$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: TF3/8AiNxMkZED+AjFH5/UG9B1jZKDG/CD0Z5T7FVyc= Subject key identifier: FB:C2:5A:00:63:ED:3A:B4:E2:26:72:BC:86:3B:4C:9E:ED:25:3F:02 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 18DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 18D5 Signing time: Sat 18 Oct 2025 16:02:37 +0000 Manifest this update: Sat 18 Oct 2025 16:02:36 +0000 Manifest next update: Sat 25 Oct 2025 16:02:36 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: Cv9DmIFn8y8bmv7E13uTxYJrFiWc67YL3gLExibYv0M=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: Hi67OIgPZ7TBkvwrxhK9udO+gzYygQSZ8bHnr5IGMCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6364 (0x18dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Oct 18 16:02:36 2025 GMT Not After : Oct 25 16:02:36 2025 GMT Subject: CN=68f3ba1d-f68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3e:1f:a6:cf:d6:1d:cd:6c:c2:b0:a3:5e:84: 54:82:ab:52:a4:86:2f:54:c9:d1:dc:fc:de:2e:6f: 56:d5:d2:06:e2:86:d9:1c:e4:77:d1:84:b5:c9:49: 23:8f:c5:a4:27:f5:29:fb:d6:13:a3:f7:7d:2f:c6: 46:33:65:98:b7:6b:7c:d7:e3:78:5d:a7:53:a7:1b: 04:fc:b8:98:d0:ed:c5:72:5f:e1:60:0e:cb:ef:18: eb:a3:18:d2:ff:76:73:f9:d5:19:aa:0b:88:91:06: 34:63:ec:22:68:4c:6e:3b:21:3d:6e:88:d4:44:40: c5:77:58:09:af:17:12:9d:d7:9c:b2:ef:b2:7a:2e: 2a:57:91:08:b1:52:4a:f2:fb:be:eb:9d:6b:5e:ed: a4:6c:5a:b2:96:3c:4e:2d:00:30:71:7c:85:3c:5f: f0:14:a0:d4:ac:74:92:8d:46:0c:ab:02:02:e9:44: 44:5a:ec:0d:fb:e9:5d:16:16:74:62:f6:a9:19:e4: ee:57:32:f9:9c:27:e7:ad:51:3c:7a:8c:61:f4:4c: ff:17:31:08:23:72:50:67:ed:8e:f3:6d:4a:81:92: 39:3d:6d:65:af:81:f3:d9:c8:c0:65:f5:da:6e:97: d3:84:3d:d5:3b:6b:fe:58:8b:2b:ce:6d:a5:b3:61: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C2:5A:00:63:ED:3A:B4:E2:26:72:BC:86:3B:4C:9E:ED:25:3F:02 X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d9:64:79:0d:34:3d:59:c8:d1:9d:d9:94:85:21:2e:54:ca: bc:d6:35:cd:d0:bb:58:b3:64:47:0f:2d:c8:28:de:c4:e9:d0: ef:f3:e8:d2:9f:e7:e8:60:51:81:2e:56:4e:41:f6:ea:45:9d: 84:7a:42:55:6e:5e:d8:4d:1a:72:72:1b:79:d9:55:18:ce:c0: 1d:31:0d:a1:89:2b:0f:14:08:ac:94:5d:47:79:26:36:4d:46: 36:55:24:3a:c9:e8:84:71:da:a3:8f:30:f1:db:84:df:8f:26: e1:de:e0:7d:db:39:a8:11:f0:f8:81:22:09:e0:40:dd:36:6c: 51:d9:76:bf:9d:2c:53:4d:34:f4:e8:d6:46:d0:79:d2:91:ae: 31:c6:36:16:6f:2d:85:9f:a8:34:08:25:56:66:d6:a2:6f:b2: dc:ad:f5:6f:e5:01:82:00:10:df:8b:2e:5e:72:83:c2:97:67: 94:ef:fb:4c:71:12:6a:e6:39:34:f1:9e:73:73:96:63:67:b5: 44:41:75:e9:be:4a:d2:fe:77:1d:ec:db:6f:20:98:77:e9:76: fb:fd:35:76:cf:fc:89:31:9d:95:bb:7d:0d:3d:28:40:75:1f: fc:12:ab:d3:d7:86:47:d6:2d:92:7e:ff:3d:ce:72:27:e4:33: 9a:4a:67:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUxMDE4MTYwMjM2WhcNMjUxMDI1MTYwMjM2WjAYMRYwFAYD VQQDEw02OGYzYmExZC1mNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5T4fps/WHc1swrCjXoRUgqtSpIYvVMnR3PzeLm9W1dIG4obZHOR30YS1yUkj j8WkJ/Up+9YTo/d9L8ZGM2WYt2t81+N4XadTpxsE/LiY0O3Fcl/hYA7L7xjroxjS /3Zz+dUZqguIkQY0Y+wiaExuOyE9bojUREDFd1gJrxcSndecsu+yei4qV5EIsVJK 8vu+651rXu2kbFqyljxOLQAwcXyFPF/wFKDUrHSSjUYMqwIC6UREWuwN++ldFhZ0 YvapGeTuVzL5nCfnrVE8eoxh9Ez/FzEII3JQZ+2O821KgZI5PW1lr4Hz2cjAZfXa bpfThD3VO2v+WIsrzm2ls2Gu/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvCWgBj 7Tq04iZyvIY7TJ7tJT8CMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP2WR5DTQ9WcjRndmUhSEuVMq81jXN0LtYs2RHDy3IKN7E6dDv8+jS n+foYFGBLlZOQfbqRZ2EekJVbl7YTRpycht52VUYzsAdMQ2hiSsPFAislF1HeSY2 TUY2VSQ6yeiEcdqjjzDx24Tfjybh3uB92zmoEfD4gSIJ4EDdNmxR2Xa/nSxTTTT0 6NZG0HnSka4xxjYWby2Fn6g0CCVWZtaib7LcrfVv5QGCABDfiy5ecoPCl2eU7/tM cRJq5jk08Z5zc5ZjZ7VEQXXpvkrS/ncd7NtvIJh36Xb7/TV2z/yJMZ2Vu30NPShA dR/8EqvT14ZH1i2Sfv89znIn5DOaSmeU -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:03 2025 by rpki-client