$ rpki-client -vvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft (raw, json) Hash identifier: HD7rN1pg5kbT0z2Z4IblQOhQWF4WbTYPXwXZoljrvmM= Subject key identifier: 96:5A:BB:E4:29:AA:83:B9:C3:F5:00:79:B1:D8:62:C4:A8:72:B6:9A Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft Manifest number: 03DA Signing time: Wed 05 Nov 2025 00:43:31 +0000 Manifest this update: Wed 05 Nov 2025 00:43:30 +0000 Manifest next update: Wed 12 Nov 2025 00:43:30 +0000 Files and hashes: 1: uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl (hash: UH1JVXYryS0U4t18YGqPFKdDpZ4WykJHcPXPhUwRlS0=) 2: 931A51C07F5811EE82ECE456C4F9AE02.roa (hash: WWLeH3632fyjkdTa5V1Kbc7nqGm176NLqMwGAoiNN0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Validity Not Before: Nov 5 00:43:30 2025 GMT Not After : Nov 12 00:43:30 2025 GMT Subject: CN=690a9db2-5661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:15:4d:91:2d:05:74:19:09:8f:db:93:b7: 40:15:26:85:28:18:28:05:46:f4:8a:39:5c:5f:5a: 6c:fa:c4:2e:81:d4:cf:04:d2:d7:cf:86:00:95:9e: d5:dc:09:7c:01:4b:0e:45:73:7d:c4:44:ca:b5:8c: 57:1b:1d:0c:d4:00:20:86:98:fc:aa:c9:20:0c:bd: ce:d0:1f:d5:33:ce:a5:d3:16:31:d6:99:48:03:12: f4:37:10:c0:1d:2c:b7:e0:af:6c:e6:f3:aa:e8:0c: cd:2b:73:bb:0d:9e:b0:c8:5a:0d:fb:b1:84:02:0b: f8:8d:b0:30:5e:05:82:88:0a:9e:d3:20:a4:56:2f: 08:5a:5a:45:32:36:c5:9f:46:3c:f7:92:a8:0d:c4: a4:46:c6:f0:6a:49:48:2b:5c:8a:00:0e:1e:09:88: be:27:67:9a:5a:3f:69:49:e9:20:61:ce:ef:a4:5b: 87:d1:a4:fe:55:8a:d1:65:74:d0:ff:db:da:65:19: ed:11:fc:2e:82:66:45:34:71:8c:82:d4:38:56:aa: 3f:5d:c4:83:58:ce:b6:a5:63:e3:9b:1b:0b:d1:55: 8a:c3:bb:41:08:55:fb:8c:64:6c:d4:d7:3b:f9:c3: 73:c2:8d:b6:1b:c5:25:e2:cf:83:6d:86:0c:48:4c: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5A:BB:E4:29:AA:83:B9:C3:F5:00:79:B1:D8:62:C4:A8:72:B6:9A X509v3 Authority Key Identifier: keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:28:82:5d:1d:0d:13:48:7c:44:a3:a2:37:89:89:2b:1d:fe: 9a:1a:67:60:3f:37:13:f4:d8:3e:8e:98:6d:16:d5:dd:96:c8: 03:42:56:40:c0:3e:35:ec:c0:4e:b7:cb:b8:0d:cd:5c:7d:7e: 9c:b3:df:a4:64:72:53:27:c4:55:14:32:b3:e5:7e:73:19:21: 1c:7e:12:91:8a:40:0e:d8:6b:d9:1e:d5:b7:65:1e:e7:af:e2: 93:80:c9:a6:c0:b6:9a:02:8f:a4:5e:8d:76:50:90:d5:00:9f: 15:39:3c:89:03:62:ac:65:62:d5:bf:f5:8f:8c:3b:ae:75:3b: ba:bf:b2:0c:60:86:12:a1:3b:8b:1f:1d:a4:e7:b7:6d:f7:e5: e1:62:79:8a:75:ca:ab:fa:06:b3:3e:28:6d:ef:ae:73:6c:52: 4d:41:56:8f:bb:6f:65:68:40:bb:b9:14:17:2c:8e:95:b6:7b: ff:87:04:b2:9f:92:f9:d0:10:14:5a:a5:27:aa:50:0b:21:3f: 00:b9:29:09:a6:fb:36:01:45:ea:f4:6e:2a:6d:68:ce:d3:ba: 94:2c:39:0f:96:8c:09:b3:8a:a5:e0:37:93:21:12:6f:9a:1e: f7:c1:2b:d2:73:6e:dd:8e:de:82:73:b3:b2:54:7e:48:c5:6f: 61:b9:e2:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzQ0YxMTAvBgNVBAUTKEI4QUQ4RDkxNkNEOTQ4MkI2REE1NUQzMDdDRTk1QzA3 QTk1QjJGNzQwHhcNMjUxMTA1MDA0MzMwWhcNMjUxMTEyMDA0MzMwWjAYMRYwFAYD VQQDEw02OTBhOWRiMi01NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45EVTZEtBXQZCY/bk7dAFSaFKBgoBUb0ijlcX1ps+sQugdTPBNLXz4YAlZ7V 3Al8AUsORXN9xETKtYxXGx0M1AAghpj8qskgDL3O0B/VM86l0xYx1plIAxL0NxDA HSy34K9s5vOq6AzNK3O7DZ6wyFoN+7GEAgv4jbAwXgWCiAqe0yCkVi8IWlpFMjbF n0Y895KoDcSkRsbwaklIK1yKAA4eCYi+J2eaWj9pSekgYc7vpFuH0aT+VYrRZXTQ /9vaZRntEfwugmZFNHGMgtQ4Vqo/XcSDWM62pWPjmxsL0VWKw7tBCFX7jGRs1Nc7 +cNzwo22G8Ul4s+DbYYMSEwuOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZau+Qp qoO5w/UAebHYYsSocraaMB8GA1UdIwQYMBaAFLitjZFs2UgrbaVdMHzpXAepWy90 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDNDRi8xN0Q2RTRDMkE2 OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlNDdHRwVjB3Zk9sY0I2bGJM M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLMk5rV3paU0N0dHBWMHdmT2xjQjZsYkwzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDNDRi8xN0Q2RTRDMkE2OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlND dHRwVjB3Zk9sY0I2bGJMM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1KIJdHQ0TSHxEo6I3iYkrHf6aGmdgPzcT9Ng+jphtFtXdlsgDQlZA wD417MBOt8u4Dc1cfX6cs9+kZHJTJ8RVFDKz5X5zGSEcfhKRikAO2GvZHtW3ZR7n r+KTgMmmwLaaAo+kXo12UJDVAJ8VOTyJA2KsZWLVv/WPjDuudTu6v7IMYIYSoTuL Hx2k57dt9+XhYnmKdcqr+gazPiht765zbFJNQVaPu29laEC7uRQXLI6Vtnv/hwSy n5L50BAUWqUnqlALIT8AuSkJpvs2AUXq9G4qbWjO07qULDkPlowJs4ql4DeTIRJv mh73wSvSc27djt6Cc7OyVH5IxW9hueLw -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:35 2025 by rpki-client