$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft File: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json) Hash identifier: NQgpyRAGK0B7zdMCOX5MwYGz8dYrbeEmvIUDlDOOTRk= Subject key identifier: 46:37:E2:D2:0D:F8:6A:08:AE:3B:A4:AF:9E:13:D7:83:98:95:63:D2 Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3 Certificate issuer: /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft Manifest number: 012B Signing time: Tue 04 Nov 2025 16:07:20 +0000 Manifest this update: Tue 04 Nov 2025 16:07:19 +0000 Manifest next update: Tue 11 Nov 2025 16:07:19 +0000 Files and hashes: 1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: 0ZkR0Du/wK63+gY4YcO+/yEGggwuLIzy+supIEaiFBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3 Validity Not Before: Nov 4 16:07:19 2025 GMT Not After : Nov 11 16:07:19 2025 GMT Subject: CN=690a24b7-20e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:06:fe:8d:82:0d:71:0f:95:9b:8c:14:ac: 9f:88:3c:74:11:78:ad:43:ad:56:e0:36:3f:4a:d4: 6e:a3:81:48:8b:18:e3:0e:15:c6:7d:79:2e:ec:dc: 4b:e8:e5:87:62:d8:7d:e4:2a:fd:05:59:a3:2c:dc: 65:5b:53:ef:50:43:53:bc:06:69:9f:30:0e:9b:43: d3:d7:e3:5a:7b:ee:a6:5a:43:9c:d7:de:b6:d1:84: 7c:26:f9:04:37:a2:48:d9:b3:13:47:79:30:27:ab: 6c:70:99:94:d5:4e:62:70:2e:1c:fc:59:82:3e:2b: 37:7c:2f:d8:7b:59:9c:a7:78:45:e5:8e:97:79:1e: dd:1f:27:2e:ea:e1:ff:0d:8a:2a:8c:bb:40:d9:dc: f4:f1:ec:85:e2:b6:a2:91:23:7f:f3:1b:27:88:bd: c1:08:18:6a:3b:b5:df:05:7d:c7:bb:0b:9e:74:f4: b3:df:5d:5f:56:21:ca:25:9e:0d:4b:cf:a7:91:24: 60:70:d5:07:fe:72:1e:d9:07:dc:99:9b:e2:9c:bd: c1:1d:38:60:1e:c9:f9:d0:fc:98:60:28:78:3d:84: 85:ba:4e:3e:ff:43:73:7f:98:7e:98:3e:e6:d0:47: 45:62:9b:86:a8:29:d2:0f:f7:9f:dc:64:18:41:7b: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:37:E2:D2:0D:F8:6A:08:AE:3B:A4:AF:9E:13:D7:83:98:95:63:D2 X509v3 Authority Key Identifier: keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:9c:c5:8b:b3:53:e1:0f:ad:2f:ad:79:7b:44:b0:9c:06:c9: 06:d4:0d:6a:fa:5e:1f:87:61:c4:d1:f7:b6:78:72:7c:f9:7b: b8:39:2c:9d:05:67:92:2d:68:20:56:d7:15:1c:05:2a:e1:7d: 40:a8:4f:5f:26:dd:d0:0b:91:64:25:fe:98:4b:06:53:4e:2a: 52:6a:66:a5:5f:8b:bf:d3:17:17:46:26:f0:8b:ff:4f:20:c1: a2:3e:8a:d8:4b:1f:3a:a1:7d:96:de:e9:15:31:13:29:cb:c2: b1:97:a8:d7:cd:e8:dc:1d:da:b2:8c:79:e2:f5:be:e7:98:1c: 81:37:a1:87:3d:1f:44:91:0a:76:3c:da:9b:8b:56:38:d8:bd: 84:58:8e:c2:30:1c:0b:26:82:7b:96:c7:4a:b1:2a:16:7b:cc: 4a:7f:fe:29:e2:b5:3c:27:e7:56:7d:04:99:06:22:d2:8b:43: 67:14:b2:5b:17:59:91:77:fd:d0:20:80:cb:3f:76:2c:85:16: 26:5d:e5:4c:98:9e:48:cf:0a:2b:41:29:95:e9:ce:5f:fe:1e: 9c:89:d1:60:13:6f:69:ac:84:c0:f0:58:52:1d:d3:8d:8a:ba: ea:61:8a:ea:9b:85:fe:1c:3f:3f:1c:e8:f1:41:2c:df:49:9c: 27:85:55:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKEJBMzk0NkIwMTNENTQ3RDBFOUNCQTRCQjExQjU4QUM5 MDAxQzU3RTMwHhcNMjUxMTA0MTYwNzE5WhcNMjUxMTExMTYwNzE5WjAYMRYwFAYD VQQDEw02OTBhMjRiNy0yMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn8G/o2CDXEPlZuMFKyfiDx0EXitQ61W4DY/StRuo4FIixjjDhXGfXku7NxL 6OWHYth95Cr9BVmjLNxlW1PvUENTvAZpnzAOm0PT1+Nae+6mWkOc19620YR8JvkE N6JI2bMTR3kwJ6tscJmU1U5icC4c/FmCPis3fC/Ye1mcp3hF5Y6XeR7dHycu6uH/ DYoqjLtA2dz08eyF4raikSN/8xsniL3BCBhqO7XfBX3HuwuedPSz311fViHKJZ4N S8+nkSRgcNUH/nIe2QfcmZvinL3BHThgHsn50PyYYCh4PYSFuk4+/0Nzf5h+mD7m 0EdFYpuGqCnSD/ef3GQYQXtNjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEY34tIN +GoIrjukr54T14OYlWPSMB8GA1UdIwQYMBaAFLo5RrAT1UfQ6cukuxG1iskAHFfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS81NjZGMzQ3Q0Yy QTExMUVFQThBNDRGMUFDNEY5QUUwMi91amxHc0JQVlI5RHB5NlM3RWJXS3lRQWNW LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3VqbEdzQlBWUjlEcHk2UzdFYldLeVFBY1YtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS81NjZGMzQ3Q0YyQTExMUVFQThBNDRGMUFDNEY5QUUwMi91amxHc0JQVlI5 RHB5NlM3RWJXS3lRQWNWLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmnMWLs1PhD60vrXl7RLCcBskG1A1q+l4fh2HE0fe2eHJ8+Xu4OSyd BWeSLWggVtcVHAUq4X1AqE9fJt3QC5FkJf6YSwZTTipSamalX4u/0xcXRibwi/9P IMGiPorYSx86oX2W3ukVMRMpy8Kxl6jXzejcHdqyjHni9b7nmByBN6GHPR9EkQp2 PNqbi1Y42L2EWI7CMBwLJoJ7lsdKsSoWe8xKf/4p4rU8J+dWfQSZBiLSi0NnFLJb F1mRd/3QIIDLP3YshRYmXeVMmJ5IzworQSmV6c5f/h6cidFgE29prITA8FhSHdON irrqYYrqm4X+HD8/HOjxQSzfSZwnhVVa -----END CERTIFICATE-----Generated at Thu Nov 6 02:37:58 2025 by rpki-client