$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft File: UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json) Hash identifier: ikciej4TVCLzUpUlWXRcX4aXGlF5rJ1ZAkHuWHO07l4= Subject key identifier: 07:D1:34:2C:FF:2B:1B:8C:36:25:12:7F:6C:06:CA:E8:61:1F:EF:81 Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 22D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft Manifest number: 228A Signing time: Mon 20 Oct 2025 16:05:45 +0000 Manifest this update: Mon 20 Oct 2025 16:05:44 +0000 Manifest next update: Mon 27 Oct 2025 16:05:44 +0000 Files and hashes: 1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: Tkwx7NHe77svH5o1xO2UhU062Ibo5zJ9RwlOSKfwHcI=) 2: 681705C288C511F0B7A9672DC4F9AE02.roa (hash: fA0eOMPAM9yocHdllIn9x7eb0JYL2y6sI/CU560QASo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8919 (0x22d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: Oct 20 16:05:44 2025 GMT Not After : Oct 27 16:05:44 2025 GMT Subject: CN=68f65dd8-5525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:40:3b:b5:cb:df:08:99:a4:6c:f7:37:f6: 08:a5:2d:25:6f:f5:a9:51:d2:82:41:7a:a5:00:42: e7:b5:60:71:3c:c1:69:06:63:42:60:ca:6b:7a:2c: b3:fd:49:46:35:20:53:06:4d:5f:01:06:c8:2d:ed: 39:7c:f6:06:af:fa:10:0c:90:a9:51:f8:1a:09:40: f3:cd:07:04:f9:44:88:7b:2e:e2:8b:75:0f:de:54: 7a:e5:26:05:92:cb:a7:92:21:c2:b4:be:fc:fc:e3: 2c:01:48:64:0a:df:90:dd:f6:19:18:bb:c0:29:b5: c7:85:a8:33:f2:01:5c:f2:6a:88:b2:ea:c9:11:37: a5:88:35:db:d9:8a:ba:3d:a3:16:6e:9c:88:4b:4d: c1:b7:0a:09:c2:cf:f5:7c:fa:f0:da:03:1d:b7:d9: e1:07:8f:0d:93:7f:77:3c:2a:25:cd:99:6b:ea:df: e0:e9:73:c0:0b:09:75:70:19:80:3d:7e:e5:32:92: 09:6d:1a:23:de:de:b6:3a:09:3d:cb:3b:46:1c:f0: ac:9a:00:ba:ba:b1:82:29:38:a9:e2:58:85:c7:69: f5:52:0c:57:b8:6a:c8:4b:2f:33:65:b9:67:a2:f7: 11:a5:05:7f:96:16:0e:c0:b6:f3:d9:85:b0:64:90: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D1:34:2C:FF:2B:1B:8C:36:25:12:7F:6C:06:CA:E8:61:1F:EF:81 X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:97:ba:0c:78:04:14:00:b0:a4:7d:76:72:31:be:7f:ca:6b: cd:ef:65:40:44:6f:25:15:f7:ec:45:7a:cc:26:be:10:fb:6c: 39:3e:61:7c:77:34:c3:52:c8:79:cc:9a:ac:e3:df:bc:c6:0c: 6b:5f:9c:95:05:6f:e9:20:b3:3d:63:14:fa:0d:c7:30:9a:86: d7:e0:bd:f4:64:cc:b0:cd:05:eb:12:26:fa:82:41:71:2a:45: 7a:94:2f:65:57:a1:e1:15:74:87:16:5d:08:9e:9a:07:b7:1f: 0e:53:d2:2b:b8:83:ce:fc:bb:0f:af:65:d8:f4:e7:a9:b3:d2: a2:52:8d:1a:bf:b0:db:58:bb:9a:7f:7b:9c:e2:56:7e:9a:7c: b5:64:dd:8a:e7:10:ba:7e:96:32:f0:c5:81:b2:30:f5:15:f7: 56:74:62:08:82:9a:eb:ac:42:5b:49:7a:41:05:d8:fb:9f:07: 72:23:11:0c:3c:97:a5:87:62:41:16:e5:93:e2:9a:15:01:d1: ec:9b:f2:80:e5:2a:da:90:e1:4b:1f:28:77:c1:17:b8:a9:ac: 84:8c:21:20:d6:70:72:bc:f1:24:db:d8:df:4a:df:16:93:a2: 9b:bd:ab:ef:3d:94:4a:35:aa:08:6e:89:9c:1c:84:e5:2c:63: 66:95:3a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICItcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUxMDIwMTYwNTQ0WhcNMjUxMDI3MTYwNTQ0WjAYMRYwFAYD VQQDEw02OGY2NWRkOC01NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhhAO7XL3wiZpGz3N/YIpS0lb/WpUdKCQXqlAELntWBxPMFpBmNCYMpreiyz /UlGNSBTBk1fAQbILe05fPYGr/oQDJCpUfgaCUDzzQcE+USIey7ii3UP3lR65SYF ksunkiHCtL78/OMsAUhkCt+Q3fYZGLvAKbXHhagz8gFc8mqIsurJETeliDXb2Yq6 PaMWbpyIS03BtwoJws/1fPrw2gMdt9nhB48Nk393PColzZlr6t/g6XPACwl1cBmA PX7lMpIJbRoj3t62Ogk9yztGHPCsmgC6urGCKTip4liFx2n1UgxXuGrISy8zZbln ovcRpQV/lhYOwLbz2YWwZJBWgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfRNCz/ KxuMNiUSf2wGyuhhH++BMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkExQy82M0IyMTRBMkM4MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFS R0RXbEZCLUs3bEF0T2ptdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAil7oMeAQUALCkfXZyMb5/ymvN72VARG8lFffsRXrMJr4Q+2w5PmF8 dzTDUsh5zJqs49+8xgxrX5yVBW/pILM9YxT6DccwmobX4L30ZMywzQXrEib6gkFx KkV6lC9lV6HhFXSHFl0InpoHtx8OU9IruIPO/LsPr2XY9Oeps9KiUo0av7DbWLua f3uc4lZ+mny1ZN2K5xC6fpYy8MWBsjD1FfdWdGIIgprrrEJbSXpBBdj7nwdyIxEM PJelh2JBFuWT4poVAdHsm/KA5SrakOFLHyh3wRe4qayEjCEg1nByvPEk29jfSt8W k6KbvavvPZRKNaoIbomcHITlLGNmlTry -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:08 2025 by rpki-client