$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json) Hash identifier: uvjB92+CNmQNjvdVQUcPyOfjuQ3HP79zdUphg7NYBAI= Subject key identifier: C4:EB:FE:07:DE:23:4B:E1:E8:32:C9:97:1C:45:BC:A7:94:80:40:F4 Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft Manifest number: 27 Signing time: Mon 03 Nov 2025 07:40:56 +0000 Manifest this update: Mon 03 Nov 2025 07:40:55 +0000 Manifest next update: Mon 10 Nov 2025 07:40:55 +0000 Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: iTQF8qLAg6U4CI0TFTYV2cTycv0mPai7ghVTVXiXFOQ=) 2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: E0HpiYi9oekDhMBwLHO28cWKce/Mgln+cFcKFRPDwlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Validity Not Before: Nov 3 07:40:55 2025 GMT Not After : Nov 10 07:40:55 2025 GMT Subject: CN=69085c88-e3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:d8:72:0f:9e:74:cd:e1:21:db:28:b5:3f: 48:46:bf:78:6e:ac:a3:9f:65:35:73:64:73:e5:27: d0:db:96:1c:33:3f:d0:fe:85:4f:57:0e:31:07:b7: b9:30:03:5b:ce:ce:b5:2a:0f:50:ac:a7:fc:98:9a: 96:c1:d5:e0:24:cd:a5:e9:b2:1c:a0:70:9d:0d:2c: 4f:32:70:61:fa:cd:42:d3:b5:88:2a:e0:10:a0:12: ec:31:a5:6a:d3:de:d4:32:73:7c:53:77:8a:98:86: 30:22:9d:7c:da:0d:ca:f3:f1:1d:b9:36:7a:77:af: 6c:4b:e9:e0:ae:b8:28:a5:fe:01:d8:75:2e:ec:5e: 5d:a3:74:ee:e6:74:2f:2f:f8:69:6e:95:c3:7b:66: ac:40:22:eb:60:34:6e:41:57:13:b4:2a:d8:67:20: 5e:c3:01:80:8b:f3:6e:c1:f0:b4:29:9f:8c:b0:76: 14:0a:22:bd:0b:3a:56:9d:82:5d:68:f7:39:e1:50: f9:dd:28:44:e9:52:27:24:03:33:c5:cc:52:92:1f: d8:06:9b:d2:71:58:5d:49:68:e3:64:6e:64:73:24: ac:ce:ab:c9:0a:fb:a7:cd:f3:ab:ba:eb:c3:24:5a: d3:20:4c:b0:48:ed:4f:78:6d:b4:62:a2:8e:e7:11: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EB:FE:07:DE:23:4B:E1:E8:32:C9:97:1C:45:BC:A7:94:80:40:F4 X509v3 Authority Key Identifier: keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:5f:d7:a7:20:b0:3f:c3:cb:78:c1:73:fb:52:b4:44:f0:97: 5e:ea:d1:db:50:24:de:bd:8c:ba:4b:2e:23:e3:26:4f:d8:b5: 68:32:ea:92:d3:07:b4:1b:dc:2f:b3:1c:bf:d1:43:79:57:10: ce:f4:a0:f2:c4:a4:59:fc:33:b0:47:0f:05:33:ad:bc:16:a7: c8:7f:22:01:45:26:89:c1:2e:fd:da:21:da:d4:8b:e2:5d:a9: f3:f7:f8:27:bb:37:7b:e6:0c:9b:1d:85:7a:72:a6:8e:6b:ff: 27:e4:43:41:6c:44:2d:ea:59:80:d0:d0:93:67:15:80:30:54: 87:9c:29:0b:c0:a3:a2:c9:f7:e7:b9:5d:58:fc:8d:c6:a6:5b: 6c:18:13:c5:5d:6a:8b:69:36:46:27:be:48:04:1b:3f:36:8e: a9:f1:0a:b8:c8:c3:50:e0:a0:d3:fa:0d:f6:7d:eb:80:e4:2e: c8:90:5b:0a:41:06:7c:54:13:a5:71:5d:25:e8:de:9b:6b:41: a7:ef:df:dd:ae:ac:30:28:59:4f:6d:fa:84:1a:06:c0:0c:c4: 5b:c0:2c:22:bc:6c:3f:18:69:db:11:16:f6:2c:79:48:22:fd: dd:4f:cd:aa:68:0f:d8:37:1b:9c:6b:d1:ee:c5:5f:35:87:e6: 02:6b:86:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzQwOTExMC8GA1UEBRMoNTIxNDkyMTA0QUIxQThCQkJFQkQ4MEE5OTYyOUQ0RTJF NjYzMjM3MDAeFw0yNTExMDMwNzQwNTVaFw0yNTExMTAwNzQwNTVaMBgxFjAUBgNV BAMTDTY5MDg1Yzg4LWUzYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgRthyD550zeEh2yi1P0hGv3hurKOfZTVzZHPlJ9DblhwzP9D+hU9XDjEHt7kw A1vOzrUqD1Csp/yYmpbB1eAkzaXpshygcJ0NLE8ycGH6zULTtYgq4BCgEuwxpWrT 3tQyc3xTd4qYhjAinXzaDcrz8R25Nnp3r2xL6eCuuCil/gHYdS7sXl2jdO7mdC8v +GlulcN7ZqxAIutgNG5BVxO0KthnIF7DAYCL827B8LQpn4ywdhQKIr0LOladgl1o 9znhUPndKETpUickAzPFzFKSH9gGm9JxWF1JaONkbmRzJKzOq8kK+6fN86u668Mk WtMgTLBI7U94bbRioo7nEdQJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxOv+B94j S+HoMsmXHEW8p5SAQPQwHwYDVR0jBBgwFoAUUhSSEEqxqLu+vYCplinU4uZjI3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NDA5LzQxRDUyRDQ2N0NC NjExRjA4QzVGNzc2OUM0RjlBRTAyL1VoU1NFRXF4cUx1LXZZQ3BsaW5VNHVaakkz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWhTU0VFcXhxTHUtdllDcGxpblU0dVpqSTNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NDA5LzQxRDUyRDQ2N0NCNjExRjA4QzVGNzc2OUM0RjlBRTAyL1VoU1NFRXF4cUx1 LXZZQ3BsaW5VNHVaakkzQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABhf16cgsD/Dy3jBc/tStETwl17q0dtQJN69jLpLLiPjJk/YtWgy6pLT B7Qb3C+zHL/RQ3lXEM70oPLEpFn8M7BHDwUzrbwWp8h/IgFFJonBLv3aIdrUi+Jd qfP3+Ce7N3vmDJsdhXpypo5r/yfkQ0FsRC3qWYDQ0JNnFYAwVIecKQvAo6LJ9+e5 XVj8jcamW2wYE8VdaotpNkYnvkgEGz82jqnxCrjIw1DgoNP6DfZ964DkLsiQWwpB BnxUE6VxXSXo3ptrQafv392urDAoWU9t+oQaBsAMxFvALCK8bD8YadsRFvYseUgi /d1PzapoD9g3G5xr0e7FXzWH5gJrhq8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:24 2025 by rpki-client