$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft File: UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json) Hash identifier: SWaont4OZG2GVWXrfmVwBuK6PNGwQa566PgWzdcM2yk= Subject key identifier: D0:9D:74:AD:5F:A0:0E:2F:AD:B9:42:4E:E6:A3:21:95:A4:05:5F:F9 Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft Manifest number: 34E5 Signing time: Tue 04 Nov 2025 14:49:06 +0000 Manifest this update: Tue 04 Nov 2025 14:49:05 +0000 Manifest next update: Tue 11 Nov 2025 14:49:05 +0000 Files and hashes: 1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: sB5KvGCSTBtFhnGhgco6NXJbTLHBI5ASNHE2Sh2s8ko=) 2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: bVOSER1nz+Nqxke0I5JF7QpaXaB+v1ZvyVVn2hKZsmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Validity Not Before: Nov 4 14:49:05 2025 GMT Not After : Nov 11 14:49:05 2025 GMT Subject: CN=690a1261-3ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:23:be:44:9b:d6:a2:bb:9f:b2:e2:ac:89: eb:41:90:16:26:31:1f:90:1f:85:20:52:d8:df:c0: f9:01:b1:6a:5d:ea:a7:ab:c8:d2:15:91:cd:d5:fb: 25:28:01:81:29:d5:89:94:8c:5f:f5:6c:28:02:7d: fd:0f:6f:4d:a7:bb:77:50:a5:47:c5:a3:67:19:9f: 8e:c0:3b:d2:e8:40:f8:b1:86:33:2a:59:9b:da:2b: 41:e7:f7:24:7d:e7:2f:77:70:a6:41:ff:71:96:43: ee:35:21:81:00:ba:ff:36:83:f9:5b:bb:35:60:3b: 63:11:b2:8b:6b:5f:e4:97:f7:07:cc:a8:60:2d:7d: 9b:bf:8e:a6:f5:39:bc:d3:fb:92:e9:68:8f:82:54: d7:d1:b6:20:b8:98:fd:24:38:4f:92:5a:83:37:be: 4b:d4:cd:37:15:85:e3:b4:50:17:40:f9:e4:5e:a2: dc:d8:92:d3:3f:6e:31:4e:a4:b0:16:97:84:1d:7f: d6:a8:4d:bc:09:82:33:6b:8c:5d:f1:84:7e:14:b5: 16:5d:88:05:4a:e9:fa:da:c5:6c:46:1b:53:e7:0a: 6b:cd:81:b0:09:99:b0:43:a4:06:9b:75:d8:4c:3a: 87:ef:4d:5b:9f:58:c8:7c:92:2f:ca:d7:66:c4:35: 26:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9D:74:AD:5F:A0:0E:2F:AD:B9:42:4E:E6:A3:21:95:A4:05:5F:F9 X509v3 Authority Key Identifier: keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:45:d7:d0:b5:93:91:4c:77:65:5e:81:3d:b8:f6:92:f9:d7: 47:f7:8a:83:d7:07:0a:77:96:fd:7a:1d:20:54:a3:63:1d:fc: 37:9e:66:2b:bb:8c:ca:9b:52:5e:7d:c1:bc:c0:9a:7d:e3:16: 84:8d:01:82:5c:a3:5d:1c:8c:f5:c4:b2:58:5a:6d:65:03:14: c7:89:bf:ee:23:cb:11:db:5e:b1:f3:5f:e0:da:fa:47:3a:05: 09:d0:17:f9:6e:3e:b2:4c:0b:52:e0:7e:f1:25:dc:9e:05:54: 80:0b:85:df:81:aa:a1:0a:d2:57:e8:53:35:4d:99:6f:ed:3d: 4c:13:9e:c6:4c:46:24:63:58:6f:94:d1:42:a7:57:c9:fa:fe: cb:76:16:25:d7:ca:b5:14:22:db:30:1e:09:93:e5:15:eb:68: 91:2b:3a:a6:31:c3:a3:1b:03:bd:59:8e:46:62:0d:80:8a:ad: 05:c3:84:c2:62:3e:11:c4:f3:31:ae:e4:55:43:d4:b7:79:89: 29:a9:90:0e:54:49:f3:c8:47:b9:e4:cb:41:11:38:b6:71:41: 8b:bb:bb:b3:6f:00:46:22:6e:dd:b5:a2:7c:4b:49:8b:29:46: 62:e9:ca:17:37:43:a3:24:42:75:d9:d3:e1:1d:87:6e:58:3e: 5a:41:c7:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkMxMTAvBgNVBAUTKDUzMzdEQ0I2QTkxQjQxRDUyMTFBNDRDMjE2QTk2M0FC QUNDN0UyQjAwHhcNMjUxMTA0MTQ0OTA1WhcNMjUxMTExMTQ0OTA1WjAYMRYwFAYD VQQDEw02OTBhMTI2MS0zYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttEjvkSb1qK7n7LirInrQZAWJjEfkB+FIFLY38D5AbFqXeqnq8jSFZHN1fsl KAGBKdWJlIxf9WwoAn39D29Np7t3UKVHxaNnGZ+OwDvS6ED4sYYzKlmb2itB5/ck fecvd3CmQf9xlkPuNSGBALr/NoP5W7s1YDtjEbKLa1/kl/cHzKhgLX2bv46m9Tm8 0/uS6WiPglTX0bYguJj9JDhPklqDN75L1M03FYXjtFAXQPnkXqLc2JLTP24xTqSw FpeEHX/WqE28CYIza4xd8YR+FLUWXYgFSun62sVsRhtT5wprzYGwCZmwQ6QGm3XY TDqH701bn1jIfJIvytdmxDUm6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCddK1f oA4vrblCTuajIZWkBV/5MB8GA1UdIwQYMBaAFFM33LapG0HVIRpEwhapY6usx+Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCQy8zNzMwODM4MDFE OTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFkVWhHa1RDRnFsanE2ekg0 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6ZmN0cWtiUWRVaEdrVENGcWxqcTZ6SDRyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCQy8zNzMwODM4MDFEOTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFk VWhHa1RDRnFsanE2ekg0ckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYRdfQtZORTHdlXoE9uPaS+ddH94qD1wcKd5b9eh0gVKNjHfw3nmYr u4zKm1JefcG8wJp94xaEjQGCXKNdHIz1xLJYWm1lAxTHib/uI8sR216x81/g2vpH OgUJ0Bf5bj6yTAtS4H7xJdyeBVSAC4XfgaqhCtJX6FM1TZlv7T1ME57GTEYkY1hv lNFCp1fJ+v7LdhYl18q1FCLbMB4Jk+UV62iRKzqmMcOjGwO9WY5GYg2Aiq0Fw4TC Yj4RxPMxruRVQ9S3eYkpqZAOVEnzyEe55MtBETi2cUGLu7uzbwBGIm7dtaJ8S0mL KUZi6coXN0OjJEJ12dPhHYduWD5aQced -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:16 2025 by rpki-client