$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: OMiRrHagVEGBWghsyEeGGfzu4WHK49iUxFd406tLvzc= Subject key identifier: CC:6B:DE:00:48:7F:86:F9:63:B2:DA:37:89:E7:3E:F0:01:38:6D:75 Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 095E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 095E Signing time: Tue 04 Nov 2025 20:13:06 +0000 Manifest this update: Tue 04 Nov 2025 20:13:05 +0000 Manifest next update: Tue 11 Nov 2025 20:13:05 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: kQGTBOzjdKEUYySLxmfgsdPX9VVkIY7j83aZw7C6HO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2398 (0x95e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Nov 4 20:13:05 2025 GMT Not After : Nov 11 20:13:05 2025 GMT Subject: CN=690a5e52-d73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b5:d2:97:c3:73:be:93:75:ef:1a:69:4c:ab: 42:2d:81:c5:11:14:d2:4f:50:b5:93:b4:72:1f:b5: 3e:bf:cf:9b:5a:94:33:36:08:37:93:3a:b4:2a:64: 08:ec:3a:4c:6b:ef:d9:52:9d:51:ad:7f:06:db:93: 30:ed:a0:b9:7a:a7:59:57:d6:16:ee:61:68:55:17: 22:36:ed:5f:cc:ac:21:24:3a:7b:02:5f:ab:3f:89: 2a:f9:6f:3b:e5:d9:1e:2d:dc:2e:cc:00:4b:b6:46: 5d:f1:6e:16:5a:a4:8d:82:ef:fe:11:35:07:3c:ac: 39:b9:74:47:72:59:03:0c:ef:7b:f1:b7:67:39:ae: f9:30:36:68:78:93:bc:e1:e0:05:b1:c9:fc:0d:63: 09:80:c3:48:1a:4d:1e:f1:d9:ef:a8:a6:01:f3:c6: 82:87:04:74:f1:e8:3e:aa:c4:42:ab:8f:2d:8f:fa: 27:b7:7d:bd:cf:79:94:2c:74:f7:3a:21:1e:43:12: 0d:58:b9:35:60:c3:09:4d:4b:c3:80:2d:2a:ae:03: 05:95:a4:9b:57:51:62:73:81:3e:96:b6:bf:01:5c: b6:56:b5:89:22:b1:65:16:22:b3:10:50:97:8b:9a: 21:92:7c:0e:1e:37:2a:81:28:98:fa:20:98:97:25: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6B:DE:00:48:7F:86:F9:63:B2:DA:37:89:E7:3E:F0:01:38:6D:75 X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:24:02:cb:d6:58:62:c3:84:c9:ce:54:9a:9f:8e:07:86:f6: 8e:52:dd:26:60:a1:05:01:f2:77:85:d9:63:6d:7a:49:e7:72: 20:39:1f:21:1d:98:0e:52:46:1a:4c:08:b5:53:ef:67:37:4e: 31:7c:94:72:45:58:e3:68:78:e0:ee:d4:51:42:0a:08:ac:b0: 02:e3:f1:d7:f6:be:d6:06:93:9c:e9:c9:cc:ef:b0:ba:b8:85: 7f:14:a3:50:8a:17:b2:3b:b5:48:28:34:5d:14:27:6d:8d:c5: 87:52:23:53:03:8e:5a:45:f5:39:26:d8:b7:70:c8:8e:49:8b: 03:a5:ec:d7:4f:af:67:0a:3f:65:2b:a5:7f:75:c8:15:89:0c: 16:c0:31:79:7e:f9:37:3e:f3:ed:ea:a9:33:b4:d1:9b:de:22: a0:b6:e3:1f:2a:ec:a3:fd:da:be:42:9d:ee:04:be:71:6a:b7: 48:15:ff:19:03:fb:66:6b:24:a2:e0:0a:ee:03:c3:4d:a4:64: 06:9a:0e:1d:ba:ff:c1:f0:0d:98:e4:fd:3e:85:24:82:f0:1f: 81:3e:bd:5a:77:48:6e:6a:37:c5:f5:58:4b:3e:0d:10:c2:a8: 1d:36:80:82:e5:1c:b6:0a:79:a4:c7:3d:30:38:e2:d2:3d:45: 60:01:53:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjUxMTA0MjAxMzA1WhcNMjUxMTExMjAxMzA1WjAYMRYwFAYD VQQDEw02OTBhNWU1Mi1kNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LXSl8NzvpN17xppTKtCLYHFERTST1C1k7RyH7U+v8+bWpQzNgg3kzq0KmQI 7DpMa+/ZUp1RrX8G25Mw7aC5eqdZV9YW7mFoVRciNu1fzKwhJDp7Al+rP4kq+W87 5dkeLdwuzABLtkZd8W4WWqSNgu/+ETUHPKw5uXRHclkDDO978bdnOa75MDZoeJO8 4eAFscn8DWMJgMNIGk0e8dnvqKYB88aChwR08eg+qsRCq48tj/ont329z3mULHT3 OiEeQxINWLk1YMMJTUvDgC0qrgMFlaSbV1Fic4E+lra/AVy2VrWJIrFlFiKzEFCX i5ohknwOHjcqgSiY+iCYlyXvpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxr3gBI f4b5Y7LaN4nnPvABOG11MB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9JALL1lhiw4TJzlSan44HhvaOUt0mYKEFAfJ3hdljbXpJ53IgOR8h HZgOUkYaTAi1U+9nN04xfJRyRVjjaHjg7tRRQgoIrLAC4/HX9r7WBpOc6cnM77C6 uIV/FKNQiheyO7VIKDRdFCdtjcWHUiNTA45aRfU5Jti3cMiOSYsDpezXT69nCj9l K6V/dcgViQwWwDF5fvk3PvPt6qkztNGb3iKgtuMfKuyj/dq+Qp3uBL5xardIFf8Z A/tmaySi4AruA8NNpGQGmg4duv/B8A2Y5P0+hSSC8B+BPr1ad0huajfF9VhLPg0Q wqgdNoCC5Ry2Cnmkxz0wOOLSPUVgAVNX -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:12 2025 by rpki-client