$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: 62RzPkLWFZyPqztBFGt4e8vnn3Nj29OFuY80xfY5Zvw= Subject key identifier: C3:C8:2E:19:72:9B:43:70:B2:FB:24:9F:EC:03:C1:2C:8C:69:AF:60 Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0B16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0B0E Signing time: Sat 18 Oct 2025 20:14:29 +0000 Manifest this update: Sat 18 Oct 2025 20:14:28 +0000 Manifest next update: Sat 25 Oct 2025 20:14:28 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: HJxa9bP7KzhjHh5sDdl5HvN7HISCwtvFqfgYjgFD8HA=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2838 (0xb16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Oct 18 20:14:28 2025 GMT Not After : Oct 25 20:14:28 2025 GMT Subject: CN=68f3f524-ebd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:40:c9:8a:a3:d4:eb:39:9f:3e:b0:6b:2e: 7e:e6:40:8f:d9:07:b2:78:c7:e3:c8:16:fa:2f:9e: 2d:f4:4b:0f:a5:4e:5f:6e:0b:b8:c4:e9:2a:70:15: 69:4a:52:10:80:08:eb:8d:4a:91:ba:9b:98:98:f8: 28:86:18:1f:a4:1d:13:95:13:17:3f:14:2c:84:40: f1:c0:a0:06:37:f8:07:d9:b8:8e:4b:b3:8f:83:9f: 94:90:13:69:53:38:16:86:49:f0:fa:4b:1b:f9:fe: b2:57:ad:d9:22:dc:28:5e:fc:0a:7c:31:3c:ce:9c: 33:1f:2b:4a:a9:fd:7e:4c:df:b5:dd:0b:46:6b:ca: 60:4c:75:ce:1e:7e:5e:22:0e:7c:0c:de:84:97:32: 17:4f:64:89:60:d2:fe:cf:ac:9a:14:fd:ee:6a:27: d7:58:5e:eb:28:9d:8d:11:ac:79:8e:75:ca:59:63: 4b:69:17:22:17:ba:f4:87:d5:f2:2b:81:89:67:62: 52:94:fd:bf:c0:f6:5d:9e:bb:98:f1:db:bc:c5:85: d1:5e:5c:aa:33:90:7c:a0:fe:38:cd:a2:c1:fa:c7: be:cd:d5:4d:60:5b:a2:77:d9:29:9e:ba:47:04:16: 45:6f:86:86:af:a6:21:b5:3d:99:93:1e:a8:7a:a0: c1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C8:2E:19:72:9B:43:70:B2:FB:24:9F:EC:03:C1:2C:8C:69:AF:60 X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:20:69:86:5c:5f:77:71:69:60:35:73:ad:c6:28:85:22:70: df:15:5e:dc:36:8a:a3:27:f1:30:e2:5b:5f:ad:8f:75:9c:54: 80:e4:6a:18:f4:dc:b0:be:39:0f:ab:c6:d4:24:f9:15:30:25: c5:ae:54:f0:3b:51:7a:51:26:dc:ec:79:ac:de:d8:44:95:3c: 1b:01:7a:f7:f5:aa:21:cd:f8:d9:b1:c0:ef:6e:ee:91:b3:3e: 71:06:75:95:a1:90:ca:fd:4f:4d:08:06:20:e2:88:b4:57:11: 94:a0:c7:d0:97:f6:e5:79:5f:24:af:7c:19:b3:70:4a:b7:ee: 45:8f:f0:80:b0:66:fa:4a:70:86:71:bd:46:aa:4c:fb:ce:85: 6f:f9:a4:94:de:3c:9a:17:03:39:8b:0b:80:bd:bb:fb:20:95: 10:06:3a:f7:0c:b5:78:62:88:05:5d:78:f0:b7:5d:55:c1:72: 3b:85:9c:01:7d:34:b0:96:40:89:38:c9:68:58:af:a5:42:0c: b8:1a:26:89:20:3f:5a:56:4b:59:8c:93:be:f0:96:b6:35:c5: 65:ef:1b:76:34:29:fd:40:e7:c6:ff:3d:70:04:4e:e8:34:1b: 0f:47:e8:c5:e1:10:32:4d:58:3d:b6:06:d6:b2:c6:a6:46:56: d7:ee:b7:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUxMDE4MjAxNDI4WhcNMjUxMDI1MjAxNDI4WjAYMRYwFAYD VQQDEw02OGYzZjUyNC1lYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49xAyYqj1Os5nz6way5+5kCP2QeyeMfjyBb6L54t9EsPpU5fbgu4xOkqcBVp SlIQgAjrjUqRupuYmPgohhgfpB0TlRMXPxQshEDxwKAGN/gH2biOS7OPg5+UkBNp UzgWhknw+ksb+f6yV63ZItwoXvwKfDE8zpwzHytKqf1+TN+13QtGa8pgTHXOHn5e Ig58DN6ElzIXT2SJYNL+z6yaFP3uaifXWF7rKJ2NEax5jnXKWWNLaRciF7r0h9Xy K4GJZ2JSlP2/wPZdnruY8du8xYXRXlyqM5B8oP44zaLB+se+zdVNYFuid9kpnrpH BBZFb4aGr6YhtT2Zkx6oeqDBewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPILhly m0Nwsvskn+wDwSyMaa9gMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3IGmGXF93cWlgNXOtxiiFInDfFV7cNoqjJ/Ew4ltfrY91nFSA5GoY 9NywvjkPq8bUJPkVMCXFrlTwO1F6USbc7Hms3thElTwbAXr39aohzfjZscDvbu6R sz5xBnWVoZDK/U9NCAYg4oi0VxGUoMfQl/bleV8kr3wZs3BKt+5Fj/CAsGb6SnCG cb1Gqkz7zoVv+aSU3jyaFwM5iwuAvbv7IJUQBjr3DLV4YogFXXjwt11VwXI7hZwB fTSwlkCJOMloWK+lQgy4GiaJID9aVktZjJO+8Ja2NcVl7xt2NCn9QOfG/z1wBE7o NBsPR+jF4RAyTVg9tgbWssamRlbX7rcs -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:04 2025 by rpki-client