$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: VuKU+usp4xe+rdTac2q976TPeZYSO6EQdM3DHWw5vWc= Subject key identifier: 35:8B:1C:20:97:1C:AE:DD:63:AC:BD:99:80:D4:47:32:A0:11:80:D7 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A32 Signing time: Tue 04 Nov 2025 19:50:42 +0000 Manifest this update: Tue 04 Nov 2025 19:50:41 +0000 Manifest next update: Tue 11 Nov 2025 19:50:41 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: E9QWrYNg0zCEbKvi1KQdFS9j7XuzFsrJu7uM1TqR8Pk=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: oi91Qfh6vx3udOQFWmZQlAlwWv2n7sWukG/Y5qWMZrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2620 (0xa3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Nov 4 19:50:41 2025 GMT Not After : Nov 11 19:50:41 2025 GMT Subject: CN=690a5911-a272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:5c:6e:ee:2d:e8:46:e4:f0:71:bf:f0:4e: 2a:81:73:fe:c5:cb:e3:89:d1:58:66:0d:cd:e5:3d: dc:71:e2:bf:14:f2:b1:54:0c:cc:69:f9:0d:bf:e0: 58:f0:45:58:ce:62:55:55:96:9a:8d:d8:2b:01:05: ea:e2:f9:07:51:70:c4:46:46:00:b4:51:20:4c:de: 98:f3:15:f8:9e:c6:65:34:09:c5:68:8c:80:55:16: f6:40:50:71:67:a4:49:9f:91:5c:63:d4:10:c5:bc: 2a:fb:81:e6:3e:56:e7:12:2d:d5:68:2b:3c:fc:cc: 0f:88:0f:31:c6:36:da:cc:94:1b:48:54:c5:75:96: 37:04:bf:39:2d:c0:d5:ed:e2:c8:ce:c0:c2:8a:bd: 56:c6:48:6f:fb:c7:bf:60:f3:08:bd:07:44:a7:48: ac:4f:43:ec:e8:ca:37:41:7a:11:08:86:07:02:af: a1:d4:c6:f0:2a:e3:06:06:ad:de:0c:97:7f:f0:e7: 7b:fc:4f:d7:7e:60:a2:91:15:70:9b:e5:41:bd:88: e2:93:92:32:e0:3d:c0:52:4c:07:40:32:9c:ff:34: c8:b9:01:40:f6:39:a7:8a:6a:22:22:dc:08:1d:90: 38:3b:63:66:b1:25:9a:ed:50:2f:c4:0e:1c:d5:5e: fd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8B:1C:20:97:1C:AE:DD:63:AC:BD:99:80:D4:47:32:A0:11:80:D7 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:84:49:9e:e3:88:f2:fa:95:49:1d:ff:d6:b1:be:5d:8b:54: d4:ee:64:58:70:0f:2a:05:5f:82:f6:8b:c4:8e:02:ea:25:a3: 41:15:11:8e:41:20:71:00:f2:5e:82:f3:54:b6:a7:46:65:d0: 78:1a:0e:0c:b7:48:8d:82:34:01:5e:0b:eb:5f:b0:b1:89:9e: 35:71:f0:4e:bf:3c:f1:41:49:03:c2:93:89:ed:99:8a:c4:94: 16:54:a0:42:1d:5c:74:d5:05:74:c3:a8:72:9a:bf:9c:b3:e7: 25:f4:df:34:3f:9b:c5:fc:35:96:22:c4:3c:a0:c3:f4:d6:cf: dd:0f:e6:16:9c:f2:63:70:b3:cb:94:67:96:94:12:62:e2:bd: 87:ab:ed:03:9c:72:34:1e:09:be:74:b6:bf:c5:fc:65:eb:37: 29:c9:02:2d:b6:a4:97:39:af:69:5a:11:09:7f:40:e2:69:e1: 01:62:a9:36:8e:e3:7d:fc:e3:55:9c:fd:a6:b4:8b:d7:c1:21: 93:13:e6:dc:96:13:10:ea:f8:7e:5b:2c:dd:b2:ef:00:0d:5c: fd:7d:2c:2e:c6:a7:dc:e0:3c:e5:65:43:bb:aa:09:94:10:a7: 38:5e:5c:4c:f5:81:ed:0a:e7:94:0a:50:20:6d:9c:15:c2:52: 68:be:47:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUxMTA0MTk1MDQxWhcNMjUxMTExMTk1MDQxWjAYMRYwFAYD VQQDEw02OTBhNTkxMS1hMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybxcbu4t6Ebk8HG/8E4qgXP+xcvjidFYZg3N5T3cceK/FPKxVAzMafkNv+BY 8EVYzmJVVZaajdgrAQXq4vkHUXDERkYAtFEgTN6Y8xX4nsZlNAnFaIyAVRb2QFBx Z6RJn5FcY9QQxbwq+4HmPlbnEi3VaCs8/MwPiA8xxjbazJQbSFTFdZY3BL85LcDV 7eLIzsDCir1Wxkhv+8e/YPMIvQdEp0isT0Ps6Mo3QXoRCIYHAq+h1MbwKuMGBq3e DJd/8Od7/E/XfmCikRVwm+VBvYjik5Iy4D3AUkwHQDKc/zTIuQFA9jmnimoiItwI HZA4O2NmsSWa7VAvxA4c1V79ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWLHCCX HK7dY6y9mYDURzKgEYDXMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBphEme44jy+pVJHf/Wsb5di1TU7mRYcA8qBV+C9ovEjgLqJaNBFRGO QSBxAPJegvNUtqdGZdB4Gg4Mt0iNgjQBXgvrX7CxiZ41cfBOvzzxQUkDwpOJ7ZmK xJQWVKBCHVx01QV0w6hymr+cs+cl9N80P5vF/DWWIsQ8oMP01s/dD+YWnPJjcLPL lGeWlBJi4r2Hq+0DnHI0Hgm+dLa/xfxl6zcpyQIttqSXOa9pWhEJf0DiaeEBYqk2 juN9/ONVnP2mtIvXwSGTE+bclhMQ6vh+Wyzdsu8ADVz9fSwuxqfc4DzlZUO7qgmU EKc4XlxM9YHtCueUClAgbZwVwlJovkeR -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:23 2025 by rpki-client