$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: 4VvY7wGvuhKc0yq2rx7ZdNFhY113w2RXr8vsWT2PS8k= Subject key identifier: 57:F8:75:CC:36:C1:21:B8:6A:B3:DA:AA:CF:28:A0:E9:24:C0:E0:60 Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: 7D Signing time: Sun 19 Oct 2025 10:01:57 +0000 Manifest this update: Sun 19 Oct 2025 10:01:57 +0000 Manifest next update: Sun 26 Oct 2025 10:01:57 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: FA6Zgrp9p1oFAwZeCRXLB/iupgo/QkaKaxP2ibt58AI=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Oct 19 10:01:57 2025 GMT Not After : Oct 26 10:01:57 2025 GMT Subject: CN=68f4b715-f481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d4:c8:d4:64:05:04:25:7e:b6:d7:24:e6:c7: 1d:d8:94:14:c5:74:cd:75:f9:c8:79:47:eb:f3:43: 38:1e:13:95:8e:d8:11:fb:02:d7:9a:7d:18:78:45: 39:ec:7b:28:af:8f:13:9c:04:3c:28:ca:e9:02:3c: be:ae:80:f5:1a:7d:77:51:06:03:dd:95:3a:25:8a: 75:41:16:20:32:48:dc:04:85:32:56:53:25:91:19: f2:20:18:01:d9:c6:99:93:20:0e:39:bb:94:de:a9: a5:4b:9b:39:c0:fe:01:22:ed:54:3a:d0:47:16:a7: 36:ea:19:c5:73:79:1a:a9:88:29:2c:91:66:53:d8: af:fd:2a:20:45:21:a1:e3:06:a4:b4:b0:a6:12:45: 1c:1f:3a:fb:41:10:72:36:c4:0d:41:6c:19:e2:ca: 51:23:75:cd:33:c9:32:6b:53:43:05:20:9d:e8:33: 91:dc:fd:5f:85:5a:85:4c:fd:71:b0:ca:8c:6a:33: 2e:95:ab:46:66:b8:4d:b7:13:91:9b:9d:8f:00:1e: 25:3d:a7:ba:b5:7d:1c:3f:de:97:fd:ef:69:4c:fb: 55:dc:80:7e:e8:3c:34:36:45:10:2f:73:58:d5:5c: 7f:4e:f2:5f:e5:76:c3:4f:ae:99:35:16:87:55:67: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F8:75:CC:36:C1:21:B8:6A:B3:DA:AA:CF:28:A0:E9:24:C0:E0:60 X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:21:f9:33:d0:80:9b:dc:72:42:a6:51:26:ff:84:7e:ad:75: c3:47:a8:53:6c:44:0c:c1:49:bb:89:01:a2:ef:28:e6:4d:99: f3:4f:09:08:68:f9:a9:ce:e5:53:3e:70:2c:39:ed:63:0e:56: 65:26:b9:24:2c:a7:a8:68:0b:5b:07:b1:44:b9:dc:7a:93:2f: b3:20:ee:59:96:d2:1a:f4:7f:ce:a1:c4:c7:2f:f4:75:de:b0: 92:bf:72:2d:e4:e9:5a:2d:59:cc:f8:68:d7:a6:2e:53:18:bd: da:db:63:35:76:7f:35:72:8e:17:5a:b0:44:71:df:b2:ff:a4: 3e:ac:35:ca:65:c4:94:e8:e3:b5:89:c1:5d:c0:1a:6b:67:11: 7f:25:ad:01:49:22:97:b8:14:2d:5d:2d:32:44:c0:e2:13:4f: 86:60:1f:05:b6:fc:5a:3a:7a:a8:b9:5b:b4:ef:07:4d:fc:b4: b2:af:7c:e5:e1:1f:cb:5c:69:2c:0a:72:6b:0d:4c:b9:63:09: d6:60:ca:fb:06:bc:83:2a:1c:3f:ed:86:3d:bf:71:68:7a:6e: e9:fb:18:20:1b:bc:5e:87:b0:76:18:4a:a6:e5:90:e5:c3:82: 7c:5b:f0:9d:ee:1a:a6:af:ec:aa:c0:38:35:55:34:57:dc:e2: ac:10:8a:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDU2MjExMC8GA1UEBRMoQjlGQURDNDFFN0UxRjk3NTZDN0JDOUIzREUzOTcyQ0JG NkNGNjBCNTAeFw0yNTEwMTkxMDAxNTdaFw0yNTEwMjYxMDAxNTdaMBgxFjAUBgNV BAMTDTY4ZjRiNzE1LWY0ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDk1MjUZAUEJX621yTmxx3YlBTFdM11+ch5R+vzQzgeE5WO2BH7AteafRh4RTns eyivjxOcBDwoyukCPL6ugPUafXdRBgPdlTolinVBFiAySNwEhTJWUyWRGfIgGAHZ xpmTIA45u5TeqaVLmznA/gEi7VQ60EcWpzbqGcVzeRqpiCkskWZT2K/9KiBFIaHj BqS0sKYSRRwfOvtBEHI2xA1BbBniylEjdc0zyTJrU0MFIJ3oM5Hc/V+FWoVM/XGw yoxqMy6Vq0ZmuE23E5GbnY8AHiU9p7q1fRw/3pf972lM+1XcgH7oPDQ2RRAvc1jV XH9O8l/ldsNPrpk1FodVZ71BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV/h1zDbB Ibhqs9qqzyig6STA4GAwHwYDVR0jBBgwFoAUufrcQefh+XVse8mz3jlyy/bPYLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNTYyLzY2QzNDOTdFRURG OTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlM VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZyY1FlZmgtWFZzZThtejNqbHl5X2JQWUxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NTYyLzY2QzNDOTdFRURGOTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhW c2U4bXozamx5eV9iUFlMVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE0h+TPQgJvcckKmUSb/hH6tdcNHqFNsRAzBSbuJAaLvKOZNmfNPCQho +anO5VM+cCw57WMOVmUmuSQsp6hoC1sHsUS53HqTL7Mg7lmW0hr0f86hxMcv9HXe sJK/ci3k6VotWcz4aNemLlMYvdrbYzV2fzVyjhdasERx37L/pD6sNcplxJTo47WJ wV3AGmtnEX8lrQFJIpe4FC1dLTJEwOITT4ZgHwW2/Fo6eqi5W7TvB038tLKvfOXh H8tcaSwKcmsNTLljCdZgyvsGvIMqHD/thj2/cWh6bun7GCAbvF6HsHYYSqblkOXD gnxb8J3uGqav7KrAODVVNFfc4qwQiqA= -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:19 2025 by rpki-client