$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft File: uN9D7us1RpuyzAulIS0b_yaKe24.mft (raw, json) Hash identifier: CvyNuj87xfLOmTmuOJOp9oGN54yW7dduWk/fZQmO3uU= Subject key identifier: A9:4A:E7:0C:38:67:B9:24:36:23:DE:85:5C:C0:78:CD:D9:6C:18:25 Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E Certificate issuer: /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft Manifest number: 021E Signing time: Sun 19 Oct 2025 04:24:27 +0000 Manifest this update: Sun 19 Oct 2025 04:24:26 +0000 Manifest next update: Sun 26 Oct 2025 04:24:26 +0000 Files and hashes: 1: uN9D7us1RpuyzAulIS0b_yaKe24.crl (hash: LZrf80H7lHkM2474t59dV7sZuf6C22w6avHea1WjCTU=) 2: 90269D3A716611ED9D80F448C4F9AE02.roa (hash: MO9P1WGnI9RODyxLdTa3D8Yco4aTU5+oDDX9VBwpv+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E Validity Not Before: Oct 19 04:24:26 2025 GMT Not After : Oct 26 04:24:26 2025 GMT Subject: CN=68f467fb-918c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:69:d8:3f:90:f5:24:63:86:f2:5a:4e:6f: 08:00:88:31:9e:bf:c0:04:db:b1:a8:a3:fb:63:cd: b2:b3:37:57:43:68:6d:c5:ab:1b:59:73:11:a5:c5: 00:ee:0d:e2:4e:69:97:69:49:59:29:6e:5b:16:09: eb:92:62:1e:5a:e2:17:a0:c2:5e:19:fe:36:ec:c7: 8c:a6:44:4b:b8:d9:0d:d3:f8:bc:b8:8d:6e:0c:3e: 2a:40:de:3d:a5:ec:bb:a5:a2:59:b2:97:8e:86:f5: ae:e8:ed:77:d3:49:01:86:78:b8:aa:fc:84:cc:03: 4a:d1:c0:ed:50:d0:3c:a3:b5:2a:9f:61:e7:41:5a: 5b:7b:ea:8e:bd:03:1f:72:9e:e8:87:c9:64:f5:cf: 5b:7c:62:ef:29:f9:3d:61:ac:9b:ad:1c:37:32:73: d6:d4:39:c5:d4:43:3e:e4:c5:4b:25:49:83:eb:8c: c9:64:a2:68:d9:f6:4a:af:a7:04:fc:25:cc:4c:43: 99:11:22:7a:9c:0f:0f:b9:f1:36:95:dd:65:1a:1a: e6:85:f7:0a:4e:8b:f6:85:dc:0a:59:32:9c:e9:33: d3:a6:6a:b1:8a:0b:71:9e:8c:cf:ad:17:88:67:0d: 5f:47:a4:0c:de:f6:bb:03:e0:17:f8:1e:ce:5f:c0: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4A:E7:0C:38:67:B9:24:36:23:DE:85:5C:C0:78:CD:D9:6C:18:25 X509v3 Authority Key Identifier: keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:4b:d6:c4:df:68:3b:7e:47:5c:85:4a:b0:2d:00:8f:e7:9f: 92:c3:99:5d:e8:4b:ea:f2:78:c2:43:3a:76:95:32:fe:27:39: b1:19:f3:64:d3:25:c2:20:55:ab:2c:02:62:e7:77:89:09:46: 5f:cb:c2:b4:9b:6f:bf:d5:81:68:2e:01:59:a1:73:4c:d3:01: b1:e2:cb:9c:57:04:9f:89:0c:65:2d:16:45:dc:08:07:5c:7d: 5e:9e:e6:5c:7d:e6:4c:0e:23:55:bf:54:c0:4b:89:a7:66:5d: 2a:46:0a:db:d9:bb:2e:44:2a:a3:2a:47:71:a5:3b:e2:7f:39: 50:87:e4:f5:4b:06:30:03:3d:e3:7c:64:a9:5a:c6:36:1a:6d: 36:6c:98:ec:05:4b:c4:1b:ee:d8:ce:21:20:0d:c9:ae:7b:89: 07:b5:03:38:4a:97:86:19:ac:4e:73:0f:4c:76:6a:55:5c:f4: 8d:eb:cc:e1:8a:bb:54:a7:c5:74:69:be:c7:a5:07:bd:20:42: 54:30:e8:fd:96:98:33:c2:33:2d:1c:35:06:8f:44:e2:49:11: b9:cc:2d:e6:7e:ae:c8:eb:19:4a:2f:79:3b:9c:ab:ff:6e:89: 21:e1:af:6a:49:8c:75:07:be:e8:ee:b2:1e:c9:5b:3a:e5:85: 34:89:99:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzNEExMTAvBgNVBAUTKEI4REY0M0VFRUIzNTQ2OUJCMkNDMEJBNTIxMkQxQkZG MjY4QTdCNkUwHhcNMjUxMDE5MDQyNDI2WhcNMjUxMDI2MDQyNDI2WjAYMRYwFAYD VQQDEw02OGY0NjdmYi05MThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27Bp2D+Q9SRjhvJaTm8IAIgxnr/ABNuxqKP7Y82yszdXQ2htxasbWXMRpcUA 7g3iTmmXaUlZKW5bFgnrkmIeWuIXoMJeGf427MeMpkRLuNkN0/i8uI1uDD4qQN49 pey7paJZspeOhvWu6O1300kBhni4qvyEzANK0cDtUNA8o7Uqn2HnQVpbe+qOvQMf cp7oh8lk9c9bfGLvKfk9YaybrRw3MnPW1DnF1EM+5MVLJUmD64zJZKJo2fZKr6cE /CXMTEOZESJ6nA8PufE2ld1lGhrmhfcKTov2hdwKWTKc6TPTpmqxigtxnozPrReI Zw1fR6QM3va7A+AX+B7OX8DI2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlK5ww4 Z7kkNiPehVzAeM3ZbBglMB8GA1UdIwQYMBaAFLjfQ+7rNUabsswLpSEtG/8mintu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTM0QS9GOTc2QkZEQTcx NjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJwdXl6QXVsSVMwYl95YUtl MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOOUQ3dXMxUnB1eXpBdWxJUzBiX3lhS2UyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTM0QS9GOTc2QkZEQTcxNjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJw dXl6QXVsSVMwYl95YUtlMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVS9bE32g7fkdchUqwLQCP55+Sw5ld6Evq8njCQzp2lTL+JzmxGfNk 0yXCIFWrLAJi53eJCUZfy8K0m2+/1YFoLgFZoXNM0wGx4sucVwSfiQxlLRZF3AgH XH1enuZcfeZMDiNVv1TAS4mnZl0qRgrb2bsuRCqjKkdxpTvifzlQh+T1SwYwAz3j fGSpWsY2Gm02bJjsBUvEG+7YziEgDcmue4kHtQM4SpeGGaxOcw9MdmpVXPSN68zh irtUp8V0ab7HpQe9IEJUMOj9lpgzwjMtHDUGj0TiSRG5zC3mfq7I6xlKL3k7nKv/ bokh4a9qSYx1B77o7rIeyVs65YU0iZmu -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:40 2025 by rpki-client