$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft File: uDIFubLHQGPjdvNxFYOXBe277Ng.mft (raw, json) Hash identifier: ExpAZfNOXt7SrahsdQbytUYR3ELVpiWMdHyKsCNglbQ= Subject key identifier: C2:38:70:69:CA:D9:7B:51:83:A8:1D:FA:15:61:D2:3C:E0:58:DB:25 Authority key identifier: B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8 Certificate issuer: /CN=A9130138/serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8 Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft Manifest number: 0384 Signing time: Wed 05 Nov 2025 00:53:59 +0000 Manifest this update: Wed 05 Nov 2025 00:53:59 +0000 Manifest next update: Wed 12 Nov 2025 00:53:59 +0000 Files and hashes: 1: uDIFubLHQGPjdvNxFYOXBe277Ng.crl (hash: 0+CAl84uOKK84PYBvrChbZPzFpD0klYGiR2XfQWi9ro=) 2: A7DEA0DAC47D11ECB544A26DC4F9AE02.roa (hash: f9p5nsZx4jMNkGPcJOkOhsmegpIzdL9T3kUEUM+NbsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8 Validity Not Before: Nov 5 00:53:59 2025 GMT Not After : Nov 12 00:53:59 2025 GMT Subject: CN=690aa027-0231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:b3:3b:6b:8c:fe:c5:83:9a:f2:f8:b0:9d: 34:c5:cc:09:60:cb:22:ae:7b:08:7c:a3:cc:87:8d: c7:6f:2e:6a:45:da:9d:d1:21:34:97:e0:72:3a:47: e7:dd:66:16:21:f2:c3:34:c2:e5:74:e2:67:55:99: 1f:ba:cc:aa:9a:a6:06:4e:f0:cd:43:b0:0f:7c:3c: 83:35:c3:43:0f:f2:9e:8b:63:65:ed:86:91:f0:24: 0c:4e:ca:b1:f0:d5:fb:83:27:ef:33:e8:b0:1a:ba: 79:83:8a:24:41:b9:82:82:8f:7b:d7:b6:16:e6:9d: 1f:fc:b5:bd:d8:ca:e6:a4:36:e7:a8:2d:97:ed:b5: 3c:48:c6:92:cc:f8:c2:73:c9:78:91:4d:02:29:e1: 47:06:bf:e6:f3:c9:6c:c3:d4:e8:54:64:e1:ab:39: 9b:5c:d4:83:46:59:7e:b3:c2:05:a5:0f:b3:19:ae: 83:ef:f3:a3:74:3c:31:f9:5c:19:a6:28:74:09:9d: 81:5f:a2:fb:e6:54:2b:d9:b1:fc:92:f3:04:2d:a3: b1:48:71:71:2b:6d:b0:63:49:0a:26:d9:97:d9:be: 4c:70:77:90:fc:bf:36:01:41:f6:86:c8:42:08:ac: 5b:18:16:49:7c:0b:64:53:70:97:f4:5f:6c:b7:11: 71:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:38:70:69:CA:D9:7B:51:83:A8:1D:FA:15:61:D2:3C:E0:58:DB:25 X509v3 Authority Key Identifier: keyid:B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:11:25:71:9d:fe:be:d5:5e:9f:f6:a9:68:71:82:b2:e5:bd: 48:eb:73:0c:81:ec:76:41:2e:f2:06:12:da:b4:f9:10:43:44: 52:f4:ab:ed:e1:7c:f7:7d:f0:5c:ad:7a:02:72:fd:55:ca:74: 0a:81:5b:79:4d:c7:39:0a:e5:28:10:86:43:f5:d1:4b:4d:24: fa:b7:e9:4e:73:95:de:b1:c6:5d:b1:81:83:dc:59:53:f0:d7: f9:20:c0:64:78:df:57:be:7d:e5:db:6d:71:c6:9d:88:3e:5a: 6c:29:dd:0d:0a:d5:65:00:65:fc:06:4a:d4:55:e1:0b:e8:ce: 36:52:83:08:1b:1b:3c:1c:58:81:f0:64:f2:a1:49:6b:ef:5c: 4a:81:2b:7d:16:1c:21:96:f2:f2:88:6b:87:fe:9c:83:dd:85: d7:c1:96:75:88:1f:f9:7b:13:96:e1:a8:09:f6:00:1d:0a:a3: 19:29:cf:4a:e0:99:f7:13:e2:04:fc:a8:b1:79:db:4b:b8:e5: e3:ca:30:69:0d:b8:29:3f:3e:86:45:d6:c0:e2:6c:11:3c:76: f6:cb:c3:7b:89:86:e4:66:cb:06:e8:c8:1d:fb:c6:09:55:9a: a6:8b:37:a9:40:4d:20:ee:79:93:4a:3e:2b:e0:95:52:24:01: cc:21:92:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKEI4MzIwNUI5QjJDNzQwNjNFMzc2RjM3MTE1ODM5NzA1 RURCQkVDRDgwHhcNMjUxMTA1MDA1MzU5WhcNMjUxMTEyMDA1MzU5WjAYMRYwFAYD VQQDEw02OTBhYTAyNy0wMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnezO2uM/sWDmvL4sJ00xcwJYMsirnsIfKPMh43Hby5qRdqd0SE0l+ByOkfn 3WYWIfLDNMLldOJnVZkfusyqmqYGTvDNQ7APfDyDNcNDD/Kei2Nl7YaR8CQMTsqx 8NX7gyfvM+iwGrp5g4okQbmCgo9717YW5p0f/LW92MrmpDbnqC2X7bU8SMaSzPjC c8l4kU0CKeFHBr/m88lsw9ToVGThqzmbXNSDRll+s8IFpQ+zGa6D7/OjdDwx+VwZ pih0CZ2BX6L75lQr2bH8kvMELaOxSHFxK22wY0kKJtmX2b5McHeQ/L82AUH2hshC CKxbGBZJfAtkU3CX9F9stxFxVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMI4cGnK 2XtRg6gd+hVh0jzgWNslMB8GA1UdIwQYMBaAFLgyBbmyx0Bj43bzcRWDlwXtu+zY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC81OUZCQTJCMkM0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi91RElGdWJMSFFHUGpkdk54RllPWEJlMjc3 TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3VESUZ1YkxIUUdQamR2TnhGWU9YQmUyNzdOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC81OUZCQTJCMkM0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi91RElGdWJMSFFH UGpkdk54RllPWEJlMjc3TmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIESVxnf6+1V6f9qlocYKy5b1I63MMgex2QS7yBhLatPkQQ0RS9Kvt 4Xz3ffBcrXoCcv1VynQKgVt5Tcc5CuUoEIZD9dFLTST6t+lOc5XescZdsYGD3FlT 8Nf5IMBkeN9Xvn3l221xxp2IPlpsKd0NCtVlAGX8BkrUVeEL6M42UoMIGxs8HFiB 8GTyoUlr71xKgSt9FhwhlvLyiGuH/pyD3YXXwZZ1iB/5exOW4agJ9gAdCqMZKc9K 4Jn3E+IE/KixedtLuOXjyjBpDbgpPz6GRdbA4mwRPHb2y8N7iYbkZssG6Mgd+8YJ VZqmizepQE0g7nmTSj4r4JVSJAHMIZKb -----END CERTIFICATE-----Generated at Wed Nov 5 19:26:47 2025 by rpki-client