$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: 2i2ntu+H6NG72jxBEa+vA8dPttOk3PG6TVwry6m8FwE= Subject key identifier: 63:4E:9E:C9:29:E9:B9:A9:9B:A1:3C:6C:05:92:21:B6:D4:03:ED:01 Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0F80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0F75 Signing time: Tue 04 Nov 2025 17:39:19 +0000 Manifest this update: Tue 04 Nov 2025 17:39:19 +0000 Manifest next update: Tue 11 Nov 2025 17:39:19 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: j18/IrljIRw+JRLmjxivJgHHNwjdw8o/jthshR41YLM=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: tn6ujwfx2fxOjVcWSqeXpg3bHl3JICdgt6OHucuWivU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3968 (0xf80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: Nov 4 17:39:19 2025 GMT Not After : Nov 11 17:39:19 2025 GMT Subject: CN=690a3a47-1d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:fd:a1:4f:7f:c8:84:94:07:d8:0b:b0:44: 63:6a:2d:f3:e1:42:b3:cc:bc:67:06:4e:6f:cb:8f: 32:9e:e0:61:54:23:f2:3c:f5:e0:f1:fa:5f:f1:7e: d3:b8:6b:5c:f3:49:10:7c:9e:0c:ae:f7:95:00:6d: 8f:16:61:b8:69:2d:26:af:13:51:68:cd:54:3f:ea: 3f:6a:28:6a:86:f6:25:5e:73:ce:c9:a6:c3:a1:62: 5c:76:94:0d:ba:fc:3a:f1:9b:33:bd:51:cb:29:44: c4:32:0f:16:98:a8:cb:f8:7f:1c:00:25:4c:c4:0a: 75:a5:db:07:c5:6b:d9:90:4e:38:84:8d:8d:f9:ce: cd:a9:2e:e6:1b:ed:00:4f:02:02:4a:b6:dd:5c:59: 63:91:63:6a:b8:44:0e:bc:ac:d5:ad:c6:cf:a3:aa: f2:54:d5:59:ce:d3:df:cc:be:8b:ae:0f:a7:e6:19: 89:7d:c3:bd:89:bd:2c:30:1a:f0:5a:74:ea:08:5e: c2:2d:08:6f:b4:87:be:33:46:8f:b4:df:e5:5e:1b: 8c:5f:20:d5:3e:d9:32:f3:4b:a4:0d:63:20:8c:6c: c5:1c:7c:4b:5f:a8:00:08:df:64:63:42:01:06:c8: 74:db:0d:cb:3a:55:be:0e:ac:91:62:91:4b:6b:1e: 1d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4E:9E:C9:29:E9:B9:A9:9B:A1:3C:6C:05:92:21:B6:D4:03:ED:01 X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:41:60:92:9f:17:58:7b:8d:6c:1a:cc:0e:be:b7:47:d8:ad: bc:f7:93:52:c9:8e:d2:2e:c4:81:15:e2:aa:bb:e6:1c:bc:65: 9f:7d:41:a3:37:5e:e1:43:f0:7c:cb:e8:2a:22:1a:89:62:28: 0a:97:c9:c5:1b:c1:e6:d9:af:e3:25:a0:72:6a:4f:7f:0f:86: 76:bc:95:c3:09:96:a9:d6:0b:15:eb:fc:0b:c8:55:51:e5:2b: fc:cc:f1:63:00:98:03:e2:c8:b1:c3:a6:94:e9:70:1a:de:8c: df:1e:bd:db:14:bc:ea:01:3a:95:3d:f7:8a:c5:c9:60:37:c7: 99:15:67:2a:6b:b7:13:d2:23:c5:e8:9a:33:a4:ba:f4:05:33: 8a:6f:ef:74:c1:1b:97:a0:07:5e:db:65:6c:b5:20:f0:97:2b: a4:8d:90:9b:be:70:dc:f1:4a:d2:e5:6b:b2:64:9d:e6:e3:62: 34:80:f1:c2:1c:75:dc:1f:90:ee:ea:4b:b5:30:5f:51:b0:39: df:06:a2:8e:d6:cc:36:37:36:0b:10:ba:04:61:4c:cd:a6:d5: 8e:24:14:ec:3c:80:f5:a0:2e:81:20:9e:63:70:93:85:08:44: 51:48:81:7b:e4:4e:59:52:b4:b8:d7:9f:73:34:39:8f:f5:75: c4:f7:f6:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjUxMTA0MTczOTE5WhcNMjUxMTExMTczOTE5WjAYMRYwFAYD VQQDEw02OTBhM2E0Ny0xZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfn9oU9/yISUB9gLsERjai3z4UKzzLxnBk5vy48ynuBhVCPyPPXg8fpf8X7T uGtc80kQfJ4MrveVAG2PFmG4aS0mrxNRaM1UP+o/aihqhvYlXnPOyabDoWJcdpQN uvw68ZszvVHLKUTEMg8WmKjL+H8cACVMxAp1pdsHxWvZkE44hI2N+c7NqS7mG+0A TwICSrbdXFljkWNquEQOvKzVrcbPo6ryVNVZztPfzL6Lrg+n5hmJfcO9ib0sMBrw WnTqCF7CLQhvtIe+M0aPtN/lXhuMXyDVPtky80ukDWMgjGzFHHxLX6gACN9kY0IB Bsh02w3LOlW+DqyRYpFLax4dawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNOnskp 6bmpm6E8bAWSIbbUA+0BMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKQWCSnxdYe41sGswOvrdH2K2895NSyY7SLsSBFeKqu+YcvGWffUGj N17hQ/B8y+gqIhqJYigKl8nFG8Hm2a/jJaByak9/D4Z2vJXDCZap1gsV6/wLyFVR 5Sv8zPFjAJgD4sixw6aU6XAa3ozfHr3bFLzqATqVPfeKxclgN8eZFWcqa7cT0iPF 6JozpLr0BTOKb+90wRuXoAde22VstSDwlyukjZCbvnDc8UrS5WuyZJ3m42I0gPHC HHXcH5Du6ku1MF9RsDnfBqKO1sw2NzYLELoEYUzNptWOJBTsPID1oC6BIJ5jcJOF CERRSIF75E5ZUrS4159zNDmP9XXE9/Z5 -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:55 2025 by rpki-client