$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: KCAhCG5eJQtS6T5zlx1fMui6kijMECD7QmbJshO+MGI= Subject key identifier: 4D:3A:7A:97:AC:C4:24:80:10:87:7F:9F:1C:84:7F:40:0D:83:D7:DA Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0C34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0C2D Signing time: Sat 18 Oct 2025 19:28:33 +0000 Manifest this update: Sat 18 Oct 2025 19:28:33 +0000 Manifest next update: Sat 25 Oct 2025 19:28:33 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: Ybazef8Qe49SmbaqM95ipf3S7XCVP0LLO9abekMPEIA=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: 44EICOrdULHxxmbJqfrzipdifGEHemkJ/PfPJGyHNtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: Oct 18 19:28:33 2025 GMT Not After : Oct 25 19:28:33 2025 GMT Subject: CN=68f3ea61-98af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:94:d2:6b:65:8b:5e:be:a0:d3:33:21:40: e9:7c:f8:84:e1:e2:16:24:c0:6b:87:e8:95:ed:08: 5a:55:03:c4:92:c9:68:9b:64:80:aa:96:a9:9b:4b: e4:f5:93:4a:34:76:c8:d6:cb:62:01:74:a0:b8:dc: b1:25:aa:d9:fd:22:a8:8d:cd:7f:33:d7:d2:31:a8: fa:e9:7b:19:bd:df:50:e9:f7:3a:80:93:0a:4c:2c: eb:96:11:81:6c:58:b7:f9:e4:42:e5:18:bd:77:4d: 06:40:be:83:05:44:5c:98:a9:db:3f:2d:a0:1b:0a: 78:a1:eb:d2:f9:ff:7d:ad:da:7d:81:b1:d5:53:b8: 6a:63:3e:bf:80:8c:78:c7:de:33:11:6d:d0:9a:ba: 58:28:00:32:a6:07:24:24:e2:0b:e0:d4:47:11:e7: b7:98:b0:cf:b6:93:90:4d:9e:5d:80:a0:63:69:80: 31:26:0f:1c:11:b3:a6:e5:28:8e:27:57:1f:96:3e: 11:ff:45:f2:45:a6:44:27:76:04:7f:bb:91:71:47: 07:52:63:6f:14:ed:47:6f:a4:b3:41:ef:00:56:38: 25:3d:7b:9e:14:71:6c:77:d2:da:74:71:0e:5c:64: 31:f0:24:f9:41:da:20:11:b8:57:56:bc:e7:ba:58: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3A:7A:97:AC:C4:24:80:10:87:7F:9F:1C:84:7F:40:0D:83:D7:DA X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:33:8b:9e:29:0d:bc:50:73:7b:0e:dc:bd:14:ba:71:73:18: d0:4d:aa:5b:ef:a6:6b:b3:9f:47:82:98:b7:cd:2a:f0:6c:2b: 31:1e:a2:34:e6:be:4c:b3:4c:f1:53:8b:2f:b0:8d:dd:25:24: f3:13:90:8b:30:31:b7:48:88:b0:6d:31:db:c6:ba:04:c9:55: dc:05:c4:1d:39:8f:3d:c7:7a:21:78:f2:9b:ad:51:83:f3:44: 7d:1b:74:db:39:a5:85:66:0e:b9:31:ab:ee:4f:7b:e9:2a:89: 0a:9a:8f:4b:d7:2e:ee:b4:20:4c:5b:fe:ad:d7:48:7c:37:be: ac:25:29:b9:dc:5d:6e:bf:e9:da:dd:a2:b9:15:00:62:27:3b: 47:b7:0f:c9:cb:87:9a:59:34:b2:43:e0:74:b4:1b:c1:37:fb: df:f3:e0:f4:37:9f:d9:22:d3:01:86:9f:d5:66:13:7e:06:0a: 37:25:62:22:c6:34:46:54:b8:fb:10:cb:8d:62:1c:6c:07:cb: 84:f1:3a:bb:ca:e1:68:56:03:92:45:20:1d:e7:e1:31:db:1d: 18:7c:41:48:1c:dd:4b:53:81:2f:e9:f9:ad:4e:3b:92:47:2c: e5:04:bb:91:c3:c8:0c:fd:be:d5:e2:c0:e0:97:e1:a9:32:0d: 7a:41:ae:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjUxMDE4MTkyODMzWhcNMjUxMDI1MTkyODMzWjAYMRYwFAYD VQQDEw02OGYzZWE2MS05OGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSCU0mtli16+oNMzIUDpfPiE4eIWJMBrh+iV7QhaVQPEkslom2SAqpapm0vk 9ZNKNHbI1stiAXSguNyxJarZ/SKojc1/M9fSMaj66XsZvd9Q6fc6gJMKTCzrlhGB bFi3+eRC5Ri9d00GQL6DBURcmKnbPy2gGwp4oevS+f99rdp9gbHVU7hqYz6/gIx4 x94zEW3QmrpYKAAypgckJOIL4NRHEee3mLDPtpOQTZ5dgKBjaYAxJg8cEbOm5SiO J1cflj4R/0XyRaZEJ3YEf7uRcUcHUmNvFO1Hb6SzQe8AVjglPXueFHFsd9LadHEO XGQx8CT5QdogEbhXVrznuliHNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE06epes xCSAEId/nxyEf0ANg9faMB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATM4ueKQ28UHN7Dty9FLpxcxjQTapb76Zrs59Hgpi3zSrwbCsxHqI0 5r5Ms0zxU4svsI3dJSTzE5CLMDG3SIiwbTHbxroEyVXcBcQdOY89x3ohePKbrVGD 80R9G3TbOaWFZg65MavuT3vpKokKmo9L1y7utCBMW/6t10h8N76sJSm53F1uv+na 3aK5FQBiJztHtw/Jy4eaWTSyQ+B0tBvBN/vf8+D0N5/ZItMBhp/VZhN+Bgo3JWIi xjRGVLj7EMuNYhxsB8uE8Tq7yuFoVgOSRSAd5+Ex2x0YfEFIHN1LU4Ev6fmtTjuS RyzlBLuRw8gM/b7V4sDgl+GpMg16Qa4K -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:25 2025 by rpki-client