$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json) Hash identifier: Hy1woJZvtJCKgDfjK5c+FA1qJlsrzZBEwGQeAF6bKN8= Subject key identifier: 4F:DA:56:5D:76:71:E7:BD:BA:BF:FF:4B:63:9A:E8:89:A9:2F:44:47 Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft Manifest number: 04EE Signing time: Tue 04 Nov 2025 23:47:46 +0000 Manifest this update: Tue 04 Nov 2025 23:47:46 +0000 Manifest next update: Tue 11 Nov 2025 23:47:46 +0000 Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: KXRtaCKVVSlVBEoiqIA+zgW+fG3MwgTcFPe915mt/CA=) 2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: XUaIWvSjvHJx2WjE0nq5LCjXyTsCoEUciSF2lpWLzf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Validity Not Before: Nov 4 23:47:46 2025 GMT Not After : Nov 11 23:47:46 2025 GMT Subject: CN=690a90a2-0c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c4:ed:2d:9f:b3:80:09:e3:bc:ad:6c:6e:de: c7:ed:fb:80:7f:90:53:fc:dd:06:e5:13:4f:ce:c8: 28:e4:d0:f9:b4:f3:59:ff:e3:b3:25:5d:74:91:3d: 4b:84:82:5e:a8:41:6c:4a:7f:cc:2d:89:c3:2e:d5: fa:43:3a:15:01:8f:98:c7:3e:f8:88:f7:87:0a:4a: ed:ba:4e:3d:a7:80:a5:56:22:bb:b5:c4:cb:40:07: 15:90:4d:b8:75:0f:7b:75:f8:41:24:f2:10:2c:dc: 76:d3:84:f4:9d:79:b7:de:ac:aa:80:e0:bc:6f:44: 84:b3:5f:67:1d:3f:4e:82:3e:b6:a0:c5:bb:92:be: 3e:0d:82:ac:0e:f1:a0:40:48:55:d0:6d:41:a9:d7: 30:e1:bb:75:75:ba:59:97:da:b4:6f:07:eb:ca:8d: b4:34:7b:90:93:0a:e1:88:da:00:7d:a4:84:f3:be: ca:33:74:35:97:07:7e:8e:bd:a1:c5:a2:e2:d2:9e: 2d:67:a9:5f:c3:a4:8b:03:a3:22:e7:a0:71:f0:3c: 84:bf:ba:5e:32:9a:f7:7e:25:06:20:7e:66:16:d3: 8d:9b:ed:04:bf:46:f2:c5:8b:f4:28:83:7f:e3:2a: 67:96:fc:a6:25:79:ab:54:37:c3:65:ee:71:da:aa: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DA:56:5D:76:71:E7:BD:BA:BF:FF:4B:63:9A:E8:89:A9:2F:44:47 X509v3 Authority Key Identifier: keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:8c:93:5c:d0:de:6e:65:ff:bc:8d:6b:09:4e:2d:9f:a1:9b: ad:ec:ec:68:63:b4:18:a5:6b:59:84:13:11:a0:f6:b1:bb:08: 51:89:5a:76:52:f8:3a:61:a4:89:d3:8c:2d:37:94:76:a6:75: 53:e7:8b:5c:83:5a:06:e2:f6:9b:e3:0f:fd:ff:40:38:b9:f4: 61:fc:0b:b2:fe:e4:85:f6:3e:8f:f2:7e:f1:3f:81:27:23:2b: 43:13:dc:e7:ef:cc:1f:be:3e:f5:61:68:63:fb:c3:e3:67:5f: 82:b5:d3:04:88:9c:7b:88:1c:5f:82:17:5f:2d:3c:50:7d:ff: f9:3d:fe:56:2d:bc:de:6d:a9:55:10:4e:16:a9:82:a7:69:b1: 8c:72:af:2f:7e:23:e2:2d:69:f1:f3:10:e7:41:db:e8:ee:b6: bb:05:ee:b8:a7:7b:6f:d6:0a:84:ee:4c:73:2d:91:50:1a:9d: 00:00:0e:e9:f9:e5:fc:ba:03:9f:f8:95:de:c9:46:2f:99:cf: 49:cd:ff:de:2c:88:80:71:94:bf:21:23:f0:9a:6f:16:71:62: 35:24:e9:56:be:30:27:c7:51:b9:b2:66:4e:85:ce:b7:46:42: 10:6a:53:f3:cc:de:01:83:5c:3c:c8:39:b7:54:d4:68:19:30: 9f:54:7b:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE MDYwMzY0RDMwHhcNMjUxMTA0MjM0NzQ2WhcNMjUxMTExMjM0NzQ2WjAYMRYwFAYD VQQDEw02OTBhOTBhMi0wYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sTtLZ+zgAnjvK1sbt7H7fuAf5BT/N0G5RNPzsgo5ND5tPNZ/+OzJV10kT1L hIJeqEFsSn/MLYnDLtX6QzoVAY+Yxz74iPeHCkrtuk49p4ClViK7tcTLQAcVkE24 dQ97dfhBJPIQLNx204T0nXm33qyqgOC8b0SEs19nHT9Ogj62oMW7kr4+DYKsDvGg QEhV0G1Bqdcw4bt1dbpZl9q0bwfryo20NHuQkwrhiNoAfaSE877KM3Q1lwd+jr2h xaLi0p4tZ6lfw6SLA6Mi56Bx8DyEv7peMpr3fiUGIH5mFtONm+0Ev0byxYv0KIN/ 4ypnlvymJXmrVDfDZe5x2qpb3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/aVl12 cee9ur//S2Oa6ImpL0RHMB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2 MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ WW52VGFnTUhMblhRWURaTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIjJNc0N5uZf+8jWsJTi2foZut7OxoY7QYpWtZhBMRoPaxuwhRiVp2 Uvg6YaSJ04wtN5R2pnVT54tcg1oG4vab4w/9/0A4ufRh/Auy/uSF9j6P8n7xP4En IytDE9zn78wfvj71YWhj+8PjZ1+CtdMEiJx7iBxfghdfLTxQff/5Pf5WLbzebalV EE4WqYKnabGMcq8vfiPiLWnx8xDnQdvo7ra7Be64p3tv1gqE7kxzLZFQGp0AAA7p +eX8ugOf+JXeyUYvmc9Jzf/eLIiAcZS/ISPwmm8WcWI1JOlWvjAnx1G5smZOhc63 RkIQalPzzN4Bg1w8yDm3VNRoGTCfVHvU -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:00 2025 by rpki-client