$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft File: UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json) Hash identifier: eBx1X1we2ZDuAExrN84IhdxAt6FHgizmRjmpj+g0RZI= Subject key identifier: FA:46:4E:AF:1B:76:4B:11:D8:8F:40:14:76:CB:4A:9E:91:B4:A1:45 Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 Certificate issuer: /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft Manifest number: 02DB Signing time: Wed 05 Nov 2025 01:23:44 +0000 Manifest this update: Wed 05 Nov 2025 01:23:43 +0000 Manifest next update: Wed 12 Nov 2025 01:23:43 +0000 Files and hashes: 1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: k5GxzAYK3KSbiIpEl0YuOXSYc0jlFOxix1BpThnb9UI=) 2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: zA/5PEhgjN/BvDw/xl3w8dV/RMsq+gylEcRkytviDsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65FA, serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Validity Not Before: Nov 5 01:23:43 2025 GMT Not After : Nov 12 01:23:43 2025 GMT Subject: CN=690aa720-a504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:55:d7:c7:1c:5b:29:25:84:07:ea:14:42: 46:8a:4d:78:11:ff:2d:f1:59:20:26:19:2f:4d:69: b2:e1:20:d6:f4:d6:6a:0d:16:fc:19:d6:2d:06:3f: 50:45:d3:5c:16:f0:23:55:6f:c8:86:55:35:e2:e3: 74:94:2a:52:4d:61:75:e0:9f:c9:f5:5f:2d:a3:57: 5f:75:8f:e9:61:38:4c:8e:f9:c1:0f:95:4c:9d:2e: 01:e7:2a:19:7f:f1:ca:2c:7a:9e:cd:8d:30:a9:8b: 21:40:cf:9f:18:f9:54:da:da:48:20:ab:f9:c2:12: 11:91:3e:25:0d:02:7f:0b:64:69:54:4e:42:6e:27: ae:85:f7:95:82:15:19:5c:69:70:de:fd:4e:0f:83: dc:f3:ad:ae:08:1f:a9:7b:78:00:ea:02:11:85:db: 77:04:ce:8f:30:ba:04:ca:09:ed:16:31:0a:63:fa: e7:2c:db:8c:18:a2:e1:40:8f:7b:a5:1c:56:e9:a4: 90:92:58:40:05:4f:91:cf:e9:9f:56:e1:79:f0:91: 85:0f:c6:b7:af:c0:e2:24:5d:b6:2c:33:1a:c9:9c: eb:59:8a:ba:ba:88:1f:82:b3:5a:6e:a8:5a:7d:a7: 86:a0:2f:23:8f:a9:d0:47:79:a7:5c:d6:dc:fe:47: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:46:4E:AF:1B:76:4B:11:D8:8F:40:14:76:CB:4A:9E:91:B4:A1:45 X509v3 Authority Key Identifier: keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:3a:be:8e:14:2f:1e:95:d2:48:16:f7:b3:a5:78:ba:7c:d8: 28:90:cb:a9:cb:c0:95:0a:b8:ab:e0:81:be:0f:3c:0e:6a:56: 8b:da:2a:7e:df:c2:69:d1:86:41:d3:cc:fd:7c:3e:0e:49:d8: 90:d3:b0:fc:18:89:1e:d0:a1:9f:0b:da:47:de:cc:12:7b:d4: dd:f9:3f:30:6d:39:9b:ed:0b:e5:cc:d1:0f:42:66:07:7e:5e: 0d:7c:1b:b1:21:df:57:6c:c0:f8:6e:59:e1:29:9d:38:8a:af: d9:91:c6:ba:14:6a:f3:14:3d:48:74:e3:93:45:52:2c:ad:43: e5:c9:5f:2d:ba:80:cf:bb:8f:49:5e:e5:19:64:a0:81:4a:8b: 6c:67:a1:54:5f:d7:7a:e6:72:dd:d2:67:77:4f:56:9f:87:81: 4b:f9:12:7a:f4:4e:27:7a:f4:1b:6c:65:79:0d:4a:88:c5:84: 45:bd:69:74:13:16:d8:0a:59:c9:7b:2f:8b:aa:3d:4c:22:bb: 81:f4:41:d5:59:51:87:c2:62:98:b3:3a:d5:cd:50:4d:b6:73: 73:a9:2e:ef:2b:2b:9f:fe:b6:09:fc:c8:d1:df:78:5c:b7:af: 3c:ce:ed:88:e0:c9:7f:7a:9f:68:d5:6d:a3:54:50:bd:07:c3: 20:99:41:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RkExMTAvBgNVBAUTKDUwM0I5MjQxNDY0REY5N0QyQTAwOTk5NjNFNjMzRTEw ODdFRkREQzUwHhcNMjUxMTA1MDEyMzQzWhcNMjUxMTEyMDEyMzQzWjAYMRYwFAYD VQQDEw02OTBhYTcyMC1hNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufFV18ccWyklhAfqFEJGik14Ef8t8VkgJhkvTWmy4SDW9NZqDRb8GdYtBj9Q RdNcFvAjVW/IhlU14uN0lCpSTWF14J/J9V8to1dfdY/pYThMjvnBD5VMnS4B5yoZ f/HKLHqezY0wqYshQM+fGPlU2tpIIKv5whIRkT4lDQJ/C2RpVE5CbieuhfeVghUZ XGlw3v1OD4Pc862uCB+pe3gA6gIRhdt3BM6PMLoEygntFjEKY/rnLNuMGKLhQI97 pRxW6aSQklhABU+Rz+mfVuF58JGFD8a3r8DiJF22LDMayZzrWYq6uogfgrNabqha faeGoC8jj6nQR3mnXNbc/kf9IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpGTq8b dksR2I9AFHbLSp6RtKFFMB8GA1UdIwQYMBaAFFA7kkFGTfl9KgCZlj5jPhCH793F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVGQS85QTcwMjYyMjA2 MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1YMHFBSm1XUG1NLUVJZnYz Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEdVNRVVpOLVgwcUFKbVdQbU0tRUlmdjNjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVGQS85QTcwMjYyMjA2MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1Y MHFBSm1XUG1NLUVJZnYzY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLOr6OFC8eldJIFvezpXi6fNgokMupy8CVCrir4IG+DzwOalaL2ip+ 38Jp0YZB08z9fD4OSdiQ07D8GIke0KGfC9pH3swSe9Td+T8wbTmb7QvlzNEPQmYH fl4NfBuxId9XbMD4blnhKZ04iq/Zkca6FGrzFD1IdOOTRVIsrUPlyV8tuoDPu49J XuUZZKCBSotsZ6FUX9d65nLd0md3T1afh4FL+RJ69E4nevQbbGV5DUqIxYRFvWl0 ExbYClnJey+Lqj1MIruB9EHVWVGHwmKYszrVzVBNtnNzqS7vKyuf/rYJ/MjR33hc t688zu2I4Ml/ep9o1W2jVFC9B8MgmUEu -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:04 2025 by rpki-client