$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: xXgf2AZqHqTmsyhP3CvmhuwY97QPWNnjHOzAvLn98Xs= Subject key identifier: A6:F2:87:34:6E:DD:3D:88:BE:F5:04:A4:4E:7F:F5:6B:85:6E:D8:89 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0BBE Signing time: Sat 18 Oct 2025 19:46:06 +0000 Manifest this update: Sat 18 Oct 2025 19:46:06 +0000 Manifest next update: Sat 25 Oct 2025 19:46:06 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: RfpiUvLffv4UEmbAr0+9+h7kVo4HXpetKYmevMuQfR4=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: b6SG981ws9YTohF7YJYfD6V/fAmms72gE/FD/yHhvRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Oct 18 19:46:06 2025 GMT Not After : Oct 25 19:46:06 2025 GMT Subject: CN=68f3ee7e-26e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:ed:5d:ce:d9:10:c1:d4:9a:ef:bf:9d:81: 61:4e:27:94:62:73:2d:b0:29:41:b2:39:73:8e:50: 6a:2e:8c:49:d9:01:64:14:2c:07:04:45:e4:c4:89: 31:d1:fb:8a:7d:de:b7:5f:15:7c:8c:b5:3f:5d:9a: ba:a1:79:2e:b5:6c:44:42:c3:a8:2d:88:3c:3a:1d: a5:f4:47:b9:95:1e:2c:51:f2:2a:0e:de:7e:6b:cf: 34:6a:f6:36:9a:06:27:61:97:68:b2:04:0b:cc:1d: 93:59:dc:3f:71:ea:a0:d1:ff:36:8b:e1:b3:04:6b: c5:c7:e2:40:1c:b0:c0:f0:cb:4c:47:dc:6b:5f:b5: 4a:14:62:ed:a2:e4:f6:ff:39:ec:8a:4d:f3:34:01: c5:73:76:3a:cc:e2:c9:d8:f4:d2:91:c9:a0:bf:f8: 8a:28:de:ab:c3:26:a6:51:27:12:60:10:d9:08:bf: 7f:17:fb:8f:a9:8c:3e:96:3b:7f:60:93:ee:c1:5b: 2c:8b:23:d8:2d:4f:7c:ba:f7:ab:69:b8:45:b9:fe: ff:22:29:5f:e4:29:da:e1:99:a2:12:2d:ec:5a:e0: 32:28:73:32:92:51:3b:6e:d7:81:54:b1:e3:c1:e1: b3:37:bc:16:a5:08:3f:fd:5b:08:a8:c8:a1:f4:9d: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F2:87:34:6E:DD:3D:88:BE:F5:04:A4:4E:7F:F5:6B:85:6E:D8:89 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:aa:5c:71:93:44:b4:8c:59:4d:43:eb:eb:ea:b3:ac:2b:09: dd:c4:eb:45:4f:02:61:2d:a4:bd:b6:0f:de:f0:13:0d:56:c4: 00:d3:b1:26:eb:c2:0b:9d:45:31:5a:4a:36:c3:b0:24:19:fc: ec:d9:d3:fb:b2:70:3f:b6:cb:97:dd:c4:79:89:c8:ff:c5:68: 1e:74:9e:44:d2:1c:e2:f5:60:6c:50:07:2f:42:06:4c:a4:c0: fb:b6:ec:bc:ce:eb:2b:60:c8:39:99:a8:03:d7:f8:62:01:17: 61:7e:22:ec:02:33:ae:61:f7:f3:6a:6c:8c:c0:5d:b3:ac:be: 5c:c6:fb:c8:d8:98:4c:8c:0a:e6:36:50:cb:2a:62:14:a2:07: 97:00:a1:d2:47:8d:73:39:87:d6:3d:96:a8:0d:63:26:3c:f2: 64:70:b6:3a:84:6a:19:1a:a8:e9:a1:7d:f9:0b:38:fd:ad:a2: f5:c3:ef:85:b6:65:c5:9f:d1:6c:19:65:96:81:f9:1c:53:26: 2f:b1:00:3f:0b:5b:60:30:d6:bd:d7:cf:49:24:51:6a:c8:20: 08:1d:0e:ee:ad:07:7b:6b:8c:95:7a:26:05:44:5d:f1:46:1f: e9:7e:14:44:9d:a0:cc:53:64:13:3b:87:e3:2c:68:5b:df:d6: 20:64:fc:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUxMDE4MTk0NjA2WhcNMjUxMDI1MTk0NjA2WjAYMRYwFAYD VQQDEw02OGYzZWU3ZS0yNmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ3tXc7ZEMHUmu+/nYFhTieUYnMtsClBsjlzjlBqLoxJ2QFkFCwHBEXkxIkx 0fuKfd63XxV8jLU/XZq6oXkutWxEQsOoLYg8Oh2l9Ee5lR4sUfIqDt5+a880avY2 mgYnYZdosgQLzB2TWdw/ceqg0f82i+GzBGvFx+JAHLDA8MtMR9xrX7VKFGLtouT2 /znsik3zNAHFc3Y6zOLJ2PTSkcmgv/iKKN6rwyamUScSYBDZCL9/F/uPqYw+ljt/ YJPuwVssiyPYLU98uverabhFuf7/Iilf5Cna4ZmiEi3sWuAyKHMyklE7bteBVLHj weGzN7wWpQg//VsIqMih9J33JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbyhzRu 3T2IvvUEpE5/9WuFbtiJMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/qlxxk0S0jFlNQ+vr6rOsKwndxOtFTwJhLaS9tg/e8BMNVsQA07Em 68ILnUUxWko2w7AkGfzs2dP7snA/tsuX3cR5icj/xWgedJ5E0hzi9WBsUAcvQgZM pMD7tuy8zusrYMg5magD1/hiARdhfiLsAjOuYffzamyMwF2zrL5cxvvI2JhMjArm NlDLKmIUogeXAKHSR41zOYfWPZaoDWMmPPJkcLY6hGoZGqjpoX35Czj9raL1w++F tmXFn9FsGWWWgfkcUyYvsQA/C1tgMNa9189JJFFqyCAIHQ7urQd7a4yVeiYFRF3x Rh/pfhREnaDMU2QTO4fjLGhb39YgZPzv -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:27 2025 by rpki-client