$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: L0tko8iGrqu5ZdtJPuNMA2rbkLSS3LYNbWe8/twZM7Y= Subject key identifier: 8D:1D:66:1F:8F:7B:BB:07:98:9D:B3:9A:41:15:CE:E7:E6:BF:76:62 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 0203 Signing time: Mon 03 Nov 2025 19:53:05 +0000 Manifest this update: Mon 03 Nov 2025 19:53:05 +0000 Manifest next update: Mon 10 Nov 2025 19:53:05 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: Fhod6j02wZChU7oaSyaS9d/evw9sAyfGxBXmUf50MzM=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=) 3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=) 4: B46796B8B8EE11F0B3E74640C4F9AE02.roa (hash: KU0fghawNYrmUS52BrVzcRnbvVugg48SLZDAX+rBsLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 19:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Nov 3 19:53:05 2025 GMT Not After : Nov 10 19:53:05 2025 GMT Subject: CN=69090821-318d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:f2:0e:b2:92:bb:77:b6:e2:cb:83:84:65: 51:46:47:6b:9b:3a:47:6c:f3:fb:86:a6:b8:bb:91: 66:d2:a2:df:79:db:a4:1e:ad:f5:ce:2d:8f:20:da: f6:f9:fe:9d:c2:8b:a4:da:9a:4d:0c:a0:f6:eb:0e: f4:eb:bc:c1:99:97:eb:46:6a:e1:ad:c4:c2:93:1f: d2:5e:4c:09:7e:1d:db:98:a0:bb:17:ec:b4:88:eb: 4f:af:38:cb:61:de:9f:1f:87:63:ab:b0:af:d1:23: 43:15:56:97:c4:a3:51:6c:87:62:01:a6:f3:4c:c5: 2f:21:af:c8:4f:34:22:84:46:7d:92:48:38:98:5a: d8:a5:9a:cc:ea:8c:00:79:79:83:41:c4:39:3e:75: 80:19:ac:10:4b:ea:9e:f0:80:b8:86:a5:c4:02:d2: ad:2e:3d:d1:70:be:a9:5d:2a:72:f4:f0:c9:20:cc: 86:94:3d:bd:d0:db:5b:2d:90:e0:98:23:35:38:7d: a1:06:0d:bb:eb:8c:5c:92:54:ec:f9:1c:e8:d6:97: 82:cf:05:8c:7f:26:8d:90:e6:1e:2c:bb:52:a1:bf: 4d:98:79:be:48:55:73:5a:a5:4b:c4:36:94:99:c9: fd:a7:26:8e:6c:88:3e:9c:7b:d8:db:e3:7a:25:4a: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:66:1F:8F:7B:BB:07:98:9D:B3:9A:41:15:CE:E7:E6:BF:76:62 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b6:3e:49:1c:e4:7a:27:a0:ce:bd:b1:ab:e3:f4:fe:96:64: 84:56:11:f7:51:8d:88:e2:74:b8:41:ff:d7:2a:6b:df:92:5c: cf:34:02:89:9b:c1:fc:01:61:40:8d:5f:ee:ba:d1:2d:01:d6: 32:78:10:e4:17:65:bb:7b:64:d6:5b:76:cc:20:1c:1e:c3:c5: 23:d9:09:c9:4b:2f:8f:73:b2:f6:75:ee:b1:41:8a:4f:3f:6b: 93:7b:89:4e:b0:45:41:94:63:65:84:d2:e0:16:d9:e2:29:bc: 4f:21:b3:21:84:c7:6e:89:2b:4d:b7:dc:5d:89:27:ec:6f:44: cd:f2:43:94:7e:e1:07:55:11:d5:b0:66:c7:4e:34:cb:3a:49: e9:fe:b3:09:3e:d0:8a:ea:80:2a:7d:6c:6b:4f:6e:ff:29:ff: c0:d0:db:0a:66:db:a5:82:05:e2:3e:e3:f8:aa:4f:bd:6f:f5: a8:a9:10:60:fa:a4:7f:da:52:06:39:1d:b2:dd:d5:9c:b0:fa: 73:f6:cc:d9:9f:c0:17:bd:8c:92:be:6a:38:4e:ec:09:30:24: 6d:11:ae:2a:eb:68:a1:4d:06:b0:f5:75:80:e4:1c:b7:b6:9b: 17:6f:8a:f1:43:84:ee:88:5a:21:c6:f0:e4:52:f3:22:e1:dc: de:46:11:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUxMTAzMTk1MzA1WhcNMjUxMTEwMTk1MzA1WjAYMRYwFAYD VQQDEw02OTA5MDgyMS0zMThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOjyDrKSu3e24suDhGVRRkdrmzpHbPP7hqa4u5Fm0qLfedukHq31zi2PINr2 +f6dwouk2ppNDKD26w7067zBmZfrRmrhrcTCkx/SXkwJfh3bmKC7F+y0iOtPrzjL Yd6fH4djq7Cv0SNDFVaXxKNRbIdiAabzTMUvIa/ITzQihEZ9kkg4mFrYpZrM6owA eXmDQcQ5PnWAGawQS+qe8IC4hqXEAtKtLj3RcL6pXSpy9PDJIMyGlD290NtbLZDg mCM1OH2hBg2764xcklTs+Rzo1peCzwWMfyaNkOYeLLtSob9NmHm+SFVzWqVLxDaU mcn9pyaObIg+nHvY2+N6JUrYKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0dZh+P e7sHmJ2zmkEVzufmv3ZiMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/tj5JHOR6J6DOvbGr4/T+lmSEVhH3UY2I4nS4Qf/XKmvfklzPNAKJ m8H8AWFAjV/uutEtAdYyeBDkF2W7e2TWW3bMIBwew8Uj2QnJSy+Pc7L2de6xQYpP P2uTe4lOsEVBlGNlhNLgFtniKbxPIbMhhMduiStNt9xdiSfsb0TN8kOUfuEHVRHV sGbHTjTLOknp/rMJPtCK6oAqfWxrT27/Kf/A0NsKZtulggXiPuP4qk+9b/WoqRBg +qR/2lIGOR2y3dWcsPpz9szZn8AXvYySvmo4TuwJMCRtEa4q62ihTQaw9XWA5By3 tpsXb4rxQ4TuiFohxvDkUvMi4dzeRhFv -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:31 2025 by rpki-client