$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft File: rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json) Hash identifier: PZVf14+WDdu8PS7o2XGsnostCEQ3iRtDlG5YeR6rtCY= Subject key identifier: CF:20:9D:67:90:79:60:56:D9:5A:0A:10:F2:1E:57:0A:01:A0:64:7F Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft Manifest number: F1 Signing time: Sun 19 Oct 2025 08:18:36 +0000 Manifest this update: Sun 19 Oct 2025 08:18:35 +0000 Manifest next update: Sun 26 Oct 2025 08:18:35 +0000 Files and hashes: 1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: Q+jARV5uluZIUu49ZO8kaDbmV3LvqJejRcln1jr16q8=) 2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: reDFQAq+wjuHSjSgpYxauoEHpUtogIXvvCLXEGX4Ni8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Validity Not Before: Oct 19 08:18:35 2025 GMT Not After : Oct 26 08:18:35 2025 GMT Subject: CN=68f49edb-fdf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:01:1f:1d:c2:67:96:25:7f:2c:96:b6:40: a2:d8:94:b8:e1:05:ed:3a:c9:6e:86:4e:4c:70:e0: 39:2d:25:9f:24:2e:66:d8:3c:8d:68:f1:7e:5b:a4: b0:56:6f:97:d8:c2:05:fb:0b:42:ec:19:e1:5e:97: 83:ae:da:82:80:9a:6a:c3:b2:c4:07:cc:6d:be:50: ce:17:52:fe:67:e5:44:a2:86:19:5c:30:fb:98:99: 05:3b:c6:1e:ce:ab:ab:30:fb:d5:58:5a:67:b3:23: da:82:3e:b8:6f:95:f3:dc:ca:a6:48:8c:6f:c0:d6: a5:69:5e:04:d1:93:90:62:eb:90:1a:77:58:26:ab: 09:b0:d0:bc:66:59:02:6e:cf:4d:9e:e6:14:8a:7c: 74:7a:39:2b:71:77:c1:80:56:2a:e8:fd:4e:7c:9a: ec:51:31:71:da:19:ea:00:d0:b2:de:cb:4a:3d:58: 0e:aa:c1:73:ed:30:20:e3:14:e0:ef:0f:3f:4c:f8: 4f:dc:52:cb:e4:cc:d8:d5:68:69:53:24:f8:ca:83: bf:48:9c:d3:6a:34:be:d0:ed:e4:fd:c6:1c:fa:b9: 85:f7:f9:d8:f1:a8:78:af:55:ec:75:19:4e:2f:7a: e6:83:86:e2:a7:14:58:06:75:e3:0e:39:ff:44:a9: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:20:9D:67:90:79:60:56:D9:5A:0A:10:F2:1E:57:0A:01:A0:64:7F X509v3 Authority Key Identifier: keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f6:97:4e:0a:2e:b4:72:cf:8a:37:f1:63:47:34:a0:13:ae: b7:91:7d:af:29:39:fa:0a:75:95:34:7a:75:63:20:a7:e2:5d: 15:01:8d:4e:48:52:47:be:da:1d:48:fe:a0:0d:87:ec:a8:e3: 72:af:79:be:76:75:17:e0:13:ef:66:1c:bf:84:9a:92:45:6f: 0c:91:93:2e:44:aa:eb:f2:4b:f8:7c:50:90:04:83:c7:af:fc: cb:18:c3:aa:87:2c:65:cc:b2:c7:76:cb:ae:d5:6c:86:b2:fb: df:39:1a:4b:b8:c1:27:55:92:b1:6b:19:7d:7b:b3:45:7a:c3: 85:db:0c:05:18:23:93:f3:65:b6:d7:bc:ce:04:8a:74:e9:07: 32:43:27:10:0f:a9:6a:70:d4:ee:e7:2f:4a:41:e8:2d:3e:8f: 73:6f:13:82:42:69:7c:36:b0:86:77:50:c0:de:fd:53:23:eb: 8a:dc:5e:34:34:c2:a8:db:f2:01:0e:8c:29:a4:e9:28:4e:47: 78:53:fa:90:70:ec:a8:28:c5:ea:74:6c:cb:7e:38:ed:ff:7a: 83:26:2c:27:4f:66:bb:4d:15:52:bd:fb:10:25:e1:f0:26:c3: 25:c8:a7:22:5a:f3:67:e3:ad:d2:a2:11:0a:0c:20:21:16:29: b1:f7:2c:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YwNjQxMTAvBgNVBAUTKEFENDMzMjAzODI3MkMyREIzMjE1RERBM0FERkIwMTUz NTQxNTY5MTMwHhcNMjUxMDE5MDgxODM1WhcNMjUxMDI2MDgxODM1WjAYMRYwFAYD VQQDEw02OGY0OWVkYi1mZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FsBHx3CZ5YlfyyWtkCi2JS44QXtOsluhk5McOA5LSWfJC5m2DyNaPF+W6Sw Vm+X2MIF+wtC7BnhXpeDrtqCgJpqw7LEB8xtvlDOF1L+Z+VEooYZXDD7mJkFO8Ye zqurMPvVWFpnsyPagj64b5Xz3MqmSIxvwNalaV4E0ZOQYuuQGndYJqsJsNC8ZlkC bs9NnuYUinx0ejkrcXfBgFYq6P1OfJrsUTFx2hnqANCy3stKPVgOqsFz7TAg4xTg 7w8/TPhP3FLL5MzY1WhpUyT4yoO/SJzTajS+0O3k/cYc+rmF9/nY8ah4r1XsdRlO L3rmg4bipxRYBnXjDjn/RKnGoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8gnWeQ eWBW2VoKEPIeVwoBoGR/MB8GA1UdIwQYMBaAFK1DMgOCcsLbMhXdo637AVNUFWkT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjA2NC9GM0NBNjE3MjQ0 RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0c3lGZDJqcmZzQlUxUVZh Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JVTXlBNEp5d3RzeUZkMmpyZnNCVTFRVmFSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjA2NC9GM0NBNjE3MjQ0RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0 c3lGZDJqcmZzQlUxUVZhUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ9pdOCi60cs+KN/FjRzSgE663kX2vKTn6CnWVNHp1YyCn4l0VAY1O SFJHvtodSP6gDYfsqONyr3m+dnUX4BPvZhy/hJqSRW8MkZMuRKrr8kv4fFCQBIPH r/zLGMOqhyxlzLLHdsuu1WyGsvvfORpLuMEnVZKxaxl9e7NFesOF2wwFGCOT82W2 17zOBIp06QcyQycQD6lqcNTu5y9KQegtPo9zbxOCQml8NrCGd1DA3v1TI+uK3F40 NMKo2/IBDowppOkoTkd4U/qQcOyoKMXqdGzLfjjt/3qDJiwnT2a7TRVSvfsQJeHw JsMlyKciWvNn463SohEKDCAhFimx9ywD -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:38 2025 by rpki-client