$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft File: uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json) Hash identifier: 7b4Iq3SCK3n1NdPJ7DOx/211qJ2IieGqf+8b5ceDfWs= Subject key identifier: F9:67:1C:B3:BA:76:18:83:FD:70:13:78:1C:79:93:8A:16:C4:C7:16 Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Certificate serial: 270C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft Manifest number: 26EC Signing time: Tue 04 Nov 2025 15:45:29 +0000 Manifest this update: Tue 04 Nov 2025 15:45:29 +0000 Manifest next update: Tue 11 Nov 2025 15:45:29 +0000 Files and hashes: 1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: 2IZjJAIt/dUPiVALFNOa63k7jfAphAvk1sSKQIhqY9k=) 2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: YuV1/atgnEaFCqu1mP7hP8CBn8yEYyO/tgyELx2LMIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9996 (0x270c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Validity Not Before: Nov 4 15:45:29 2025 GMT Not After : Nov 11 15:45:29 2025 GMT Subject: CN=690a1f99-6860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:d4:d8:87:4e:90:70:02:d6:2e:6b:90:b7: 54:ef:54:bb:79:20:bd:ab:65:88:a3:3a:b4:57:15: f9:93:9d:f9:10:e6:16:ae:d4:13:80:6c:04:62:0a: e4:da:24:39:1d:01:6b:27:a4:52:06:09:c9:f3:01: 43:c5:2f:4a:db:18:40:e3:19:87:c2:dd:1a:b1:ef: 68:0f:53:5f:31:03:9e:ee:16:18:a9:0c:73:1d:2c: 9c:b4:91:da:4c:8c:20:2e:f0:02:a8:ee:82:5f:91: 14:9a:25:24:28:8d:2b:16:ee:82:27:5a:05:8d:6e: 7e:25:67:21:bb:b4:9a:5e:5a:3b:cd:36:7e:f2:f4: 15:47:5e:d0:30:3b:a9:3a:d2:c5:69:31:19:20:1f: fc:51:0a:08:75:99:eb:17:b9:d4:ea:d1:0b:cc:e7: e2:eb:f6:5b:96:42:98:1a:7c:99:8a:2b:36:2f:ff: 79:f0:48:d1:1c:eb:83:9d:8b:1a:5c:53:b3:66:a7: 7f:e1:56:5c:4d:d9:1c:0e:8d:38:63:ca:d2:92:8b: bd:71:2d:20:08:61:cf:1d:99:e1:f5:ec:a7:fd:24: 87:f0:b4:14:6c:55:b3:df:b4:e0:c0:38:7d:46:bf: 1e:a1:f9:d1:41:09:a7:46:29:33:12:16:f4:2b:ad: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:67:1C:B3:BA:76:18:83:FD:70:13:78:1C:79:93:8A:16:C4:C7:16 X509v3 Authority Key Identifier: keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:05:08:4d:63:1d:2b:71:4e:c2:7c:3f:6d:d0:cb:f9:c0:9f: 33:7e:6d:7b:42:d9:7d:74:05:bc:ea:64:17:79:6e:a3:17:71: 3b:94:f5:02:9e:52:17:6b:8d:8e:b5:79:e8:96:9b:f0:2e:62: d0:70:bf:2b:9e:47:bb:e1:8e:8e:51:3b:20:3a:1f:79:1a:84: 74:49:69:f4:c2:d5:cd:4c:74:da:b6:6e:1d:16:61:b7:d5:15: e9:14:ee:39:8e:c6:1c:91:34:57:2b:42:88:b4:bf:c0:32:f6: 80:5b:73:ca:43:0b:ba:21:17:f4:3c:f0:47:71:97:61:82:5e: 27:eb:11:12:b2:60:b6:13:d1:9f:a0:51:ff:41:15:de:c9:a2: 60:c6:08:74:37:52:3d:ff:24:39:7c:71:fe:67:58:8d:f9:60: 2b:d5:06:f5:0d:99:7e:62:a4:44:aa:19:fa:3c:01:b5:31:55: fe:db:5c:11:72:60:89:66:d0:73:38:98:2f:59:cd:4f:ac:68: 61:7e:a8:8b:1b:02:ec:33:6f:05:47:38:2b:4a:1a:79:f6:fa: 82:75:dd:61:51:2b:c9:8e:9f:ff:21:94:4c:cd:22:2e:40:15: 41:e5:3d:aa:12:00:b4:da:e7:81:20:62:de:a2:6b:f4:a9:63: 2d:b3:be:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy MUMzOEJGQ0MwHhcNMjUxMTA0MTU0NTI5WhcNMjUxMTExMTU0NTI5WjAYMRYwFAYD VQQDEw02OTBhMWY5OS02ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsvU2IdOkHAC1i5rkLdU71S7eSC9q2WIozq0VxX5k535EOYWrtQTgGwEYgrk 2iQ5HQFrJ6RSBgnJ8wFDxS9K2xhA4xmHwt0ase9oD1NfMQOe7hYYqQxzHSyctJHa TIwgLvACqO6CX5EUmiUkKI0rFu6CJ1oFjW5+JWchu7SaXlo7zTZ+8vQVR17QMDup OtLFaTEZIB/8UQoIdZnrF7nU6tELzOfi6/ZblkKYGnyZiis2L/958EjRHOuDnYsa XFOzZqd/4VZcTdkcDo04Y8rSkou9cS0gCGHPHZnh9eyn/SSH8LQUbFWz37TgwDh9 Rr8eofnRQQmnRikzEhb0K634NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlnHLO6 dhiD/XATeBx5k4oWxMcWMB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC9FNkNFRDcyMkUxQjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdk TkNmQkIycWZWOThodzR2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/BQhNYx0rcU7CfD9t0Mv5wJ8zfm17Qtl9dAW86mQXeW6jF3E7lPUC nlIXa42OtXnolpvwLmLQcL8rnke74Y6OUTsgOh95GoR0SWn0wtXNTHTatm4dFmG3 1RXpFO45jsYckTRXK0KItL/AMvaAW3PKQwu6IRf0PPBHcZdhgl4n6xESsmC2E9Gf oFH/QRXeyaJgxgh0N1I9/yQ5fHH+Z1iN+WAr1Qb1DZl+YqREqhn6PAG1MVX+21wR cmCJZtBzOJgvWc1PrGhhfqiLGwLsM28FRzgrShp59vqCdd1hUSvJjp//IZRMzSIu QBVB5T2qEgC02ueBIGLeomv0qWMts76w -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:19 2025 by rpki-client