$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft File: Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json) Hash identifier: uIMgh15Vbgu1ADSG7ZTf0p3eRBU44+z1vW7Wgi0uAqo= Subject key identifier: BF:AE:E5:1D:06:F4:E2:63:5E:C3:7D:77:6E:22:EC:EB:A8:7C:B8:BF Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47 Certificate issuer: /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847 Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft Manifest number: 0315 Signing time: Wed 05 Nov 2025 01:12:58 +0000 Manifest this update: Wed 05 Nov 2025 01:12:58 +0000 Manifest next update: Wed 12 Nov 2025 01:12:58 +0000 Files and hashes: 1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: urUOz7VYH+PGuqdH94VxGb3V3Atrwa/avWg2JdnFyxk=) 2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: 90iQ52pzi3F+reOCS+hcjY5A8xSUULeYkZXVo6UNIXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847 Validity Not Before: Nov 5 01:12:58 2025 GMT Not After : Nov 12 01:12:58 2025 GMT Subject: CN=690aa49a-9617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:f3:25:5c:e1:1b:7c:7e:60:f1:93:e0:f7: 5a:d6:a2:23:b5:fc:bc:51:40:4b:b2:cd:d2:89:b3: a9:52:80:5e:f0:76:5f:0c:ee:ca:90:73:e9:7e:5a: a1:ce:4c:f5:d1:f2:e8:ff:31:a3:33:51:85:ce:85: 7b:41:2a:44:bb:3a:d6:a7:b6:75:b2:0d:95:a2:2e: 9c:ad:49:9a:27:fa:5f:5f:e0:f3:e9:88:12:c2:8f: f1:74:f5:ff:c7:f0:66:8f:64:82:2d:d5:a2:7e:22: 91:d9:64:d1:4e:5a:bb:7e:02:a8:f6:8a:97:b9:66: 51:1a:9e:49:2f:51:fb:6d:d0:d9:17:92:11:78:54: f8:62:5b:15:4d:cb:90:8a:bd:55:68:10:80:73:72: c3:60:46:99:a5:20:c5:6a:3b:b7:f6:61:53:a2:d6: 41:f4:d7:f4:ab:06:ea:1c:7c:1f:a1:26:f2:d5:86: b6:e2:45:ee:82:24:11:4d:99:d5:b7:b9:0b:1b:be: 1a:e1:65:e3:88:64:b0:2c:bc:25:b3:26:7b:f7:83: 6d:6b:8d:75:5e:d8:61:f7:9b:ca:a2:f8:d8:0f:a0: 72:50:f2:b5:be:e7:85:56:28:8e:21:de:d2:b8:ba: fe:2d:0a:64:ad:96:17:fe:81:0e:df:07:fe:ca:e9: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AE:E5:1D:06:F4:E2:63:5E:C3:7D:77:6E:22:EC:EB:A8:7C:B8:BF X509v3 Authority Key Identifier: keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a5:6c:a1:a5:b2:5d:ea:5f:5d:41:4a:3e:50:c1:1d:d3:bf: 71:ad:f1:be:23:45:af:39:be:19:0b:f1:98:21:79:ba:84:57: 4e:1c:af:bb:64:ed:84:42:fc:48:22:c3:37:0b:c9:b7:f4:48: e3:19:75:d7:9f:7b:dc:92:a6:a3:ec:68:9a:a3:04:eb:47:e2: a3:f7:b7:57:14:eb:64:49:22:b5:65:6e:64:87:2f:5e:11:46: 08:5d:2e:20:c3:99:ad:0d:68:07:3c:fb:d5:85:e3:49:cf:fd: e6:f5:8e:87:26:9d:30:38:2b:16:3a:b0:ed:bf:d1:1f:92:ca: f6:20:04:7a:c0:8e:79:02:4d:9d:2a:f6:16:af:41:51:6e:f2: 0f:20:da:7d:68:b6:54:39:99:2e:45:49:8e:3c:47:c0:20:f8: 22:aa:16:9d:8b:16:35:fd:55:c2:d8:d0:8f:83:38:06:20:5c: a0:a7:01:17:98:46:2f:ac:f0:5a:4a:5d:5a:9d:d4:bc:77:b8: 9e:cc:7f:43:d3:06:95:73:e6:13:d9:05:3a:cb:2e:2c:db:f5: 6e:b7:69:f9:cd:2f:0a:28:ac:b5:08:4b:8d:9e:73:4c:b3:b0: f0:71:6e:49:94:77:9f:b2:ea:a4:40:93:c9:e6:f1:cd:90:71: 9b:69:a1:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1RjExMTAvBgNVBAUTKDUyNUVBMjZCNkE2MTdFNUFBRkMwNTQyM0NDRTU4OERF MTlFQzU4NDcwHhcNMjUxMTA1MDExMjU4WhcNMjUxMTEyMDExMjU4WjAYMRYwFAYD VQQDEw02OTBhYTQ5YS05NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEfzJVzhG3x+YPGT4Pda1qIjtfy8UUBLss3SibOpUoBe8HZfDO7KkHPpflqh zkz10fLo/zGjM1GFzoV7QSpEuzrWp7Z1sg2Voi6crUmaJ/pfX+Dz6YgSwo/xdPX/ x/Bmj2SCLdWifiKR2WTRTlq7fgKo9oqXuWZRGp5JL1H7bdDZF5IReFT4YlsVTcuQ ir1VaBCAc3LDYEaZpSDFaju39mFTotZB9Nf0qwbqHHwfoSby1Ya24kXugiQRTZnV t7kLG74a4WXjiGSwLLwlsyZ794Nta411Xthh95vKovjYD6ByUPK1vueFViiOId7S uLr+LQpkrZYX/oEO3wf+yum0NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+u5R0G 9OJjXsN9d24i7OuofLi/MB8GA1UdIwQYMBaAFFJeomtqYX5ar8BUI8zliN4Z7FhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVGMS9DQjY2MzMwQUVF MkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZscXZ3RlFqek9XSTNobnNX RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VsNmlhMnBoZmxxdndGUWp6T1dJM2huc1dFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVGMS9DQjY2MzMwQUVFMkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZs cXZ3RlFqek9XSTNobnNXRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMpWyhpbJd6l9dQUo+UMEd079xrfG+I0WvOb4ZC/GYIXm6hFdOHK+7 ZO2EQvxIIsM3C8m39EjjGXXXn3vckqaj7GiaowTrR+Kj97dXFOtkSSK1ZW5khy9e EUYIXS4gw5mtDWgHPPvVheNJz/3m9Y6HJp0wOCsWOrDtv9Efksr2IAR6wI55Ak2d KvYWr0FRbvIPINp9aLZUOZkuRUmOPEfAIPgiqhadixY1/VXC2NCPgzgGIFygpwEX mEYvrPBaSl1andS8d7iezH9D0waVc+YT2QU6yy4s2/Vut2n5zS8KKKy1CEuNnnNM s7DwcW5JlHefsuqkQJPJ5vHNkHGbaaHJ -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:50 2025 by rpki-client