$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json) Hash identifier: 3tBymElfstkeax6xbYtcp1jSqa9ff9M8hkXRTt3X9lU= Subject key identifier: 59:F5:E8:52:9C:02:F4:09:A5:1C:C4:D0:DD:29:12:70:64:A0:3E:88 Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft Manifest number: 07B9 Signing time: Tue 04 Nov 2025 21:26:47 +0000 Manifest this update: Tue 04 Nov 2025 21:26:46 +0000 Manifest next update: Tue 11 Nov 2025 21:26:46 +0000 Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: vSR877RX3EhxU4ZWjydR8KQ3sQ4AYTcC+fgz+5lycQc=) 2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: v+COy4aJ4vI2kVsinHUDpF8Q9iJxgP+snNqHCNRWWC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48 Validity Not Before: Nov 4 21:26:46 2025 GMT Not After : Nov 11 21:26:46 2025 GMT Subject: CN=690a6f96-ad82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:b4:21:cb:72:97:ea:04:be:09:80:66:eb: 7e:ce:5f:ca:9a:dc:a2:a2:a1:b2:d0:ca:e7:bd:ca: 33:14:49:d5:4c:50:de:fa:5e:1e:f5:ec:dc:b8:f2: f7:fe:86:26:5b:6f:f8:34:a0:0a:7c:29:dd:83:d9: 88:1d:5e:a6:75:db:96:23:4e:3d:8f:65:c0:74:dc: cc:0b:f4:52:fb:11:75:fd:04:e9:d5:44:22:34:67: fd:06:df:0a:9c:00:af:63:30:82:e2:b7:51:27:8b: 32:f7:70:39:2c:63:3b:b9:ef:aa:a2:c5:57:d8:f7: 6e:c7:15:72:1d:eb:3e:eb:45:f2:27:99:46:50:46: b0:fe:10:8d:0c:50:8b:14:11:9a:bd:12:24:7c:90: 78:99:a2:9d:38:5c:c6:eb:f1:74:38:55:bf:cf:d4: 81:b3:44:73:76:44:49:cf:03:ee:dc:dc:37:40:b0: ca:89:94:a7:82:b7:61:8a:b6:77:f9:b6:49:0d:1c: 9a:f7:cc:41:8a:20:af:59:73:b1:74:8e:4a:c3:77: 1b:f9:cf:74:5b:9d:f7:99:85:5b:aa:d5:71:30:f4: b4:2b:79:66:84:4a:4e:6c:e2:da:3b:11:fd:e9:0d: 67:b8:ef:2e:e9:f0:7e:ef:d8:1b:06:96:8b:12:28: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:E8:52:9C:02:F4:09:A5:1C:C4:D0:DD:29:12:70:64:A0:3E:88 X509v3 Authority Key Identifier: keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:38:b7:0e:14:29:1d:bf:ad:20:c4:54:0f:86:a9:df:62:5c: 47:a2:ba:0b:c0:3d:65:75:dd:c5:bd:15:6b:fb:dd:61:eb:cc: d4:03:9e:da:1e:41:1b:2d:e6:5d:0b:fc:76:85:ba:92:25:ca: 2b:a6:1f:c3:f9:e0:8d:63:cd:d6:da:6e:0b:67:fb:77:15:99: 94:99:bf:44:2b:99:0b:b1:27:5e:b5:a3:bd:b1:f3:6e:b3:25: ab:6a:88:ef:94:33:d4:3c:60:e1:9f:d7:e2:22:2b:f0:86:87: 95:e5:3f:1b:83:6a:4b:bb:19:82:5f:61:ed:12:18:e4:a3:8e: 97:d9:80:fa:05:7a:ff:38:9f:48:4f:12:d7:98:b3:93:53:39: 7a:f5:a9:a8:b8:d6:61:dc:13:98:d3:a0:d7:55:21:d6:d6:98: 08:a9:ee:d2:d7:69:c0:20:e5:d8:25:ef:0e:96:39:10:8f:b3: 03:1b:b0:4f:72:82:c5:1f:c9:bf:0f:2a:5a:c9:ae:b9:c7:08: b7:55:a4:e2:c8:1f:17:b4:1c:2f:e4:a1:e6:91:4c:b3:54:25: 13:52:58:0c:c5:94:fb:8a:0f:c1:91:a6:2f:26:f5:b6:b3:ad: 47:a1:21:27:e3:15:f4:5c:f4:d7:f1:4e:23:50:0f:2d:d2:b9: 88:58:68:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC RTNFRjVDNDgwHhcNMjUxMTA0MjEyNjQ2WhcNMjUxMTExMjEyNjQ2WjAYMRYwFAYD VQQDEw02OTBhNmY5Ni1hZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3+0Ictyl+oEvgmAZut+zl/KmtyioqGy0MrnvcozFEnVTFDe+l4e9ezcuPL3 /oYmW2/4NKAKfCndg9mIHV6mdduWI049j2XAdNzMC/RS+xF1/QTp1UQiNGf9Bt8K nACvYzCC4rdRJ4sy93A5LGM7ue+qosVX2PduxxVyHes+60XyJ5lGUEaw/hCNDFCL FBGavRIkfJB4maKdOFzG6/F0OFW/z9SBs0RzdkRJzwPu3Nw3QLDKiZSngrdhirZ3 +bZJDRya98xBiiCvWXOxdI5Kw3cb+c90W533mYVbqtVxMPS0K3lmhEpObOLaOxH9 6Q1nuO8u6fB+79gbBpaLEiiFsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFn16FKc AvQJpRzE0N0pEnBkoD6IMB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXOLcOFCkdv60gxFQPhqnfYlxHoroLwD1ldd3FvRVr+91h68zUA57a HkEbLeZdC/x2hbqSJcorph/D+eCNY83W2m4LZ/t3FZmUmb9EK5kLsSdetaO9sfNu syWraojvlDPUPGDhn9fiIivwhoeV5T8bg2pLuxmCX2HtEhjko46X2YD6BXr/OJ9I TxLXmLOTUzl69amouNZh3BOY06DXVSHW1pgIqe7S12nAIOXYJe8OljkQj7MDG7BP coLFH8m/Dypaya65xwi3VaTiyB8XtBwv5KHmkUyzVCUTUlgMxZT7ig/BkaYvJvW2 s61HoSEn4xX0XPTX8U4jUA8t0rmIWGgv -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:02 2025 by rpki-client