$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: z6S7KH5nDW80USQV+2x79651MsaFi/OBDuV+rm6XWoA= Subject key identifier: 5E:39:43:38:7D:43:D6:93:C0:B4:17:F6:16:B4:DB:A3:4C:41:E3:41 Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0A9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0A99 Signing time: Tue 04 Nov 2025 19:38:51 +0000 Manifest this update: Tue 04 Nov 2025 19:38:50 +0000 Manifest next update: Tue 11 Nov 2025 19:38:50 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: lE9AemeRu0wSuP9XY7hha+jeT4qj8qtw2PUh+0VUCP4=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2719 (0xa9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Nov 4 19:38:50 2025 GMT Not After : Nov 11 19:38:50 2025 GMT Subject: CN=690a564b-8239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:ed:f0:f5:0a:9d:1b:a1:e2:9a:3f:e7:92: 08:2b:61:59:72:46:0a:70:fd:c3:55:8e:f0:96:7d: c7:04:ca:97:d2:69:2e:f8:11:be:75:2e:81:09:37: 01:0d:1e:a8:e1:6a:1f:04:96:94:81:83:86:f9:c8: 78:a9:0e:25:17:09:ef:1e:a8:6e:9c:00:0b:c0:b4: 9f:66:6b:6a:1f:71:e3:e6:42:16:e6:d1:b6:b1:d9: 02:e6:43:b9:78:b4:89:a6:27:69:a7:56:7d:d7:a5: 09:f3:ee:63:d7:9c:9d:bd:21:c5:51:10:68:07:30: 49:4d:d9:f0:21:77:78:52:75:c5:ad:95:85:5d:a9: ae:4b:86:c7:1b:ae:95:0d:c9:2d:60:f5:84:6c:ae: da:42:f8:27:a0:c5:7a:cc:3d:85:27:9e:93:1f:d0: ec:77:78:23:7d:23:a9:59:20:22:01:31:f6:cc:77: 54:ef:80:eb:72:02:d5:d9:ae:98:c0:bf:32:7e:79: 43:88:18:ea:ce:af:c3:c4:cf:d6:71:3e:83:18:37: d9:b0:ef:8e:b2:67:bf:e1:82:b5:97:0e:44:26:59: 08:04:8b:90:73:02:0b:29:6c:39:d9:e3:cb:0c:fe: 0b:59:35:a6:d5:1e:f6:59:e4:4d:52:05:5d:b6:99: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:39:43:38:7D:43:D6:93:C0:B4:17:F6:16:B4:DB:A3:4C:41:E3:41 X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:41:af:70:19:b1:16:e1:98:ad:91:4b:92:db:5a:62:51:9e: 6a:98:e8:bc:74:7e:cc:4f:6f:24:b1:09:1e:d9:b1:7f:f4:c7: db:11:36:4e:f3:ed:28:51:74:1b:2d:fe:f1:e2:80:6b:0c:c0: 97:4e:f5:39:6c:6b:98:2b:06:ae:e6:8d:ad:9d:de:de:91:78: c5:0c:79:81:de:8f:21:e6:b7:33:77:47:40:75:8b:e8:af:a5: af:fd:c3:4b:73:de:8f:24:c1:4c:85:ec:c9:b6:e2:79:27:6a: 8e:d6:78:fc:20:cd:29:07:4e:7a:97:e8:b6:d3:43:8f:0b:67: 9e:8e:15:2b:4a:9b:7e:43:e7:87:e7:de:31:02:e5:de:e2:99: d1:5f:a7:59:71:d2:7a:df:25:0d:01:08:cb:0d:5d:32:bb:2b: 24:42:3b:12:27:3f:e8:7f:74:27:49:f5:82:19:8d:fb:02:06: d7:28:c3:de:3e:ee:b2:1b:f9:54:58:ea:29:8d:91:16:e4:fc: f1:e3:8f:ea:4f:54:e7:49:aa:34:15:c0:eb:21:53:7b:fb:88: fc:86:d6:63:b5:be:75:77:ec:62:04:d7:57:eb:0e:a7:87:04: f9:cf:6e:8e:c2:6e:66:67:dc:37:d7:3e:84:56:14:af:ce:42: fb:55:92:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjUxMTA0MTkzODUwWhcNMjUxMTExMTkzODUwWjAYMRYwFAYD VQQDEw02OTBhNTY0Yi04MjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunft8PUKnRuh4po/55IIK2FZckYKcP3DVY7wln3HBMqX0mku+BG+dS6BCTcB DR6o4WofBJaUgYOG+ch4qQ4lFwnvHqhunAALwLSfZmtqH3Hj5kIW5tG2sdkC5kO5 eLSJpidpp1Z916UJ8+5j15ydvSHFURBoBzBJTdnwIXd4UnXFrZWFXamuS4bHG66V DcktYPWEbK7aQvgnoMV6zD2FJ56TH9Dsd3gjfSOpWSAiATH2zHdU74DrcgLV2a6Y wL8yfnlDiBjqzq/DxM/WcT6DGDfZsO+Osme/4YK1lw5EJlkIBIuQcwILKWw52ePL DP4LWTWm1R72WeRNUgVdtpmIgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF45Qzh9 Q9aTwLQX9ha026NMQeNBMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMQa9wGbEW4ZitkUuS21piUZ5qmOi8dH7MT28ksQke2bF/9MfbETZO 8+0oUXQbLf7x4oBrDMCXTvU5bGuYKwau5o2tnd7ekXjFDHmB3o8h5rczd0dAdYvo r6Wv/cNLc96PJMFMhezJtuJ5J2qO1nj8IM0pB056l+i200OPC2eejhUrSpt+Q+eH 594xAuXe4pnRX6dZcdJ63yUNAQjLDV0yuyskQjsSJz/of3QnSfWCGY37AgbXKMPe Pu6yG/lUWOopjZEW5Pzx44/qT1TnSao0FcDrIVN7+4j8htZjtb51d+xiBNdX6w6n hwT5z26Owm5mZ9w31z6EVhSvzkL7VZJI -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:49 2025 by rpki-client