$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft File: UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json) Hash identifier: 00Y34CxvFG5M9XAoejNx5TSoBk+1phUd+gDhAXpDb2c= Subject key identifier: 36:9A:4A:C7:8D:59:77:82:C4:7F:34:16:37:ED:83:4C:F4:89:DA:B9 Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 Certificate issuer: /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft Manifest number: 010B Signing time: Sun 19 Oct 2025 07:53:34 +0000 Manifest this update: Sun 19 Oct 2025 07:53:33 +0000 Manifest next update: Sun 26 Oct 2025 07:53:33 +0000 Files and hashes: 1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: 3g0gsM3cqPHcB0q75hUbWRS/u6K1o62YygQY6RQ0r1E=) 2: C23053B019A911EF97366417C4F9AE02.roa (hash: YYki0NriwMd0PqjU0EOE6kz16/qKzKdVDNbbepKT0IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Validity Not Before: Oct 19 07:53:33 2025 GMT Not After : Oct 26 07:53:33 2025 GMT Subject: CN=68f498fd-97ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:21:94:4d:db:a9:bb:6e:5b:fc:6a:47:be: d3:e0:bc:72:6a:3d:dd:35:a3:14:07:ec:13:55:57: ba:c3:84:ca:84:4c:ef:b2:85:21:b8:10:15:65:00: 19:36:86:fa:d6:ec:d4:f6:a1:94:89:02:fe:5e:ee: 4c:7d:1a:66:f0:79:30:81:81:6b:b7:29:5f:b9:98: 04:d4:06:57:96:c7:84:db:69:ba:5c:3d:ac:f6:23: 43:ac:56:2f:8d:2c:7b:d7:17:8d:34:6c:b1:b7:8d: b9:02:9a:86:82:2f:b7:a2:96:1f:3d:f2:63:db:6c: 47:98:f5:dd:58:39:71:55:e2:7c:b2:ff:10:bf:d2: bc:9d:30:11:38:de:45:0f:d3:d7:d5:9e:eb:3a:d6: f4:6f:99:5a:94:43:14:07:95:44:41:82:bd:a6:04: dd:c0:dd:9e:50:8f:d1:0d:e8:4b:5e:f6:cf:51:b6: 8f:6c:d8:c9:fc:e1:e3:ef:05:fc:fe:ea:25:35:d6: 6d:62:b1:3f:7b:8d:b6:f7:8a:37:79:e0:48:c4:f6: 64:ca:23:1e:89:2e:18:4c:e0:73:01:78:ba:24:ee: ed:2f:df:ac:ef:7d:3e:86:73:c4:e7:af:68:2d:9e: 6d:ed:2a:40:3f:64:1b:1a:24:76:36:9f:de:35:0b: 57:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9A:4A:C7:8D:59:77:82:C4:7F:34:16:37:ED:83:4C:F4:89:DA:B9 X509v3 Authority Key Identifier: keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:6c:8c:54:1b:36:9e:1d:8b:28:5a:a2:57:17:81:c8:81:33: 43:79:97:88:6c:1c:8d:c8:4e:91:46:d8:a0:9a:aa:4a:56:fb: 04:60:fc:32:ce:53:93:34:87:08:c6:2b:8d:1e:43:21:84:74: b8:65:2b:68:2f:fa:3a:5e:4e:1c:f2:62:d3:eb:88:11:b9:eb: 20:7e:22:94:7d:c8:b2:17:7f:54:0f:04:ff:47:93:e2:bf:44: fa:8c:61:d5:7f:14:89:42:2c:42:7d:8c:a4:ae:f6:35:8b:ed: 08:39:0c:c5:48:87:08:19:75:26:3a:43:6c:d0:d3:c0:70:22: 25:c7:64:74:9d:59:f3:85:b5:35:a9:e3:20:40:f3:2f:5d:a9: 1c:fa:2d:99:cc:e8:99:a0:98:e4:06:c6:a3:2d:f2:73:b7:4c: d2:07:19:3d:87:ff:8f:77:4d:7d:5a:df:e6:c1:60:27:54:01: 02:26:94:25:89:d1:8a:28:73:a9:25:a8:64:a2:52:fc:f6:f5: 7d:b3:41:4b:2a:c9:b4:f3:d0:b5:0d:e6:d6:91:d9:26:b5:52: 40:19:f3:97:06:fd:0e:89:70:ab:0a:24:66:1e:c0:f7:c8:97: 94:e3:cc:26:aa:87:c2:5a:0d:6a:eb:dc:d4:bd:14:f6:37:82: d1:c7:5a:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQkYxMTAvBgNVBAUTKDUxQTQ4MjU4RDRDRDZFMDFEMjQ1OEM1QjkyMTZFRkE0 NTIxMEI2MjMwHhcNMjUxMDE5MDc1MzMzWhcNMjUxMDI2MDc1MzMzWjAYMRYwFAYD VQQDEw02OGY0OThmZC05N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqp4hlE3bqbtuW/xqR77T4Lxyaj3dNaMUB+wTVVe6w4TKhEzvsoUhuBAVZQAZ Nob61uzU9qGUiQL+Xu5MfRpm8HkwgYFrtylfuZgE1AZXlseE22m6XD2s9iNDrFYv jSx71xeNNGyxt425ApqGgi+3opYfPfJj22xHmPXdWDlxVeJ8sv8Qv9K8nTARON5F D9PX1Z7rOtb0b5lalEMUB5VEQYK9pgTdwN2eUI/RDehLXvbPUbaPbNjJ/OHj7wX8 /uolNdZtYrE/e42294o3eeBIxPZkyiMeiS4YTOBzAXi6JO7tL9+s730+hnPE569o LZ5t7SpAP2QbGiR2Np/eNQtXFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaaSseN WXeCxH80Fjftg0z0idq5MB8GA1UdIwQYMBaAFFGkgljUzW4B0kWMW5IW76RSELYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCRi9GNjdDNjFFQTE5 ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJnSFNSWXhia2hidnBGSVF0 aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhU0NXTlROYmdIU1JZeGJraGJ2cEZJUXRpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCRi9GNjdDNjFFQTE5ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9VYVNDV05UTmJn SFNSWXhia2hidnBGSVF0aU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJbIxUGzaeHYsoWqJXF4HIgTNDeZeIbByNyE6RRtigmqpKVvsEYPwy zlOTNIcIxiuNHkMhhHS4ZStoL/o6Xk4c8mLT64gRuesgfiKUfciyF39UDwT/R5Pi v0T6jGHVfxSJQixCfYykrvY1i+0IOQzFSIcIGXUmOkNs0NPAcCIlx2R0nVnzhbU1 qeMgQPMvXakc+i2ZzOiZoJjkBsajLfJzt0zSBxk9h/+Pd019Wt/mwWAnVAECJpQl idGKKHOpJahkolL89vV9s0FLKsm089C1DebWkdkmtVJAGfOXBv0OiXCrCiRmHsD3 yJeU48wmqofCWg1q69zUvRT2N4LRx1qq -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:36 2025 by rpki-client