$ rpki-client -vvf rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft File: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft (raw, json) Hash identifier: pxjc0MjDl4yUKVJhgXTm+78sAwAy83Vb3WTGoCaZhvw= Subject key identifier: C2:71:2D:44:0A:A9:67:36:F9:AF:E2:A7:7B:3B:ED:5D:5A:E6:60:00 Authority key identifier: 51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76 Certificate issuer: /CN=A91C575E/serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft Manifest number: 23 Signing time: Mon 03 Nov 2025 07:46:18 +0000 Manifest this update: Mon 03 Nov 2025 07:46:17 +0000 Manifest next update: Mon 10 Nov 2025 07:46:17 +0000 Files and hashes: 1: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl (hash: Ir8zSIk5Q85d0IXw6UwaBdY02mwOKibSPbOXWD8g6TQ=) 2: 3FD60CEC896B11F0A99C2258C4F9AE02.roa (hash: L2I2C5AaIi5CRCmOivb7F6/dBQAFh3PeT7bznCfpjdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C575E, serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76 Validity Not Before: Nov 3 07:46:17 2025 GMT Not After : Nov 10 07:46:17 2025 GMT Subject: CN=69085dca-163d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cd:75:2e:08:d0:89:61:b0:9d:dd:0c:37:91: 3d:fe:5a:40:80:3d:86:3b:9a:16:19:c7:fd:1e:bf: 5f:f3:e3:89:b6:a5:a9:fe:8d:95:7f:4b:94:77:ef: 1f:6b:b6:0a:08:f3:31:bc:a6:20:84:10:f6:23:e4: 65:74:72:69:f2:81:ea:d2:19:c8:58:e1:ca:8c:7f: 57:01:74:82:59:f4:ed:30:cb:92:3b:40:29:78:dc: 42:1c:c6:5f:7f:2b:b8:95:72:0e:77:37:46:8c:05: 7c:67:d3:8c:6c:15:04:72:6f:6a:35:b5:aa:d7:97: fb:d2:0a:ad:57:54:02:49:09:f3:47:c8:27:76:2c: 25:54:72:bc:04:04:81:21:a4:22:91:94:28:9a:b0: aa:c1:c3:98:6c:be:58:87:7c:00:5b:a8:ae:d6:ac: c2:bd:62:3b:89:69:cd:a0:93:09:29:77:7d:d8:ab: ee:47:5c:f6:b5:4d:7e:08:cc:2c:03:dd:68:25:e9: e0:ef:45:ad:b8:02:07:66:92:e9:43:9c:5b:24:15: ca:69:1f:32:72:86:47:6e:33:68:19:74:65:df:35: 8d:94:a7:33:69:83:b4:e6:dd:7d:7b:59:26:5b:df: b9:b8:3f:f0:36:21:8c:f7:d2:62:42:27:b3:9e:57: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:71:2D:44:0A:A9:67:36:F9:AF:E2:A7:7B:3B:ED:5D:5A:E6:60:00 X509v3 Authority Key Identifier: keyid:51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:82:d3:de:81:1c:f7:34:7d:d4:39:ad:77:bf:e6:1e:f3:df: 8a:dc:43:73:bd:31:8d:e3:09:ca:d0:3b:b9:5b:46:e3:49:c2: f9:ee:ec:6c:59:26:7a:a9:32:4e:13:f1:fd:cf:06:84:81:c6: 21:09:b4:1a:cc:e4:22:a9:c7:5a:79:98:e1:3e:41:01:80:dd: 63:68:9c:82:06:0e:9d:9a:f7:9d:db:6b:b4:93:13:16:80:bf: ba:03:93:13:b1:0a:1e:b9:19:83:2c:7c:f0:13:a9:f9:db:54: 02:50:b4:71:32:7a:f5:a4:18:ac:a4:c2:ab:c7:43:16:e8:58: a6:f0:58:f8:ee:90:c9:84:06:b0:20:d1:50:fd:34:d1:df:c5: d8:03:d8:74:88:11:33:be:c3:f2:bd:68:98:33:d1:25:40:05: 91:8f:ae:9d:95:86:2f:b7:cb:2a:25:fe:7c:88:15:b7:f8:b8: 0c:f9:c7:39:98:e5:02:3e:cc:ae:ab:70:00:9e:dc:f2:ef:33: c7:22:df:c9:41:31:8e:25:0d:80:9c:c7:32:01:47:86:bb:2f: e9:99:a5:cf:6b:20:49:95:c3:62:f4:66:b9:82:e2:cf:8e:f7: 41:b3:8a:d0:d0:96:dd:75:08:ce:2a:97:25:50:d3:82:1d:eb: 71:d9:56:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTc1RTExMC8GA1UEBRMoNTEzRUNFNzNFRTlFQTMyNUVBNDQyOTMxQjAwNjJCRDhC RjMwNEE3NjAeFw0yNTExMDMwNzQ2MTdaFw0yNTExMTAwNzQ2MTdaMBgxFjAUBgNV BAMTDTY5MDg1ZGNhLTE2M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmzXUuCNCJYbCd3Qw3kT3+WkCAPYY7mhYZx/0ev1/z44m2pan+jZV/S5R37x9r tgoI8zG8piCEEPYj5GV0cmnygerSGchY4cqMf1cBdIJZ9O0wy5I7QCl43EIcxl9/ K7iVcg53N0aMBXxn04xsFQRyb2o1tarXl/vSCq1XVAJJCfNHyCd2LCVUcrwEBIEh pCKRlCiasKrBw5hsvliHfABbqK7WrMK9YjuJac2gkwkpd33Yq+5HXPa1TX4IzCwD 3Wgl6eDvRa24AgdmkulDnFskFcppHzJyhkduM2gZdGXfNY2UpzNpg7Tm3X17WSZb 37m4P/A2IYz30mJCJ7OeV86rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwnEtRAqp Zzb5r+KnezvtXVrmYAAwHwYDVR0jBBgwFoAUUT7Oc+6eoyXqRCkxsAYr2L8wSnYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NzVFL0UyQUNCNDNBODk2 QTExRjA4MUU0NEQ1N0M0RjlBRTAyL1VUN09jLTZlb3lYcVJDa3hzQVlyMkw4d1Nu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVVQ3T2MtNmVveVhxUkNreHNBWXIyTDh3U25ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NzVFL0UyQUNCNDNBODk2QTExRjA4MUU0NEQ1N0M0RjlBRTAyL1VUN09jLTZlb3lY cVJDa3hzQVlyMkw4d1NuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCC096BHPc0fdQ5rXe/5h7z34rcQ3O9MY3jCcrQO7lbRuNJwvnu7GxZ JnqpMk4T8f3PBoSBxiEJtBrM5CKpx1p5mOE+QQGA3WNonIIGDp2a953ba7STExaA v7oDkxOxCh65GYMsfPATqfnbVAJQtHEyevWkGKykwqvHQxboWKbwWPjukMmEBrAg 0VD9NNHfxdgD2HSIETO+w/K9aJgz0SVABZGPrp2Vhi+3yyol/nyIFbf4uAz5xzmY 5QI+zK6rcACe3PLvM8ci38lBMY4lDYCcxzIBR4a7L+mZpc9rIEmVw2L0ZrmC4s+O 90GzitDQlt11CM4qlyVQ04Id63HZVoA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:57 2025 by rpki-client