$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft File: UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json) Hash identifier: fa9H/3LPU+zIwI2roNUkL9GjcbcIqoBgU5Tb0oztLEg= Subject key identifier: E7:EC:9A:BC:DB:1A:17:11:4C:73:1F:C9:81:94:73:23:AD:FB:ED:BF Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Certificate serial: 20E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft Manifest number: 20C0 Signing time: Tue 04 Nov 2025 16:03:25 +0000 Manifest this update: Tue 04 Nov 2025 16:03:25 +0000 Manifest next update: Tue 11 Nov 2025 16:03:25 +0000 Files and hashes: 1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: TAEZwvSAxJgza8Q0z4vYSKk9maTrmMxi4vcIWhy2Cng=) 2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ebbHAc3H1xs8yb83KOxdepldMzKZEG2KB/oj0PgrPl0=) 3: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: ISWHnAnupcgdEe8p2mboULpSfRcbxX3lISCXNa8ynQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8416 (0x20e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Validity Not Before: Nov 4 16:03:25 2025 GMT Not After : Nov 11 16:03:25 2025 GMT Subject: CN=690a23cd-7928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:12:ae:8f:6e:2f:08:07:d7:e8:3b:4b:44: ab:60:48:d5:04:aa:2c:75:ed:21:97:67:30:b4:88: 27:08:da:ef:31:da:d8:d6:dc:16:2a:58:66:74:3a: 7a:c1:6b:6a:b0:1e:39:a2:8b:65:4e:a8:fb:a6:2b: 84:fd:77:56:25:41:87:06:4e:9e:59:43:ee:e5:b3: 62:9a:a2:35:54:93:e4:7d:f6:3c:14:21:e3:ad:27: 13:22:c2:db:9d:ac:49:bd:de:72:19:da:ec:77:da: 53:75:0a:96:02:7f:48:40:b8:18:69:a0:52:98:be: 9c:67:e1:e5:51:4b:66:fc:dc:30:14:d0:3a:fc:3e: c8:09:96:d7:8f:11:00:aa:0e:57:26:8d:b1:8d:4c: 6e:34:30:da:77:19:47:db:38:e0:e2:83:d6:8f:48: ac:39:c1:ce:06:d5:5e:d4:83:2b:82:d3:ce:04:55: 59:c7:55:9b:1f:0b:ff:8c:af:97:70:61:f9:82:58: 33:ac:c7:d4:61:59:6c:1b:0f:10:39:1b:73:a8:aa: 78:15:36:4c:9a:13:06:82:33:e9:88:c7:a6:96:a3: d2:79:ad:d0:91:72:c9:c5:99:b8:74:64:a0:e8:39: d9:fd:7b:27:d8:84:dc:e6:3b:2a:75:aa:04:58:a8: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EC:9A:BC:DB:1A:17:11:4C:73:1F:C9:81:94:73:23:AD:FB:ED:BF X509v3 Authority Key Identifier: keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8d:e2:52:90:a5:ff:63:e5:39:65:53:70:a8:36:59:6e:3b: ff:b6:ab:10:0a:aa:f7:54:bb:d9:fa:7d:0d:1a:6d:03:65:43: 97:dc:a9:5a:c0:ff:4c:67:7e:5f:50:b0:82:2f:3f:8f:b3:5c: 3b:2c:3e:89:00:a5:f9:4e:2f:96:42:a3:f5:03:79:26:90:32: 8f:0b:62:12:d1:6f:63:a4:f4:bc:d6:0f:74:5b:cc:10:fb:13: 94:18:ab:90:a4:7a:a7:f2:97:11:de:a2:d0:9f:8f:d5:c9:ff: 67:93:61:d3:3e:df:39:a9:e7:34:29:91:5d:65:c9:f0:b5:bf: 5c:21:c1:ae:31:73:82:f2:be:5a:b3:f1:c2:b0:3b:e0:86:d1: a1:2d:13:74:a3:fc:b2:7a:20:ea:d8:98:7d:2c:92:81:b6:61: 86:0b:44:c5:a0:6c:fd:82:79:c2:de:e6:95:b5:18:14:9c:84: 0e:21:6a:d6:b2:0a:57:93:30:07:27:1b:d7:a2:0a:a2:03:37: aa:7c:60:00:33:d3:1d:ad:2b:6c:d7:58:28:a9:d2:1a:f2:18: 98:5e:dc:d4:1f:4b:8f:ee:5a:27:55:7e:ee:f8:25:e0:7c:22: db:8c:fb:89:9c:42:b3:47:01:f9:d0:94:0a:fb:36:7c:a0:79: 6e:50:58:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5NjcxMTAvBgNVBAUTKDUzMzBFRUVFQjBEMEE5NTM1RkFDODUwNUU3MzU4NDNB RjZDRTYwQUYwHhcNMjUxMTA0MTYwMzI1WhcNMjUxMTExMTYwMzI1WjAYMRYwFAYD VQQDEw02OTBhMjNjZC03OTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGoSro9uLwgH1+g7S0SrYEjVBKosde0hl2cwtIgnCNrvMdrY1twWKlhmdDp6 wWtqsB45ootlTqj7piuE/XdWJUGHBk6eWUPu5bNimqI1VJPkffY8FCHjrScTIsLb naxJvd5yGdrsd9pTdQqWAn9IQLgYaaBSmL6cZ+HlUUtm/NwwFNA6/D7ICZbXjxEA qg5XJo2xjUxuNDDadxlH2zjg4oPWj0isOcHOBtVe1IMrgtPOBFVZx1WbHwv/jK+X cGH5glgzrMfUYVlsGw8QORtzqKp4FTZMmhMGgjPpiMemlqPSea3QkXLJxZm4dGSg 6DnZ/Xsn2ITc5jsqdaoEWKgIIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfsmrzb GhcRTHMfyYGUcyOt++2/MB8GA1UdIwQYMBaAFFMw7u6w0KlTX6yFBec1hDr2zmCv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTk2Ny8wQkJGMjU3ODE1 QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFWTmZySVVGNXpXRU92Yk9Z SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6RHU3ckRRcVZOZnJJVUY1eldFT3ZiT1lLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTk2Ny8wQkJGMjU3ODE1QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFW TmZySVVGNXpXRU92Yk9ZSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUjeJSkKX/Y+U5ZVNwqDZZbjv/tqsQCqr3VLvZ+n0NGm0DZUOX3Kla wP9MZ35fULCCLz+Ps1w7LD6JAKX5Ti+WQqP1A3kmkDKPC2IS0W9jpPS81g90W8wQ +xOUGKuQpHqn8pcR3qLQn4/Vyf9nk2HTPt85qec0KZFdZcnwtb9cIcGuMXOC8r5a s/HCsDvghtGhLRN0o/yyeiDq2Jh9LJKBtmGGC0TFoGz9gnnC3uaVtRgUnIQOIWrW sgpXkzAHJxvXogqiAzeqfGAAM9MdrSts11goqdIa8hiYXtzUH0uP7lonVX7u+CXg fCLbjPuJnEKzRwH50JQK+zZ8oHluUFiT -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:37 2025 by rpki-client