$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: a3k9TLIWFDo/H7OrqCgXUDFFjDbWoFLgIUpeFXiM3R4= Subject key identifier: 97:7C:D9:B6:F2:6C:99:BA:CC:75:F5:23:FE:19:CE:33:B4:EA:1B:9D Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: E1 Signing time: Sun 19 Oct 2025 08:26:29 +0000 Manifest this update: Sun 19 Oct 2025 08:26:28 +0000 Manifest next update: Sun 26 Oct 2025 08:26:28 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: 5JEEMZovKgJyJCPEC2VsIuzwh5nKmoDfyt0iJNhRr74=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: a77iAc4lVu+0oRkHBvhrQbh2JlrG7+YjIwHwoF/sfB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Validity Not Before: Oct 19 08:26:28 2025 GMT Not After : Oct 26 08:26:28 2025 GMT Subject: CN=68f4a0b4-3229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:4d:55:ae:e0:b3:fe:a3:75:31:56:50:97: 8f:a3:ee:c6:5d:6d:06:70:a9:4b:e7:4b:89:65:82: a1:a4:23:1c:db:72:cb:2f:49:61:e7:46:af:48:5a: 18:d6:f6:e2:43:70:bf:e2:d5:15:5e:aa:fc:42:b9: 76:55:5c:82:a0:e2:96:c4:c5:b3:99:52:e7:8d:1b: 90:7c:9b:df:f1:3a:d2:4d:f4:67:18:0d:d4:5f:50: d3:36:45:19:1f:b2:ee:da:b7:2f:e7:71:f9:2f:e0: b3:ae:c1:4c:ac:d3:97:dc:53:96:e9:70:cb:45:a2: 55:17:38:f1:ee:37:8e:bf:f6:78:99:27:0f:68:57: 13:67:57:e9:2f:00:2b:b2:57:1d:bd:21:fe:d4:e7: 7d:78:7a:41:e0:c2:bf:52:5d:e5:01:3d:04:fc:0f: d9:0a:50:83:c8:01:0d:61:9b:35:7e:50:32:aa:e1: 89:e6:f7:4f:00:f7:80:98:ad:38:af:e8:ff:4d:d6: 23:11:98:c8:87:9d:61:e8:26:fa:cd:92:d4:b4:2e: 33:41:7c:af:01:1f:e4:b4:b8:86:0d:d3:2d:68:43: b0:ad:20:e2:fa:3d:35:3d:3e:d2:1a:36:88:1b:08: d8:64:4f:90:fc:cc:4a:a0:9f:92:76:79:bf:24:b2: 3b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7C:D9:B6:F2:6C:99:BA:CC:75:F5:23:FE:19:CE:33:B4:EA:1B:9D X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0d:b2:5b:20:97:c5:fe:42:45:47:24:da:5e:f6:58:7a:c5: 2a:57:15:94:06:17:68:ad:cf:fd:88:3a:c8:48:2a:f2:5d:e6: 07:6e:97:46:0c:fa:b8:bb:fb:e7:df:17:7e:d1:8d:aa:03:55: db:21:79:5c:0c:18:01:3e:00:80:83:c9:36:9e:3d:12:e5:75: 15:71:8d:8f:90:ae:a0:14:3e:8f:be:63:ad:af:39:cf:86:b1: a2:ee:0c:b3:d8:de:7a:79:6d:2e:42:5e:1f:90:df:f1:f0:07: 72:48:29:e8:cf:3e:4e:7d:4b:f7:e5:3d:4a:63:a8:95:86:2b: a6:75:95:d6:f4:b6:6a:dc:71:8d:9e:be:3d:c4:87:f9:f2:b7: 9a:34:3b:25:87:2b:68:a9:c7:e5:3b:a9:f7:fb:b2:fe:23:b1: 58:fc:4c:19:2d:3b:ec:b0:ab:54:35:86:72:13:9f:86:29:da: f5:23:c4:60:f4:b1:0d:70:82:1a:77:7a:e2:52:49:fb:be:a3: f0:b8:c1:a6:27:90:da:c1:4c:a0:0b:1a:bc:07:69:16:da:9c: 1c:5a:e9:ac:5c:fc:e4:6f:3f:9a:fb:8b:02:7e:f3:35:47:e2: a3:09:0e:2a:72:6b:72:13:1c:81:55:4b:05:f0:cd:76:5f:7f: ca:83:d4:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKEI5MUEyNENGMDQ3MTExMTdDOEMzQkEyNjRBMzMzOTVE QTc3RjkxQjQwHhcNMjUxMDE5MDgyNjI4WhcNMjUxMDI2MDgyNjI4WjAYMRYwFAYD VQQDEw02OGY0YTBiNC0zMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JZNVa7gs/6jdTFWUJePo+7GXW0GcKlL50uJZYKhpCMc23LLL0lh50avSFoY 1vbiQ3C/4tUVXqr8Qrl2VVyCoOKWxMWzmVLnjRuQfJvf8TrSTfRnGA3UX1DTNkUZ H7Lu2rcv53H5L+CzrsFMrNOX3FOW6XDLRaJVFzjx7jeOv/Z4mScPaFcTZ1fpLwAr slcdvSH+1Od9eHpB4MK/Ul3lAT0E/A/ZClCDyAENYZs1flAyquGJ5vdPAPeAmK04 r+j/TdYjEZjIh51h6Cb6zZLUtC4zQXyvAR/ktLiGDdMtaEOwrSDi+j01PT7SGjaI GwjYZE+Q/MxKoJ+Sdnm/JLI7BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJd82bby bJm6zHX1I/4ZzjO06hudMB8GA1UdIwQYMBaAFLkaJM8EcREXyMO6JkozOV2nf5G0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9CODY1QjM3RTU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVSZkl3N29tU2pNNVhhZF9r YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2tiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9CODY1QjM3RTU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVS Zkl3N29tU2pNNVhhZF9rYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/DbJbIJfF/kJFRyTaXvZYesUqVxWUBhdorc/9iDrISCryXeYHbpdG DPq4u/vn3xd+0Y2qA1XbIXlcDBgBPgCAg8k2nj0S5XUVcY2PkK6gFD6PvmOtrznP hrGi7gyz2N56eW0uQl4fkN/x8AdySCnozz5OfUv35T1KY6iVhiumdZXW9LZq3HGN nr49xIf58reaNDslhytoqcflO6n3+7L+I7FY/EwZLTvssKtUNYZyE5+GKdr1I8Rg 9LENcIIad3riUkn7vqPwuMGmJ5DawUygCxq8B2kW2pwcWumsXPzkbz+a+4sCfvM1 R+KjCQ4qcmtyExyBVUsF8M12X3/Kg9T5 -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:12 2025 by rpki-client