$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: u6ApTClAaZIEJDav3EaG4rEV76DFfTm69s0t+25PTjs= Subject key identifier: CC:0D:40:7E:3C:36:42:C6:49:50:B9:F3:44:C9:2E:CB:DC:5A:93:D9 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 01FB Signing time: Sun 19 Oct 2025 05:05:47 +0000 Manifest this update: Sun 19 Oct 2025 05:05:47 +0000 Manifest next update: Sun 26 Oct 2025 05:05:47 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: hfUkX3FRQU7aPTN227MfiT3haXC2/U7o/OHdW8Ln9kE=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Oct 19 05:05:47 2025 GMT Not After : Oct 26 05:05:47 2025 GMT Subject: CN=68f471ab-f4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:22:62:b2:81:ef:2e:df:a2:ff:c7:9a:ff: 24:a8:d4:d6:cf:d1:61:0a:5d:1d:32:a7:f8:3d:eb: ac:1d:9d:de:8c:ab:2d:17:68:20:95:79:b9:05:5b: 02:17:2e:ab:a3:e5:36:c9:be:0c:72:d2:19:11:6b: af:64:4f:90:55:2c:e2:c1:ae:2c:11:ed:67:12:13: c1:f7:8f:d8:21:8f:a4:93:3b:e3:70:4f:ff:48:90: c6:8a:43:95:67:16:89:57:fa:b8:c2:22:7b:cf:97: 26:9c:2d:71:67:da:b9:22:56:6e:b9:ee:09:0f:ff: ad:59:19:7b:9c:74:a5:43:ab:ed:fe:df:0d:3f:bd: 92:e2:67:79:8c:2c:ab:70:c6:f7:eb:f8:ff:97:ea: e5:85:ca:e4:94:51:79:b9:00:a4:29:2b:3a:2e:a3: 0a:04:ad:a0:35:e2:02:d7:c7:76:72:75:a0:32:55: b3:2a:b1:92:95:f3:13:7d:fd:8b:ad:1c:b6:d8:e5: 11:1d:89:9c:d4:43:9c:2a:10:65:e0:65:e8:e0:78: 4d:f7:cf:fe:e1:b1:9a:e8:f0:7b:c5:6a:ad:25:21: 8f:5f:f1:b3:05:7f:14:03:36:f8:34:3a:da:8e:c9: 1c:12:77:e5:3b:9a:cb:f0:b3:fd:6b:be:4d:a8:f3: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0D:40:7E:3C:36:42:C6:49:50:B9:F3:44:C9:2E:CB:DC:5A:93:D9 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6e:91:3d:6a:69:56:c3:46:f5:02:36:ca:55:ba:e2:62:42: 45:05:d8:4a:a1:87:ac:e7:8f:d9:8d:d8:90:fc:e9:f1:20:5e: 4a:d1:9d:a5:2b:ff:c4:71:83:06:27:90:41:b3:5d:47:e4:7e: 4c:97:d5:6a:fc:8b:d3:e8:03:64:d2:97:93:d9:50:9c:88:60: 7d:99:66:33:4d:ce:9b:96:a4:25:61:4c:7e:3b:3b:45:8c:23: c0:88:c8:7a:d1:7f:1c:e7:1d:9c:d6:d8:ea:f6:a3:c7:75:37: 17:b9:1b:8b:24:0c:e9:1c:45:bb:d3:9b:d1:28:85:37:e5:ea: 99:d8:fe:34:5c:1d:17:33:43:3d:53:8a:ed:d3:0c:6e:21:f0: ab:8a:6d:04:3a:be:6f:ed:a6:1c:9e:0b:ed:c2:60:6f:ab:f7: 8c:e9:40:2e:ea:8d:a5:94:37:77:88:97:47:1b:45:d9:8a:93: 94:1c:a7:30:b1:d3:6f:91:93:06:24:26:c5:a4:7d:f5:c6:db: a4:ee:92:57:51:3e:71:d0:02:9d:6e:33:25:bc:08:dd:4a:dc: 04:87:23:8d:17:b7:dd:90:a6:21:d2:8d:92:78:a0:5b:c7:43: 66:16:d8:ce:df:b4:3c:74:4f:7c:c5:c2:ab:5a:57:4c:44:95: 30:ed:ef:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUxMDE5MDUwNTQ3WhcNMjUxMDI2MDUwNTQ3WjAYMRYwFAYD VQQDEw02OGY0NzFhYi1mNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIEiYrKB7y7fov/Hmv8kqNTWz9FhCl0dMqf4PeusHZ3ejKstF2gglXm5BVsC Fy6ro+U2yb4MctIZEWuvZE+QVSziwa4sEe1nEhPB94/YIY+kkzvjcE//SJDGikOV ZxaJV/q4wiJ7z5cmnC1xZ9q5IlZuue4JD/+tWRl7nHSlQ6vt/t8NP72S4md5jCyr cMb36/j/l+rlhcrklFF5uQCkKSs6LqMKBK2gNeIC18d2cnWgMlWzKrGSlfMTff2L rRy22OURHYmc1EOcKhBl4GXo4HhN98/+4bGa6PB7xWqtJSGPX/GzBX8UAzb4NDra jskcEnflO5rL8LP9a75NqPPaIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwNQH48 NkLGSVC580TJLsvcWpPZMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAebpE9amlWw0b1AjbKVbriYkJFBdhKoYes54/ZjdiQ/OnxIF5K0Z2l K//EcYMGJ5BBs11H5H5Ml9Vq/IvT6ANk0peT2VCciGB9mWYzTc6blqQlYUx+OztF jCPAiMh60X8c5x2c1tjq9qPHdTcXuRuLJAzpHEW705vRKIU35eqZ2P40XB0XM0M9 U4rt0wxuIfCrim0EOr5v7aYcngvtwmBvq/eM6UAu6o2llDd3iJdHG0XZipOUHKcw sdNvkZMGJCbFpH31xtuk7pJXUT5x0AKdbjMlvAjdStwEhyONF7fdkKYh0o2SeKBb x0NmFtjO37Q8dE98xcKrWldMRJUw7e/z -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:32 2025 by rpki-client