$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: HaYlOLYHgSwD0bR70ZVQNCQ0RPiWi1L5A6MUkAGkHO4= Subject key identifier: FE:66:32:A5:A2:87:7E:E6:98:DF:E4:61:D3:86:4A:59:B9:C5:DB:B6 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 0919 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 090D Signing time: Tue 04 Nov 2025 20:23:31 +0000 Manifest this update: Tue 04 Nov 2025 20:23:31 +0000 Manifest next update: Tue 11 Nov 2025 20:23:31 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: urlJdi+NG4dxIkgnz48NOTi0iZEz/lir94C5U31qfBg=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2329 (0x919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Nov 4 20:23:31 2025 GMT Not After : Nov 11 20:23:31 2025 GMT Subject: CN=690a60c3-3330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:1b:a7:37:67:26:cd:50:b2:15:0e:e1:6a: fe:8b:7e:bc:0d:d4:e0:f0:ce:4e:ba:87:ab:76:df: 61:c6:cb:f9:0d:2f:85:3e:d4:0f:d2:2c:49:81:d5: de:5e:7d:74:73:82:83:c9:79:e1:14:4d:15:12:b4: 9b:53:3d:38:e3:18:53:93:b5:56:9d:b5:3b:5a:07: e5:79:36:63:86:7f:d3:34:d0:6e:b1:7f:03:91:e6: a3:37:fa:65:fe:8b:7f:81:ef:bf:f9:46:05:c1:aa: 20:5f:a3:32:e2:2c:58:3b:ed:1a:21:2f:63:0d:81: 39:64:3f:b4:bb:a2:e4:bb:70:bb:23:13:9a:06:c1: 8d:36:ca:d5:06:95:c2:df:d2:ec:dc:0a:4c:c0:6c: d5:3e:f0:45:1c:dc:5a:27:b9:92:b6:99:83:8e:75: 9a:a3:be:8e:8f:2c:26:b6:59:33:da:00:87:d1:92: 39:4c:cb:69:df:04:d6:66:b8:19:6a:b0:bf:58:3f: e3:d3:c6:72:f9:5d:cf:3b:81:18:ec:85:14:95:fe: 6b:ca:17:c8:cc:08:83:3b:8d:5e:13:91:50:3c:89: a0:4f:7f:2e:da:6d:26:68:23:ba:f2:81:c1:97:6b: 87:6a:57:9b:b0:4a:44:6a:cb:71:77:77:1e:2e:99: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:66:32:A5:A2:87:7E:E6:98:DF:E4:61:D3:86:4A:59:B9:C5:DB:B6 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:26:b2:d3:50:ce:7f:14:ef:ac:23:12:3d:47:ef:7b:9f:ca: 5a:d9:47:9a:1a:09:a3:e1:f7:08:c0:d4:dd:49:fd:49:d0:dd: 2d:40:30:67:ae:92:b8:7d:d7:71:d2:fe:7b:96:3a:82:5a:93: 27:b4:d1:d9:57:72:d5:11:91:5f:9a:7d:66:ea:ce:ef:95:88: f1:46:ef:ed:dd:1b:e9:7f:e6:91:91:34:32:e4:61:c9:b6:08: dc:67:a7:62:5b:3d:ed:09:0a:79:11:04:8d:30:8c:18:fd:be: 35:25:14:7b:ea:f4:f7:6a:5d:af:77:46:5a:24:7d:3b:17:29: de:03:8d:1b:3c:fc:34:d8:23:ee:f0:46:72:52:aa:a2:b3:b7: 3f:1d:b1:8d:ed:5f:70:14:ec:54:9a:5a:b8:14:9b:fd:52:60: 77:f8:64:be:13:28:63:0b:83:e9:16:57:84:b9:2c:b5:c8:49: 5d:fb:98:88:38:b2:3f:0b:d1:6f:93:78:36:e2:60:6b:d5:25: 64:77:47:21:b6:aa:f4:15:8b:b1:5a:3d:6a:2a:50:30:d5:b7: 48:39:a9:d4:93:47:ed:dd:ee:5c:ad:1c:d3:5c:ce:a0:9a:cd: 47:e5:ca:5d:15:f9:75:d3:4c:d7:75:2e:24:7b:be:58:dd:5f: 3d:3a:6f:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUxMTA0MjAyMzMxWhcNMjUxMTExMjAyMzMxWjAYMRYwFAYD VQQDEw02OTBhNjBjMy0zMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskgbpzdnJs1QshUO4Wr+i368DdTg8M5Ouoerdt9hxsv5DS+FPtQP0ixJgdXe Xn10c4KDyXnhFE0VErSbUz044xhTk7VWnbU7WgfleTZjhn/TNNBusX8DkeajN/pl /ot/ge+/+UYFwaogX6My4ixYO+0aIS9jDYE5ZD+0u6Lku3C7IxOaBsGNNsrVBpXC 39Ls3ApMwGzVPvBFHNxaJ7mStpmDjnWao76Ojywmtlkz2gCH0ZI5TMtp3wTWZrgZ arC/WD/j08Zy+V3PO4EY7IUUlf5ryhfIzAiDO41eE5FQPImgT38u2m0maCO68oHB l2uHalebsEpEastxd3ceLpl9+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5mMqWi h37mmN/kYdOGSlm5xdu2MB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbJrLTUM5/FO+sIxI9R+97n8pa2UeaGgmj4fcIwNTdSf1J0N0tQDBn rpK4fddx0v57ljqCWpMntNHZV3LVEZFfmn1m6s7vlYjxRu/t3Rvpf+aRkTQy5GHJ tgjcZ6diWz3tCQp5EQSNMIwY/b41JRR76vT3al2vd0ZaJH07FyneA40bPPw02CPu 8EZyUqqis7c/HbGN7V9wFOxUmlq4FJv9UmB3+GS+EyhjC4PpFleEuSy1yEld+5iI OLI/C9Fvk3g24mBr1SVkd0chtqr0FYuxWj1qKlAw1bdIOanUk0ft3e5crRzTXM6g ms1H5cpdFfl100zXdS4ke75Y3V89Om94 -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:20 2025 by rpki-client