$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft File: U-fOlDUz-NPAVknylGgqJvgU8V8.mft (raw, json) Hash identifier: s4lnoyVeI75mnegpQp4i74eIh3g8wTn5gb7U1SN5tWs= Subject key identifier: 87:C8:26:27:AC:B1:A7:D7:DD:69:54:24:E1:E3:E8:62:0C:C7:8B:17 Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F Certificate issuer: /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft Manifest number: DB Signing time: Wed 05 Nov 2025 05:46:45 +0000 Manifest this update: Wed 05 Nov 2025 05:46:45 +0000 Manifest next update: Wed 12 Nov 2025 05:46:45 +0000 Files and hashes: 1: U-fOlDUz-NPAVknylGgqJvgU8V8.crl (hash: t7/YaJHoQ9Yph+y2rM0NjT3ySEHvj3ftJBt9KLZsrnI=) 2: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (hash: 3YeMlkcKDR/G7e8HpdLpzhvB3RsMdGgeM4Qv8rsxSYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Validity Not Before: Nov 5 05:46:45 2025 GMT Not After : Nov 12 05:46:45 2025 GMT Subject: CN=690ae4c5-11a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:69:4e:91:eb:da:57:1f:32:c5:b4:c5:bf: a5:7c:eb:fe:9a:7f:53:37:69:4e:10:f4:b1:c2:af: f5:d7:0b:bb:ea:f5:16:da:2e:37:2d:6c:19:7d:86: f7:4e:60:1c:09:fc:50:8a:6f:ad:c5:2a:3f:16:7d: 86:c5:88:3e:52:c6:84:3b:8e:a6:15:ed:01:7e:d5: 31:79:bc:1e:a4:3f:45:f5:65:d0:37:de:57:a8:08: 8f:b7:44:02:46:16:4a:26:48:00:ff:de:85:3c:a0: e6:90:e1:0c:5a:e4:b6:65:ff:e4:e1:8a:b5:66:7e: 6e:5a:74:be:71:67:ad:06:c8:42:b6:2f:06:22:f6: 07:44:5e:95:20:f9:6b:e1:90:7c:3a:08:d2:89:53: 96:98:42:52:62:89:5f:5d:f7:6f:1b:f2:6e:46:96: f4:31:5c:24:6a:bd:62:11:25:eb:44:51:d8:bf:7c: 48:74:2d:6b:e2:18:02:16:7c:2b:4a:54:57:c0:74: d7:55:4a:03:bc:53:7b:00:56:91:7b:73:01:68:fb: 37:f3:df:af:df:63:39:21:42:9a:0a:33:18:e9:ee: a7:2a:43:8a:c2:5f:66:23:fa:53:e3:72:c2:cf:a3: da:12:e6:46:9c:1f:18:b2:a8:e8:6e:52:b8:5b:c3: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C8:26:27:AC:B1:A7:D7:DD:69:54:24:E1:E3:E8:62:0C:C7:8B:17 X509v3 Authority Key Identifier: keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:cb:91:75:6c:6e:a8:72:0f:87:2f:fa:95:b2:3d:d1:44:c4: 4d:b0:b6:79:00:96:77:05:fe:a4:b6:e7:a1:71:50:8f:d1:98: 25:d2:bf:1d:81:26:c2:3c:e5:93:7d:90:88:01:c9:8a:a5:dc: 37:87:ad:61:04:01:35:97:b3:d1:79:83:2b:d3:bd:ec:de:29: 9d:06:38:70:f0:ee:f4:32:49:06:f4:c4:8f:08:df:d6:f5:92: 5a:9e:b5:d0:2f:60:1c:39:1b:63:7b:fe:d9:14:74:97:57:a6: 68:61:73:55:1d:06:1f:d7:78:88:a8:92:10:95:b5:d6:43:d8: f1:78:31:b9:0d:1b:de:d6:2c:9a:4a:25:b0:49:88:43:73:7a: f3:6d:c4:dd:ae:20:52:c2:f9:50:05:0e:8d:28:26:28:ac:69: 75:2c:b0:b7:8e:93:ad:36:dc:c5:22:99:6f:cd:d7:e2:6a:13: 9c:23:fe:fd:59:65:41:df:2d:99:4f:99:b8:f3:a9:5f:1c:82: 67:4b:57:ec:f1:c4:31:23:b2:25:fc:f2:5f:68:aa:a8:fa:55: 06:2a:97:50:56:1f:4c:74:b5:db:ab:61:c1:bd:c2:da:e1:b8: ef:46:9c:0d:24:2e:2a:5b:6f:8e:24:85:b5:00:96:89:e7:c2: e5:90:a2:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzOTExMTAvBgNVBAUTKDUzRTdDRTk0MzUzM0Y4RDNDMDU2NDlGMjk0NjgyQTI2 RjgxNEYxNUYwHhcNMjUxMTA1MDU0NjQ1WhcNMjUxMTEyMDU0NjQ1WjAYMRYwFAYD VQQDEw02OTBhZTRjNS0xMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnr9pTpHr2lcfMsW0xb+lfOv+mn9TN2lOEPSxwq/11wu76vUW2i43LWwZfYb3 TmAcCfxQim+txSo/Fn2GxYg+UsaEO46mFe0BftUxebwepD9F9WXQN95XqAiPt0QC RhZKJkgA/96FPKDmkOEMWuS2Zf/k4Yq1Zn5uWnS+cWetBshCti8GIvYHRF6VIPlr 4ZB8OgjSiVOWmEJSYolfXfdvG/JuRpb0MVwkar1iESXrRFHYv3xIdC1r4hgCFnwr SlRXwHTXVUoDvFN7AFaRe3MBaPs389+v32M5IUKaCjMY6e6nKkOKwl9mI/pT43LC z6PaEuZGnB8YsqjoblK4W8NzDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfIJies safX3WlUJOHj6GIMx4sXMB8GA1UdIwQYMBaAFFPnzpQ1M/jTwFZJ8pRoKib4FPFf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS8wMTlGRjE0RTcw QUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1OUEFWa255bEdncUp2Z1U4 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtZk9sRFV6LU5QQVZrbnlsR2dxSnZnVThWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM5MS8wMTlGRjE0RTcwQUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1O UEFWa255bEdncUp2Z1U4VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIy5F1bG6ocg+HL/qVsj3RRMRNsLZ5AJZ3Bf6ktuehcVCP0Zgl0r8d gSbCPOWTfZCIAcmKpdw3h61hBAE1l7PReYMr073s3imdBjhw8O70MkkG9MSPCN/W 9ZJanrXQL2AcORtje/7ZFHSXV6ZoYXNVHQYf13iIqJIQlbXWQ9jxeDG5DRve1iya SiWwSYhDc3rzbcTdriBSwvlQBQ6NKCYorGl1LLC3jpOtNtzFIplvzdfiahOcI/79 WWVB3y2ZT5m486lfHIJnS1fs8cQxI7Il/PJfaKqo+lUGKpdQVh9MdLXbq2HBvcLa 4bjvRpwNJC4qW2+OJIW1AJaJ58LlkKIn -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:30 2025 by rpki-client