$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: p1lpm5kgbyPGwlT950m16qyIGD+3H75M0wsMwpjQaWQ= Subject key identifier: 89:E6:38:6B:6F:5F:25:6F:17:11:5E:C4:EC:9F:17:82:79:77:82:D1 Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0B9A Signing time: Tue 04 Nov 2025 19:05:01 +0000 Manifest this update: Tue 04 Nov 2025 19:05:01 +0000 Manifest next update: Tue 11 Nov 2025 19:05:01 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: Yfz3/TVPP2a9bfD8DdsNGV/ER9e6IONqb/VBtVQhiRg=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: e4wDPqjhV3r7vEA4MsvAFc5ifRump5FxJZTH+nviBcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16, serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: Nov 4 19:05:01 2025 GMT Not After : Nov 11 19:05:01 2025 GMT Subject: CN=690a4e5d-cd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:b6:24:ce:93:cd:6e:56:28:a1:b5:90:d3: 49:8a:ff:ec:05:c4:d4:1f:ff:91:40:ce:f2:71:e5: 13:14:e8:ef:8c:29:ad:8b:31:f4:3b:6d:97:b1:8d: 52:aa:6c:8e:ef:5a:fc:ff:4b:03:93:0a:53:bc:ce: 82:59:11:ed:5c:81:02:af:61:00:c7:56:92:79:2e: 44:f6:47:08:bd:d4:dd:82:81:ae:32:6d:58:37:b7: 1c:7a:06:bd:41:1a:5e:5b:f5:87:ce:dc:b4:2d:a9: 2a:1c:7b:6d:38:a3:f4:92:36:de:ba:56:7f:54:cd: 14:7c:cd:70:29:46:c6:28:20:bd:1d:79:cb:fc:1e: 40:c9:88:a5:d9:ab:81:d5:28:c6:7a:65:47:71:ed: 0e:bc:d3:df:23:04:6c:a0:39:92:e0:ff:1f:45:45: d9:80:d4:61:cf:44:ce:79:f1:74:7e:36:a3:f4:fb: 6c:00:b3:a3:b5:a1:b8:c6:fc:0f:a7:09:e9:10:ac: a0:58:e4:cd:a9:09:0e:d0:49:54:7e:c1:bb:be:85: cd:0b:3c:8c:8e:db:5c:d7:2e:64:54:76:65:e4:cd: d3:15:1b:53:54:fb:db:44:14:32:e0:8d:15:70:9d: 45:c9:49:cb:45:4b:98:1b:44:36:25:c9:a3:6a:ae: cd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E6:38:6B:6F:5F:25:6F:17:11:5E:C4:EC:9F:17:82:79:77:82:D1 X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:24:e8:ec:a8:70:c5:00:9f:04:b6:65:1c:d2:75:67:0d:e2: 28:09:be:13:30:8c:a1:c4:cb:79:7b:36:b9:35:15:eb:f9:4a: 65:25:7b:8c:0e:be:6f:e7:e9:a3:e2:a2:0a:db:31:d1:6c:cf: 31:f5:4e:f0:8b:ec:88:ab:44:18:67:07:cf:c2:47:08:db:58: 57:86:ef:62:b9:00:9f:d9:da:29:ff:d0:95:32:de:4e:49:31: 52:b1:51:db:cc:03:d6:a8:74:58:ca:20:07:e2:f7:9d:4d:b8: ef:7d:e8:6d:3b:31:ef:8c:a5:f6:a8:73:80:ab:43:77:c6:c0: 7c:85:54:d4:a9:37:1c:a7:20:7e:6d:2f:fb:33:17:90:84:e2: 16:a4:60:70:08:88:9e:1b:3a:57:9e:d1:31:5b:bc:f3:75:df: 09:21:6e:d3:3b:1c:ed:0b:c3:ee:87:72:7f:81:3d:b5:c2:f0: 66:f2:a8:5f:48:cc:fc:94:f0:2d:67:bd:9c:b2:46:1c:6c:d6: 9b:22:7f:e4:ce:e5:36:0f:a9:2a:d7:7d:d9:b3:9f:74:96:28: 94:a9:3a:94:21:6d:d4:2e:74:0f:1b:fe:cf:5e:96:3a:a9:47: 6b:c6:5e:e4:f1:9f:67:51:85:53:be:88:2b:19:05:4d:9b:0e: ff:9c:ed:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjUxMTA0MTkwNTAxWhcNMjUxMTExMTkwNTAxWjAYMRYwFAYD VQQDEw02OTBhNGU1ZC1jZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnC2JM6TzW5WKKG1kNNJiv/sBcTUH/+RQM7yceUTFOjvjCmtizH0O22XsY1S qmyO71r8/0sDkwpTvM6CWRHtXIECr2EAx1aSeS5E9kcIvdTdgoGuMm1YN7ccega9 QRpeW/WHzty0LakqHHttOKP0kjbeulZ/VM0UfM1wKUbGKCC9HXnL/B5AyYil2auB 1SjGemVHce0OvNPfIwRsoDmS4P8fRUXZgNRhz0TOefF0fjaj9PtsALOjtaG4xvwP pwnpEKygWOTNqQkO0ElUfsG7voXNCzyMjttc1y5kVHZl5M3TFRtTVPvbRBQy4I0V cJ1FyUnLRUuYG0Q2Jcmjaq7NqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInmOGtv XyVvFxFexOyfF4J5d4LRMB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYJOjsqHDFAJ8EtmUc0nVnDeIoCb4TMIyhxMt5eza5NRXr+UplJXuM Dr5v5+mj4qIK2zHRbM8x9U7wi+yIq0QYZwfPwkcI21hXhu9iuQCf2dop/9CVMt5O STFSsVHbzAPWqHRYyiAH4vedTbjvfehtOzHvjKX2qHOAq0N3xsB8hVTUqTccpyB+ bS/7MxeQhOIWpGBwCIieGzpXntExW7zzdd8JIW7TOxztC8Puh3J/gT21wvBm8qhf SMz8lPAtZ72cskYcbNabIn/kzuU2D6kq133Zs590liiUqTqUIW3ULnQPG/7PXpY6 qUdrxl7k8Z9nUYVTvogrGQVNmw7/nO3Y -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:32 2025 by rpki-client