$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json) Hash identifier: VGc/ry44t72LCecqDU06ds8KkJXrO+O+JDKA0l7/h7Y= Subject key identifier: 72:46:96:C7:CD:BE:C5:57:E3:DD:AA:65:F7:1C:98:B7:14:55:D3:60 Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft Manifest number: 4A Signing time: Wed 05 Nov 2025 07:31:30 +0000 Manifest this update: Wed 05 Nov 2025 07:31:30 +0000 Manifest next update: Wed 12 Nov 2025 07:31:30 +0000 Files and hashes: 1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: fPZyB5ttpD6SVhZVYP/ecj9xmE3oHMYlt/lgbgYmj/M=) 2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Validity Not Before: Nov 5 07:31:30 2025 GMT Not After : Nov 12 07:31:30 2025 GMT Subject: CN=690afd52-ad5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:97:d2:0a:58:f8:89:ca:af:00:a5:ee:2f: 4d:0d:69:29:a9:87:1e:ad:84:dc:74:6e:4e:e1:4a: f1:64:17:e2:19:68:7f:79:86:a0:a8:e5:2b:ba:26: 3e:7e:ba:d7:77:5d:85:f3:6c:4c:4b:78:38:3f:72: 00:b0:75:b9:e2:38:47:f8:da:8c:74:2f:26:ec:64: 46:bf:66:53:45:90:33:70:2d:93:e2:1f:3f:a7:95: eb:57:11:8d:ff:c1:f6:8c:50:fb:45:ba:bc:e9:43: 99:93:b1:91:43:6f:24:48:25:f2:d5:73:41:25:18: 14:c1:77:b9:2b:08:a9:01:33:ff:ef:bf:c9:86:49: 87:a6:de:24:5b:b5:70:83:05:83:84:e5:e4:b7:a6: 4f:b8:27:c0:43:ba:7b:6c:89:be:ee:c8:8b:23:74: 90:30:24:1c:85:73:22:83:02:bd:14:1f:c2:0d:0d: b8:5f:88:d7:f9:a7:7f:0e:92:d6:e6:d1:ec:41:3b: e4:85:01:fa:1e:2c:9c:8a:2b:a2:0e:58:15:4e:c3: 0c:00:59:bc:ce:ab:96:8a:e7:7b:84:ad:31:ed:b5: b5:82:50:b9:cd:dc:7f:7a:f2:7c:ac:a6:85:78:7a: 76:09:4b:6b:f0:00:6b:b2:69:9b:7c:71:67:1d:28: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:46:96:C7:CD:BE:C5:57:E3:DD:AA:65:F7:1C:98:B7:14:55:D3:60 X509v3 Authority Key Identifier: keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:5a:8f:7e:2b:fa:06:00:33:a6:3f:d6:29:0c:20:54:46:68: 95:3e:aa:dd:25:2c:9b:63:14:c4:6c:4d:ab:f1:24:12:f2:02: 85:0f:a3:cb:2d:06:87:ba:59:30:db:ea:28:18:f4:24:62:1c: 95:2b:f1:1c:59:fa:cc:10:8d:fc:9d:34:38:88:78:98:70:1e: 71:e5:0b:53:2e:a3:6e:94:3c:01:fb:d8:a7:ce:5f:08:9e:3a: d7:9f:dd:86:05:8b:ab:98:35:69:79:a2:8b:39:c8:dd:64:1c: 65:8c:f8:a4:67:ac:83:71:3b:dd:87:d3:7d:fb:40:14:51:e7: c6:03:53:a4:30:e1:d4:d7:72:7e:08:3f:25:56:a0:61:df:e5: 56:0b:a9:03:80:bf:db:60:65:ca:8d:fb:ba:bd:0a:ba:53:fe: 87:b4:d2:39:2f:6d:b7:64:3f:21:0d:f9:3c:d9:ab:90:1a:16: f5:54:fa:b4:ae:cb:c2:44:bd:7b:61:e1:8a:23:9e:67:20:77: 0a:05:62:1e:68:35:12:59:97:32:ca:08:08:b8:7e:3e:45:f4: 4a:87:45:91:58:c0:5c:a6:c7:80:cb:a2:84:b3:a1:fd:b1:40: 29:aa:f9:a5:92:02:72:50:72:89:fd:b1:69:d2:f6:d5:aa:58: 06:c4:30:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTIzMUM0NTc0MTNCOUM3OUNENUIzMDBEODRBNDNCMDAz OUJCNjgxMzAeFw0yNTExMDUwNzMxMzBaFw0yNTExMTIwNzMxMzBaMBgxFjAUBgNV BAMTDTY5MGFmZDUyLWFkNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQtJfSClj4icqvAKXuL00NaSmphx6thNx0bk7hSvFkF+IZaH95hqCo5Su6Jj5+ utd3XYXzbExLeDg/cgCwdbniOEf42ox0LybsZEa/ZlNFkDNwLZPiHz+nletXEY3/ wfaMUPtFurzpQ5mTsZFDbyRIJfLVc0ElGBTBd7krCKkBM//vv8mGSYem3iRbtXCD BYOE5eS3pk+4J8BDuntsib7uyIsjdJAwJByFcyKDAr0UH8INDbhfiNf5p38Oktbm 0exBO+SFAfoeLJyKK6IOWBVOwwwAWbzOq5aK53uErTHttbWCULnN3H968nyspoV4 enYJS2vwAGuyaZt8cWcdKIJpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUckaWx82+ xVfj3apl9xyYtxRV02AwHwYDVR0jBBgwFoAUUjHEV0E7nHnNWzANhKQ7ADm7aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzczOTA2ODBFNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhuTld6QU5oS1E3QURtN2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWpIRVYwRTduSG5OV3pBTmhLUTdBRG03YUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUNDLzczOTA2ODBFNEEzQTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhu Tld6QU5oS1E3QURtN2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJaj34r+gYAM6Y/1ikMIFRGaJU+qt0lLJtjFMRsTavxJBLyAoUPo8st Boe6WTDb6igY9CRiHJUr8RxZ+swQjfydNDiIeJhwHnHlC1Muo26UPAH72KfOXwie Otef3YYFi6uYNWl5oos5yN1kHGWM+KRnrINxO92H0337QBRR58YDU6Qw4dTXcn4I PyVWoGHf5VYLqQOAv9tgZcqN+7q9CrpT/oe00jkvbbdkPyEN+TzZq5AaFvVU+rSu y8JEvXth4YojnmcgdwoFYh5oNRJZlzLKCAi4fj5F9EqHRZFYwFymx4DLooSzof2x QCmq+aWSAnJQcon9sWnS9tWqWAbEMA8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:53 2025 by rpki-client