$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: Hz13k6T0zpZYPVHme/rKtZS4c+XwqsFoQXz3pxIyJqs= Subject key identifier: 8E:08:E2:26:DE:A0:03:25:31:19:19:81:3E:DB:FD:4B:CB:86:27:12 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 09BD Signing time: Sun 02 Nov 2025 19:57:16 +0000 Manifest this update: Sun 02 Nov 2025 19:57:16 +0000 Manifest next update: Sun 09 Nov 2025 19:57:16 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: WRc7qHn5g0/NXRWn5tbqRkli3Ckrc9AvdK/uC5ueI4U=) 2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: Xd/9pByFb2cbZ9xoUnmDVjNmjmus87X0lFOERhfsZNI=) 3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: N79J5/addSjvuTRJUjHpGEDoonJ5OZtfdl2v8Aonsr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Nov 2 19:57:16 2025 GMT Not After : Nov 9 19:57:16 2025 GMT Subject: CN=6907b79c-670f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:b5:e0:4a:b5:2e:48:d9:af:c9:3e:7b:63: 35:6f:15:7b:ae:e2:f8:20:8e:64:d8:9e:8f:f4:73: 2f:bc:32:de:bf:76:66:65:4d:41:32:63:73:a8:4d: f5:54:bb:46:9d:b1:d9:d6:9f:5c:b9:45:36:01:07: 16:54:fe:3c:34:7b:ff:17:20:09:01:3b:48:8a:0e: 29:72:79:fa:e9:49:51:56:93:29:1b:22:b1:24:09: 12:4e:85:b0:c9:6f:30:60:f0:62:0d:4b:a9:15:2b: 7e:63:34:46:81:1e:1a:d5:7a:a3:37:75:87:40:30: 18:a7:d5:4d:75:bd:8d:98:1e:9e:6a:e4:d4:e2:7f: c0:60:2c:01:e6:6c:72:d3:b8:23:63:b3:1c:70:7c: 76:c4:55:ad:eb:f2:a8:fa:d4:9b:44:af:e8:62:eb: 16:fa:a6:92:c7:37:80:2c:14:ea:d3:b9:21:9b:7b: 2f:a0:dc:28:bd:b2:3d:81:e7:0a:bc:9c:0b:ca:d1: 6c:97:00:56:db:a6:35:a4:43:4c:dc:77:fd:6f:0f: 55:82:6c:e1:f7:17:0c:d8:fd:60:7c:b9:c8:26:22: 15:70:fc:18:96:e4:77:28:39:c1:9d:b3:99:4b:a6: df:6a:ad:ba:1d:02:15:b2:f8:43:0b:f8:d4:58:66: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:08:E2:26:DE:A0:03:25:31:19:19:81:3E:DB:FD:4B:CB:86:27:12 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b8:42:6d:87:44:6f:fd:53:5b:3a:3b:76:25:90:d6:d9:e6: cf:f4:01:87:bf:88:71:d3:13:eb:77:85:b2:84:40:6f:e2:18: c4:08:fe:d7:ed:f8:ba:aa:73:7e:84:a2:5d:11:41:4f:2c:0b: ef:a2:d6:a7:11:f7:ac:22:23:f5:71:5b:7d:54:36:79:1e:3d: f8:e5:3f:05:83:59:6c:2a:14:b8:24:c4:6b:3e:5d:fa:aa:93: 92:b5:74:bb:6e:e2:8f:5d:00:b4:c2:b2:7a:ad:b7:38:80:69: 37:27:c3:9a:81:b8:e1:66:56:f9:23:72:e4:64:f3:d1:20:5b: 1a:f8:f2:3d:6c:dd:13:73:98:77:a1:2e:3d:72:03:0c:03:a0: ef:92:98:23:ec:09:09:dd:ad:fe:bd:b2:1f:ea:f8:bc:ae:a6: bb:49:87:7c:37:fc:01:fa:c3:44:81:14:93:b1:79:29:92:87: 57:62:b2:04:62:49:e6:84:a8:ad:22:25:9c:61:c0:d2:fc:bc: 38:81:f9:e5:b9:3d:59:2b:be:96:f4:62:e4:91:95:5b:6a:b7: 95:f5:c4:92:fd:ba:5f:a9:6c:d7:3d:e3:ac:33:bd:41:6c:4a: 7d:d3:22:e9:f3:50:05:6e:89:40:8c:a4:54:dd:bb:04:6a:1d: 9a:4d:70:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjUxMTAyMTk1NzE2WhcNMjUxMTA5MTk1NzE2WjAYMRYwFAYD VQQDEw02OTA3Yjc5Yy02NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wW14Eq1LkjZr8k+e2M1bxV7ruL4II5k2J6P9HMvvDLev3ZmZU1BMmNzqE31 VLtGnbHZ1p9cuUU2AQcWVP48NHv/FyAJATtIig4pcnn66UlRVpMpGyKxJAkSToWw yW8wYPBiDUupFSt+YzRGgR4a1XqjN3WHQDAYp9VNdb2NmB6eauTU4n/AYCwB5mxy 07gjY7MccHx2xFWt6/Ko+tSbRK/oYusW+qaSxzeALBTq07khm3svoNwovbI9gecK vJwLytFslwBW26Y1pENM3Hf9bw9Vgmzh9xcM2P1gfLnIJiIVcPwYluR3KDnBnbOZ S6bfaq26HQIVsvhDC/jUWGYgLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4I4ibe oAMlMRkZgT7b/UvLhicSMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxuEJth0Rv/VNbOjt2JZDW2ebP9AGHv4hx0xPrd4WyhEBv4hjECP7X 7fi6qnN+hKJdEUFPLAvvotanEfesIiP1cVt9VDZ5Hj345T8Fg1lsKhS4JMRrPl36 qpOStXS7buKPXQC0wrJ6rbc4gGk3J8OagbjhZlb5I3LkZPPRIFsa+PI9bN0Tc5h3 oS49cgMMA6Dvkpgj7AkJ3a3+vbIf6vi8rqa7SYd8N/wB+sNEgRSTsXkpkodXYrIE YknmhKitIiWcYcDS/Lw4gfnluT1ZK76W9GLkkZVbareV9cSS/bpfqWzXPeOsM71B bEp90yLp81AFbolAjKRU3bsEah2aTXCm -----END CERTIFICATE-----Generated at Tue Nov 4 08:15:52 2025 by rpki-client