$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json) Hash identifier: rtSwWCqmhvx9q+Zl3+g3mIn5E7Bl0zU30e9Xe1pV+YQ= Subject key identifier: AC:37:2E:6B:07:0E:ED:97:81:0D:09:BD:82:E8:E3:53:9A:2E:61:53 Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft Manifest number: 91 Signing time: Sun 19 Oct 2025 09:42:49 +0000 Manifest this update: Sun 19 Oct 2025 09:42:49 +0000 Manifest next update: Sun 26 Oct 2025 09:42:49 +0000 Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: 48qoKE5X+fqTbB7IKDj18+QEXpT8R5K7BpyOzhCafKM=) 2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Validity Not Before: Oct 19 09:42:49 2025 GMT Not After : Oct 26 09:42:49 2025 GMT Subject: CN=68f4b299-868f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:57:52:b3:c2:f4:bd:1f:c2:09:d4:2e:3f:a2: c8:4f:05:8c:0b:3e:27:3c:62:03:21:29:16:94:98: 61:76:fb:d7:31:ff:9a:88:9d:58:8d:97:f0:9d:b8: 2b:fc:a4:7e:c1:c3:42:30:b5:ec:05:3a:34:e1:0e: d0:5b:11:ff:a1:84:d6:67:d0:8d:48:d7:a1:d0:00: 2a:01:16:e3:07:c8:8c:cf:1f:e5:e5:9d:c1:ef:fd: 5f:6f:1d:ce:63:65:58:b5:d7:b0:61:c8:54:b1:71: db:0c:8b:ff:92:48:f4:cd:3d:99:c8:2e:cf:6a:80: bb:0c:74:b8:85:96:6b:8a:39:cb:43:14:f5:5f:ef: 87:67:bb:59:8c:d0:de:e8:04:87:7a:a1:41:92:49: ca:3d:3e:7a:89:1d:a0:91:b4:63:9a:6a:c9:5f:77: 0c:e7:f8:81:af:60:3f:cb:f8:45:df:52:5d:62:06: ae:32:b6:be:dd:e5:3a:36:b3:e0:24:0a:76:78:b2: b8:27:db:f1:01:25:70:61:d8:59:5a:03:54:b9:16: 02:26:e5:1b:83:6f:0d:ae:ec:41:9a:ff:32:e0:99: 69:42:08:56:1e:66:6e:33:22:3a:81:e4:3a:ab:86: 0b:e5:62:68:63:1d:64:31:c5:bf:8a:c6:20:db:5a: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:37:2E:6B:07:0E:ED:97:81:0D:09:BD:82:E8:E3:53:9A:2E:61:53 X509v3 Authority Key Identifier: keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:28:af:ac:09:ee:98:da:2c:19:59:5b:ab:3a:1e:55:70:94: bd:4f:9f:c5:d4:da:27:78:7c:7b:48:51:38:dc:f2:2f:f9:4b: 1a:91:56:23:4c:76:ee:33:12:6a:92:ff:a2:7c:48:f5:c4:85: 9c:08:6b:6c:24:1e:f8:a7:79:ca:3b:48:24:cd:a3:97:84:73: a9:4d:2d:2d:cb:b4:cf:39:ed:61:28:6b:b4:10:5c:2a:70:39: 31:6c:6d:9b:07:5d:64:37:d9:29:58:83:b0:36:4a:4a:6c:0d: 92:1c:e9:5a:dd:41:58:b0:65:a4:b2:9f:d4:75:2e:45:71:aa: db:46:6f:fa:a9:15:2a:9e:1a:57:6d:c5:76:fb:c8:16:97:b5: ea:5f:ed:f5:48:3b:2f:c4:b6:0a:29:1d:00:9c:78:a3:3c:79: 38:dd:cb:e7:72:35:aa:0b:e3:5e:c1:98:ba:a3:79:91:d1:14: 82:db:95:20:c5:80:f8:21:5a:b0:30:d0:65:cd:a6:b4:54:69: 69:c4:e0:c8:c5:8f:b2:35:b6:27:f4:c7:c1:e7:33:3b:9b:e8: 19:90:fb:e4:29:f7:5e:b1:2e:f7:f0:2d:4f:ca:48:85:d7:6e: 2b:f5:fe:cd:19:44:d4:63:39:7f:27:dd:0e:9b:26:ce:d2:ba: f2:80:e6:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJEOEUxMTAvBgNVBAUTKDUwNjE5NDcxMDBCQ0IzMzI4OUUyNkEwQkRGRUNFMkM1 RkI5RTA5RDIwHhcNMjUxMDE5MDk0MjQ5WhcNMjUxMDI2MDk0MjQ5WjAYMRYwFAYD VQQDEw02OGY0YjI5OS04NjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+VdSs8L0vR/CCdQuP6LITwWMCz4nPGIDISkWlJhhdvvXMf+aiJ1YjZfwnbgr /KR+wcNCMLXsBTo04Q7QWxH/oYTWZ9CNSNeh0AAqARbjB8iMzx/l5Z3B7/1fbx3O Y2VYtdewYchUsXHbDIv/kkj0zT2ZyC7PaoC7DHS4hZZrijnLQxT1X++HZ7tZjNDe 6ASHeqFBkknKPT56iR2gkbRjmmrJX3cM5/iBr2A/y/hF31JdYgauMra+3eU6NrPg JAp2eLK4J9vxASVwYdhZWgNUuRYCJuUbg28NruxBmv8y4JlpQghWHmZuMyI6geQ6 q4YL5WJoYx1kMcW/isYg21rXsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKw3LmsH Du2XgQ0JvYLo41OaLmFTMB8GA1UdIwQYMBaAFFBhlHEAvLMyieJqC9/s4sX7ngnS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQ4RS8zQUY1N0ZEQUNF ODgxMUVGODdDMDcxMTdDNEY5QUUwMi9VR0dVY1FDOHN6S0o0bW9MMy16aXhmdWVD ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VHR1VjUUM4c3pLSjRtb0wzLXppeGZ1ZUNkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkQ4RS8zQUY1N0ZEQUNFODgxMUVGODdDMDcxMTdDNEY5QUUwMi9VR0dVY1FDOHN6 S0o0bW9MMy16aXhmdWVDZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0KK+sCe6Y2iwZWVurOh5VcJS9T5/F1NoneHx7SFE43PIv+UsakVYj THbuMxJqkv+ifEj1xIWcCGtsJB74p3nKO0gkzaOXhHOpTS0ty7TPOe1hKGu0EFwq cDkxbG2bB11kN9kpWIOwNkpKbA2SHOla3UFYsGWksp/UdS5FcarbRm/6qRUqnhpX bcV2+8gWl7XqX+31SDsvxLYKKR0AnHijPHk43cvncjWqC+NewZi6o3mR0RSC25Ug xYD4IVqwMNBlzaa0VGlpxODIxY+yNbYn9MfB5zM7m+gZkPvkKfdesS738C1PykiF 124r9f7NGUTUYzl/J90OmybO0rrygOae -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:23 2025 by rpki-client