$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json) Hash identifier: RlQhCEVvz/ynIXI0DYTtbCpFEym+eNPuGWd4XmaNpjY= Subject key identifier: B2:3F:59:23:34:D7:DE:B8:78:79:D5:74:A2:E8:F9:5A:DF:2D:46:74 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft Manifest number: 022F Signing time: Sun 19 Oct 2025 04:14:27 +0000 Manifest this update: Sun 19 Oct 2025 04:14:27 +0000 Manifest next update: Sun 26 Oct 2025 04:14:27 +0000 Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: xLK/hcQDjSDZnE2UCwsWxL9MrNSyR9bKEevGZLPuOWA=) 2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: rGioCcK4Zr+knzNA5J2qJp6M9oaPBmCCilGkVDkio+Y=) 3: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: CJJ1swHPV2FS2o94pZ274vtIWz1N4ntGwGv8bt1RfcY=) 4: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: eHox8CScwy17I91npttE3xAPIO9P1S6yAPyglPvKM8k=) 5: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: MOy3nx724ovxMfijazGrKwrHh5j4BrBp6Yxw1lx+7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Oct 19 04:14:27 2025 GMT Not After : Oct 26 04:14:27 2025 GMT Subject: CN=68f465a3-e5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5d:a2:23:5a:69:2c:5e:4e:6e:30:4b:3e:7b: 99:88:22:9e:fa:c8:f5:9a:c9:6d:c3:bf:88:12:39: 0d:07:24:86:c4:5b:15:11:69:ca:d2:4f:75:12:c3: d9:7b:a6:33:96:fe:1b:a2:6e:f9:1c:f5:2f:09:80: 4c:8e:de:ca:b2:77:0e:b0:22:fe:42:f1:3f:e4:2e: 2b:ca:26:cb:e6:40:37:68:c9:22:c8:45:b8:76:23: a0:15:4a:a1:de:38:3a:b7:41:8d:84:9d:d0:08:f3: 07:22:b3:45:39:6a:64:47:72:bc:8a:e3:42:d5:70: 4f:2e:13:13:56:3e:54:16:b9:2c:37:46:9a:ec:d7: e0:bf:5c:2c:43:e1:e3:19:67:ba:7c:81:00:6a:7b: a4:45:0c:49:0a:ef:2b:ba:2f:3e:f5:01:a8:41:de: 55:b8:81:8f:65:1b:6b:ed:14:eb:ae:e3:bd:18:76: 05:65:1a:39:c0:2a:ed:bc:66:d8:d8:f6:12:3a:6c: ca:f2:02:f9:19:0b:ed:3b:ca:90:c2:64:2f:05:d7: ca:c4:95:45:b5:c0:de:6e:a0:e6:47:06:e9:fd:7c: d9:85:e5:a8:e1:23:e7:71:7e:97:8e:a0:80:25:91: 28:1e:a6:e4:1e:bb:12:e7:4a:cd:db:17:47:5c:2c: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3F:59:23:34:D7:DE:B8:78:79:D5:74:A2:E8:F9:5A:DF:2D:46:74 X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3e:dc:c2:a7:47:03:dd:e0:cf:5b:a1:ce:6f:d7:68:1b:2d: 3b:57:92:4c:1c:32:31:4d:66:d8:40:88:d9:fd:70:7e:bb:66: 9b:21:ef:83:ac:fa:0b:13:e8:bc:17:54:9a:66:e6:f4:2b:2f: 46:c0:38:17:9d:6e:3d:b6:f6:d4:7d:43:f1:26:60:be:7e:ef: 37:8e:5b:a6:59:05:c6:f4:0a:29:63:54:c7:18:05:c9:3a:50: c2:3a:b7:cf:fc:8f:69:62:5b:24:1b:d2:8c:1b:bb:a5:de:e0: 12:f4:3a:99:a6:5a:7b:6f:5f:47:28:ce:f3:ab:a8:a2:85:60: 83:bc:62:91:5e:5a:36:d3:fe:44:f7:d1:eb:dd:84:c0:e8:8d: f8:94:06:15:f4:c7:af:1c:b6:58:9b:40:6b:34:1c:cb:1e:0a: 56:c4:0f:2a:56:33:54:90:eb:fb:4b:cb:85:f3:bc:ca:17:13: 55:10:d9:83:85:4a:7b:d2:c9:81:a6:3c:ae:b3:6d:cc:28:63: c6:28:5d:f0:13:de:54:3c:de:ae:a3:a6:49:6a:b9:2c:41:f9: 8b:88:c3:36:26:d2:90:4e:9c:1a:bc:79:55:fb:93:e8:a6:95: 41:ad:b8:cd:36:a3:83:c1:67:23:e0:c8:dd:3b:2e:b5:09:38: d5:40:ae:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjUxMDE5MDQxNDI3WhcNMjUxMDI2MDQxNDI3WjAYMRYwFAYD VQQDEw02OGY0NjVhMy1lNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l2iI1ppLF5ObjBLPnuZiCKe+sj1msltw7+IEjkNBySGxFsVEWnK0k91EsPZ e6Yzlv4bom75HPUvCYBMjt7KsncOsCL+QvE/5C4ryibL5kA3aMkiyEW4diOgFUqh 3jg6t0GNhJ3QCPMHIrNFOWpkR3K8iuNC1XBPLhMTVj5UFrksN0aa7Nfgv1wsQ+Hj GWe6fIEAanukRQxJCu8rui8+9QGoQd5VuIGPZRtr7RTrruO9GHYFZRo5wCrtvGbY 2PYSOmzK8gL5GQvtO8qQwmQvBdfKxJVFtcDebqDmRwbp/XzZheWo4SPncX6XjqCA JZEoHqbkHrsS50rN2xdHXCxxCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI/WSM0 1964eHnVdKLo+VrfLUZ0MB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51 Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/PtzCp0cD3eDPW6HOb9doGy07V5JMHDIxTWbYQIjZ/XB+u2abIe+D rPoLE+i8F1SaZub0Ky9GwDgXnW49tvbUfUPxJmC+fu83jlumWQXG9AopY1THGAXJ OlDCOrfP/I9pYlskG9KMG7ul3uAS9DqZplp7b19HKM7zq6iihWCDvGKRXlo20/5E 99Hr3YTA6I34lAYV9MevHLZYm0BrNBzLHgpWxA8qVjNUkOv7S8uF87zKFxNVENmD hUp70smBpjyus23MKGPGKF3wE95UPN6uo6ZJarksQfmLiMM2JtKQTpwavHlV+5Po ppVBrbjNNqODwWcj4MjdOy61CTjVQK7u -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:58 2025 by rpki-client