$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: YQOiRWz+jCuud561ArSRZ7cq8+pn3UMhX9I3Lulm6jA= Subject key identifier: 75:BD:43:51:4E:13:45:D4:B9:25:9D:96:18:45:9D:A0:6C:A2:23:A1 Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 081F Signing time: Sun 02 Nov 2025 20:52:32 +0000 Manifest this update: Sun 02 Nov 2025 20:52:32 +0000 Manifest next update: Sun 09 Nov 2025 20:52:32 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: gmHHdClE6jrZds+vYuUm/pAxcO9DznDWRFcakvCB6JQ=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: dLHVUNtLIV41+zRNY3QMkvAZyxZkYsTbNoR5dSniJzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Nov 2 20:52:32 2025 GMT Not After : Nov 9 20:52:32 2025 GMT Subject: CN=6907c490-a3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fc:69:d0:f8:bb:67:e0:b7:db:66:a5:88:9b: 24:14:9e:40:37:b7:8e:5c:7f:44:49:94:a1:55:85: 79:b3:2e:59:5d:07:e1:0d:55:57:1a:8f:89:3b:a0: d7:e8:82:60:4f:85:56:a4:ed:bf:03:39:b9:53:d9: 7c:21:b6:a4:4a:8c:dc:6b:52:6c:b2:f7:d3:35:5f: 71:b8:d6:0a:7c:52:ff:f3:d0:3f:d0:a3:b2:59:06: 50:dc:8d:9a:d4:1c:32:79:67:8c:40:c5:41:70:50: 0a:9f:2e:25:f7:db:49:07:8b:d7:09:b0:92:97:78: 76:65:8c:3e:c4:56:96:9d:6a:6c:ca:ef:19:95:15: 1d:97:75:f7:40:35:b1:12:cf:ef:21:e9:e6:0b:38: 51:bc:81:8a:58:01:b0:31:24:2d:37:97:88:c9:98: 74:36:8f:ad:57:02:0b:3f:6a:e5:65:19:91:18:a7: 9e:bb:31:1f:6a:02:0b:fc:83:0f:a7:6d:48:e5:4a: 08:a7:6f:b1:eb:27:5e:e6:09:56:f6:5f:6f:27:7d: 39:c5:d6:4a:f9:a9:0b:1b:75:00:16:0a:40:fe:bd: d8:40:a1:50:c1:eb:8f:b5:97:c5:c8:e7:8d:e7:19: 6d:52:88:c3:d0:30:94:90:d0:57:5e:3e:57:1d:fa: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BD:43:51:4E:13:45:D4:B9:25:9D:96:18:45:9D:A0:6C:A2:23:A1 X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:49:56:80:d3:fc:ad:58:53:fa:6a:ec:6e:f1:f1:e5:61:eb: 22:c1:ca:cc:a1:2f:ae:e1:f5:7f:83:54:79:4b:04:b2:c5:11: 7b:75:3e:49:83:d3:e2:c0:2e:a4:be:82:eb:75:c1:3f:76:21: 23:e5:19:43:2c:8c:bf:dc:12:12:d8:64:84:af:29:67:82:7c: 71:13:da:54:e6:b8:96:98:30:95:1c:0c:bd:d6:cf:12:4a:34: 73:99:a2:4c:45:12:74:79:7b:38:24:da:39:9a:cd:87:e1:fe: e6:dd:d0:73:5a:69:96:17:88:be:b3:af:6a:7d:2a:d2:b6:c6: b5:0e:00:02:41:ff:6a:c2:9b:2b:38:16:f5:01:7b:27:2a:55: 0b:5e:ea:7e:b0:fa:08:69:5c:fa:c4:03:a5:2d:38:78:fd:08: 9c:c2:0c:c6:72:23:a1:0f:c2:7e:e8:3a:ad:59:13:dc:9e:ab: 09:42:c0:74:62:91:ad:78:de:eb:9d:6e:f5:93:f4:de:80:f4: c7:89:cd:14:16:13:09:bd:cd:63:02:64:09:31:68:e8:0c:34: 13:c8:28:a0:7b:a4:c1:7e:43:5e:67:3a:15:13:d6:f9:18:a1: 1e:96:0f:45:73:73:05:d9:f2:25:81:33:1d:8a:40:19:98:95: 13:97:cb:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjUxMTAyMjA1MjMyWhcNMjUxMTA5MjA1MjMyWjAYMRYwFAYD VQQDEw02OTA3YzQ5MC1hM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fxp0Pi7Z+C322aliJskFJ5AN7eOXH9ESZShVYV5sy5ZXQfhDVVXGo+JO6DX 6IJgT4VWpO2/Azm5U9l8IbakSozca1JssvfTNV9xuNYKfFL/89A/0KOyWQZQ3I2a 1BwyeWeMQMVBcFAKny4l99tJB4vXCbCSl3h2ZYw+xFaWnWpsyu8ZlRUdl3X3QDWx Es/vIenmCzhRvIGKWAGwMSQtN5eIyZh0No+tVwILP2rlZRmRGKeeuzEfagIL/IMP p21I5UoIp2+x6yde5glW9l9vJ305xdZK+akLG3UAFgpA/r3YQKFQweuPtZfFyOeN 5xltUojD0DCUkNBXXj5XHfooNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW9Q1FO E0XUuSWdlhhFnaBsoiOhMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjSVaA0/ytWFP6auxu8fHlYesiwcrMoS+u4fV/g1R5SwSyxRF7dT5J g9PiwC6kvoLrdcE/diEj5RlDLIy/3BIS2GSErylngnxxE9pU5riWmDCVHAy91s8S SjRzmaJMRRJ0eXs4JNo5ms2H4f7m3dBzWmmWF4i+s69qfSrStsa1DgACQf9qwpsr OBb1AXsnKlULXup+sPoIaVz6xAOlLTh4/QicwgzGciOhD8J+6DqtWRPcnqsJQsB0 YpGteN7rnW71k/TegPTHic0UFhMJvc1jAmQJMWjoDDQTyCige6TBfkNeZzoVE9b5 GKEelg9Fc3MF2fIlgTMdikAZmJUTl8tz -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:04 2025 by rpki-client