$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: 8mJwi0VR08+NMnVOPLOw3Zx8CFsDnE042cWzpgchwWQ= Subject key identifier: 64:8E:7D:C5:9E:84:AE:BE:A3:24:6E:AD:DC:93:A0:A1:46:2D:D3:F4 Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 34DF Signing time: Sun 02 Nov 2025 14:18:13 +0000 Manifest this update: Sun 02 Nov 2025 14:18:12 +0000 Manifest next update: Sun 09 Nov 2025 14:18:12 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: r+pjvzrCbNpC7nlKuoX7tOGxkVdxCcCcDXap6evbf1U=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: oI8UmPtI+e/lNHKPjl/mA09y7Gr50NMbgC5wn6SXx2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: Nov 2 14:18:12 2025 GMT Not After : Nov 9 14:18:12 2025 GMT Subject: CN=69076824-1432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:ef:fe:f8:35:fd:cd:20:fb:5d:c5:a1:43: bd:0b:84:18:33:25:77:02:5b:31:b5:20:f0:87:e9: fb:61:9c:9d:63:8e:0d:2c:85:bf:2a:54:a6:9e:18: f9:dc:0f:cf:2c:33:53:6b:cd:f8:33:39:13:a3:b7: 6e:37:ca:f5:58:cf:e6:98:8d:62:ed:85:22:cd:05: 78:a4:a4:cc:77:00:bb:b6:70:dd:b6:42:2a:6e:88: 6a:42:66:0d:26:0a:3f:dd:ee:c1:02:a5:38:56:4f: 82:86:99:56:3a:7f:cb:a5:d9:e6:49:c0:6a:fb:4b: e3:d3:e4:f2:fa:26:ba:c5:e0:db:a9:8f:67:75:4f: 52:68:7f:8e:45:ef:27:9c:cc:66:f3:9f:de:29:d3: 6c:ee:b8:2e:80:cd:56:a9:34:14:84:a2:58:76:40: e1:5c:ca:a0:7a:50:91:ba:7e:b3:9f:31:46:5b:d3: a6:78:db:67:79:0d:e8:de:3a:4e:1b:bc:98:e8:0e: b0:c4:b1:39:0e:11:a6:79:c3:9a:c5:a2:25:85:3f: 0c:38:7f:f5:4d:c2:8a:4a:a0:84:9a:01:50:fc:0d: 19:fc:17:bc:96:32:31:34:32:ec:0c:be:37:83:a9: 7c:21:1c:e3:75:6f:58:9c:bc:b3:c2:e5:11:07:b8: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8E:7D:C5:9E:84:AE:BE:A3:24:6E:AD:DC:93:A0:A1:46:2D:D3:F4 X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ba:8f:c2:ea:c2:d8:58:81:d3:f1:29:6d:75:ce:d3:c5:67: 66:b1:de:2b:2b:ff:a4:9f:df:89:9e:f7:28:aa:31:2d:31:ae: 25:9b:f2:bc:b1:ce:ed:c3:e1:a7:10:d6:38:b7:3c:05:4a:73: a4:7b:3d:8e:f0:f0:01:b9:56:08:ac:3b:7b:81:10:06:77:9f: 3b:ce:5f:a9:7e:2f:84:08:f1:8f:39:15:58:d0:88:dd:ca:c0: 47:16:ec:15:4a:ed:30:ba:58:42:10:41:e8:cd:7e:d4:71:be: a7:fc:9c:67:85:fb:56:85:42:90:d1:e8:d9:fd:9b:6c:7a:93: d4:91:ff:db:10:85:22:81:b7:6a:59:6e:ec:ea:6c:46:ca:17: ad:66:b2:29:8c:57:bf:f8:b7:11:a8:eb:92:2d:c2:25:5a:76: 95:74:1b:67:08:bc:49:bf:ce:6a:a7:0e:57:de:ae:e2:b7:17: b4:4d:a1:f7:f0:6f:84:14:65:71:b6:3a:b9:e3:f6:70:f3:68: 01:2c:09:fc:89:89:a5:db:90:90:6d:b2:eb:67:90:55:e2:3b: fc:a1:c1:20:3c:49:d0:03:a4:a6:4d:ce:fa:6a:63:ce:04:69: b0:20:33:a5:a4:08:db:ec:32:0e:d9:d9:75:94:68:fc:42:aa: 79:a1:36:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjUxMTAyMTQxODEyWhcNMjUxMTA5MTQxODEyWjAYMRYwFAYD VQQDEw02OTA3NjgyNC0xNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kXv/vg1/c0g+13FoUO9C4QYMyV3AlsxtSDwh+n7YZydY44NLIW/KlSmnhj5 3A/PLDNTa834MzkTo7duN8r1WM/mmI1i7YUizQV4pKTMdwC7tnDdtkIqbohqQmYN Jgo/3e7BAqU4Vk+ChplWOn/LpdnmScBq+0vj0+Ty+ia6xeDbqY9ndU9SaH+ORe8n nMxm85/eKdNs7rgugM1WqTQUhKJYdkDhXMqgelCRun6znzFGW9OmeNtneQ3o3jpO G7yY6A6wxLE5DhGmecOaxaIlhT8MOH/1TcKKSqCEmgFQ/A0Z/Be8ljIxNDLsDL43 g6l8IRzjdW9YnLyzwuURB7htOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSOfcWe hK6+oyRurdyToKFGLdP0MB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAuo/C6sLYWIHT8Sltdc7TxWdmsd4rK/+kn9+JnvcoqjEtMa4lm/K8 sc7tw+GnENY4tzwFSnOkez2O8PABuVYIrDt7gRAGd587zl+pfi+ECPGPORVY0Ijd ysBHFuwVSu0wulhCEEHozX7Ucb6n/JxnhftWhUKQ0ejZ/ZtsepPUkf/bEIUigbdq WW7s6mxGyhetZrIpjFe/+LcRqOuSLcIlWnaVdBtnCLxJv85qpw5X3q7itxe0TaH3 8G+EFGVxtjq54/Zw82gBLAn8iYml25CQbbLrZ5BV4jv8ocEgPEnQA6SmTc76amPO BGmwIDOlpAjb7DIO2dl1lGj8Qqp5oTYF -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:49 2025 by rpki-client