$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json) Hash identifier: iKaSY7/o5whMvnIC3kFoCj0zPxakxooeGmMh6RT3OC8= Subject key identifier: 79:B8:03:7B:42:8F:B4:F8:C0:47:80:D8:AB:51:B6:27:03:BE:27:C5 Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft Manifest number: D0 Signing time: Sun 19 Oct 2025 08:46:44 +0000 Manifest this update: Sun 19 Oct 2025 08:46:44 +0000 Manifest next update: Sun 26 Oct 2025 08:46:44 +0000 Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: F8Wg+SeVGnVYnHDexlVtY6ViX7gJH8FICnE6MREi0Wc=) 2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: tWu30mK1rtW914jLoVkC7fN3rjLvGIdCamq6YbBhF8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Validity Not Before: Oct 19 08:46:44 2025 GMT Not After : Oct 26 08:46:44 2025 GMT Subject: CN=68f4a574-805e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:97:0f:f0:8f:23:e2:a6:cb:41:86:a9:9e: 0f:81:c4:db:3a:a1:80:9b:e4:3b:2d:8c:e1:80:2f: f7:59:84:41:21:ac:e9:dc:58:36:ff:7d:0d:de:99: 43:2b:19:67:34:fa:8d:d5:d5:e3:5b:90:77:a8:d8: 8b:e5:99:1c:d8:20:5d:8b:c3:13:1d:11:2a:ee:fd: 67:0c:10:ec:3d:27:2b:58:d3:57:96:16:b6:a6:4b: 39:f2:d3:91:d8:80:e7:3e:54:29:3a:fc:ea:bf:8c: ef:f0:86:48:c4:7b:89:cd:c1:1a:f7:ed:ee:52:e2: 4f:70:bb:40:0b:d8:75:59:02:22:05:cf:e4:94:89: f4:36:b5:b8:76:76:f4:2f:ba:40:d5:65:7d:18:04: 41:b0:78:8a:bd:b7:d2:ce:57:c6:a7:0c:79:5b:4b: 1f:0d:b4:3c:8a:1c:a8:c6:a1:3b:af:3b:25:0d:b7: b0:df:3b:a9:da:1f:4a:05:e6:6b:56:30:86:51:bb: 61:18:cc:d8:56:d4:2e:0f:ad:d1:25:0e:7b:b3:b1: 69:85:45:0b:78:58:e2:56:31:46:c1:ed:ea:1c:e6: 35:e4:72:0c:b3:15:7c:43:6e:ca:c4:c3:65:19:9b: 80:25:45:5c:97:51:18:8f:06:ea:6a:0a:5c:5c:0f: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B8:03:7B:42:8F:B4:F8:C0:47:80:D8:AB:51:B6:27:03:BE:27:C5 X509v3 Authority Key Identifier: keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:cd:d5:d9:95:93:0a:b9:2f:8f:62:84:d7:7a:b6:d4:c7:21: e9:cb:f1:93:7d:64:23:26:df:a3:04:2f:eb:86:0d:b8:5e:40: 29:cc:4c:70:fc:c0:36:68:3c:67:f3:bb:71:a6:3d:38:d0:44: 7a:1f:49:a8:36:03:37:0d:42:fa:47:d5:ea:26:fd:09:d1:73: 31:ab:93:2a:5f:29:da:04:3a:0a:1b:42:37:b1:79:5b:6e:b0: a7:b8:3b:e4:ea:54:6b:4c:4d:fc:9a:72:87:a2:8f:b4:25:6c: 90:9d:2e:6b:1d:07:5c:34:16:31:62:ba:07:c4:25:f0:e1:e6: 60:1a:a1:43:cd:5e:e0:06:d7:a1:d2:b0:2b:20:e6:b6:9a:55: b3:d9:90:8b:65:11:db:ec:06:0b:9a:c2:d9:c7:94:47:84:1d: dd:56:de:69:f5:93:dd:c4:82:cd:27:53:2b:33:10:ba:20:a1: 05:53:37:ce:80:fd:2a:bc:db:ac:27:29:17:2e:82:90:f7:42: 03:31:4c:3e:3b:2e:ca:b7:5f:9e:ba:20:2f:53:bd:32:b9:2b: be:9e:90:eb:d2:01:2e:60:3e:07:3d:80:0a:d6:8c:6f:ea:c3: 41:62:d4:24:22:17:ae:05:58:52:cd:ac:86:80:b3:2e:a1:b4: 81:8a:93:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQyQUExMTAvBgNVBAUTKDczRUI4QUQyQTNBNUYzOEFCRkUxQUUyODA3NEYyODMx QzI3MzFCQTkwHhcNMjUxMDE5MDg0NjQ0WhcNMjUxMDI2MDg0NjQ0WjAYMRYwFAYD VQQDEw02OGY0YTU3NC04MDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJOXD/CPI+Kmy0GGqZ4PgcTbOqGAm+Q7LYzhgC/3WYRBIazp3Fg2/30N3plD KxlnNPqN1dXjW5B3qNiL5Zkc2CBdi8MTHREq7v1nDBDsPScrWNNXlha2pks58tOR 2IDnPlQpOvzqv4zv8IZIxHuJzcEa9+3uUuJPcLtAC9h1WQIiBc/klIn0NrW4dnb0 L7pA1WV9GARBsHiKvbfSzlfGpwx5W0sfDbQ8ihyoxqE7rzslDbew3zup2h9KBeZr VjCGUbthGMzYVtQuD63RJQ57s7FphUULeFjiVjFGwe3qHOY15HIMsxV8Q27KxMNl GZuAJUVcl1EYjwbqagpcXA9BnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm4A3tC j7T4wEeA2KtRticDvifFMB8GA1UdIwQYMBaAFHPritKjpfOKv+GuKAdPKDHCcxup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDJBQS9FNDA3QjMzMDcw MDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0cV80YTRvQjA4b01jSnpH NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MtdUswcU9sODRxXzRhNG9CMDhvTWNKekc2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDJBQS9FNDA3QjMzMDcwMDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0 cV80YTRvQjA4b01jSnpHNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJzdXZlZMKuS+PYoTXerbUxyHpy/GTfWQjJt+jBC/rhg24XkApzExw /MA2aDxn87txpj040ER6H0moNgM3DUL6R9XqJv0J0XMxq5MqXynaBDoKG0I3sXlb brCnuDvk6lRrTE38mnKHoo+0JWyQnS5rHQdcNBYxYroHxCXw4eZgGqFDzV7gBteh 0rArIOa2mlWz2ZCLZRHb7AYLmsLZx5RHhB3dVt5p9ZPdxILNJ1MrMxC6IKEFUzfO gP0qvNusJykXLoKQ90IDMUw+Oy7Kt1+euiAvU70yuSu+npDr0gEuYD4HPYAK1oxv 6sNBYtQkIheuBVhSzayGgLMuobSBipPG -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:40 2025 by rpki-client