$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft File: ueYM8Xn06svblJK6X3ys9FI5zPQ.mft (raw, json) Hash identifier: Df69sGXuVmeztifOpLtJXk/pzZIYC8UueJYFwCSEE+o= Subject key identifier: BC:93:FA:7C:87:CA:72:3C:91:13:5E:83:09:3B:82:72:E0:FB:9B:31 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft Manifest number: 020A Signing time: Mon 03 Nov 2025 03:00:27 +0000 Manifest this update: Mon 03 Nov 2025 03:00:27 +0000 Manifest next update: Mon 10 Nov 2025 03:00:27 +0000 Files and hashes: 1: ueYM8Xn06svblJK6X3ys9FI5zPQ.crl (hash: ESVscB22k9BXgiOpk7VE0SL2zT/vXBuWo++/s/6+Y+k=) 2: 7362D03E37C511EFBA013C34C4F9AE02.roa (hash: J9UTYAikWbU8vUFy05/O20RblyI0R/6cvmoWQQlqRao=) 3: 14C4C7D4002611EFBD462953C4F9AE02.roa (hash: 8kJgm21octV347LA5b0+h9xqKVWz2z1gfuxOcYechGQ=) 4: D2DF3ACCE25911EF9C741573C4F9AE02.roa (hash: bZo0jjpEK53JojulYhh2uIoOsNZVtFikF4T0wNpVaTc=) 5: 43E73F1824D011F0805C1741C4F9AE02.roa (hash: 8mWGVJVNOJKNvpRmJNnFhHAnhQ0UCcRUPU+vCMi+chY=) 6: 1DD3ED16BDB611EF8F65515FC4F9AE02.roa (hash: U47nsJ9WKaDxD3HIjdZJqDhU3aurE9CLsz0So1y6hAU=) 7: E35133A60ED911EE8A4E0A23C4F9AE02.roa (hash: e25ru4BXX5TZKhE2N5BI3aO29RU1zFDKzTpZQJzhAu0=) 8: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (hash: OB+tYh+ezOhErKjf4UNGv3Lw8UDs7ihuZFiU7SbyVcg=) 9: 139300E4BA6911EFA78E2F66C4F9AE02.roa (hash: oK/gg2jz6l2+odqa+6HnN0t0SaDFmpXk6CPlQPqG6OA=) 10: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (hash: tlKS/saXcUEqSUdoVe/orILud6VMLOZGDh0+a8Ti4+w=) 11: E17B507E25DF11F0B111A515C4F9AE02.roa (hash: 5/aPav0hnKaVORmHzg6d5/te9kJtJygeFIvna6mHtc0=) 12: AE0A263AB00411EF95939E11C4F9AE02.roa (hash: 8TgidTWCD46pM3MBDeEQO24WX8WtEAaCQuUE2ZinLOI=) 13: 305C2134666211EFB1D51134C4F9AE02.roa (hash: mHWyoaXD9eCyhUezuYUM312SPpVtRjaHke+S1ZIIWUM=) 14: E7DC24BCC4C211EF8670983EC4F9AE02.roa (hash: QKESfnhXPWNJehFGb7NWVBUPM3j+NPkYNguECdBBh5k=) 15: 7857C144B87211EE98B04B19C4F9AE02.roa (hash: Ygl6owDEWs6V5U72TH4FmIb2N0WDGnO4aWCzCnuCTGA=) 16: A069EA0C8EE911EE8698A64FC4F9AE02.roa (hash: KnQ67jxRd2r4K6SCZNe0nZs2NQzYLUias1vgx76E3mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Nov 3 03:00:27 2025 GMT Not After : Nov 10 03:00:27 2025 GMT Subject: CN=69081acb-7ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:80:12:fd:1a:4f:85:64:8f:b2:ab:33:a0:ee: 6c:48:fe:69:22:a3:74:a6:43:ca:d7:43:2a:33:cb: c8:ce:09:fa:4b:6e:a4:24:7d:25:7b:d3:20:f3:28: 40:e0:3d:76:d7:45:41:c3:1c:ba:c5:5b:54:93:ae: d3:41:bf:ac:cf:ab:cb:cb:13:25:77:e1:60:ad:40: c9:4c:92:1a:83:9e:40:88:b4:71:6c:4e:be:5b:7d: 2e:f7:11:8e:0e:da:ed:18:ff:c5:4b:4d:09:1f:d8: 02:e5:29:81:00:55:da:f4:db:4f:c6:db:07:b1:ee: 5c:8d:c1:25:d3:80:69:0b:ed:19:13:c6:62:e2:39: 34:b4:d4:a8:2f:67:d5:62:51:37:87:de:4e:eb:ac: 93:82:90:38:b7:22:53:c7:5a:e0:47:1c:38:6e:3d: 38:0f:94:9a:1e:79:db:28:7a:d6:90:56:1c:8f:b1: 07:0d:c3:f0:9d:ba:8c:e5:e7:a8:d2:fd:29:47:86: 00:c6:da:9d:16:e8:23:da:76:24:ea:28:d0:a0:c3: 7c:94:11:9a:35:5c:33:ec:62:36:7f:14:0f:ec:73: ab:c3:93:e1:3d:a8:10:d2:7a:e8:35:63:c5:75:64: 3b:09:31:4a:0f:0c:30:b2:45:96:82:78:16:4a:4a: e2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:93:FA:7C:87:CA:72:3C:91:13:5E:83:09:3B:82:72:E0:FB:9B:31 X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:16:c4:d0:a3:af:17:de:c0:00:84:34:31:39:ef:fd:eb:c8: 7e:58:1f:a6:c4:b3:6a:32:ad:f9:04:91:b9:1e:1d:b0:1c:88: a8:4a:71:d0:f1:ca:eb:d8:8e:33:e4:21:5c:d5:68:b1:4c:32: 83:74:41:9d:2f:d1:53:58:62:0e:78:76:48:10:d2:80:89:3a: 81:e8:fc:26:ff:fc:07:8a:0c:f3:ae:3a:f0:79:79:61:a5:08: 3b:8e:fe:ad:51:aa:e7:23:87:87:a6:3a:b4:f9:fb:21:76:02: f9:e8:8d:77:bd:1c:7c:8e:f9:d4:6d:87:ac:7e:e9:4d:e8:94: 66:f6:51:b4:05:3b:0d:c4:df:33:79:05:50:7d:cb:ce:d2:1d: e7:a4:1a:43:57:d8:74:31:b8:73:4f:0a:a6:f0:f0:90:06:ca: 84:b2:76:0d:58:19:d4:83:d7:63:df:39:34:5e:9f:54:c8:d8: cd:1a:87:a9:da:de:85:5f:92:58:7e:2e:d7:3e:b5:f8:8a:bc: 1d:6d:46:2f:71:88:86:9f:cb:a0:3c:89:cd:d7:3b:18:6d:8a: bf:fb:4e:76:b3:db:75:c2:a2:de:31:ed:bd:b8:8b:93:ae:19: 43:11:d1:f9:8c:d0:6e:65:a0:1b:5e:9a:82:c0:64:25:3e:5d: 38:a0:ee:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjUxMTAzMDMwMDI3WhcNMjUxMTEwMDMwMDI3WjAYMRYwFAYD VQQDEw02OTA4MWFjYi03YWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YAS/RpPhWSPsqszoO5sSP5pIqN0pkPK10MqM8vIzgn6S26kJH0le9Mg8yhA 4D1210VBwxy6xVtUk67TQb+sz6vLyxMld+FgrUDJTJIag55AiLRxbE6+W30u9xGO DtrtGP/FS00JH9gC5SmBAFXa9NtPxtsHse5cjcEl04BpC+0ZE8Zi4jk0tNSoL2fV YlE3h95O66yTgpA4tyJTx1rgRxw4bj04D5SaHnnbKHrWkFYcj7EHDcPwnbqM5eeo 0v0pR4YAxtqdFugj2nYk6ijQoMN8lBGaNVwz7GI2fxQP7HOrw5PhPagQ0nroNWPF dWQ7CTFKDwwwskWWgngWSkridQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyT+nyH ynI8kRNegwk7gnLg+5sxMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTAzQi9BRjk2NzE2NjBCNkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZz dmJsSks2WDN5czlGSTV6UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvFsTQo68X3sAAhDQxOe/968h+WB+mxLNqMq35BJG5Hh2wHIioSnHQ 8crr2I4z5CFc1WixTDKDdEGdL9FTWGIOeHZIENKAiTqB6Pwm//wHigzzrjrweXlh pQg7jv6tUarnI4eHpjq0+fshdgL56I13vRx8jvnUbYesfulN6JRm9lG0BTsNxN8z eQVQfcvO0h3npBpDV9h0MbhzTwqm8PCQBsqEsnYNWBnUg9dj3zk0Xp9UyNjNGoep 2t6FX5JYfi7XPrX4irwdbUYvcYiGn8ugPInN1zsYbYq/+052s9t1wqLeMe29uIuT rhlDEdH5jNBuZaAbXpqCwGQlPl04oO6k -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:54 2025 by rpki-client