$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: Bga1gOuLvlKoGpvGcMAY4wjY9/FA9OLgvXxnF7CzzX8= Subject key identifier: 1A:7E:28:80:5B:F3:7D:1A:E7:16:D1:86:A2:FB:C4:38:AE:BC:F9:A8 Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0CDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0CC6 Signing time: Tue 04 Nov 2025 18:16:16 +0000 Manifest this update: Tue 04 Nov 2025 18:16:15 +0000 Manifest next update: Tue 11 Nov 2025 18:16:15 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: Zwj7BNVfKOgEXXDVpmnNqruOZUD4Hlbz2Bur/O74duI=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Nov 4 18:16:15 2025 GMT Not After : Nov 11 18:16:15 2025 GMT Subject: CN=690a42f0-ce3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:8e:dc:44:69:6f:6b:0e:9d:eb:c0:73:b3: 53:37:83:3f:23:3b:97:ce:be:86:c9:aa:43:9f:7b: dc:1c:04:e7:34:85:aa:9e:3f:38:dc:f3:c5:a5:73: 1c:04:43:0b:ae:9c:09:6d:38:ae:fe:4b:63:d6:0e: d9:63:e3:55:d3:a7:e5:03:23:d3:7d:72:b9:fa:41: f5:32:80:c6:19:82:50:f3:64:60:13:10:a2:ce:10: 26:c3:d3:89:37:3b:ce:66:c3:60:a2:89:c0:fe:b8: f8:d8:7e:c2:61:ff:fd:23:4c:fe:a3:b4:ed:51:dc: 6f:8e:ef:26:f4:bb:3e:b0:d6:ee:20:68:c6:bc:ca: 55:69:34:da:af:f7:1c:12:3e:d4:0f:1e:03:a6:c1: 0a:b0:60:52:7a:5c:13:77:01:a6:53:e4:98:9a:17: 4d:4b:84:77:c2:4a:8f:44:1a:97:29:8e:63:89:28: 1a:36:73:00:b7:1a:ec:ad:a6:14:9a:bc:59:b7:ef: 8d:39:59:32:d9:98:45:c6:87:d9:da:95:bc:f4:20: bf:dd:68:c7:94:cc:7d:72:46:2c:f2:79:c1:dc:eb: bd:4b:26:d6:bc:28:f4:5a:ce:97:91:3e:ed:9b:16: de:46:4d:b9:33:76:c8:d7:ed:c0:84:5b:35:f8:80: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7E:28:80:5B:F3:7D:1A:E7:16:D1:86:A2:FB:C4:38:AE:BC:F9:A8 X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5b:64:96:cd:93:20:18:ff:d2:18:00:df:14:67:fd:31:9c: 3a:b7:0a:fa:67:ae:4e:43:71:93:af:f7:12:8b:5d:b7:dd:31: 50:70:d1:23:c6:2f:cd:4e:9a:73:a1:eb:dd:e4:7d:76:d1:16: 8d:90:da:0b:e8:ba:65:fd:d8:91:23:0a:3d:78:85:e6:89:64: c9:26:10:60:23:80:a2:25:3e:22:4a:ba:c2:4f:6e:ec:04:5b: 59:6b:58:c6:c5:04:24:3a:0b:45:d9:e6:d4:7a:25:db:0c:ed: 9b:1c:e6:9d:c4:d6:7a:fb:f2:9d:91:e7:2e:6d:d3:fe:7d:09: 11:ff:41:83:77:d3:82:4c:8a:14:8d:29:93:9f:97:d1:22:2b: 5c:2d:99:f2:34:fb:33:74:44:51:4d:84:e9:55:c7:07:04:85: 7d:97:ed:96:6b:47:a4:fe:94:a0:a8:c4:c0:71:10:d7:ad:2e: 75:a3:4d:bb:43:8f:f8:77:3f:ef:b6:fb:c9:ec:4e:eb:ec:c4: ae:57:c6:ca:6f:d4:ff:1b:40:ef:f1:c1:58:96:d2:d2:75:71: 70:4d:59:e4:64:33:66:bb:cc:6a:79:6e:34:e1:d6:13:40:8d: 6e:e5:d0:83:74:44:02:a5:1c:97:ba:0e:7d:4e:ae:dc:bb:ee: 07:8b:d9:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUxMTA0MTgxNjE1WhcNMjUxMTExMTgxNjE1WjAYMRYwFAYD VQQDEw02OTBhNDJmMC1jZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nSO3ERpb2sOnevAc7NTN4M/IzuXzr6GyapDn3vcHATnNIWqnj843PPFpXMc BEMLrpwJbTiu/ktj1g7ZY+NV06flAyPTfXK5+kH1MoDGGYJQ82RgExCizhAmw9OJ NzvOZsNgoonA/rj42H7CYf/9I0z+o7TtUdxvju8m9Ls+sNbuIGjGvMpVaTTar/cc Ej7UDx4DpsEKsGBSelwTdwGmU+SYmhdNS4R3wkqPRBqXKY5jiSgaNnMAtxrsraYU mrxZt++NOVky2ZhFxofZ2pW89CC/3WjHlMx9ckYs8nnB3Ou9SybWvCj0Ws6XkT7t mxbeRk25M3bI1+3AhFs1+IAv0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp+KIBb 830a5xbRhqL7xDiuvPmoMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnW2SWzZMgGP/SGADfFGf9MZw6twr6Z65OQ3GTr/cSi1233TFQcNEj xi/NTppzoevd5H120RaNkNoL6Lpl/diRIwo9eIXmiWTJJhBgI4CiJT4iSrrCT27s BFtZa1jGxQQkOgtF2ebUeiXbDO2bHOadxNZ6+/KdkecubdP+fQkR/0GDd9OCTIoU jSmTn5fRIitcLZnyNPszdERRTYTpVccHBIV9l+2Wa0ek/pSgqMTAcRDXrS51o027 Q4/4dz/vtvvJ7E7r7MSuV8bKb9T/G0Dv8cFYltLSdXFwTVnkZDNmu8xqeW404dYT QI1u5dCDdEQCpRyXug59Tq7cu+4Hi9nA -----END CERTIFICATE-----Generated at Wed Nov 5 23:05:54 2025 by rpki-client