$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json) Hash identifier: FeKNKwIC0xmEDiqxNSeYbV+x+4wSF/Ps5i/FQn38NLw= Subject key identifier: 96:E3:9F:87:5E:49:ED:41:A2:08:83:1F:E1:50:DB:04:04:94:3F:62 Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft Manifest number: F5 Signing time: Mon 03 Nov 2025 05:14:44 +0000 Manifest this update: Mon 03 Nov 2025 05:14:43 +0000 Manifest next update: Mon 10 Nov 2025 05:14:43 +0000 Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: tCVWVgDOXfOgwIDa1CysC8fIK3Kdg0vrob0j3NJJFHk=) 2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: Ge+55CQegGWCZISlkeWVyEDQbw8xhE1lFYLjXYnwl5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Validity Not Before: Nov 3 05:14:43 2025 GMT Not After : Nov 10 05:14:43 2025 GMT Subject: CN=69083a43-e439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:7c:0e:b6:73:f7:db:b6:d3:e7:b4:1a:ca: aa:e2:ad:50:52:77:7c:b3:db:c7:44:c9:37:46:91: 46:88:1c:03:30:83:3d:b7:66:e9:a3:95:9d:fd:df: 6b:b7:c1:f0:eb:27:73:e2:72:8e:7e:bc:92:2c:7c: 52:9b:7e:a8:5d:ff:c1:f0:6e:5f:7b:1f:94:45:47: e5:d7:91:ce:8f:46:42:8e:91:13:cd:f0:32:f9:b3: 01:b6:75:a5:68:0a:54:09:30:98:ca:be:15:c1:23: 1e:e4:65:76:b8:9c:5f:68:01:f0:3d:d2:93:9c:53: 27:28:00:c9:fc:04:1e:c3:22:c6:df:f5:51:02:4b: 5b:b1:40:0f:de:55:87:5f:82:de:1b:44:64:be:ac: 7e:8a:06:3d:70:bf:7a:e5:c6:45:06:14:f1:5d:81: d5:bc:bc:e2:d0:ff:2e:ec:b8:f8:8b:d9:84:9b:ce: 48:16:47:9f:8c:56:f9:ef:da:0d:fa:40:82:7d:59: 56:55:1c:b9:3d:f1:c9:fa:1e:f1:ca:cf:43:46:93: ce:5c:98:05:03:5e:e7:ae:87:cf:37:77:5f:04:38: f0:fd:92:52:b8:8a:37:82:d4:c8:b8:40:e7:97:68: 7c:c5:f3:64:69:3e:c9:27:44:b9:74:5c:df:2a:d4: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E3:9F:87:5E:49:ED:41:A2:08:83:1F:E1:50:DB:04:04:94:3F:62 X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:16:60:7c:f1:ad:ae:06:97:7c:a4:d8:d9:ef:e0:c2:a5:c8: a6:eb:17:72:ca:0e:80:3c:14:f8:a5:d0:82:4d:a0:e3:f1:7d: 78:98:a1:7c:36:9d:18:6d:0d:0f:ad:e7:31:49:dc:25:4a:b7: b2:57:a9:80:4c:6d:ee:c8:2b:27:08:2b:ac:39:02:83:3c:7d: 57:0f:cb:7a:6d:5f:d4:a7:e1:79:81:e9:39:5a:ed:f1:23:a5: 78:26:af:ad:80:8f:ed:cd:d0:b6:eb:a1:04:c9:41:43:31:f2: 72:3c:c9:9a:d5:ae:21:ac:aa:58:2c:43:f3:eb:75:83:06:c0: 36:36:d9:75:e6:e7:16:a2:f1:ef:e1:c1:34:5a:a4:63:0d:27: f3:7f:39:3b:e3:74:45:41:f9:ec:57:70:f8:45:b7:af:11:e0: 27:6e:ff:25:34:e0:c0:4d:97:47:b8:f4:19:d3:4b:8a:0b:9c: 6d:9f:bc:b0:6b:ab:b8:95:a7:10:fd:19:b0:13:89:0b:08:02: 6c:fb:5a:31:56:00:20:12:8e:36:78:09:62:61:bb:5c:26:4e: 37:cd:dc:ec:94:21:0b:da:68:53:e4:57:09:c2:b0:14:eb:9d: 8d:29:5b:04:2d:dd:27:ed:e4:2d:26:fa:ba:b1:a5:44:75:44: c3:b1:30:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjUxMTAzMDUxNDQzWhcNMjUxMTEwMDUxNDQzWjAYMRYwFAYD VQQDEw02OTA4M2E0My1lNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyh8DrZz99u20+e0Gsqq4q1QUnd8s9vHRMk3RpFGiBwDMIM9t2bpo5Wd/d9r t8Hw6ydz4nKOfrySLHxSm36oXf/B8G5fex+URUfl15HOj0ZCjpETzfAy+bMBtnWl aApUCTCYyr4VwSMe5GV2uJxfaAHwPdKTnFMnKADJ/AQewyLG3/VRAktbsUAP3lWH X4LeG0Rkvqx+igY9cL965cZFBhTxXYHVvLzi0P8u7Lj4i9mEm85IFkefjFb579oN +kCCfVlWVRy5PfHJ+h7xys9DRpPOXJgFA17nrofPN3dfBDjw/ZJSuIo3gtTIuEDn l2h8xfNkaT7JJ0S5dFzfKtRPqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbjn4de Se1BogiDH+FQ2wQElD9iMB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS8wNUE3Q0U2ODQ1QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURF ZlRJRVZGSVllM1N1SnhFZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsFmB88a2uBpd8pNjZ7+DCpcim6xdyyg6APBT4pdCCTaDj8X14mKF8 Np0YbQ0PrecxSdwlSreyV6mATG3uyCsnCCusOQKDPH1XD8t6bV/Up+F5gek5Wu3x I6V4Jq+tgI/tzdC266EEyUFDMfJyPMma1a4hrKpYLEPz63WDBsA2Ntl15ucWovHv 4cE0WqRjDSfzfzk743RFQfnsV3D4RbevEeAnbv8lNODATZdHuPQZ00uKC5xtn7yw a6u4lacQ/RmwE4kLCAJs+1oxVgAgEo42eAliYbtcJk43zdzslCEL2mhT5FcJwrAU 652NKVsELd0n7eQtJvq6saVEdUTDsTBl -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:37 2025 by rpki-client