$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft File: uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json) Hash identifier: Ijs7iHGGkMp0wPaBYvp2DOYoaBJUh7+yHSOnVELiMHU= Subject key identifier: D2:D1:F7:EE:63:2C:41:4D:14:48:BA:F0:50:41:A7:9E:4F:28:C1:17 Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Certificate serial: 0FDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft Manifest number: 0FCD Signing time: Tue 04 Nov 2025 17:34:51 +0000 Manifest this update: Tue 04 Nov 2025 17:34:51 +0000 Manifest next update: Tue 11 Nov 2025 17:34:51 +0000 Files and hashes: 1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: vhDo3x83Fc8a2NSQU9zyDEnzpalI/bLpY9FW7mH6Ct4=) 2: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: IofhJ7EiHeyM1r1MV+JctpkNg1pbQMhCCkdpR4fk3JY=) 3: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: WDBmQN8GrovE0YfJl6NcfDbYlw4MdWA6w33AFuBSc4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4059 (0xfdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Validity Not Before: Nov 4 17:34:51 2025 GMT Not After : Nov 11 17:34:51 2025 GMT Subject: CN=690a393b-cba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:c1:6e:89:33:5b:8c:f4:fc:03:27:a4:89: 22:f1:f4:04:05:cf:e9:e5:43:fc:b2:fd:3a:60:68: da:46:78:ba:61:0d:55:ab:70:de:01:ce:c8:16:de: 12:bc:14:76:1a:e5:6c:ff:a1:a5:cb:ce:ea:9a:08: 40:6d:70:6a:b1:fa:2d:2a:d9:48:49:dd:7a:48:a8: 84:e7:4b:bc:04:0f:38:a4:f6:56:4a:b9:81:cc:0c: f2:ea:dd:b7:8a:ab:15:b1:3f:d0:fa:73:ee:14:13: 75:10:9e:d8:16:45:50:fc:13:84:0e:a5:28:56:4b: e1:5f:a2:c3:99:7f:f2:b6:f4:90:a9:49:db:f8:43: bb:9d:06:e7:38:01:c4:1e:c0:0e:40:a5:ce:1e:1c: 15:25:54:91:66:d4:ee:5d:34:a2:a4:7a:6d:46:01: b3:70:8b:a8:be:1a:c8:0f:d0:1e:e8:3d:25:86:a8: 38:2f:b7:43:c2:b9:54:ae:85:71:ef:ca:e5:a0:3e: 5b:0b:56:97:b8:7c:2d:d4:f7:c5:30:aa:15:9b:37: ed:a5:ba:c0:c6:87:4d:40:1b:b1:7e:cd:8e:e9:07: 27:0a:8a:27:ad:dd:60:a7:cf:09:bb:aa:34:6c:7d: 42:fe:0b:05:0e:d2:ee:24:66:8d:72:fe:9f:c4:5c: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D1:F7:EE:63:2C:41:4D:14:48:BA:F0:50:41:A7:9E:4F:28:C1:17 X509v3 Authority Key Identifier: keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:27:2c:45:61:74:2d:1b:df:f6:e7:22:af:b5:94:52:a7:9d: 04:6c:9e:fb:4b:cd:ad:0a:34:4f:de:95:62:f4:d0:2e:51:7c: 0b:da:e7:ad:b6:a8:56:83:b2:ef:72:2b:be:82:3c:61:8c:26: e6:43:28:99:51:a2:0d:92:78:b3:b9:56:aa:e1:a8:49:96:60: 33:52:ba:49:2e:e4:55:dc:d7:8f:84:93:a5:31:a1:e2:f3:35: 94:79:3e:c0:4e:f1:d6:44:35:6b:8d:bf:34:75:d3:33:3b:78: 73:1d:ef:40:5e:f9:97:d2:71:c5:89:ad:8f:a8:ee:71:1d:e2: 3c:09:45:af:cc:76:c7:d0:e2:81:e7:45:42:a4:6d:47:9e:da: 16:90:a3:70:75:10:cb:50:9b:d9:1b:80:3a:e2:0f:e1:13:6a: 0e:40:be:ae:a0:e5:4c:97:6e:bb:dd:79:74:c7:ba:2d:c6:b0: 1d:b0:31:fa:97:d0:90:0b:83:2e:98:b0:6c:ec:c5:9d:f8:e8: 1f:9c:91:0c:68:99:e7:eb:34:4b:82:c8:cc:5e:f2:0e:85:ba: 0f:70:d7:4d:ac:b7:cc:46:4f:20:ec:89:d1:6f:75:21:ea:52: 95:77:63:70:50:8f:08:2e:44:4a:6d:bf:22:13:24:6f:9f:5d: 92:3e:e6:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD QzE0MURGOEYwHhcNMjUxMTA0MTczNDUxWhcNMjUxMTExMTczNDUxWjAYMRYwFAYD VQQDEw02OTBhMzkzYi1jYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tXBbokzW4z0/AMnpIki8fQEBc/p5UP8sv06YGjaRni6YQ1Vq3DeAc7IFt4S vBR2GuVs/6Gly87qmghAbXBqsfotKtlISd16SKiE50u8BA84pPZWSrmBzAzy6t23 iqsVsT/Q+nPuFBN1EJ7YFkVQ/BOEDqUoVkvhX6LDmX/ytvSQqUnb+EO7nQbnOAHE HsAOQKXOHhwVJVSRZtTuXTSipHptRgGzcIuovhrID9Ae6D0lhqg4L7dDwrlUroVx 78rloD5bC1aXuHwt1PfFMKoVmzftpbrAxodNQBuxfs2O6QcnCoonrd1gp88Ju6o0 bH1C/gsFDtLuJGaNcv6fxFzyrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLR9+5j LEFNFEi68FBBp55PKMEXMB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlBMy83NjQzNUZFRTYzODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXho cXVoQmVVREtQbW5NRkIzNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQJyxFYXQtG9/25yKvtZRSp50EbJ77S82tCjRP3pVi9NAuUXwL2uet tqhWg7Lvciu+gjxhjCbmQyiZUaINknizuVaq4ahJlmAzUrpJLuRV3NePhJOlMaHi 8zWUeT7ATvHWRDVrjb80ddMzO3hzHe9AXvmX0nHFia2PqO5xHeI8CUWvzHbH0OKB 50VCpG1HntoWkKNwdRDLUJvZG4A64g/hE2oOQL6uoOVMl2673Xl0x7otxrAdsDH6 l9CQC4MumLBs7MWd+OgfnJEMaJnn6zRLgsjMXvIOhboPcNdNrLfMRk8g7InRb3Uh 6lKVd2NwUI8ILkRKbb8iEyRvn12SPuZq -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:40 2025 by rpki-client