$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: IpU5E5BECNpdXHPEcPEFcZYoUd6O1MMFHybBYteSfc4= Subject key identifier: F4:62:4F:38:0C:A9:2E:2B:AA:B0:0A:4C:0C:FB:21:AA:5D:51:D0:80 Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: F7 Signing time: Mon 03 Nov 2025 05:14:23 +0000 Manifest this update: Mon 03 Nov 2025 05:14:23 +0000 Manifest next update: Mon 10 Nov 2025 05:14:23 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: /uYRyV9kFZ5fkfdzVr9rgMxX7hIenyHkJs+AnJrMnM4=) 2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: RhQloGXtcZHnLcoyU2Qhf/8Ls5h2TxH8G+0z0bjWi3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Validity Not Before: Nov 3 05:14:23 2025 GMT Not After : Nov 10 05:14:23 2025 GMT Subject: CN=69083a2f-ee24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:b8:fa:b7:ea:c6:ed:c1:ea:87:5f:7e:09: 90:7b:cc:fa:75:b8:ae:74:71:9e:fc:4f:bf:b3:88: e4:1d:42:fc:0c:38:0d:d9:c5:7a:e4:e5:cb:a3:e3: 34:9d:e3:60:64:db:ad:2d:6a:d2:31:c5:16:f8:ed: f5:01:5a:fc:b6:c3:8d:fa:44:90:bb:5c:cd:39:ad: 44:b1:5a:f8:1f:f3:e1:b5:c4:e2:79:16:c9:b3:b4: e6:6d:dd:a6:45:e0:5a:87:9b:35:69:b9:94:89:71: 24:4a:68:92:d0:87:f8:7d:c5:7a:01:17:e0:8f:38: 09:8a:a8:4e:77:11:cd:b5:ba:ff:47:09:5e:81:a3: 03:9f:e7:c0:68:f5:26:d7:de:63:6d:16:25:37:10: 9f:f7:cb:f5:e2:17:a6:9f:56:26:94:da:96:29:c6: 69:d1:21:7c:bb:88:77:77:74:c7:21:01:a6:d9:be: 50:40:bd:d8:f4:5e:ab:47:03:b6:5c:e3:ba:4f:b4: a3:54:bd:d1:bb:6f:96:38:a2:ab:87:12:ef:2c:a8: 42:ba:2a:8d:f7:4f:23:de:12:b9:ef:f6:ef:a1:f0: b2:c9:50:32:8f:ae:1c:59:fc:13:bb:1c:84:a9:0c: ed:d2:75:d3:ee:75:cb:ee:00:b5:9b:47:63:17:11: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:62:4F:38:0C:A9:2E:2B:AA:B0:0A:4C:0C:FB:21:AA:5D:51:D0:80 X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:6f:96:72:ec:20:93:2a:1d:eb:67:c6:c7:05:1f:dc:4a:92: ec:de:fe:8c:5e:c7:1e:33:b8:c0:5f:be:ec:c0:01:03:bc:2b: c7:79:c2:7c:71:8f:76:2e:c5:a8:31:83:75:ef:fa:9d:cc:d9: db:84:5c:c0:1e:ae:77:e6:4f:c0:8d:d8:69:29:96:2f:d7:b1: c4:86:6a:a1:39:7d:f5:e8:16:c3:3e:9f:10:5e:61:d0:61:35: 72:43:65:90:54:39:c9:6a:88:b9:fb:e3:38:4c:ac:76:58:56: 61:12:a3:04:72:c7:65:d0:f4:2e:61:de:94:b1:26:5c:6f:23: 98:33:6a:43:00:30:4a:d4:7b:b2:e0:b3:d8:f5:b3:c6:bb:74: 80:8a:07:16:ed:4b:80:3c:2a:16:ac:57:38:d5:19:36:b3:d7: 17:62:18:a5:55:20:bd:74:06:f5:6b:ef:37:fd:7b:99:69:ef: b0:3e:33:e0:06:48:80:cc:a3:50:f4:e0:d0:d5:c9:5c:36:02: 19:85:04:d0:cb:bc:80:60:19:c8:5a:d3:ed:5e:ab:97:82:64: 6b:49:74:ad:c7:bb:5c:83:59:43:53:f7:6c:9c:36:e0:ae:30: dc:65:dd:0d:13:09:73:a8:78:2a:87:a8:5b:ef:9b:0c:3a:fd: 75:ab:d4:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5 NzYzQTYyQkEwHhcNMjUxMTAzMDUxNDIzWhcNMjUxMTEwMDUxNDIzWjAYMRYwFAYD VQQDEw02OTA4M2EyZi1lZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+G4+rfqxu3B6odffgmQe8z6dbiudHGe/E+/s4jkHUL8DDgN2cV65OXLo+M0 neNgZNutLWrSMcUW+O31AVr8tsON+kSQu1zNOa1EsVr4H/PhtcTieRbJs7Tmbd2m ReBah5s1abmUiXEkSmiS0If4fcV6ARfgjzgJiqhOdxHNtbr/RwlegaMDn+fAaPUm 195jbRYlNxCf98v14hemn1YmlNqWKcZp0SF8u4h3d3THIQGm2b5QQL3Y9F6rRwO2 XOO6T7SjVL3Ru2+WOKKrhxLvLKhCuiqN908j3hK57/bvofCyyVAyj64cWfwTuxyE qQzt0nXT7nXL7gC1m0djFxEMbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRiTzgM qS4rqrAKTAz7IapdUdCAMB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81MDgzNUU2ODQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3Fl bmdNUjVWTGI4M1dYWTZZcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlb5Zy7CCTKh3rZ8bHBR/cSpLs3v6MXsceM7jAX77swAEDvCvHecJ8 cY92LsWoMYN17/qdzNnbhFzAHq535k/AjdhpKZYv17HEhmqhOX316BbDPp8QXmHQ YTVyQ2WQVDnJaoi5++M4TKx2WFZhEqMEcsdl0PQuYd6UsSZcbyOYM2pDADBK1Huy 4LPY9bPGu3SAigcW7UuAPCoWrFc41Rk2s9cXYhilVSC9dAb1a+83/XuZae+wPjPg BkiAzKNQ9ODQ1clcNgIZhQTQy7yAYBnIWtPtXquXgmRrSXStx7tcg1lDU/dsnDbg rjDcZd0NEwlzqHgqh6hb75sMOv11q9Q+ -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:48 2025 by rpki-client