$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: ifdL/CItS4QSPDZ9PsCrFUGoRZUngE8oXlPVLs000NE= Subject key identifier: 12:C1:EB:06:A4:EA:FB:08:89:86:AB:3F:33:1A:E3:97:65:96:D7:75 Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: FF Signing time: Mon 03 Nov 2025 05:06:08 +0000 Manifest this update: Mon 03 Nov 2025 05:06:08 +0000 Manifest next update: Mon 10 Nov 2025 05:06:08 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: /xUZ7jcS24xJ5p3x5t8joS2kvRbB3s8zyF+AXkCQbOA=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324 Validity Not Before: Nov 3 05:06:08 2025 GMT Not After : Nov 10 05:06:08 2025 GMT Subject: CN=69083840-45a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:a5:da:39:0e:b1:e1:a6:73:d0:86:f3:fe: 24:58:60:4c:ba:a2:da:96:fe:dc:f9:a0:0e:a9:70: 91:79:6a:86:19:7c:4d:25:73:05:12:b5:b9:7d:3a: 8c:97:ea:95:ae:0c:0f:03:3d:78:e9:1b:6d:e5:e8: 52:06:0a:4a:53:06:79:39:22:d2:17:2d:6e:9a:b4: f5:1f:10:a2:fc:08:aa:a9:87:d2:47:c3:bf:16:86: 40:10:0a:51:b8:80:82:7a:c6:fb:01:ca:92:a9:6c: fd:d1:97:0e:ac:98:47:58:34:4d:04:6a:68:5c:8e: af:2b:be:17:61:50:18:83:42:c2:b3:9f:c9:5f:96: ce:07:65:4e:be:a6:9c:c7:2f:36:b6:84:22:46:db: e1:57:7a:bd:7d:f8:21:c6:32:69:72:3a:be:01:a8: ea:d3:85:4b:c7:77:30:1b:49:c6:57:87:c4:90:1c: 50:97:94:06:55:a2:a4:10:06:53:fb:09:46:19:03: 6f:2b:35:36:71:74:c6:0e:38:0e:2d:aa:bc:e6:c0: 70:e9:96:52:f3:4a:d1:34:ba:6c:0d:12:f2:c3:b2: 29:21:c2:38:92:92:5e:7b:19:3e:6e:06:f3:01:c4: af:e7:2a:1e:49:92:c1:74:ca:0b:53:c1:2b:42:2d: 4a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C1:EB:06:A4:EA:FB:08:89:86:AB:3F:33:1A:E3:97:65:96:D7:75 X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2a:a2:b4:3b:29:07:94:63:93:81:c2:98:74:a1:d5:1f:96: 38:80:b3:17:8e:62:e3:91:23:9c:07:79:e6:70:d9:6b:82:18: 97:51:b8:67:ab:c6:03:c4:60:fd:33:7a:bd:30:43:32:a9:74: de:88:a7:ee:12:3c:a1:d8:83:c0:82:49:ea:99:1b:92:61:f2: 47:c6:ad:fc:26:12:e2:33:00:b0:e6:02:0e:3a:1f:96:b3:9f: aa:a8:97:7b:20:5b:2b:80:48:bf:16:bc:d6:cd:75:1a:6c:84: 71:b2:a7:95:06:8c:d0:42:69:a0:1e:be:1a:bb:f7:7d:ca:5d: 0e:0c:82:07:03:4b:bb:cf:9e:6d:8f:1d:d8:e2:d4:7a:4f:67: 52:69:a7:34:d8:0e:8d:a3:14:f5:35:f7:b1:d4:8b:7d:e5:bd: 1a:a6:0b:28:13:d2:b4:e3:44:2d:95:51:5e:db:86:77:bc:b0: 93:ef:6a:bd:58:4c:42:12:94:79:43:41:fb:b9:ec:92:4b:79: a9:1c:da:9d:3f:06:81:96:39:72:99:e8:c7:23:0d:f6:11:49: 2c:71:93:ed:3f:7d:34:ad:41:2a:1c:68:9d:34:84:48:bc:85: 63:0d:88:55:fe:60:1a:e5:30:80:ba:ea:d0:98:8b:54:34:bd: b6:aa:d6:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0 NjU0MTQzMjQwHhcNMjUxMTAzMDUwNjA4WhcNMjUxMTEwMDUwNjA4WjAYMRYwFAYD VQQDEw02OTA4Mzg0MC00NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+al2jkOseGmc9CG8/4kWGBMuqLalv7c+aAOqXCReWqGGXxNJXMFErW5fTqM l+qVrgwPAz146Rtt5ehSBgpKUwZ5OSLSFy1umrT1HxCi/AiqqYfSR8O/FoZAEApR uICCesb7AcqSqWz90ZcOrJhHWDRNBGpoXI6vK74XYVAYg0LCs5/JX5bOB2VOvqac xy82toQiRtvhV3q9ffghxjJpcjq+Aajq04VLx3cwG0nGV4fEkBxQl5QGVaKkEAZT +wlGGQNvKzU2cXTGDjgOLaq85sBw6ZZS80rRNLpsDRLyw7IpIcI4kpJeexk+bgbz AcSv5yoeSZLBdMoLU8ErQi1KAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLB6wak 6vsIiYarPzMa45dlltd1MB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi83ODk3RjgxNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6 a0o5Wkhoa0pYeUpHVkJReVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9KqK0OykHlGOTgcKYdKHVH5Y4gLMXjmLjkSOcB3nmcNlrghiXUbhn q8YDxGD9M3q9MEMyqXTeiKfuEjyh2IPAgknqmRuSYfJHxq38JhLiMwCw5gIOOh+W s5+qqJd7IFsrgEi/FrzWzXUabIRxsqeVBozQQmmgHr4au/d9yl0ODIIHA0u7z55t jx3Y4tR6T2dSaac02A6NoxT1Nfex1It95b0apgsoE9K040QtlVFe24Z3vLCT72q9 WExCEpR5Q0H7ueySS3mpHNqdPwaBljlymejHIw32EUkscZPtP300rUEqHGidNIRI vIVjDYhV/mAa5TCAuurQmItUNL22qtaN -----END CERTIFICATE-----Generated at Wed Nov 5 04:48:21 2025 by rpki-client