$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft File: UqAK42gJYToMmRW4LS7dewR_BBY.mft (raw, json) Hash identifier: 8kIYMJUB7nJOsZX5iC1RichuzyiQijcJdzy0tNnTCdQ= Subject key identifier: 53:B2:46:3E:BD:C9:17:40:A5:12:27:76:E4:C3:53:A8:5A:59:CF:AF Authority key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16 Certificate issuer: /CN=A91CC4A7/serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft Manifest number: 0A Signing time: Mon 03 Nov 2025 08:00:04 +0000 Manifest this update: Mon 03 Nov 2025 08:00:04 +0000 Manifest next update: Mon 10 Nov 2025 08:00:04 +0000 Files and hashes: 1: UqAK42gJYToMmRW4LS7dewR_BBY.crl (hash: 55qEJeEibzdIWUOKZS8RNLYoZFKvzDi9bAaX9+nBdCA=) 2: 94CEBFFEAB4511F09AA0C458C4F9AE02.roa (hash: 1k8O6Bsioa6ijWmD1KkKknB0AK/qAIm/Rz9ZwI76zuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416 Validity Not Before: Nov 3 08:00:04 2025 GMT Not After : Nov 10 08:00:04 2025 GMT Subject: CN=69086104-8b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:74:e5:7c:70:7a:6b:46:39:70:39:5b:c0: 5c:45:2d:ee:f8:f4:17:4c:e5:57:89:b4:5b:21:22: 54:d0:1b:4a:9c:cf:a3:27:4a:23:4a:22:16:56:15: 30:79:33:ad:6b:ed:b8:24:90:45:7d:af:6a:55:a6: 05:16:f3:ec:07:eb:7b:c0:49:43:b9:9d:2e:b5:71: 32:44:58:6b:22:eb:c2:5c:f1:f0:d0:4d:54:07:b0: e1:74:cd:5a:b9:3d:07:b6:87:3a:17:1c:5a:c6:83: d4:aa:87:f7:cc:dd:e3:68:6c:40:4e:ae:d3:55:84: 19:f9:ab:c2:bd:bc:aa:af:8a:0e:93:e7:62:91:3a: 35:38:f6:b7:1e:10:4d:0d:31:83:60:e6:e9:ef:e8: b2:03:69:9d:90:df:5d:e8:23:2e:6e:5c:b6:63:d6: ee:6e:24:2e:0e:87:d5:43:2f:74:69:7a:46:a8:57: 7c:d9:6c:15:9c:be:39:80:49:98:c8:ea:03:98:57: 55:26:e7:9c:5a:e7:3c:89:a7:4e:1e:e5:e4:c6:3a: 68:d2:48:fb:5f:42:b3:9e:8a:94:31:b4:be:33:35: fc:98:a4:67:9a:88:80:93:00:4d:2c:71:07:c2:25: 1e:77:23:35:a7:48:85:94:93:95:a2:3c:7e:ee:97: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B2:46:3E:BD:C9:17:40:A5:12:27:76:E4:C3:53:A8:5A:59:CF:AF X509v3 Authority Key Identifier: keyid:52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:77:16:b3:06:1e:23:e6:f4:67:d9:5e:61:d5:8c:53:af:3a: e2:f2:8c:8c:f6:3c:21:83:90:b7:6e:74:8e:50:29:4d:2a:d3: b2:26:66:bf:84:74:ae:ff:8f:9c:6b:c2:14:35:f9:49:40:73: b9:65:ea:fc:e3:0e:a6:fe:98:71:84:5b:7c:91:e8:03:b6:b4: 1c:fb:7f:2b:df:59:01:a9:c8:02:f1:8f:ad:09:eb:0a:d0:b2: 7d:db:a6:df:20:cf:e7:51:e1:e2:30:88:2e:6f:79:9f:c7:d6: 1d:a5:b7:d3:b2:8b:f7:76:1d:13:5f:65:6b:31:8e:c9:ea:ae: 23:44:9b:79:a9:59:96:de:ce:3f:45:14:81:d1:09:5b:cd:58: a2:26:49:f3:b0:8b:62:a7:74:3a:9b:c7:10:d9:4a:e6:d7:a6: 72:ef:19:a4:fc:ed:d6:97:cf:c4:3e:cc:5b:9c:ab:3a:f3:0b: d3:52:0d:26:d7:cd:d2:26:3b:eb:09:c6:06:f4:92:41:08:37: 4b:42:65:3c:46:55:56:44:38:ed:33:9a:05:43:85:03:e5:06: ef:7f:a3:94:b3:c1:6b:6d:be:6e:61:26:d6:99:b5:7d:21:a8: ca:81:1d:9c:85:95:ba:98:e3:b5:5a:af:77:4c:88:ae:15:2b: 3a:2a:bf:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoNTJBMDBBRTM2ODA5NjEzQTBDOTkxNUI4MkQyRUREN0Iw NDdGMDQxNjAeFw0yNTExMDMwODAwMDRaFw0yNTExMTAwODAwMDRaMBgxFjAUBgNV BAMTDTY5MDg2MTA0LThiMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpwnTlfHB6a0Y5cDlbwFxFLe749BdM5VeJtFshIlTQG0qcz6MnSiNKIhZWFTB5 M61r7bgkkEV9r2pVpgUW8+wH63vASUO5nS61cTJEWGsi68Jc8fDQTVQHsOF0zVq5 PQe2hzoXHFrGg9Sqh/fM3eNobEBOrtNVhBn5q8K9vKqvig6T52KROjU49rceEE0N MYNg5unv6LIDaZ2Q313oIy5uXLZj1u5uJC4Oh9VDL3RpekaoV3zZbBWcvjmASZjI 6gOYV1Um55xa5zyJp04e5eTGOmjSSPtfQrOeipQxtL4zNfyYpGeaiICTAE0scQfC JR53IzWnSIWUk5WiPH7ul0V5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU7JGPr3J F0ClEid25MNTqFpZz68wHwYDVR0jBBgwFoAUUqAK42gJYToMmRW4LS7dewR/BBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3LzA1OERENkFFQUI0 NTExRjA4NDNEMDY1N0M0RjlBRTAyL1VxQUs0MmdKWVRvTW1SVzRMUzdkZXdSX0JC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXFBSzQyZ0pZVG9NbVJXNExTN2Rld1JfQkJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3LzA1OERENkFFQUI0NTExRjA4NDNEMDY1N0M0RjlBRTAyL1VxQUs0MmdKWVRv TW1SVzRMUzdkZXdSX0JCWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACd3FrMGHiPm9GfZXmHVjFOvOuLyjIz2PCGDkLdudI5QKU0q07ImZr+E dK7/j5xrwhQ1+UlAc7ll6vzjDqb+mHGEW3yR6AO2tBz7fyvfWQGpyALxj60J6wrQ sn3bpt8gz+dR4eIwiC5veZ/H1h2lt9Oyi/d2HRNfZWsxjsnqriNEm3mpWZbezj9F FIHRCVvNWKImSfOwi2KndDqbxxDZSubXpnLvGaT87daXz8Q+zFucqzrzC9NSDSbX zdImO+sJxgb0kkEIN0tCZTxGVVZEOO0zmgVDhQPlBu9/o5SzwWttvm5hJtaZtX0h qMqBHZyFlbqY47Var3dMiK4VKzoqv9c= -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:09 2025 by rpki-client