$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: WGkXh0XCduufki8PoAAHa3CZ4zOqY12TEo1Ks0aV7+Q= Subject key identifier: E3:2E:84:17:6D:C1:9F:9E:16:8A:C8:F4:87:E0:8B:FF:DC:0C:CE:61 Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0BF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0BF1 Signing time: Sat 18 Oct 2025 19:39:03 +0000 Manifest this update: Sat 18 Oct 2025 19:39:03 +0000 Manifest next update: Sat 25 Oct 2025 19:39:03 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: zIouPIR2gyTzQVVqmwcyCR9e5zoY8fF9Bs+kDcA2pw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3057 (0xbf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: Oct 18 19:39:03 2025 GMT Not After : Oct 25 19:39:03 2025 GMT Subject: CN=68f3ecd7-a276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:49:82:ce:31:4d:05:cc:d1:f5:e9:c2:d4: 4e:01:78:22:a4:c7:0d:cd:19:0d:42:59:f2:5e:84: ea:07:ab:4c:12:bb:3a:d5:5b:6e:b6:c0:87:c3:21: ab:20:4d:70:34:3c:84:c2:a6:03:fd:b9:6a:95:d0: dc:44:ed:02:23:04:e3:f1:52:d2:2a:25:96:07:fb: 98:c5:13:5f:91:b6:85:95:e7:8f:03:cf:11:94:bb: fd:39:6b:80:10:62:76:63:52:71:8c:6b:75:79:0b: 7b:1d:2e:56:69:d3:b8:b5:4d:91:42:c9:7e:0b:f3: be:c5:f7:a3:16:36:ec:95:16:e5:bc:e2:e5:a7:d4: 8a:45:04:17:8b:17:d3:5d:e7:fa:3e:33:88:cb:d8: 6f:b2:f1:9c:d5:2f:61:d8:43:b7:bb:ad:8f:16:7f: 34:aa:78:ef:81:c9:00:8f:e6:49:20:c1:fd:1b:e7: 80:b1:4a:52:ce:e8:e5:c6:ab:5c:55:2f:04:8f:b7: 63:f0:4b:ca:d8:ae:3b:1b:ba:a1:4c:7b:46:9a:97: 29:3f:6a:da:59:28:66:41:9b:29:69:a8:9f:d4:4e: 1b:a7:67:75:42:7c:e9:74:4f:91:1e:c1:47:9a:10: 15:9c:5f:3d:6f:09:aa:dd:6f:46:5a:7d:b8:c9:44: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2E:84:17:6D:C1:9F:9E:16:8A:C8:F4:87:E0:8B:FF:DC:0C:CE:61 X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3b:38:ca:9e:9c:dd:ac:e6:98:3d:20:4d:92:3e:c2:2c:37: b7:0c:c3:0b:2a:2a:0d:c4:fe:0c:df:e7:ef:c5:f5:c6:3c:f0: 57:44:81:38:63:ae:3c:e7:77:ec:57:ad:7a:01:5a:e2:fb:2e: 32:0b:52:8d:86:d9:8a:d1:25:e1:b4:d8:60:cf:38:61:4f:2f: 82:30:38:70:09:4a:4a:aa:7e:05:18:01:ce:10:4d:b7:38:91: ae:38:f4:89:3f:22:c9:d0:11:21:2f:ab:c2:4c:79:a5:64:b9: 30:cf:ed:12:7f:34:6d:bc:62:fb:a6:99:70:28:0c:32:cd:c5: ad:e6:07:45:ff:7a:90:68:2c:15:74:45:81:db:07:12:a3:c1: b1:32:86:ff:aa:21:ac:d6:0c:02:ae:51:9c:76:60:fc:36:bd: d6:7d:16:8d:59:c2:98:15:b8:75:ec:c0:17:4d:6d:22:b5:25: 77:c4:c0:04:61:aa:5f:dd:75:d3:6f:b7:41:79:e8:64:7b:ac: 8c:bc:d5:90:35:7e:3f:8c:22:8f:f5:df:e2:a9:91:60:d4:f6: 4f:27:e2:73:1d:c6:e1:15:f8:4b:35:7c:af:fe:b7:d2:da:24: c6:cf:0b:e3:85:00:25:43:66:60:13:d7:73:fa:31:a3:51:10: e4:12:1a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUxMDE4MTkzOTAzWhcNMjUxMDI1MTkzOTAzWjAYMRYwFAYD VQQDEw02OGYzZWNkNy1hMjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+5Jgs4xTQXM0fXpwtROAXgipMcNzRkNQlnyXoTqB6tMErs61VtutsCHwyGr IE1wNDyEwqYD/blqldDcRO0CIwTj8VLSKiWWB/uYxRNfkbaFleePA88RlLv9OWuA EGJ2Y1JxjGt1eQt7HS5WadO4tU2RQsl+C/O+xfejFjbslRblvOLlp9SKRQQXixfT Xef6PjOIy9hvsvGc1S9h2EO3u62PFn80qnjvgckAj+ZJIMH9G+eAsUpSzujlxqtc VS8Ej7dj8EvK2K47G7qhTHtGmpcpP2raWShmQZspaaif1E4bp2d1QnzpdE+RHsFH mhAVnF89bwmq3W9GWn24yUQj7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMuhBdt wZ+eForI9Ifgi//cDM5hMB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKOzjKnpzdrOaYPSBNkj7CLDe3DMMLKioNxP4M3+fvxfXGPPBXRIE4 Y64853fsV616AVri+y4yC1KNhtmK0SXhtNhgzzhhTy+CMDhwCUpKqn4FGAHOEE23 OJGuOPSJPyLJ0BEhL6vCTHmlZLkwz+0SfzRtvGL7pplwKAwyzcWt5gdF/3qQaCwV dEWB2wcSo8GxMob/qiGs1gwCrlGcdmD8Nr3WfRaNWcKYFbh17MAXTW0itSV3xMAE Yapf3XXTb7dBeehke6yMvNWQNX4/jCKP9d/iqZFg1PZPJ+JzHcbhFfhLNXyv/rfS 2iTGzwvjhQAlQ2ZgE9dz+jGjURDkEhr4 -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:26 2025 by rpki-client