$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft File: rUR6Z_B-gc0JwyLs0QrZQWvESys.mft (raw, json) Hash identifier: lPKAlUpFW9lV1D0MkAhpFg4KWffOmX22udqI1bz7Kps= Subject key identifier: 7F:76:88:AC:7E:F6:1E:F4:FB:32:C0:DF:C4:91:6C:5C:C7:E5:F8:0E Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B Certificate issuer: /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft Manifest number: 044E Signing time: Tue 04 Nov 2025 23:53:48 +0000 Manifest this update: Tue 04 Nov 2025 23:53:47 +0000 Manifest next update: Tue 11 Nov 2025 23:53:47 +0000 Files and hashes: 1: rUR6Z_B-gc0JwyLs0QrZQWvESys.crl (hash: HLtcde7HMKNdaeaoE1khSyWkNOLpaUTDivvTROjdt3o=) 2: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (hash: /8IJZqUqWTlleISqmqBCzCx51/D+1Ajxq0hCjjaBFnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B Validity Not Before: Nov 4 23:53:47 2025 GMT Not After : Nov 11 23:53:47 2025 GMT Subject: CN=690a920c-8f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:53:f6:fb:25:9e:8a:65:4e:0f:ad:a3:e5: f4:57:65:97:c5:62:8b:28:98:0a:10:e2:ba:87:d1: cf:c8:75:c0:97:7c:8e:3b:ce:ea:89:78:98:2b:9e: 1e:54:8a:e3:ca:5e:21:fe:53:2d:a7:0f:08:18:79: 73:45:d6:26:37:e4:ae:ee:a1:ba:76:90:62:0a:a8: 8f:1b:e4:81:78:28:ab:ed:2d:4d:c0:0e:10:17:ee: 37:14:94:aa:71:92:4e:61:dc:ad:b8:37:07:72:57: 6e:1b:a8:16:c2:4f:ce:59:14:37:b0:4d:ec:04:72: 52:b3:6c:ad:8b:9b:67:e5:5f:2c:35:c6:bd:01:f4: 54:b7:2d:b6:9e:fd:51:22:8d:bb:df:1c:67:4f:82: 55:89:6e:c3:cc:1a:29:53:5b:60:6f:10:8e:4c:e8: 6c:d9:e4:93:55:2e:b7:d5:32:4a:05:4d:b1:bb:a2: cd:41:ff:56:b5:e5:66:45:73:89:c1:30:32:48:6d: ad:ad:33:df:7d:70:5b:9d:3f:d2:70:ed:d1:0f:39: 1a:e1:ed:fd:0b:5e:10:2f:85:90:22:2d:77:e2:2f: fc:48:77:62:c1:02:7a:6f:a4:e4:f1:0b:d9:b5:7d: 46:4a:35:c6:00:62:bb:00:d7:95:6a:2f:8c:6a:0c: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:76:88:AC:7E:F6:1E:F4:FB:32:C0:DF:C4:91:6C:5C:C7:E5:F8:0E X509v3 Authority Key Identifier: keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b9:8f:32:fa:e2:a6:fd:e2:6e:0e:4f:63:f3:7b:6d:ba:7e: ae:4e:d4:69:28:8c:a8:ad:90:9a:57:c6:a3:dd:14:0f:5c:02: e4:09:f9:98:0c:c2:8f:0c:39:b3:b9:48:43:00:18:d5:91:1e: 5f:1f:e0:fb:e3:24:57:16:17:2a:5f:da:29:11:c2:5c:3f:66: f6:7f:6a:39:ff:7f:81:84:be:40:67:f8:4e:17:26:83:8e:61: 5f:d0:3f:67:31:10:c6:bb:3c:af:5c:18:f6:7c:aa:17:2d:c3: ca:24:3a:cf:ae:3e:d7:92:c7:d2:a3:fb:fd:50:7c:9d:73:3c: 54:6c:70:6b:16:af:b8:2e:d5:6d:2e:18:5f:2a:17:ca:84:65: b8:64:a3:e0:ae:d1:70:75:1c:81:5b:c5:bd:02:53:02:2b:d1: 08:68:c1:47:87:2e:0b:18:64:1c:2e:da:13:49:46:fc:37:ca: c8:f1:94:9f:b9:e1:00:68:69:da:a4:b1:17:5e:0f:96:44:56: 08:56:9b:f2:bb:36:63:b4:91:8e:38:6f:58:19:94:3d:be:55: c2:85:f8:37:a6:14:99:7f:a1:5d:14:ff:63:88:7a:c4:81:85: d7:2a:db:ea:68:e1:f5:0f:62:bf:b9:70:e1:82:57:7a:10:c5: c8:fd:97:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKEFENDQ3QTY3RjA3RTgxQ0QwOUMzMjJFQ0QxMEFEOTQx NkJDNDRCMkIwHhcNMjUxMTA0MjM1MzQ3WhcNMjUxMTExMjM1MzQ3WjAYMRYwFAYD VQQDEw02OTBhOTIwYy04ZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoopT9vslnoplTg+to+X0V2WXxWKLKJgKEOK6h9HPyHXAl3yOO87qiXiYK54e VIrjyl4h/lMtpw8IGHlzRdYmN+Su7qG6dpBiCqiPG+SBeCir7S1NwA4QF+43FJSq cZJOYdytuDcHclduG6gWwk/OWRQ3sE3sBHJSs2yti5tn5V8sNca9AfRUty22nv1R Io273xxnT4JViW7DzBopU1tgbxCOTOhs2eSTVS631TJKBU2xu6LNQf9WteVmRXOJ wTAySG2trTPffXBbnT/ScO3RDzka4e39C14QL4WQIi134i/8SHdiwQJ6b6Tk8QvZ tX1GSjXGAGK7ANeVai+MagwsSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH92iKx+ 9h70+zLA38SRbFzH5fgOMB8GA1UdIwQYMBaAFK1EemfwfoHNCcMi7NEK2UFrxEsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi85QzBFRjgzQTc0 RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdjMEp3eUxzMFFyWlFXdkVT eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JVUjZaX0ItZ2MwSnd5THMwUXJaUVd2RVN5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi85QzBFRjgzQTc0RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdj MEp3eUxzMFFyWlFXdkVTeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeuY8y+uKm/eJuDk9j83ttun6uTtRpKIyorZCaV8aj3RQPXALkCfmY DMKPDDmzuUhDABjVkR5fH+D74yRXFhcqX9opEcJcP2b2f2o5/3+BhL5AZ/hOFyaD jmFf0D9nMRDGuzyvXBj2fKoXLcPKJDrPrj7XksfSo/v9UHydczxUbHBrFq+4LtVt LhhfKhfKhGW4ZKPgrtFwdRyBW8W9AlMCK9EIaMFHhy4LGGQcLtoTSUb8N8rI8ZSf ueEAaGnapLEXXg+WRFYIVpvyuzZjtJGOOG9YGZQ9vlXChfg3phSZf6FdFP9jiHrE gYXXKtvqaOH1D2K/uXDhgld6EMXI/ZcV -----END CERTIFICATE-----Generated at Wed Nov 5 20:51:56 2025 by rpki-client