$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json) Hash identifier: UO3x66hwifYnWGLoMXUA9Ygl84kIucxrHZb17I2EbzE= Subject key identifier: 48:D7:31:A3:D3:1B:29:A1:81:54:A1:78:A0:CD:17:87:FA:6E:8A:D1 Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft Manifest number: 0BF5 Signing time: Sat 18 Oct 2025 19:39:14 +0000 Manifest this update: Sat 18 Oct 2025 19:39:13 +0000 Manifest next update: Sat 25 Oct 2025 19:39:13 +0000 Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: 9d0fMEYWf6dGFB8tpqOjtppKzmNHlwpXwD+pIW9PwpU=) 2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: r5uWTU+sYs/vGgm5oMxXApeoTDyzrDhvLimJL0rhlzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: Oct 18 19:39:13 2025 GMT Not After : Oct 25 19:39:13 2025 GMT Subject: CN=68f3ece1-bfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:fa:d6:98:eb:c1:bb:8c:8c:c2:55:f6:30: f6:09:79:48:25:a8:6a:37:70:fe:5c:82:6e:79:1b: 0a:38:40:35:f6:64:46:6a:e2:fa:c5:82:34:d7:9d: a9:99:31:bd:c6:28:d6:05:f2:90:6c:67:6d:a5:ee: a2:50:6c:3e:43:fe:92:9b:bf:49:4c:c5:31:88:61: bb:c7:da:48:fe:b9:5d:86:76:4f:26:2a:4c:66:c9: b1:f6:56:19:de:30:40:6c:fc:f1:3b:e7:3c:c2:a5: c7:0c:5d:20:3c:70:f3:b2:2d:04:48:1d:7d:9e:f8: e6:84:38:bc:08:d5:2f:8b:db:46:7e:1d:be:a8:68: da:a5:64:e2:f3:f0:8b:23:5f:60:b2:3a:75:5a:32: 0f:25:fb:35:f9:eb:c0:78:78:f7:1d:f0:a4:ef:69: 64:86:e7:a6:df:a2:9e:e2:9f:f5:48:dc:75:2a:ee: ad:e0:6d:a8:e1:2c:a1:b9:e0:21:8c:79:1d:21:62: 22:ed:5c:ad:52:8e:42:44:fd:0d:dd:48:3e:71:58: 16:e6:67:fb:c7:05:6c:6b:e4:94:e4:1d:b8:7b:b5: 51:ad:63:36:2d:c1:2a:e3:7e:7b:33:68:c6:2a:d3: 7e:e6:fe:11:20:82:88:11:2a:d5:fe:db:8b:d3:a6: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D7:31:A3:D3:1B:29:A1:81:54:A1:78:A0:CD:17:87:FA:6E:8A:D1 X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e7:c8:4e:ba:22:c7:1d:c3:6f:4b:ec:89:2b:4f:ce:f2:cb: 05:3e:d2:c7:47:fb:c7:31:3d:f2:6d:f3:7f:9d:92:99:16:8f: ac:47:b2:07:31:72:28:4d:42:1f:40:e0:72:68:8a:86:ed:ad: 53:6b:e3:4c:dc:c2:6b:a2:9e:ba:11:18:06:3b:e7:d8:87:bb: a1:71:c1:f6:79:1c:70:01:17:2c:2e:3b:9f:b8:1e:f2:5d:c8: c2:6b:b6:0f:5b:79:9d:49:2d:80:54:51:34:34:6e:19:28:16: 5e:15:30:4d:08:2c:3d:66:b7:bf:e9:01:5a:5e:09:9d:10:bf: 88:82:11:75:6b:29:59:a1:99:a7:cc:7a:29:55:c6:cd:c4:26: 8c:01:da:b9:ca:9c:40:56:54:6c:c6:35:85:cc:67:bc:86:93: 3e:82:1d:93:88:a8:0d:3e:38:57:46:36:b6:5f:d8:5d:61:f9: ed:ca:20:44:8b:54:db:a0:f8:ba:21:2b:e1:0a:52:4a:bb:7b: 64:c4:36:e7:d7:e8:f2:a2:49:26:fc:32:6b:fe:4b:c4:fe:f1: 38:8d:fa:6d:27:12:82:ec:83:21:cf:17:10:3a:eb:81:08:a9: 05:d3:8e:ff:ca:d3:ab:b9:39:4c:3b:fb:87:e3:3b:a4:b0:ca: ae:36:72:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjUxMDE4MTkzOTEzWhcNMjUxMDI1MTkzOTEzWjAYMRYwFAYD VQQDEw02OGYzZWNlMS1iZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjn61pjrwbuMjMJV9jD2CXlIJahqN3D+XIJueRsKOEA19mRGauL6xYI0152p mTG9xijWBfKQbGdtpe6iUGw+Q/6Sm79JTMUxiGG7x9pI/rldhnZPJipMZsmx9lYZ 3jBAbPzxO+c8wqXHDF0gPHDzsi0ESB19nvjmhDi8CNUvi9tGfh2+qGjapWTi8/CL I19gsjp1WjIPJfs1+evAeHj3HfCk72lkhuem36Ke4p/1SNx1Ku6t4G2o4SyhueAh jHkdIWIi7VytUo5CRP0N3Ug+cVgW5mf7xwVsa+SU5B24e7VRrWM2LcEq4357M2jG KtN+5v4RIIKIESrV/tuL06ZVHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjXMaPT GymhgVSheKDNF4f6borRMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py SGNRbi0tci1jZy03Q1h3aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp58hOuiLHHcNvS+yJK0/O8ssFPtLHR/vHMT3ybfN/nZKZFo+sR7IH MXIoTUIfQOByaIqG7a1Ta+NM3MJrop66ERgGO+fYh7uhccH2eRxwARcsLjufuB7y XcjCa7YPW3mdSS2AVFE0NG4ZKBZeFTBNCCw9Zre/6QFaXgmdEL+IghF1aylZoZmn zHopVcbNxCaMAdq5ypxAVlRsxjWFzGe8hpM+gh2TiKgNPjhXRja2X9hdYfntyiBE i1TboPi6ISvhClJKu3tkxDbn1+jyokkm/DJr/kvE/vE4jfptJxKC7IMhzxcQOuuB CKkF047/ytOruTlMO/uH4zuksMquNnJV -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:47 2025 by rpki-client