$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: 7+Wb4eqnEXt2qYXFkO4Lf9psfYtoRcpAvlJnuovF4EE= Subject key identifier: 7F:A2:03:00:43:F7:6D:12:5B:3B:B1:E8:D0:99:3C:EA:51:4B:79:C3 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 18E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 18DE Signing time: Tue 04 Nov 2025 15:52:33 +0000 Manifest this update: Tue 04 Nov 2025 15:52:32 +0000 Manifest next update: Tue 11 Nov 2025 15:52:32 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: KlZnoKQxZulPmQM5GH/J2dCnGXbFOtLX5lg7CXqyHdM=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: Hi67OIgPZ7TBkvwrxhK9udO+gzYygQSZ8bHnr5IGMCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6373 (0x18e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Nov 4 15:52:32 2025 GMT Not After : Nov 11 15:52:32 2025 GMT Subject: CN=690a2141-4e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b7:ab:02:45:43:8b:f9:95:34:3b:f0:07:13: f7:f7:4b:e7:1c:cc:d1:1b:a5:6d:50:e6:91:74:89: fc:bd:ee:b2:6c:e6:44:e4:c6:41:12:97:61:dc:6c: 04:3a:fc:01:02:ef:e1:68:b3:a3:a4:48:49:67:5f: 79:22:8a:0b:70:dd:92:45:ef:b1:b4:2a:3f:27:f0: 54:4f:47:ac:e1:57:eb:c7:36:e0:76:ec:fe:8d:fd: 64:c0:d5:95:be:96:50:8a:5a:95:36:43:28:92:2f: a5:b5:c9:d4:16:c8:4f:ea:76:b2:a5:46:84:9b:0c: cc:01:10:bd:a7:f2:da:ee:b5:1c:9d:74:0f:bf:36: 9b:6b:44:e2:e7:dd:88:47:2f:dc:41:4e:07:23:96: 47:c6:f9:6f:81:ad:28:12:92:16:70:73:c8:3a:f0: 9b:c0:59:b4:ee:f2:3b:6e:86:9b:72:5b:9d:45:f4: 93:93:ab:6c:8e:c1:a5:d4:8b:49:5b:21:f5:28:58: e4:d3:29:08:41:bb:18:7b:5b:0c:f3:f3:f3:7c:84: fb:77:27:ab:3c:31:a8:49:50:0a:e3:41:d6:3c:92: a8:a7:f0:8d:72:95:cb:1f:55:dc:cb:8d:95:8d:f0: 6d:d1:ef:07:28:3d:3f:33:7c:8b:ec:0c:6b:d9:5c: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A2:03:00:43:F7:6D:12:5B:3B:B1:E8:D0:99:3C:EA:51:4B:79:C3 X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:22:a3:4f:9c:c0:4d:b4:ca:f7:56:10:84:3a:1c:60:dd:35: 2e:87:df:19:a9:45:17:27:c8:c8:c7:f2:33:f5:1d:7f:70:c8: f9:f1:25:4e:bb:eb:c2:e8:89:e7:93:a2:37:a2:47:42:22:68: 8a:f5:89:73:8e:de:09:52:14:7f:38:79:3f:2f:33:25:9f:84: 9c:46:4f:63:4d:d4:4f:0e:07:72:cb:b1:95:9f:91:ca:2f:8d: a5:2f:83:a1:1d:3f:c9:ac:5e:94:c9:df:a2:40:64:9b:c2:71: 51:40:e0:6f:81:c4:76:34:e3:9e:64:93:27:1e:ed:1f:d0:64: 32:be:e0:4b:1a:4c:6c:7d:72:06:f9:6d:8e:62:7d:a7:a5:30: b4:d3:19:61:70:fa:f6:d7:e2:f0:22:68:e0:1d:34:5d:7d:48: cd:81:d9:b1:ec:31:a9:db:bf:01:9f:d1:11:56:bf:35:92:e3: 66:47:01:58:7f:35:4d:48:90:79:55:44:33:92:44:c4:aa:b6: 9c:a9:e5:3c:62:2a:66:69:5c:7c:d4:d8:d5:5a:15:67:8e:6d: 4a:91:14:d3:4e:05:a6:24:37:77:45:14:1e:36:18:2e:3a:d6: 46:99:01:bc:7e:01:69:80:d2:0f:5e:6f:13:8b:e2:01:70:c8: 82:44:72:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUxMTA0MTU1MjMyWhcNMjUxMTExMTU1MjMyWjAYMRYwFAYD VQQDEw02OTBhMjE0MS00ZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LerAkVDi/mVNDvwBxP390vnHMzRG6VtUOaRdIn8ve6ybOZE5MZBEpdh3GwE OvwBAu/haLOjpEhJZ195IooLcN2SRe+xtCo/J/BUT0es4Vfrxzbgduz+jf1kwNWV vpZQilqVNkMoki+ltcnUFshP6naypUaEmwzMARC9p/La7rUcnXQPvzaba0Ti592I Ry/cQU4HI5ZHxvlvga0oEpIWcHPIOvCbwFm07vI7boabcludRfSTk6tsjsGl1ItJ WyH1KFjk0ykIQbsYe1sM8/PzfIT7dyerPDGoSVAK40HWPJKop/CNcpXLH1Xcy42V jfBt0e8HKD0/M3yL7Axr2Vx7TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+iAwBD 920SWzux6NCZPOpRS3nDMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZIqNPnMBNtMr3VhCEOhxg3TUuh98ZqUUXJ8jIx/Iz9R1/cMj58SVO u+vC6Innk6I3okdCImiK9Ylzjt4JUhR/OHk/LzMln4ScRk9jTdRPDgdyy7GVn5HK L42lL4OhHT/JrF6Uyd+iQGSbwnFRQOBvgcR2NOOeZJMnHu0f0GQyvuBLGkxsfXIG +W2OYn2npTC00xlhcPr21+LwImjgHTRdfUjNgdmx7DGp278Bn9ERVr81kuNmRwFY fzVNSJB5VUQzkkTEqracqeU8YipmaVx81NjVWhVnjm1KkRTTTgWmJDd3RRQeNhgu OtZGmQG8fgFpgNIPXm8Ti+IBcMiCRHI1 -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:13 2025 by rpki-client