$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: bGkTS154cgQbCoAcQyTrAEGUtTm7rDzP8HbJux9J4dE= Subject key identifier: 9F:6A:BE:23:47:D3:0F:56:AA:F6:C5:70:4B:2B:36:12:40:A7:59:72 Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 1030 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 198F Signing time: Mon 20 Oct 2025 17:53:32 +0000 Manifest this update: Mon 20 Oct 2025 17:53:31 +0000 Manifest next update: Mon 27 Oct 2025 17:53:31 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: Ii1+nh+SYAHOiAzOTurfZZYeiyDOS/v0ZmznGoJsxkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4144 (0x1030) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Oct 20 17:53:31 2025 GMT Not After : Oct 27 17:53:31 2025 GMT Subject: CN=68f6771b-dd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:4c:9b:db:5e:d2:62:a5:43:60:6b:1c:69: 44:00:ee:5a:55:88:04:f7:a2:cf:ff:f9:9c:ac:62: 94:3b:f5:f6:ba:c1:08:33:29:60:2e:a3:bf:38:20: 2c:04:76:fa:77:de:0d:b5:83:1a:5e:81:8e:d6:ec: 9d:14:ad:dc:40:33:b5:c6:09:01:a3:a3:3e:02:e5: 53:97:bc:93:bb:10:d4:cd:32:26:36:5e:0d:18:74: 9c:02:63:40:8f:7f:58:60:40:b1:7b:c7:0f:30:e8: 8c:6a:d2:e4:d9:7d:05:0d:c3:29:9c:cc:78:dd:d9: 9d:4a:58:82:66:60:49:00:b9:86:4e:34:fd:2b:b0: a4:07:79:5a:98:44:8c:48:75:a2:5b:f2:4b:9b:73: d6:a9:b2:78:98:68:e4:e6:b6:21:40:26:10:80:15: 30:db:c2:5e:a8:75:40:76:68:62:10:4d:c9:fd:ee: 16:e5:1f:74:09:05:9a:a4:0f:9c:4d:41:97:64:23: 8d:27:a0:df:64:77:23:06:7a:43:eb:cf:27:7d:db: 7b:ba:67:c7:4b:5e:ef:8c:41:6e:08:d9:d1:e5:bd: 80:9e:91:2c:1c:94:52:41:2a:42:0a:87:60:2d:c5: 2f:50:e5:bc:8d:b9:10:a5:f6:0f:ab:56:cf:ae:43: ae:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6A:BE:23:47:D3:0F:56:AA:F6:C5:70:4B:2B:36:12:40:A7:59:72 X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ca:75:83:b8:14:1e:92:d2:ae:9c:6a:b1:a4:05:e2:6b:dd: e5:94:55:ae:4d:2d:a5:c2:cb:0f:f3:25:69:9f:28:9c:46:5f: 77:05:7b:46:9f:20:d2:53:95:2e:7d:18:5a:10:1b:4d:9b:81: 48:f6:80:95:ed:ae:36:95:8a:88:61:44:80:9b:d3:ac:54:5c: 67:28:79:c1:a3:cd:d4:8a:db:e0:77:3c:10:67:9c:46:48:b4: 90:69:e5:d5:c0:e4:66:ba:cf:0f:a9:5d:28:85:e0:47:08:83: 39:2b:e8:1b:0f:be:1c:33:03:62:44:ce:95:7b:6f:00:82:2f: bc:9b:9e:ea:7c:d3:94:14:6c:6b:d3:b4:c5:20:75:d4:ff:df: 14:f7:e1:a5:69:aa:05:dc:9c:bd:e4:ce:c7:9f:aa:e2:92:6e: 6f:fb:c8:23:9c:28:b4:b1:e7:0c:aa:33:7f:8e:9f:8c:55:6e: 4a:59:6c:38:c8:82:81:91:e9:31:ca:28:3e:50:fd:e2:16:65: ae:14:3b:9f:02:79:03:ae:89:2a:84:bd:a6:a1:4d:25:ac:ac: 3a:c9:e5:32:d0:ad:f1:d9:80:ed:af:f6:40:49:de:2f:87:06: a0:8e:23:e8:04:a6:c1:95:77:b8:8e:ae:4a:ae:f7:8c:3c:f2: 4b:a5:5d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjUxMDIwMTc1MzMxWhcNMjUxMDI3MTc1MzMxWjAYMRYwFAYD VQQDEw02OGY2NzcxYi1kZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreRMm9te0mKlQ2BrHGlEAO5aVYgE96LP//mcrGKUO/X2usEIMylgLqO/OCAs BHb6d94NtYMaXoGO1uydFK3cQDO1xgkBo6M+AuVTl7yTuxDUzTImNl4NGHScAmNA j39YYECxe8cPMOiMatLk2X0FDcMpnMx43dmdSliCZmBJALmGTjT9K7CkB3lamESM SHWiW/JLm3PWqbJ4mGjk5rYhQCYQgBUw28JeqHVAdmhiEE3J/e4W5R90CQWapA+c TUGXZCONJ6DfZHcjBnpD688nfdt7umfHS17vjEFuCNnR5b2AnpEsHJRSQSpCCodg LcUvUOW8jbkQpfYPq1bPrkOuNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9qviNH 0w9WqvbFcEsrNhJAp1lyMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGynWDuBQektKunGqxpAXia93llFWuTS2lwssP8yVpnyicRl93BXtG nyDSU5UufRhaEBtNm4FI9oCV7a42lYqIYUSAm9OsVFxnKHnBo83UitvgdzwQZ5xG SLSQaeXVwORmus8PqV0oheBHCIM5K+gbD74cMwNiRM6Ve28Agi+8m57qfNOUFGxr 07TFIHXU/98U9+GlaaoF3Jy95M7Hn6rikm5v+8gjnCi0secMqjN/jp+MVW5KWWw4 yIKBkekxyig+UP3iFmWuFDufAnkDrokqhL2moU0lrKw6yeUy0K3x2YDtr/ZASd4v hwagjiPoBKbBlXe4jq5KrveMPPJLpV0C -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:50 2025 by rpki-client