$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json) Hash identifier: eX4H8c1fcE854C8LeEcmV5iNydzYHZD4gvh9PI4jPcA= Subject key identifier: 7C:31:F7:1B:97:B7:47:53:2F:55:E8:40:1F:4E:4B:7C:D4:8A:D3:3C Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft Manifest number: 42 Signing time: Sun 19 Oct 2025 10:52:30 +0000 Manifest this update: Sun 19 Oct 2025 10:52:29 +0000 Manifest next update: Sun 26 Oct 2025 10:52:29 +0000 Files and hashes: 1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: f+hyz7prSDMTiYEAFJyhn1Gv3Q+ops9ZFZmmc52aDsQ=) 2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Validity Not Before: Oct 19 10:52:29 2025 GMT Not After : Oct 26 10:52:29 2025 GMT Subject: CN=68f4c2ee-946e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:c6:0c:0b:40:49:ef:78:69:b0:21:7c:fc: 04:07:f0:09:ba:4e:bf:44:0c:e5:09:09:0d:22:ee: 05:6d:99:b6:d4:55:c9:a0:54:2e:b7:85:52:78:bb: 17:17:9c:ce:7a:2a:34:32:0d:57:6c:d3:b4:c1:4b: 2b:e6:28:8d:c8:b4:4f:36:a3:f1:76:f1:eb:e8:a9: 0b:31:ee:6c:ca:bc:a6:12:57:f4:e5:1c:70:3f:04: 01:4b:37:64:8e:87:af:1c:71:bf:59:54:99:1e:c2: d2:00:64:f1:4d:80:63:b5:ca:12:d8:28:73:71:ad: 7c:99:97:4c:d5:5b:43:83:e3:51:1e:fd:b5:7e:c7: a8:af:11:bc:6a:fc:50:62:05:1b:3a:5d:83:c4:85: 24:e1:7f:c6:ab:08:90:35:e1:c2:0b:d4:be:36:f4: 44:8e:42:bc:4e:ae:bb:93:22:7b:aa:7d:0d:a8:65: 74:68:fe:40:ce:85:42:05:52:d1:41:91:8e:78:0e: f4:ce:56:3b:93:d2:90:b5:23:53:35:dc:92:ea:e3: c5:9f:03:5e:6c:14:92:dc:2b:7d:82:66:31:38:74: 86:3a:8c:f7:33:43:d3:46:81:5b:75:3f:cb:63:3a: 14:76:c8:11:92:1c:8d:0f:c2:11:62:3c:7e:28:f1: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:31:F7:1B:97:B7:47:53:2F:55:E8:40:1F:4E:4B:7C:D4:8A:D3:3C X509v3 Authority Key Identifier: keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:d9:58:c5:1c:a8:76:77:15:8c:6e:96:cc:ae:6c:a4:39:6d: eb:69:d6:b8:4e:92:77:41:2d:0d:33:bb:25:0e:90:a8:d8:ce: 5a:0c:35:dd:74:6a:9e:da:37:5c:1b:6a:3d:36:2a:a4:f9:a1: b9:cc:43:a1:d6:9c:90:d0:dc:e5:61:11:78:cf:2a:0f:c7:df: d8:3c:8a:20:c3:b9:7d:75:be:a3:a4:92:0a:67:a8:7a:70:9b: fe:3f:6c:f0:c5:31:00:87:6e:c3:57:4d:5e:61:29:19:c2:3a: ed:b7:76:17:69:6a:9d:3b:db:95:6e:42:fa:5c:c9:8c:43:be: 08:3e:62:9a:e3:ee:9a:f8:e4:1b:01:9c:9f:99:8d:eb:a3:5b: bb:75:dc:cd:f7:4f:58:ef:bd:9f:73:63:61:77:06:14:5b:c2: ce:c7:9b:72:73:42:17:de:b4:0e:3b:d6:39:03:2a:3a:c5:62: 30:b9:c0:e4:2d:44:c4:bc:5c:7f:ba:a5:a4:92:62:87:3f:ae: bb:0d:fc:04:6d:e9:24:bf:44:5e:04:e8:b7:14:4e:7a:c0:30: 6f:68:56:0c:c0:28:27:44:14:1d:b1:b5:56:b3:59:1b:16:8a: 69:b6:a5:2b:e2:77:b7:34:5b:a5:11:6c:f3:72:48:9e:3c:4a: 28:54:3a:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTIzMUM0NTc0MTNCOUM3OUNENUIzMDBEODRBNDNCMDAz OUJCNjgxMzAeFw0yNTEwMTkxMDUyMjlaFw0yNTEwMjYxMDUyMjlaMBgxFjAUBgNV BAMTDTY4ZjRjMmVlLTk0NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC54MYMC0BJ73hpsCF8/AQH8Am6Tr9EDOUJCQ0i7gVtmbbUVcmgVC63hVJ4uxcX nM56KjQyDVds07TBSyvmKI3ItE82o/F28evoqQsx7mzKvKYSV/TlHHA/BAFLN2SO h68ccb9ZVJkewtIAZPFNgGO1yhLYKHNxrXyZl0zVW0OD41Ee/bV+x6ivEbxq/FBi BRs6XYPEhSThf8arCJA14cIL1L429ESOQrxOrruTInuqfQ2oZXRo/kDOhUIFUtFB kY54DvTOVjuT0pC1I1M13JLq48WfA15sFJLcK32CZjE4dIY6jPczQ9NGgVt1P8tj OhR2yBGSHI0PwhFiPH4o8b6rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfDH3G5e3 R1MvVehAH05LfNSK0zwwHwYDVR0jBBgwFoAUUjHEV0E7nHnNWzANhKQ7ADm7aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzczOTA2ODBFNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhuTld6QU5oS1E3QURtN2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWpIRVYwRTduSG5OV3pBTmhLUTdBRG03YUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUNDLzczOTA2ODBFNEEzQTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhu Tld6QU5oS1E3QURtN2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKnZWMUcqHZ3FYxulsyubKQ5betp1rhOkndBLQ0zuyUOkKjYzloMNd10 ap7aN1wbaj02KqT5obnMQ6HWnJDQ3OVhEXjPKg/H39g8iiDDuX11vqOkkgpnqHpw m/4/bPDFMQCHbsNXTV5hKRnCOu23dhdpap0725VuQvpcyYxDvgg+Yprj7pr45BsB nJ+ZjeujW7t13M33T1jvvZ9zY2F3BhRbws7Hm3JzQhfetA471jkDKjrFYjC5wOQt RMS8XH+6paSSYoc/rrsN/ARt6SS/RF4E6LcUTnrAMG9oVgzAKCdEFB2xtVazWRsW imm2pSvid7c0W6URbPNySJ48SihUOgA= -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:05 2025 by rpki-client