$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: TzcioJtpRREiFd0hLIxU/rnBywkM4TwL38IMN4/qB98= Subject key identifier: F5:FF:6A:BC:02:0E:C0:1F:B4:4C:A3:CC:B2:63:B6:A1:B6:C3:AE:07 Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0F6D Signing time: Sun 02 Nov 2025 21:18:25 +0000 Manifest this update: Sun 02 Nov 2025 21:18:24 +0000 Manifest next update: Sun 09 Nov 2025 21:18:24 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: BJOynHAzZOpRoA5JXhB08heSKZWNUNc/387f8hoLuWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: Nov 2 21:18:24 2025 GMT Not After : Nov 9 21:18:24 2025 GMT Subject: CN=6907caa0-962e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:69:d1:d6:89:2d:1d:56:cd:b5:c4:1b:26: 0a:68:79:16:a6:58:7f:11:e7:ff:a6:f7:d1:00:0a: 85:2d:43:a3:99:b1:ed:ed:a1:8d:0a:4b:de:c9:6c: 2a:bc:72:9e:27:a2:7d:5b:b0:75:01:35:74:90:fe: d5:26:fe:02:43:f4:b1:e6:c5:03:ff:c2:03:44:12: df:f2:fe:ac:e9:a8:a4:a4:7b:f8:2c:eb:4d:85:ce: ff:11:f7:aa:43:2f:7e:29:d8:32:2e:c7:ad:74:62: d2:84:78:55:4d:96:2f:6d:27:c3:51:24:48:9f:21: a9:a8:17:31:ee:7f:b3:17:06:25:b0:37:57:f4:a7: b4:07:df:7b:01:7f:d2:2f:bc:04:1d:e1:c5:b2:12: 87:a2:31:d6:bb:62:e1:6d:24:19:32:e5:c2:81:4d: da:af:38:6b:fb:2f:4f:12:dd:57:37:59:ce:f0:b1: da:70:8f:9e:67:20:a2:b7:6b:37:13:a0:6b:ae:ba: 70:ea:17:3d:42:5e:30:cf:08:66:b7:03:6e:3f:44: 94:19:5b:92:de:c7:15:f8:c2:97:76:c9:bf:8b:9b: 2f:bd:7d:24:81:36:c8:4d:3d:b1:85:ab:3f:10:e9: f7:64:8b:fa:eb:56:83:9f:07:49:e2:9b:bf:ab:ea: 13:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FF:6A:BC:02:0E:C0:1F:B4:4C:A3:CC:B2:63:B6:A1:B6:C3:AE:07 X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5f:ce:8b:c4:e8:e8:e3:a7:ac:97:ce:1c:74:91:1b:93:61: 78:31:fb:bb:96:c1:82:e6:36:07:c8:02:10:92:10:f2:e2:6d: 35:f7:6c:85:81:54:1d:c0:2c:f8:5c:e7:b2:17:a5:17:5a:f2: 3c:58:fe:1e:29:d4:b7:0b:d4:cd:53:09:fd:4e:42:7a:ae:e1: 12:d1:42:b7:be:68:e9:9b:a3:64:4e:81:26:d8:14:3a:88:b7: 67:72:c7:cf:42:d7:02:8a:a6:10:aa:5b:c0:f2:80:77:e7:b8: 11:85:c6:4f:29:f9:1a:7c:dd:7a:47:e0:b4:7f:2d:40:70:e3: 8d:46:e4:30:57:24:ac:3d:ee:ff:af:1e:3b:51:15:dc:f9:e0: a9:cc:c3:cb:88:9c:0c:21:ef:2b:87:b9:12:fa:62:0d:1f:ae: 73:8c:1e:94:80:1d:49:d9:68:cf:74:a9:3d:fc:70:fd:b2:a2: 8a:7b:fb:e7:8e:1e:d4:de:44:04:ba:db:2a:ac:2f:77:60:87: 27:43:b3:1b:71:7a:20:43:2c:d1:f6:d0:2e:dc:51:d7:46:72: 99:37:b5:39:cb:d0:37:a8:d5:0d:81:93:ad:bf:3a:f4:c0:74: e0:5b:79:11:31:a3:b8:05:67:4c:60:1f:94:c4:d9:21:0c:8a: 74:fc:1a:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjUxMTAyMjExODI0WhcNMjUxMTA5MjExODI0WjAYMRYwFAYD VQQDEw02OTA3Y2FhMC05NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYxp0daJLR1WzbXEGyYKaHkWplh/Eef/pvfRAAqFLUOjmbHt7aGNCkveyWwq vHKeJ6J9W7B1ATV0kP7VJv4CQ/Sx5sUD/8IDRBLf8v6s6aikpHv4LOtNhc7/Efeq Qy9+KdgyLsetdGLShHhVTZYvbSfDUSRInyGpqBcx7n+zFwYlsDdX9Ke0B997AX/S L7wEHeHFshKHojHWu2LhbSQZMuXCgU3arzhr+y9PEt1XN1nO8LHacI+eZyCit2s3 E6Brrrpw6hc9Ql4wzwhmtwNuP0SUGVuS3scV+MKXdsm/i5svvX0kgTbITT2xhas/ EOn3ZIv661aDnwdJ4pu/q+oTVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX/arwC DsAftEyjzLJjtqG2w64HMB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+X86LxOjo46esl84cdJEbk2F4Mfu7lsGC5jYHyAIQkhDy4m0192yF gVQdwCz4XOeyF6UXWvI8WP4eKdS3C9TNUwn9TkJ6ruES0UK3vmjpm6NkToEm2BQ6 iLdncsfPQtcCiqYQqlvA8oB357gRhcZPKfkafN16R+C0fy1AcOONRuQwVySsPe7/ rx47URXc+eCpzMPLiJwMIe8rh7kS+mINH65zjB6UgB1J2WjPdKk9/HD9sqKKe/vn jh7U3kQEutsqrC93YIcnQ7MbcXogQyzR9tAu3FHXRnKZN7U5y9A3qNUNgZOtvzr0 wHTgW3kRMaO4BWdMYB+UxNkhDIp0/Bqf -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:13 2025 by rpki-client