$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: SFrkz5ZPfJno1uendH9MdHdERVw2Hk/v/5kMrQag31A= Subject key identifier: DD:89:D6:F1:B4:A6:D9:4C:87:A7:8E:5A:E9:33:1C:27:44:A2:C6:50 Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0EA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0E96 Signing time: Sat 18 Oct 2025 18:19:34 +0000 Manifest this update: Sat 18 Oct 2025 18:19:33 +0000 Manifest next update: Sat 25 Oct 2025 18:19:33 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: VnvuCKvIyWjtjoevr6nn/8J22YqvnwRiV7aejb01txs=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: Gdmjy4eOm23bZo0u+QNI+KYIouesOlIiUyP5E+hvG08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3744 (0xea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Oct 18 18:19:33 2025 GMT Not After : Oct 25 18:19:33 2025 GMT Subject: CN=68f3da35-cf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:c9:1a:51:b6:59:8a:9a:78:de:50:83:a1: 48:e2:12:4e:f8:07:cd:c0:72:8a:56:fb:13:91:5b: 60:53:2e:87:c0:89:46:bf:ca:45:f6:3e:e0:9e:30: 93:ad:01:e1:e7:ad:9b:96:48:6f:a4:27:90:05:7f: 5d:73:39:52:c2:86:2f:a5:47:85:9b:2a:d7:17:e4: 86:63:0e:4b:3c:dd:29:91:be:b6:6e:4a:87:0b:60: fc:b9:b8:ee:ed:76:00:cf:3e:e0:66:1b:21:d0:43: 06:96:fe:38:ca:98:56:d1:e4:e4:ff:a1:42:21:6f: 8d:25:e9:6a:9f:ee:9c:66:40:d6:f4:15:b7:24:73: d5:77:78:17:05:4e:16:e0:f4:58:f0:44:4f:09:9d: c8:cc:3a:fe:ca:d6:df:ff:07:fc:af:ca:9e:57:12: 03:22:b2:f4:3b:dd:7c:b3:a1:39:2c:04:71:aa:39: 54:5f:29:52:e9:b4:c6:b0:ef:39:05:2c:e5:4f:2d: 7a:8a:70:71:29:50:c8:81:b5:47:52:4d:b8:43:0b: 05:37:3a:79:3a:e7:08:53:79:0e:73:75:d3:bc:d3: 95:c6:39:b0:c8:92:73:54:96:9f:f5:ce:4f:fd:5c: 3b:0b:10:c2:2e:3a:8c:e2:7b:b4:3c:7f:1b:91:aa: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:89:D6:F1:B4:A6:D9:4C:87:A7:8E:5A:E9:33:1C:27:44:A2:C6:50 X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7c:24:a6:72:c0:33:e9:94:7a:99:12:41:c2:31:6f:d5:7f: 6f:db:15:b8:00:6a:a8:4f:31:de:53:2f:7c:51:f2:25:7a:3a: b0:20:56:2c:a1:0c:e0:b0:c1:5c:09:b8:de:c2:ae:25:e4:eb: c9:2f:d5:c4:fb:fa:24:d4:b0:a9:d2:6b:c5:ea:94:5b:b5:5e: cc:8b:f8:b8:85:b2:65:d5:30:b0:62:87:d0:46:10:ca:4a:f9: 7d:60:17:02:90:98:d2:06:e8:0a:39:e4:da:09:87:a3:2d:7c: c6:e7:c8:a0:5e:94:60:c8:7c:55:22:d2:eb:a6:29:e7:50:c0: bd:5e:a1:4e:f8:5b:53:eb:65:aa:cf:b2:e4:21:bc:d3:21:28: d7:91:d9:6d:48:66:67:bf:21:69:14:e2:11:e2:d0:e1:75:df: cb:9d:13:c7:b9:c9:53:8b:f5:ca:49:f8:42:f3:fa:2b:48:03: c4:4b:b2:ce:e0:08:f9:54:3d:c0:80:35:7e:0d:8e:59:1e:e7: 37:e0:f0:83:84:21:86:42:e8:40:9c:43:f4:c1:56:0c:3d:a9: 28:51:e7:be:3a:2b:d1:0b:32:99:d8:77:4b:ed:7c:08:20:de: 7a:62:5b:13:a7:ce:04:ff:ed:d6:ab:4e:b3:95:2b:00:0a:94: e5:94:cc:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjUxMDE4MTgxOTMzWhcNMjUxMDI1MTgxOTMzWjAYMRYwFAYD VQQDEw02OGYzZGEzNS1jZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+PJGlG2WYqaeN5Qg6FI4hJO+AfNwHKKVvsTkVtgUy6HwIlGv8pF9j7gnjCT rQHh562blkhvpCeQBX9dczlSwoYvpUeFmyrXF+SGYw5LPN0pkb62bkqHC2D8ubju 7XYAzz7gZhsh0EMGlv44yphW0eTk/6FCIW+NJelqn+6cZkDW9BW3JHPVd3gXBU4W 4PRY8ERPCZ3IzDr+ytbf/wf8r8qeVxIDIrL0O918s6E5LARxqjlUXylS6bTGsO85 BSzlTy16inBxKVDIgbVHUk24QwsFNzp5OucIU3kOc3XTvNOVxjmwyJJzVJaf9c5P /Vw7CxDCLjqM4nu0PH8bkaoIKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2J1vG0 ptlMh6eOWukzHCdEosZQMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASfCSmcsAz6ZR6mRJBwjFv1X9v2xW4AGqoTzHeUy98UfIlejqwIFYs oQzgsMFcCbjewq4l5OvJL9XE+/ok1LCp0mvF6pRbtV7Mi/i4hbJl1TCwYofQRhDK Svl9YBcCkJjSBugKOeTaCYejLXzG58igXpRgyHxVItLrpinnUMC9XqFO+FtT62Wq z7LkIbzTISjXkdltSGZnvyFpFOIR4tDhdd/LnRPHuclTi/XKSfhC8/orSAPES7LO 4Aj5VD3AgDV+DY5ZHuc34PCDhCGGQuhAnEP0wVYMPakoUee+OivRCzKZ2HdL7XwI IN56YlsTp84E/+3Wq06zlSsACpTllMyb -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:49 2025 by rpki-client