$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json) Hash identifier: n7LNCyem500LeIspJe8aDSVMP6Oh/FZ2p7TCcD1FlJ4= Subject key identifier: 73:A6:CD:73:AE:75:9D:71:43:EC:0E:A8:92:DD:65:34:A2:5A:A2:2B Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft Manifest number: E4 Signing time: Wed 05 Nov 2025 05:38:07 +0000 Manifest this update: Wed 05 Nov 2025 05:38:07 +0000 Manifest next update: Wed 12 Nov 2025 05:38:07 +0000 Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: sm0Wfwj2cg0hKiABKmX0ub9IKn11ReTHFLv6GCDeD9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B Validity Not Before: Nov 5 05:38:07 2025 GMT Not After : Nov 12 05:38:07 2025 GMT Subject: CN=690ae2bf-48c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:26:ec:ae:c3:5f:4a:e0:08:b0:9f:e0:58: cd:35:06:ce:e6:49:c7:1c:cb:2d:4f:2b:05:3f:d3: 55:2c:da:32:43:3a:a0:d6:fb:38:1b:f5:8d:ef:35: b2:63:20:d1:c8:96:df:a0:9c:28:bb:f4:22:0f:93: f1:1a:ca:3e:1e:66:1b:9c:df:e7:7d:a8:94:54:30: 00:94:3b:f4:47:ff:78:f1:4d:81:22:bb:13:80:44: cc:0b:11:c4:68:f9:8b:49:88:c6:87:85:65:10:f4: 85:e2:2a:dc:6d:bc:b7:16:3a:30:82:6f:f5:22:c0: 44:05:4e:4b:9c:ea:e6:01:e0:29:4e:5e:88:37:a7: 72:6b:53:db:f9:71:b1:2d:ab:7f:02:ba:c2:09:8f: 63:87:4a:91:08:4d:11:d8:d8:1c:22:95:eb:4f:9e: 71:b9:fd:f8:45:93:07:31:b6:dc:98:fa:3c:14:fc: ad:b9:ec:27:14:19:16:9d:f2:7c:92:d1:0f:74:08: 76:12:55:dc:86:11:c1:21:04:38:32:fc:e4:ad:1b: d8:11:ba:db:34:68:c4:48:2c:2e:16:bb:a4:ff:bd: aa:df:30:10:fb:45:2e:96:f2:24:de:78:63:3b:5b: 64:65:45:c6:db:a3:d6:c9:cb:47:2f:7a:29:3c:10: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A6:CD:73:AE:75:9D:71:43:EC:0E:A8:92:DD:65:34:A2:5A:A2:2B X509v3 Authority Key Identifier: keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3e:0e:a0:20:5c:9f:58:85:3e:6a:14:9b:40:39:14:27:cc: 87:76:ed:89:11:20:6b:50:b6:e1:f0:df:49:60:9e:dc:7b:f8: a5:83:2b:80:04:c4:6b:b8:49:d1:56:2c:13:22:f3:9a:32:ac: 7a:42:a6:cc:aa:5a:fc:7b:15:80:1d:0e:c1:bb:a1:de:31:04: 5c:5e:b9:93:0e:5f:61:48:71:20:23:81:bf:3a:fe:08:20:f9: ea:a9:70:45:18:10:3e:19:0c:48:7e:5a:c2:33:9f:17:e4:f0: 5c:d0:bf:29:0f:a1:56:c2:c1:c2:bf:0f:32:3d:63:86:ae:c1: a4:a1:b8:76:7e:71:85:3e:32:c0:74:1c:92:69:65:84:ef:31: 44:04:9b:91:03:9e:58:b9:9a:55:0f:4c:2d:03:8f:d2:99:ba: 8a:b5:9c:b3:2c:22:55:c7:40:d1:c6:ff:65:e1:b4:42:57:ec: f9:7f:b5:45:0d:f7:ad:00:70:37:33:85:ab:cd:fc:44:b5:4e: 04:40:1b:df:db:a8:b8:b0:c6:8c:93:9b:6b:07:88:28:87:ad: 91:62:d0:9b:fd:2c:af:e0:a6:ad:62:cd:3d:88:59:fe:eb:73: f1:38:92:d2:8e:2e:c4:19:29:bb:a2:78:98:39:0c:3d:32:f9: 19:f9:59:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEJBNjBDMkY2MDg1NzdDRUU2QkJEMTQ5MzcyMUI3QUFF Q0EyODc2MkIwHhcNMjUxMTA1MDUzODA3WhcNMjUxMTEyMDUzODA3WjAYMRYwFAYD VQQDEw02OTBhZTJiZi00OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNsm7K7DX0rgCLCf4FjNNQbO5knHHMstTysFP9NVLNoyQzqg1vs4G/WN7zWy YyDRyJbfoJwou/QiD5PxGso+HmYbnN/nfaiUVDAAlDv0R/948U2BIrsTgETMCxHE aPmLSYjGh4VlEPSF4ircbby3Fjowgm/1IsBEBU5LnOrmAeApTl6IN6dya1Pb+XGx Lat/ArrCCY9jh0qRCE0R2NgcIpXrT55xuf34RZMHMbbcmPo8FPytuewnFBkWnfJ8 ktEPdAh2ElXchhHBIQQ4MvzkrRvYEbrbNGjESCwuFruk/72q3zAQ+0UulvIk3nhj O1tkZUXG26PWyctHL3opPBB0hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOmzXOu dZ1xQ+wOqJLdZTSiWqIrMB8GA1UdIwQYMBaAFLpgwvYIV3zua70Uk3Ibeq7KKHYr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85Q0YwNEQzQzVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZPNXJ2UlNUY2h0NnJzb29k aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VtREM5Z2hYZk81cnZSU1RjaHQ2cnNvb2Rpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZGRi85Q0YwNEQzQzVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi91bURDOWdoWGZP NXJ2UlNUY2h0NnJzb29kaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLPg6gIFyfWIU+ahSbQDkUJ8yHdu2JESBrULbh8N9JYJ7ce/ilgyuA BMRruEnRViwTIvOaMqx6QqbMqlr8exWAHQ7Bu6HeMQRcXrmTDl9hSHEgI4G/Ov4I IPnqqXBFGBA+GQxIflrCM58X5PBc0L8pD6FWwsHCvw8yPWOGrsGkobh2fnGFPjLA dBySaWWE7zFEBJuRA55YuZpVD0wtA4/SmbqKtZyzLCJVx0DRxv9l4bRCV+z5f7VF DfetAHA3M4WrzfxEtU4EQBvf26i4sMaMk5trB4goh62RYtCb/Syv4KatYs09iFn+ 63PxOJLSji7EGSm7oniYOQw9MvkZ+Vk9 -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:08 2025 by rpki-client