$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: 6fxYjApiEPWNT7fiWjvsoGCgLpdaHHp/TL3McEQwhl4= Subject key identifier: C2:EE:83:78:50:DB:9C:99:EB:0C:F2:21:FF:38:08:30:82:1C:32:E8 Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 0226 Signing time: Wed 05 Nov 2025 02:07:22 +0000 Manifest this update: Wed 05 Nov 2025 02:07:21 +0000 Manifest next update: Wed 12 Nov 2025 02:07:21 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: zjTIxQZitog0nC06tZ/2rSVRFTkcMfhnx/tlycImRbc=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: Nov 5 02:07:21 2025 GMT Not After : Nov 12 02:07:21 2025 GMT Subject: CN=690ab159-57c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:e3:66:38:c1:72:ef:cd:ce:40:4a:e9:92: 6b:99:b1:90:30:66:29:13:4f:9d:b2:ef:a8:15:b3: 9f:cd:47:6c:16:52:83:8b:b9:d4:81:5e:63:fa:21: 08:14:ed:98:9a:ee:d6:51:f1:4e:69:1b:05:07:a2: 60:5d:ef:a0:26:07:d2:22:06:bf:e8:a8:6f:44:63: 86:a8:88:ad:38:ec:18:d1:91:45:90:14:8a:00:13: 10:0a:96:50:a4:16:3f:17:21:bd:bd:fd:63:4c:d3: ec:6f:33:d4:97:44:88:d9:c0:3d:a5:88:5a:96:06: 1f:0f:b3:68:b9:f8:f3:44:0f:2b:1c:5a:10:78:7d: ff:d2:4a:74:3b:99:e2:28:31:7c:4e:a0:26:68:4e: ba:11:24:ec:b9:74:31:f0:c1:79:2d:1d:43:64:4f: 7d:b4:d4:b0:62:15:92:b2:48:93:c7:2d:86:a6:be: 67:c3:da:80:1b:0f:bb:4c:31:33:1b:37:3b:46:cf: 19:1f:31:b4:91:f8:d2:6b:ce:e4:7c:31:7c:ab:b7: 8a:2b:58:54:44:17:ce:12:6d:03:e6:c5:fb:2c:67: c1:ea:79:9e:bd:ae:11:7a:61:aa:b6:21:fc:ec:76: b3:cc:ee:de:87:d4:aa:68:6f:44:9a:64:2d:8f:4c: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EE:83:78:50:DB:9C:99:EB:0C:F2:21:FF:38:08:30:82:1C:32:E8 X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b6:9d:94:3a:ff:28:7a:5c:45:c1:c9:6d:0f:e8:38:c3:7e: 94:4e:52:40:81:b9:65:ce:20:cc:25:00:52:a9:16:f4:e9:af: 8e:cf:42:9b:bd:e1:e7:41:24:f6:90:2a:1a:a7:04:b5:f9:de: 3a:59:a9:02:14:93:17:7c:8b:f6:dc:47:dd:5f:00:86:86:8b: 4b:bb:d7:79:f1:83:61:ca:3a:c0:70:0a:36:61:23:87:c3:52: fb:23:1b:93:2b:bd:94:af:da:cf:07:7c:c1:be:4e:2f:63:05: 9a:22:d9:9f:3f:f4:a0:06:ea:cd:4d:be:9b:25:55:0a:be:ce: c4:fd:dc:11:79:cc:c6:82:95:9f:9f:34:0d:37:ad:cd:2d:2e: 6d:7d:09:a1:5c:ee:47:c8:b5:11:f9:6b:40:cd:44:74:32:1f: 7f:95:5a:6a:86:cb:48:6d:ac:9d:20:bb:0c:7e:df:ce:48:7a: 0c:d5:fc:e3:dd:ee:22:69:a4:a7:d5:c0:c6:f7:92:9d:e6:74: ff:88:78:cb:60:1d:3a:c3:1a:3c:c6:0a:a1:da:25:0f:fe:5b: 4e:2b:68:2a:0b:10:d1:bd:e4:2d:3d:bf:66:f2:66:11:65:6d: 69:28:39:db:f0:85:c5:b8:7b:a7:b0:a1:6c:de:92:2f:5b:ba: 93:37:cf:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjUxMTA1MDIwNzIxWhcNMjUxMTEyMDIwNzIxWjAYMRYwFAYD VQQDEw02OTBhYjE1OS01N2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgHjZjjBcu/NzkBK6ZJrmbGQMGYpE0+dsu+oFbOfzUdsFlKDi7nUgV5j+iEI FO2Ymu7WUfFOaRsFB6JgXe+gJgfSIga/6KhvRGOGqIitOOwY0ZFFkBSKABMQCpZQ pBY/FyG9vf1jTNPsbzPUl0SI2cA9pYhalgYfD7NoufjzRA8rHFoQeH3/0kp0O5ni KDF8TqAmaE66ESTsuXQx8MF5LR1DZE99tNSwYhWSskiTxy2Gpr5nw9qAGw+7TDEz Gzc7Rs8ZHzG0kfjSa87kfDF8q7eKK1hURBfOEm0D5sX7LGfB6nmeva4RemGqtiH8 7HazzO7eh9SqaG9EmmQtj0zruQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLug3hQ 25yZ6wzyIf84CDCCHDLoMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVtp2UOv8oelxFwcltD+g4w36UTlJAgbllziDMJQBSqRb06a+Oz0Kb veHnQST2kCoapwS1+d46WakCFJMXfIv23EfdXwCGhotLu9d58YNhyjrAcAo2YSOH w1L7IxuTK72Ur9rPB3zBvk4vYwWaItmfP/SgBurNTb6bJVUKvs7E/dwReczGgpWf nzQNN63NLS5tfQmhXO5HyLUR+WtAzUR0Mh9/lVpqhstIbaydILsMft/OSHoM1fzj 3e4iaaSn1cDG95Kd5nT/iHjLYB06wxo8xgqh2iUP/ltOK2gqCxDRveQtPb9m8mYR ZW1pKDnb8IXFuHunsKFs3pIvW7qTN8// -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:19 2025 by rpki-client