$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: k7ygOI1SEfejxZX3hhn6/FCYWyzNpoHnKOrhXnyFeuY= Subject key identifier: B8:CC:E9:34:F1:23:9B:FC:9D:43:24:1C:86:72:93:CD:60:52:FD:33 Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: 0139 Signing time: Sun 19 Oct 2025 07:16:10 +0000 Manifest this update: Sun 19 Oct 2025 07:16:10 +0000 Manifest next update: Sun 26 Oct 2025 07:16:10 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: 8YrlHwCm4OtDo7B6+wDizJ3ci4YCUH1S826fuedHByA=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: YjW6NRyoT2Yd6bOqBMqlNLXFCINZXzceER+JobJKz/s=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: yJ7MqVkk1tgytYWvBl1+oFmFkyxkl54djaWZOByH5xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: Oct 19 07:16:10 2025 GMT Not After : Oct 26 07:16:10 2025 GMT Subject: CN=68f4903a-e6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:85:f6:49:04:88:2a:88:fb:5d:ff:61:38: b1:e0:13:02:ed:36:d7:b6:b6:3e:c2:ab:a8:ff:c6: 9e:13:c0:48:42:37:b6:f2:63:91:8a:93:f8:eb:b9: 3f:69:f4:cb:1f:21:1f:2e:ef:76:d2:48:04:c7:db: bc:18:d4:c9:78:6c:0f:cb:0f:4e:4f:5f:e4:7d:5d: d1:bf:5f:0a:be:fe:98:22:ba:38:4b:b2:e2:21:02: a2:16:f1:83:96:a3:4a:21:db:04:75:1f:f3:46:a7: c1:59:d8:4b:7c:78:0e:07:0e:a8:cf:b6:bf:31:a6: a9:fc:75:62:41:15:42:6b:74:f2:4f:00:59:69:25: 0f:83:65:d1:60:fa:8d:09:8d:92:11:38:9d:43:7a: 79:73:2c:66:8d:1e:5a:47:6c:37:5f:1b:a3:d4:c9: bc:ac:b6:40:01:01:98:ae:0f:9d:ae:7c:e0:5e:22: b0:64:62:c4:3b:8d:63:d1:a7:3c:fe:76:49:fd:47: 2f:72:96:8b:cc:88:5f:9e:1b:2c:6c:fa:ff:ea:b0: 40:76:ef:c2:76:7c:ea:e9:c8:1a:5e:7d:b0:e7:cc: e5:3d:f0:bd:3b:0b:bc:41:ea:9c:0e:c7:e7:e7:e4: d1:1a:f4:b7:f5:89:ba:39:cf:58:4a:2f:2d:ca:1d: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CC:E9:34:F1:23:9B:FC:9D:43:24:1C:86:72:93:CD:60:52:FD:33 X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4d:fb:96:d9:ea:6e:5d:36:20:20:5c:64:88:57:04:1c:78: 6e:c7:cd:0f:8f:1e:01:9d:17:85:a4:96:b7:8e:08:2d:d8:a9: 7f:22:e4:3f:73:7b:94:7f:0c:82:9f:c4:ca:98:57:5a:aa:5e: 64:19:15:c8:10:d5:5c:32:9a:92:25:dc:cd:b6:dc:a7:ed:fe: 27:a2:92:02:b0:0a:82:d4:bd:5d:75:42:bb:ca:cb:48:c1:1c: 57:2d:39:87:28:d1:5b:c8:fe:10:3f:00:49:1f:ad:d5:8e:ab: 07:72:e5:0a:62:e3:6b:f0:81:e6:5b:c6:4d:73:a5:36:cd:70: 28:79:6c:ce:76:a2:8a:5f:d1:bc:6b:5b:39:4b:e2:90:f8:e3: b0:bd:74:da:fd:91:2b:73:81:84:77:2d:a0:ab:f6:0b:fd:1e: 3b:c9:96:23:6a:05:ce:68:85:e4:c4:04:8a:a0:42:20:d0:7c: da:23:fc:f0:06:b9:6f:c9:db:e5:51:5a:45:60:cf:6f:62:5b: a2:be:3a:32:1c:45:c5:d6:c9:78:55:fb:2f:a0:86:eb:b0:94: 63:39:ed:69:0f:86:36:8f:9d:cb:f0:56:4b:1e:b9:ad:8c:90: a7:3b:24:13:15:9e:b8:a6:f0:f5:eb:70:48:7b:f9:f7:03:47: a6:b3:73:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx Mjc3Q0IyRjMwHhcNMjUxMDE5MDcxNjEwWhcNMjUxMDI2MDcxNjEwWjAYMRYwFAYD VQQDEw02OGY0OTAzYS1lNmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdKF9kkEiCqI+13/YTix4BMC7TbXtrY+wquo/8aeE8BIQje28mORipP467k/ afTLHyEfLu920kgEx9u8GNTJeGwPyw9OT1/kfV3Rv18Kvv6YIro4S7LiIQKiFvGD lqNKIdsEdR/zRqfBWdhLfHgOBw6oz7a/Maap/HViQRVCa3TyTwBZaSUPg2XRYPqN CY2SETidQ3p5cyxmjR5aR2w3Xxuj1Mm8rLZAAQGYrg+drnzgXiKwZGLEO41j0ac8 /nZJ/UcvcpaLzIhfnhssbPr/6rBAdu/Cdnzq6cgaXn2w58zlPfC9Owu8QeqcDsfn 5+TRGvS39Ym6Oc9YSi8tyh2wiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjM6TTx I5v8nUMkHIZyk81gUv0zMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4 cUtxNzljSkJjbUFTZDhzdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKTfuW2epuXTYgIFxkiFcEHHhux80Pjx4BnReFpJa3jggt2Kl/IuQ/ c3uUfwyCn8TKmFdaql5kGRXIENVcMpqSJdzNttyn7f4nopICsAqC1L1ddUK7ystI wRxXLTmHKNFbyP4QPwBJH63VjqsHcuUKYuNr8IHmW8ZNc6U2zXAoeWzOdqKKX9G8 a1s5S+KQ+OOwvXTa/ZErc4GEdy2gq/YL/R47yZYjagXOaIXkxASKoEIg0HzaI/zw BrlvydvlUVpFYM9vYluivjoyHEXF1sl4VfsvoIbrsJRjOe1pD4Y2j53L8FZLHrmt jJCnOyQTFZ64pvD163BIe/n3A0ems3OM -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:48 2025 by rpki-client