$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json) Hash identifier: TmIDQCJQRNQy1qemoOhHl977LfY6Ve0ujWOKwlsutMk= Subject key identifier: A0:40:00:42:46:8C:34:C9:A2:A5:54:88:C2:75:0C:55:5D:94:85:E7 Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 0838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft Manifest number: 0820 Signing time: Tue 04 Nov 2025 20:57:45 +0000 Manifest this update: Tue 04 Nov 2025 20:57:44 +0000 Manifest next update: Tue 11 Nov 2025 20:57:44 +0000 Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: t9eXCq2UsemXA0qxV8zKpO8p6RFTCotaUYIhgjocfzo=) 2: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=) 3: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=) 4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=) 5: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=) 6: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Nov 4 20:57:44 2025 GMT Not After : Nov 11 20:57:44 2025 GMT Subject: CN=690a68c9-4f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:1b:36:fb:f9:b9:99:ae:36:b3:f3:d2:03: 52:31:b0:6b:31:f8:07:36:fb:58:c6:71:01:53:b1: 40:0d:f9:19:5b:bd:d3:47:9d:f7:8b:dc:44:a8:8d: be:fc:86:79:3d:4f:51:2a:47:79:f9:c6:37:62:55: d6:8a:34:38:3d:db:fb:cc:3d:27:b8:5c:ce:08:a6: af:9d:2f:f5:64:58:36:28:f0:b0:7e:80:64:4d:5e: 9d:e3:57:70:ed:a7:3f:26:56:f5:6e:d7:55:ef:3a: b6:49:91:23:29:73:21:a1:6e:30:d0:92:ce:9f:c1: 94:21:d6:c0:81:67:0a:20:78:00:09:24:ab:ef:36: b9:d9:85:5b:db:cc:45:aa:aa:3c:a9:2f:dc:31:4a: 22:e3:8f:d9:c0:24:f3:5c:4e:9a:4a:d7:50:2e:87: 8d:81:56:5c:88:b2:f0:a3:c6:8b:5b:bd:48:1e:11: 57:db:dc:ca:c1:0e:90:9b:76:35:90:b5:ff:92:cc: 84:b0:89:7f:a6:79:6a:f1:c8:72:83:27:e5:13:8b: b5:1f:48:f3:64:89:a1:b0:bf:2d:84:c0:b4:8c:ce: ed:f5:c4:74:b1:cd:03:49:c7:c2:2a:a4:c3:83:1c: f7:5d:12:1e:1c:91:7b:91:25:c9:ec:aa:19:8b:ed: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:40:00:42:46:8C:34:C9:A2:A5:54:88:C2:75:0C:55:5D:94:85:E7 X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:d3:17:70:81:79:97:43:c3:6b:1d:f9:07:b5:6e:91:e8:4e: a2:66:98:f9:48:5a:bc:58:16:08:cb:13:64:77:32:83:5f:1e: 05:e9:50:4f:15:75:70:5e:72:64:4c:77:cc:71:20:68:5a:1e: 3f:15:ee:3d:41:25:f2:6a:4c:fc:29:bc:c6:f9:70:e6:27:6f: ae:61:76:94:36:a6:14:d0:d9:69:ca:43:85:a0:47:09:ea:4c: 5a:96:2a:7d:57:b1:9b:1d:d3:dd:ae:9e:f5:4a:93:5a:be:8d: c8:55:9d:e3:db:61:41:ef:5f:b5:8f:f7:8a:06:71:91:32:8f: 85:02:41:d1:b8:78:15:94:89:94:b3:c9:ef:32:fb:81:82:1a: f7:9f:b7:f0:14:c7:1c:0f:78:23:96:aa:c1:56:83:c7:41:7e: fc:09:13:47:65:71:16:a6:22:9f:26:94:08:97:0a:17:1b:a4: ac:28:25:8d:da:9f:38:ad:e8:51:60:66:40:97:a6:78:79:cd: 8a:1e:36:74:74:63:cf:44:7d:22:1b:55:e9:31:df:f5:10:46: 27:c2:d1:01:7c:58:79:27:bc:1e:4a:32:40:49:42:30:52:40: e0:56:36:07:26:30:e3:74:d1:9a:a7:22:aa:03:6f:e1:27:79: 67:eb:17:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUxMTA0MjA1NzQ0WhcNMjUxMTExMjA1NzQ0WjAYMRYwFAYD VQQDEw02OTBhNjhjOS00ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQwbNvv5uZmuNrPz0gNSMbBrMfgHNvtYxnEBU7FADfkZW73TR533i9xEqI2+ /IZ5PU9RKkd5+cY3YlXWijQ4Pdv7zD0nuFzOCKavnS/1ZFg2KPCwfoBkTV6d41dw 7ac/Jlb1btdV7zq2SZEjKXMhoW4w0JLOn8GUIdbAgWcKIHgACSSr7za52YVb28xF qqo8qS/cMUoi44/ZwCTzXE6aStdQLoeNgVZciLLwo8aLW71IHhFX29zKwQ6Qm3Y1 kLX/ksyEsIl/pnlq8chygyflE4u1H0jzZImhsL8thMC0jM7t9cR0sc0DScfCKqTD gxz3XRIeHJF7kSXJ7KoZi+3tzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBAAEJG jDTJoqVUiMJ1DFVdlIXnMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy clZvNW5KMzFfcGxpcHQ2UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg0xdwgXmXQ8NrHfkHtW6R6E6iZpj5SFq8WBYIyxNkdzKDXx4F6VBP FXVwXnJkTHfMcSBoWh4/Fe49QSXyakz8KbzG+XDmJ2+uYXaUNqYU0NlpykOFoEcJ 6kxalip9V7GbHdPdrp71SpNavo3IVZ3j22FB71+1j/eKBnGRMo+FAkHRuHgVlImU s8nvMvuBghr3n7fwFMccD3gjlqrBVoPHQX78CRNHZXEWpiKfJpQIlwoXG6SsKCWN 2p84rehRYGZAl6Z4ec2KHjZ0dGPPRH0iG1XpMd/1EEYnwtEBfFh5J7weSjJASUIw UkDgVjYHJjDjdNGapyKqA2/hJ3ln6xdN -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:49 2025 by rpki-client