$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft File: UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json) Hash identifier: LBwVE7+VaUJGCDju1LiTmaTKWIhng7FEHWIICdBEjOE= Subject key identifier: 56:73:E2:EB:0F:76:A8:3A:83:0B:4B:D3:44:53:E8:66:DA:22:1A:2E Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft Manifest number: 04A4 Signing time: Mon 03 Nov 2025 00:01:32 +0000 Manifest this update: Mon 03 Nov 2025 00:01:31 +0000 Manifest next update: Mon 10 Nov 2025 00:01:31 +0000 Files and hashes: 1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: lq6Yj+ukLWJ7s0e9bATl9uarrZWG8ysUpLYro13H4WM=) 2: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: fbHNG5VnI5vBavVCzw8LniM5caV6eOPIQLCn1UeldBc=) 3: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: LFGX/jVfbWAISfHlUtm9x1tFR24hTnDvuTIOnrEtJuY=) 4: 01CF36F2DB0D11EE88489759C4F9AE02.roa (hash: Bc41Sc+m7v/fikpnEXBGH8owwIIMKnoEIMrJsvVIo78=) 5: 0104D0BADB0D11EE88489759C4F9AE02.roa (hash: KdbVV+GEXY2BL9mYf6LHh/aKsgwvJc/K6FH7hj47FDo=) 6: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: OehIWzlmpLn+tHX2OGp9aRhBba8Lt99w8j7PUJDnUtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Validity Not Before: Nov 3 00:01:31 2025 GMT Not After : Nov 10 00:01:31 2025 GMT Subject: CN=6907f0db-442b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:d1:9b:9d:91:9d:81:06:52:80:92:5c:6f: 2d:2e:96:36:b6:f0:af:cd:93:9a:3c:bf:f6:c3:d6: 3a:ad:82:2f:51:2b:56:9d:ee:ae:c5:9c:de:c4:f5: 85:25:ce:d9:56:c5:bf:39:09:38:83:bc:1d:c8:2f: 13:51:f7:2a:f7:5b:bb:c0:a0:75:d5:5c:1a:5a:a6: cd:4a:d3:d5:88:95:3e:90:a3:54:76:de:12:40:68: f7:f3:91:97:3d:75:f9:66:e4:28:42:3d:fb:c8:1d: f6:b4:73:c7:dd:fa:2e:1e:9f:e9:54:c1:e6:49:28: a8:8a:2b:19:92:0b:b4:ae:5f:b3:bb:4b:76:52:4d: d0:4e:45:82:85:b0:a5:f5:e9:7b:0d:6b:38:aa:35: 28:7b:a1:f0:7f:ab:f8:41:18:a4:14:17:6f:01:9a: 5e:11:18:b4:cc:58:02:d2:bf:79:60:fb:96:7e:8a: eb:d2:bf:01:3a:48:80:2f:8b:7a:77:2d:a3:1f:76: 56:62:7f:25:b3:68:23:22:98:14:a8:70:69:d7:95: ea:5d:f8:23:48:4b:35:ed:9e:fc:f7:73:c7:37:e9: 75:38:71:08:d7:56:40:22:97:ed:96:23:c2:ce:d0: ff:31:7f:e2:56:52:35:6f:3a:f4:ba:69:67:f2:fb: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:73:E2:EB:0F:76:A8:3A:83:0B:4B:D3:44:53:E8:66:DA:22:1A:2E X509v3 Authority Key Identifier: keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:5b:bd:dc:fa:67:15:d5:11:f9:bf:b2:26:31:c3:18:c8:21: ad:8c:e5:ed:c7:a2:0f:15:9b:9d:92:64:07:41:63:48:1c:e7: 6a:e1:38:a0:0a:b7:49:96:ee:53:97:a6:6b:e7:62:e5:75:90: 30:fe:76:2b:f5:ef:dd:06:c2:80:f0:18:9f:1d:b1:c7:bb:d6: 81:e7:ae:89:53:ba:67:2c:dd:05:9a:10:b3:d4:e7:22:56:f3: ab:cf:49:da:dc:b0:e4:99:75:0d:ff:30:f5:c5:b0:0f:84:5b: 87:0b:cb:98:a4:75:cb:c3:a0:1e:81:2b:4c:6c:ef:bc:ba:6c: 44:d5:fa:d2:be:55:92:f3:7d:ed:3f:1c:7b:a9:73:22:53:db: 89:72:71:95:0e:9c:b4:9e:e0:aa:ac:ea:88:1e:ef:92:0f:49: a0:06:b2:ae:6d:27:ff:08:23:e3:d0:b2:2d:2c:91:e7:07:71: 90:ec:e2:36:4d:42:53:88:24:0e:0f:6e:9a:f6:82:b0:27:35: a0:b1:5d:e8:31:ae:0c:5a:02:f9:cd:77:e3:95:d8:f7:e7:ce: 90:0f:39:d5:7b:49:72:76:62:d0:9a:f0:81:68:8f:ee:6c:19: 9c:c9:ba:72:65:43:d7:e2:b5:d4:af:7e:d6:e3:f9:42:12:9b: 11:4f:08:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0 ODVCMDVBMkMwHhcNMjUxMTAzMDAwMTMxWhcNMjUxMTEwMDAwMTMxWjAYMRYwFAYD VQQDEw02OTA3ZjBkYi00NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoLRm52RnYEGUoCSXG8tLpY2tvCvzZOaPL/2w9Y6rYIvUStWne6uxZzexPWF Jc7ZVsW/OQk4g7wdyC8TUfcq91u7wKB11VwaWqbNStPViJU+kKNUdt4SQGj385GX PXX5ZuQoQj37yB32tHPH3fouHp/pVMHmSSioiisZkgu0rl+zu0t2Uk3QTkWChbCl 9el7DWs4qjUoe6Hwf6v4QRikFBdvAZpeERi0zFgC0r95YPuWforr0r8BOkiAL4t6 dy2jH3ZWYn8ls2gjIpgUqHBp15XqXfgjSEs17Z7893PHN+l1OHEI11ZAIpftliPC ztD/MX/iVlI1bzr0umln8vu52wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZz4usP dqg6gwtL00RT6GbaIhouMB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUwNi8wNTU5RUVBRTVDQkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3Vmdt azZod2N1NVVqR1ZJV3dXaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzW73c+mcV1RH5v7ImMcMYyCGtjOXtx6IPFZudkmQHQWNIHOdq4Tig CrdJlu5Tl6Zr52LldZAw/nYr9e/dBsKA8BifHbHHu9aB566JU7pnLN0FmhCz1Oci VvOrz0na3LDkmXUN/zD1xbAPhFuHC8uYpHXLw6AegStMbO+8umxE1frSvlWS833t Pxx7qXMiU9uJcnGVDpy0nuCqrOqIHu+SD0mgBrKubSf/CCPj0LItLJHnB3GQ7OI2 TUJTiCQOD26a9oKwJzWgsV3oMa4MWgL5zXfjldj3586QDznVe0lydmLQmvCBaI/u bBmcybpyZUPX4rXUr37W4/lCEpsRTwjE -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:01 2025 by rpki-client