$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json) Hash identifier: Ds/7z442x1gQ0sqcoOnGZrDD0mWYiqYlZGXw7pC+22M= Subject key identifier: DB:FD:76:A1:F7:FC:C8:D3:8C:79:1F:FF:84:DC:DA:09:FB:77:45:BB Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Certificate serial: 0A95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft Manifest number: 0A7F Signing time: Tue 04 Nov 2025 19:43:52 +0000 Manifest this update: Tue 04 Nov 2025 19:43:52 +0000 Manifest next update: Tue 11 Nov 2025 19:43:52 +0000 Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: rWhEFabqsXfebwFNdYFUGhS8iI+FdPumtVeIHh7xhVs=) 2: 834C938A12C711F09998A234C4F9AE02.roa (hash: M4mfahqMzwmq58j++0Teybq9n4Aqspe3mvfksixkbgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2709 (0xa95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Validity Not Before: Nov 4 19:43:52 2025 GMT Not After : Nov 11 19:43:52 2025 GMT Subject: CN=690a5778-6d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:d8:c8:2e:ae:3e:7b:59:11:19:fd:f6:b5: ec:11:c2:a7:88:4e:5e:a8:f4:a9:5b:ab:6e:19:e2: 83:e2:8c:d1:16:d6:51:33:d9:36:a2:75:54:57:34: ae:00:0f:67:fe:d8:9e:55:5f:97:90:ef:27:9b:bf: 5a:1f:50:9a:b7:f0:c5:9a:9a:a3:2e:44:b5:e4:19: 81:76:fe:d8:20:66:1c:c4:5b:20:86:7f:07:4e:b5: 02:f7:4e:4e:9a:d1:6e:ac:0f:6a:ff:4f:08:50:5f: 11:2a:7b:2b:ba:23:13:33:f6:2b:e5:5a:8c:bf:5e: 28:69:01:02:22:ed:2b:6e:c7:4f:cb:af:da:7f:e6: 90:84:c5:1f:6e:89:3b:ec:cc:9e:f3:9d:74:88:0a: 55:b5:9f:a8:a3:cc:00:e1:b5:35:01:ed:76:46:fc: 9a:6c:ba:ca:56:bf:f8:86:18:fe:d4:80:37:e1:7e: 0a:64:5c:1e:3f:4b:9c:42:aa:79:63:7d:5d:65:1a: 24:00:6b:db:3e:d5:03:89:16:b7:73:c0:03:ea:25: 41:4c:4f:70:18:24:d6:f8:12:b4:13:b6:a8:26:3d: c9:1c:f4:50:0e:28:8b:a2:db:f7:23:11:ef:27:27: 1c:ea:d0:fd:71:71:5c:77:b5:1c:43:68:77:61:9d: 6f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FD:76:A1:F7:FC:C8:D3:8C:79:1F:FF:84:DC:DA:09:FB:77:45:BB X509v3 Authority Key Identifier: keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:25:f3:54:9f:57:1d:56:8b:3b:d0:03:07:9d:3d:da:cd:44: dc:94:7f:b3:19:cb:50:5b:51:dc:ca:35:ea:51:81:fb:0c:5d: 98:94:d9:ac:8f:59:2a:23:ef:d7:ae:e1:0d:7e:1a:b2:c8:10: 1c:50:4f:4b:f8:6b:18:ec:a5:fe:68:98:db:4c:09:68:08:07: 35:d7:05:c4:0e:72:e6:6b:6d:dd:56:38:c9:aa:68:e9:51:21: f9:0f:72:5f:0a:0e:20:46:e9:4c:df:95:8c:1b:1f:04:38:fc: 17:bc:c7:09:de:cf:33:84:a5:72:ce:f5:fa:41:09:ff:0b:8b: 9c:4e:d1:2c:88:97:56:69:c1:4a:92:5f:09:53:6c:16:31:1d: c6:cb:a6:aa:5f:94:ac:bf:a9:36:4e:d3:b1:f1:53:95:c1:4f: 9c:95:63:1b:73:50:63:86:e8:e9:07:03:0f:ba:38:3f:87:77: 7e:6d:ad:02:98:82:4f:0b:6d:85:84:3c:22:c9:e1:ac:27:63: 84:c9:e2:e3:a0:4e:2b:22:2b:00:b7:9c:52:d0:cb:b3:0c:92: 71:39:03:af:42:60:39:31:3e:30:13:db:39:6e:f6:74:23:18: ff:2b:a4:7d:36:b0:79:57:8a:b4:32:88:11:3b:4b:fe:87:23: 6a:62:7a:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz MjUxOTQ0QjIwHhcNMjUxMTA0MTk0MzUyWhcNMjUxMTExMTk0MzUyWjAYMRYwFAYD VQQDEw02OTBhNTc3OC02ZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVjYyC6uPntZERn99rXsEcKniE5eqPSpW6tuGeKD4ozRFtZRM9k2onVUVzSu AA9n/tieVV+XkO8nm79aH1Cat/DFmpqjLkS15BmBdv7YIGYcxFsghn8HTrUC905O mtFurA9q/08IUF8RKnsruiMTM/Yr5VqMv14oaQECIu0rbsdPy6/af+aQhMUfbok7 7Mye8510iApVtZ+oo8wA4bU1Ae12RvyabLrKVr/4hhj+1IA34X4KZFweP0ucQqp5 Y31dZRokAGvbPtUDiRa3c8AD6iVBTE9wGCTW+BK0E7aoJj3JHPRQDiiLotv3IxHv Jycc6tD9cXFcd7UcQ2h3YZ1vpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNv9dqH3 /MjTjHkf/4Tc2gn7d0W7MB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdJfNUn1cdVos70AMHnT3azUTclH+zGctQW1HcyjXqUYH7DF2YlNms j1kqI+/XruENfhqyyBAcUE9L+GsY7KX+aJjbTAloCAc11wXEDnLma23dVjjJqmjp USH5D3JfCg4gRulM35WMGx8EOPwXvMcJ3s8zhKVyzvX6QQn/C4ucTtEsiJdWacFK kl8JU2wWMR3Gy6aqX5Ssv6k2TtOx8VOVwU+clWMbc1BjhujpBwMPujg/h3d+ba0C mIJPC22FhDwiyeGsJ2OEyeLjoE4rIisAt5xS0MuzDJJxOQOvQmA5MT4wE9s5bvZ0 Ixj/K6R9NrB5V4q0MogRO0v+hyNqYnp3 -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:22 2025 by rpki-client