$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: 6GWFHv/FFcVseSNYAcOMLUUsm+9ktHNAJTJD1j2u6Mc= Subject key identifier: 60:BF:0E:2A:45:F2:B1:C9:3B:4B:E7:EB:B9:68:50:FC:6F:C3:9C:96 Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 0328 Signing time: Wed 05 Nov 2025 01:10:29 +0000 Manifest this update: Wed 05 Nov 2025 01:10:28 +0000 Manifest next update: Wed 12 Nov 2025 01:10:28 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: hdMu4ZNaY0KQfFkO1JUQ7Ssndib2kUtjpcd3EmNRqXo=) 2: AB8BCCA8908011F0B114A05CC4F9AE02.roa (hash: 1T0eskndL4iFaUJFcifTZvjR+o1R27ZKYdF+XD5eXWc=) 3: 5B4371EC907B11F085A8B481C4F9AE02.roa (hash: KjJmL1gLMQuW3NghzJwADbK1HaHP/M/oXcXExJSaN+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: Nov 5 01:10:28 2025 GMT Not After : Nov 12 01:10:28 2025 GMT Subject: CN=690aa405-dd76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:69:48:8b:15:49:44:70:e3:7e:c0:4b:10: 24:78:1e:07:af:06:9f:06:71:31:0f:a4:20:68:85: f0:28:be:bc:15:25:23:56:85:af:cc:7f:06:22:6c: 19:6c:30:01:2a:e2:0a:1c:50:4f:55:8b:6f:f4:21: 3d:fd:c8:93:94:9c:ce:d0:19:a3:25:33:ab:f4:b2: e9:58:28:64:c6:6a:fa:29:00:e3:8b:87:74:5c:45: 77:47:51:99:f9:87:a8:53:7a:71:26:26:05:da:11: ee:3a:e2:b0:db:21:9c:02:4b:52:a6:97:65:d4:bf: 4f:0c:24:cc:4e:a3:54:e5:57:cc:d3:a7:f6:b2:58: 89:db:1e:72:06:02:75:10:46:5c:17:b1:8b:94:98: 8e:01:65:39:66:08:09:bf:1b:41:5a:a3:c2:88:e5: 68:0b:bd:b4:ba:2b:d9:2c:e5:cf:7d:03:82:43:f7: 5f:cd:63:66:e8:a4:4f:22:08:18:11:f7:6b:72:38: 7c:26:19:f7:c9:26:5b:1e:36:fd:36:b2:cc:24:3e: 88:dc:7e:33:46:38:0b:49:12:39:5c:30:c3:93:03: 41:ab:cb:3a:fd:c8:c4:da:48:a9:fe:8e:19:f3:e3: 1f:13:7b:ce:07:64:21:73:42:03:0b:94:c6:06:96: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BF:0E:2A:45:F2:B1:C9:3B:4B:E7:EB:B9:68:50:FC:6F:C3:9C:96 X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:8f:52:8f:09:54:cc:18:52:c3:54:ff:a1:75:4e:5d:9b:78: b9:44:93:79:2f:26:46:e9:52:5d:b8:c5:77:bf:1f:25:51:02: 86:86:c5:2c:91:53:16:bd:41:f8:e9:d1:a8:30:0d:18:ef:19: fa:15:10:7c:8d:5e:39:ce:e4:27:19:20:91:a1:e0:5b:26:a5: 87:26:b3:a1:71:52:cd:a6:ea:a6:d2:88:92:9b:6b:a9:7a:53: 0f:50:82:e3:05:92:cb:69:f3:80:d5:6e:b9:78:22:f3:e4:26: cf:b0:da:91:7c:cc:f2:88:d8:46:a1:64:11:ae:c3:09:97:53: fe:65:1c:af:ba:43:3c:54:d6:6c:fb:f6:14:58:cd:e2:e7:13: bf:1f:40:fa:bd:99:f6:25:90:23:3d:c5:31:30:d7:b8:07:e4: c2:87:67:97:15:ee:38:31:42:c4:26:d7:6c:a8:d9:a1:c1:a3: 69:c1:4e:2e:f4:21:eb:db:ab:0b:7c:b5:b8:fc:ab:9b:bc:79: fd:e7:34:02:a9:d7:5a:08:5f:f8:1d:4c:e9:16:dc:4b:13:d1: 8c:42:57:7e:72:bf:44:f7:59:48:4f:39:21:8a:06:5c:0c:1b: b0:4a:a1:5e:ab:c9:ab:82:fb:ec:13:84:92:32:1a:3f:88:e5: b7:d6:35:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUxMTA1MDExMDI4WhcNMjUxMTEyMDExMDI4WjAYMRYwFAYD VQQDEw02OTBhYTQwNS1kZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jNpSIsVSURw437ASxAkeB4HrwafBnExD6QgaIXwKL68FSUjVoWvzH8GImwZ bDABKuIKHFBPVYtv9CE9/ciTlJzO0BmjJTOr9LLpWChkxmr6KQDji4d0XEV3R1GZ +YeoU3pxJiYF2hHuOuKw2yGcAktSppdl1L9PDCTMTqNU5VfM06f2sliJ2x5yBgJ1 EEZcF7GLlJiOAWU5ZggJvxtBWqPCiOVoC720uivZLOXPfQOCQ/dfzWNm6KRPIggY Efdrcjh8Jhn3ySZbHjb9NrLMJD6I3H4zRjgLSRI5XDDDkwNBq8s6/cjE2kip/o4Z 8+MfE3vOB2Qhc0IDC5TGBpbpvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGC/DipF 8rHJO0vn67loUPxvw5yWMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5j1KPCVTMGFLDVP+hdU5dm3i5RJN5LyZG6VJduMV3vx8lUQKGhsUs kVMWvUH46dGoMA0Y7xn6FRB8jV45zuQnGSCRoeBbJqWHJrOhcVLNpuqm0oiSm2up elMPUILjBZLLafOA1W65eCLz5CbPsNqRfMzyiNhGoWQRrsMJl1P+ZRyvukM8VNZs +/YUWM3i5xO/H0D6vZn2JZAjPcUxMNe4B+TCh2eXFe44MULEJtdsqNmhwaNpwU4u 9CHr26sLfLW4/KubvHn95zQCqddaCF/4HUzpFtxLE9GMQld+cr9E91lITzkhigZc DBuwSqFeq8mrgvvsE4SSMho/iOW31jWX -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:46 2025 by rpki-client