:76:8d:d7:30:99:ba:a0:4b:7c:0e:ab:8b:91:d6:dd:59:54: 15:5c:e2:d3:40:43:c4:13:07:ca:4a:c6:c2:51:12:b8:e8:ba: 69:47:ce:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjRFOTExMC8GA1UEBRMoNTBBRTcxNkYzRDM2QjlCRUVBRTI3RjEwMDY4RjlFMzZB MjMzQUI5MTAeFw0yNTEwMTkxMDQ4MjRaFw0yNTEwMjYxMDQ4MjRaMBgxFjAUBgNV BAMTDTY4ZjRjMWY5LTVmNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtSRsqFL+0g0WvQFiR+TVbbRjDXfRBVcdtkQ07MwDW0sDh+Kh72rwQw0Q8vswZ vkYmx3CjG7tufF5NpVdiLacks9HcghGvo1Ycb20GxXAsqqgAGacl/w6t5CNHHUCc MHZ/9IAscuZbi9F0tmDEay3DtcJnDk1aTzZ68gxL4hfbEmeZODtgjOuDenfJLVuX s6T1qyWIynV56hU4uhAbMI/0+QBRM6W3Rq1TyFX3ksSLZi/Bxw/kuaGSwmG/Ssqw VwhrxJyj1WVEre7ZQxyKZfzeBhvwg0tfZx6vPPZ/DpnVwPDLLIvPC4CpijDUJzVP +qneP9zttPIeuT992wVcvOvTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnbu53geO 3w0O24LM04Vz71DOjccwHwYDVR0jBBgwFoAUUK5xbz02ub7q4n8QBo+eNqIzq5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNEU5L0QzODYxMzQ0NDBF RTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3cTRuOFFCby1lTnFJenE1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUs1eGJ6MDJ1YjdxNG44UUJvLWVOcUl6cTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NEU5L0QzODYxMzQ0NDBFRTExRjA5RTkzMzUxQ0M0RjlBRTAyL1VLNXhiejAydWI3 cTRuOFFCby1lTnFJenE1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACRTX3j86C0O0crx0SkWXE4Mm4OrQ0ybRjaozEmEbthYLhy8y/ybJlLH eLN4m8Myp+8eVKn0J5KgGaV1bDu89hSpKZgAP6vbAi7v2o+t92yFTKG3nAVFZjHH ZWnOS+fubBUozL0xkqyCcfb4lm9XhEcQpcwUuemTK0tocCgE+qOT0J/84ikC6g4G mF4WgpwK84iyHZB2AOSqraGrm61hKbZOD9upqtd9RXib2T3fzAA+Mbzl0/8e23KF pyyyxTaKvMxNNyDZiK/Il0Y/CVdOOYxaXttkTGWca2p2jdcwmbqgS3wOq4uR1t1Z VBVc4tNAQ8QTB8pKxsJRErjoumlHzoc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:15 2025 by rpki-client