$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft File: UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json) Hash identifier: mHcZsiQe7WZqi7bjb5EBD9b7bqm2cQLAaXt2mjS4wbg= Subject key identifier: BD:10:D0:5A:42:18:E1:15:51:8E:EA:9A:15:22:28:38:79:11:20:ED Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Certificate serial: 1D60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft Manifest number: 1D54 Signing time: Tue 04 Nov 2025 16:14:23 +0000 Manifest this update: Tue 04 Nov 2025 16:14:23 +0000 Manifest next update: Tue 11 Nov 2025 16:14:23 +0000 Files and hashes: 1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: Sl3jWFWBn1UpJMDLZECROtnt8dEcIBSVcd+Ga6D61Rk=) 2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 0pFtdAh/nKnP5eoxsGxODsFcMEqhXHUTJ4P3f5IMFhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7520 (0x1d60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A0, serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Validity Not Before: Nov 4 16:14:23 2025 GMT Not After : Nov 11 16:14:23 2025 GMT Subject: CN=690a265f-1eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:a5:0e:ee:ff:9d:29:c0:ad:a6:a3:4a:a4: 46:58:ee:7d:f2:b2:90:25:e7:d8:e4:94:03:d0:d8: 1e:01:02:67:f7:dd:21:db:1c:a3:6d:eb:0d:d0:29: 45:9f:d3:d2:8f:03:4e:1b:de:75:e8:14:2b:13:39: 96:74:77:38:d7:b6:9e:d3:3a:06:84:6f:e3:bc:d3: da:1a:44:2b:d2:c4:5a:9b:ac:c9:48:1c:69:12:94: 6d:cc:e3:33:0e:20:3f:63:53:72:1a:49:cb:84:62: ae:44:7a:37:bb:0c:df:e5:6c:e4:9b:d7:6f:db:8c: c0:56:88:88:ce:46:55:ef:0c:ec:28:ec:fc:99:b2: 68:ba:21:e7:24:d3:d6:2d:d0:01:c7:7c:b5:23:18: fe:dc:06:57:8c:38:97:5c:f5:3b:98:45:57:78:a3: b0:0b:cf:33:6d:fc:9f:60:0d:c6:c2:bc:89:e8:9a: a7:0c:e5:c6:56:d7:6f:68:d4:a9:8c:f9:d0:3b:71: b1:6e:00:2c:a0:db:b0:ed:8e:97:23:fd:94:80:93: 8c:1e:14:39:34:32:92:22:ed:59:f9:d1:ac:85:4f: 91:d6:c1:7c:2d:31:b1:b3:74:d6:cc:d4:6b:e9:7b: 0a:94:f1:43:c5:b1:38:f6:7b:b3:92:f3:09:07:8d: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:10:D0:5A:42:18:E1:15:51:8E:EA:9A:15:22:28:38:79:11:20:ED X509v3 Authority Key Identifier: keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ed:0a:6e:fb:de:43:8a:e6:08:18:93:0e:ea:8b:c6:c8:a2: 64:e8:31:96:3d:8a:5a:ba:83:18:91:d8:bb:45:72:ea:14:7a: 46:f3:cd:68:3e:34:a5:2f:87:0f:ab:94:d5:68:db:9d:20:0c: 81:00:06:2d:32:72:f1:b3:db:5e:93:7d:96:cc:f7:75:e6:7c: b7:57:a2:53:86:95:30:3a:8d:3c:10:de:fd:13:d5:b9:48:bb: bc:c5:e2:8e:28:b0:71:bf:01:30:fc:36:49:6e:9d:a2:c7:cc: d7:5f:5c:c0:f8:53:b0:4d:7d:ff:2e:3d:0c:7e:2c:98:88:d0: 91:a6:ab:fd:fe:1c:49:30:aa:bd:5a:5d:19:9f:46:fb:7d:4e: 8b:41:cf:c6:97:10:92:6a:f2:37:a3:ac:72:35:8b:72:25:2d: 06:dd:19:b3:59:2e:66:ba:80:b1:13:39:3d:1c:30:ad:77:20: 72:ba:90:4e:3e:ba:b2:fa:b9:a6:16:1a:33:8e:aa:24:4c:99: 72:f9:e3:8d:30:f4:00:86:e6:1e:8a:fb:45:f2:4e:d7:c0:c2: 84:29:ce:3f:7f:af:8a:76:f4:75:6a:15:33:fd:34:c0:0b:65: 64:a7:64:33:a8:48:2b:62:46:bd:c0:a3:9e:4b:39:54:17:92: a5:8e:74:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTAxMTAvBgNVBAUTKDUzMjg2MTZFNzc5NDU0N0VCOUNFOTJCNEE4RjA0NUU0 QjJDQ0MwRkMwHhcNMjUxMTA0MTYxNDIzWhcNMjUxMTExMTYxNDIzWjAYMRYwFAYD VQQDEw02OTBhMjY1Zi0xZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssqlDu7/nSnAraajSqRGWO598rKQJefY5JQD0NgeAQJn990h2xyjbesN0ClF n9PSjwNOG9516BQrEzmWdHc417ae0zoGhG/jvNPaGkQr0sRam6zJSBxpEpRtzOMz DiA/Y1NyGknLhGKuRHo3uwzf5Wzkm9dv24zAVoiIzkZV7wzsKOz8mbJouiHnJNPW LdABx3y1Ixj+3AZXjDiXXPU7mEVXeKOwC88zbfyfYA3GwryJ6JqnDOXGVtdvaNSp jPnQO3GxbgAsoNuw7Y6XI/2UgJOMHhQ5NDKSIu1Z+dGshU+R1sF8LTGxs3TWzNRr 6XsKlPFDxbE49nuzkvMJB41URQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0Q0FpC GOEVUY7qmhUiKDh5ESDtMB8GA1UdIwQYMBaAFFMoYW53lFR+uc6StKjwReSyzMD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMC8wRTRBRDEyOEJD NEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZINjV6cEswcVBCRjVMTE13 UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5aGhibmVVVkg2NXpwSzBxUEJGNUxMTXdQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMC8wRTRBRDEyOEJDNEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZI NjV6cEswcVBCRjVMTE13UHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe7Qpu+95DiuYIGJMO6ovGyKJk6DGWPYpauoMYkdi7RXLqFHpG881o PjSlL4cPq5TVaNudIAyBAAYtMnLxs9tek32WzPd15ny3V6JThpUwOo08EN79E9W5 SLu8xeKOKLBxvwEw/DZJbp2ix8zXX1zA+FOwTX3/Lj0MfiyYiNCRpqv9/hxJMKq9 Wl0Zn0b7fU6LQc/GlxCSavI3o6xyNYtyJS0G3RmzWS5muoCxEzk9HDCtdyByupBO Prqy+rmmFhozjqokTJly+eONMPQAhuYeivtF8k7XwMKEKc4/f6+KdvR1ahUz/TTA C2Vkp2QzqEgrYka9wKOeSzlUF5KljnQD -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:33 2025 by rpki-client