$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft File: UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json) Hash identifier: spE+xOCprJA9drSeJTqoTiqbjbz+QtLjhG/WaLxEgac= Subject key identifier: F6:37:D6:53:6B:11:7C:FA:50:73:7A:40:A1:16:72:39:1B:47:5A:04 Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft Manifest number: 0C50 Signing time: Tue 04 Nov 2025 18:43:21 +0000 Manifest this update: Tue 04 Nov 2025 18:43:21 +0000 Manifest next update: Tue 11 Nov 2025 18:43:21 +0000 Files and hashes: 1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: /mYdnymXto22wYSPZeJ+WUv8phV/0lmjE2NVFyVvD6M=) 2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: xH17spaHhMO4029wjNj4ZW6FqoA9g6CON6QQbD7o3j0=) 3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: J+JzfdPnvnmB6Ay3Ml+qeWmcjb1XIfVxnUqGVNUN7Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Nov 4 18:43:21 2025 GMT Not After : Nov 11 18:43:21 2025 GMT Subject: CN=690a4949-376b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:2a:82:54:76:95:48:1f:13:28:0e:8b:1c: 97:69:60:52:ac:86:e6:78:fc:ad:17:2b:91:44:19: bf:b9:ff:3d:ed:7b:d7:40:be:c5:56:6d:d4:17:60: 12:81:57:70:e3:a9:8b:2b:37:8f:bc:e8:be:18:e7: 14:29:9c:47:a2:f7:86:4f:da:8d:2e:4f:ee:72:58: 06:ba:06:93:9d:d5:e7:27:b2:96:b6:70:c6:8a:9f: ef:52:1d:57:97:ed:bf:ce:fa:46:8a:57:59:41:96: 7c:cc:bf:12:eb:c6:c4:f4:39:7a:48:2c:57:9c:ba: 44:93:25:9b:57:7c:41:53:ba:8c:6b:65:ff:46:f3: 12:6b:68:63:94:29:e7:d4:9d:8f:6c:3f:6f:b3:15: b8:bc:97:43:37:a3:7f:de:33:db:39:c2:0e:aa:cb: cc:88:82:32:bb:1c:7a:b2:ac:d9:18:76:cd:26:ec: 8b:07:7c:4b:bd:27:9f:fd:c8:b3:b0:43:a7:ca:d1: c1:77:48:3d:36:78:ba:d2:62:73:e9:8d:70:08:c1: 4a:7a:1b:de:ce:d3:c7:fb:87:f4:da:bc:2c:2c:12: 46:b2:12:e6:c7:8c:d2:63:54:67:0a:83:3e:24:86: 98:0e:65:e4:a0:6b:1b:36:00:fa:73:cb:4f:3a:11: 1c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:37:D6:53:6B:11:7C:FA:50:73:7A:40:A1:16:72:39:1B:47:5A:04 X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:93:cf:b1:ce:72:b6:c7:40:db:f8:40:dc:36:ac:28:43:d5: 68:fc:46:59:75:da:90:b0:ce:7a:13:a5:71:6e:1b:32:bb:18: 1a:81:cf:4d:a3:a7:24:9c:8f:84:7c:5f:d7:97:62:48:4c:db: ac:ac:47:de:1f:21:bf:21:b7:a9:f9:48:9b:6b:64:46:35:e4: 00:c7:de:58:70:e0:30:ba:d4:76:1b:4f:21:43:01:9f:a0:5b: 82:4b:cf:29:f5:91:91:76:7e:8e:92:82:a6:1e:e0:24:92:86: 58:de:88:02:f4:d9:32:72:6a:13:9a:39:69:32:72:a4:fe:70: 07:23:b5:82:6c:66:f2:e9:83:82:f5:ed:4c:62:e0:1f:a7:77: aa:74:e4:80:0e:43:1f:46:94:bd:d1:00:53:cf:c5:d1:01:0e: 5a:e5:fe:f3:0a:08:f1:c9:55:27:51:23:c0:c3:07:2d:43:9e: 77:4d:7b:0a:f3:ff:af:c4:b7:2a:3b:a8:4e:da:2a:72:36:5e: 67:1f:d9:b8:5b:f3:87:a2:3f:7e:dd:2b:6e:0e:90:5f:bc:ef: bd:2c:ce:08:83:aa:3e:fc:39:27:b7:1b:44:da:ce:1f:2f:a1: 84:af:db:35:e2:42:f1:fb:25:f1:67:64:6d:69:ef:c3:64:ab: 3e:3e:52:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjUxMTA0MTg0MzIxWhcNMjUxMTExMTg0MzIxWjAYMRYwFAYD VQQDEw02OTBhNDk0OS0zNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupsqglR2lUgfEygOixyXaWBSrIbmePytFyuRRBm/uf897XvXQL7FVm3UF2AS gVdw46mLKzePvOi+GOcUKZxHoveGT9qNLk/uclgGugaTndXnJ7KWtnDGip/vUh1X l+2/zvpGildZQZZ8zL8S68bE9Dl6SCxXnLpEkyWbV3xBU7qMa2X/RvMSa2hjlCnn 1J2PbD9vsxW4vJdDN6N/3jPbOcIOqsvMiIIyuxx6sqzZGHbNJuyLB3xLvSef/ciz sEOnytHBd0g9Nni60mJz6Y1wCMFKehveztPH+4f02rwsLBJGshLmx4zSY1RnCoM+ JIaYDmXkoGsbNgD6c8tPOhEcPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPY31lNr EXz6UHN6QKEWcjkbR1oEMB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTJCMy8yMEU2N0REODEyRjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcw QjR1UnB6UlJ5bTBpTVN5S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3k8+xznK2x0Db+EDcNqwoQ9Vo/EZZddqQsM56E6Vxbhsyuxgagc9N o6cknI+EfF/Xl2JITNusrEfeHyG/Ibep+Uiba2RGNeQAx95YcOAwutR2G08hQwGf oFuCS88p9ZGRdn6OkoKmHuAkkoZY3ogC9NkycmoTmjlpMnKk/nAHI7WCbGby6YOC 9e1MYuAfp3eqdOSADkMfRpS90QBTz8XRAQ5a5f7zCgjxyVUnUSPAwwctQ553TXsK 8/+vxLcqO6hO2ipyNl5nH9m4W/OHoj9+3StuDpBfvO+9LM4Ig6o+/DkntxtE2s4f L6GEr9s14kLx+yXxZ2Rtae/DZKs+PlLp -----END CERTIFICATE-----Generated at Wed Nov 5 13:45:54 2025 by rpki-client