$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: Hc0ODaMNMDgwoGRY2IC5Z3tOe5OkoG+L7tFqd3hRL/U= Subject key identifier: E1:C2:BA:12:1D:AE:A5:E1:8D:F9:06:95:59:90:DE:17:28:E1:2E:F0 Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 8A Signing time: Mon 03 Nov 2025 06:33:52 +0000 Manifest this update: Mon 03 Nov 2025 06:33:51 +0000 Manifest next update: Mon 10 Nov 2025 06:33:51 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: azTCi2WLUjooyyVKmub0tC7Nuhi4W6MdqK9Fxm5AAiY=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Nov 3 06:33:51 2025 GMT Not After : Nov 10 06:33:51 2025 GMT Subject: CN=69084cd0-c6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:fb:f3:63:e7:f2:ff:3d:d0:2a:23:78:7a: 37:e1:40:29:9b:bd:ef:22:c5:7e:55:42:48:36:bd: 86:cb:ad:bc:18:ed:7c:a2:e5:d7:f1:91:7a:8d:01: f2:0b:5b:a7:d2:30:64:fd:7a:6c:e4:0d:e7:d5:69: 81:88:20:cb:a2:0f:79:f6:67:96:9d:91:73:b1:82: 70:b0:9a:9c:bd:c7:06:64:3f:8d:d5:48:87:05:db: 48:8b:02:37:97:1f:65:53:3d:c7:7e:ed:0d:20:46: 76:cc:c3:34:16:41:70:6a:b8:14:4e:fa:4c:3b:42: 8b:a9:29:8e:10:d8:d6:c3:b6:6c:7b:80:9c:ab:1d: 23:e1:9e:ed:2e:d1:06:d0:70:96:9d:a3:33:dc:97: 2a:1f:44:16:52:06:49:d4:d1:41:48:86:88:42:61: 12:ff:a2:49:b6:80:37:c6:74:65:bd:56:ff:1e:36: fc:1e:54:52:ae:be:3e:f3:8e:ed:06:79:83:7a:02: 2f:59:e6:ce:eb:58:56:23:a5:26:66:89:d2:d2:ea: 47:79:aa:2a:ac:63:1f:aa:9a:f4:ef:57:6e:ca:83: 09:c4:8c:30:5c:4d:2b:ae:dc:b4:c4:92:3c:3a:52: 49:b6:c8:28:d3:a4:79:eb:4f:4c:23:17:61:dc:14: 37:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C2:BA:12:1D:AE:A5:E1:8D:F9:06:95:59:90:DE:17:28:E1:2E:F0 X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:df:4c:83:6b:b1:93:e4:18:38:76:be:ff:3b:5c:2d:90:e2: 4f:59:38:6b:63:4f:03:9b:3f:ea:cd:7a:04:d8:8b:d4:c7:23: cd:d6:36:e7:cd:22:57:15:f8:3c:36:2e:38:f3:96:c1:35:83: 20:64:62:dc:4f:cd:f0:05:57:ee:de:70:66:7d:c6:67:72:74: 40:6c:a7:3b:e2:e9:1c:78:5b:19:ae:0e:ff:f4:f3:c2:19:2f: eb:a5:18:cf:3c:00:42:81:b6:ac:79:77:8f:1d:5d:3e:5e:14: 2e:1d:55:48:5d:ff:02:7b:8f:eb:bc:a4:d1:f1:68:5e:2d:43: 73:77:16:ca:95:0a:5c:db:c3:4a:55:19:58:d9:a3:7d:4c:86: 60:e6:41:43:1f:43:62:7d:d9:ff:1c:33:13:a6:7c:37:38:73: 2b:1d:01:4d:bf:69:01:74:62:8e:5b:1f:b5:0f:1d:5c:38:e8: bd:3d:7d:c6:ae:21:c5:6a:cc:7a:4e:db:7a:9e:ac:9e:df:74: 01:99:41:79:a2:00:ad:d6:f2:23:dd:6d:4d:16:cd:f5:34:bc: 7e:81:c1:56:c5:27:95:63:71:74:07:fd:32:f7:6a:8c:3e:ed: b1:92:11:df:c7:32:eb:f8:81:9b:ae:a4:d5:d8:b4:63:24:59: 8e:82:b9:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2REIxMTAvBgNVBAUTKEJCNTA1REZGMzJFQ0Q0OTJCRjFFRkY3RkUzOTRGMTI4 OTBBQTY3MzQwHhcNMjUxMTAzMDYzMzUxWhcNMjUxMTEwMDYzMzUxWjAYMRYwFAYD VQQDEw02OTA4NGNkMC1jNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1L782Pn8v890CojeHo34UApm73vIsV+VUJINr2Gy628GO18ouXX8ZF6jQHy C1un0jBk/Xps5A3n1WmBiCDLog959meWnZFzsYJwsJqcvccGZD+N1UiHBdtIiwI3 lx9lUz3Hfu0NIEZ2zMM0FkFwargUTvpMO0KLqSmOENjWw7Zse4Ccqx0j4Z7tLtEG 0HCWnaMz3JcqH0QWUgZJ1NFBSIaIQmES/6JJtoA3xnRlvVb/Hjb8HlRSrr4+847t BnmDegIvWebO61hWI6UmZonS0upHeaoqrGMfqpr071duyoMJxIwwXE0rrty0xJI8 OlJJtsgo06R5609MIxdh3BQ3RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHCuhId rqXhjfkGlVmQ3hco4S7wMB8GA1UdIwQYMBaAFLtQXf8y7NSSvx7/f+OU8SiQqmc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZEQi81MUJFMDEyNEU0 NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi91MUJkX3pMczFKS19IdjlfNDVUeEtKQ3Fa elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZEQi81MUJFMDEyNEU0NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi91MUJkX3pMczFK S19IdjlfNDVUeEtKQ3FaelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC630yDa7GT5Bg4dr7/O1wtkOJPWThrY08Dmz/qzXoE2IvUxyPN1jbn zSJXFfg8Ni4485bBNYMgZGLcT83wBVfu3nBmfcZncnRAbKc74ukceFsZrg7/9PPC GS/rpRjPPABCgbaseXePHV0+XhQuHVVIXf8Ce4/rvKTR8WheLUNzdxbKlQpc28NK VRlY2aN9TIZg5kFDH0Nifdn/HDMTpnw3OHMrHQFNv2kBdGKOWx+1Dx1cOOi9PX3G riHFasx6Ttt6nqye33QBmUF5ogCt1vIj3W1NFs31NLx+gcFWxSeVY3F0B/0y92qM Pu2xkhHfxzLr+IGbrqTV2LRjJFmOgrl3 -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:54 2025 by rpki-client