$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: H1SblevD+lBJdrM0rJmR1dfITTt4VrABaqqn1CIAXqY= Subject key identifier: A1:9A:8F:5F:64:E1:89:A4:0F:9B:19:D4:05:49:AF:DA:C7:95:7A:C8 Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A29 Signing time: Sat 18 Oct 2025 20:46:09 +0000 Manifest this update: Sat 18 Oct 2025 20:46:08 +0000 Manifest next update: Sat 25 Oct 2025 20:46:08 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: LNT6q/KOzcuzMo/ny6ZiLMPNLOuttLD6ZdRKJ91KfeE=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: oi91Qfh6vx3udOQFWmZQlAlwWv2n7sWukG/Y5qWMZrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Oct 18 20:46:08 2025 GMT Not After : Oct 25 20:46:08 2025 GMT Subject: CN=68f3fc90-a794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:1d:62:eb:08:8d:5f:9e:e9:c2:cb:cf:4a: 12:a4:cf:6b:81:2f:f1:08:89:77:d5:a7:5c:35:3a: d9:88:3b:e8:50:27:c6:3e:f5:e0:5b:61:17:f3:0f: 2e:96:64:04:95:a1:99:ec:29:c9:8a:b8:51:f1:fc: 6a:3e:68:b8:27:1d:aa:8e:c5:45:c5:25:82:40:4f: 08:b7:c8:76:08:9a:92:bc:4e:20:2a:33:17:03:ea: 73:a8:a1:b9:1f:5e:bb:42:59:de:ad:3a:38:40:72: 88:93:64:02:d3:a9:f7:31:69:05:96:09:e8:d2:c1: fe:ad:c9:66:ad:cc:35:43:b8:63:f9:24:1c:7b:5c: e1:5e:2e:56:38:df:36:c8:65:98:8f:58:97:ca:e4: 5c:e0:e2:3d:63:b5:08:af:9d:a5:9b:c7:3d:30:23: 7b:56:b1:ef:3d:2f:93:bf:39:2b:19:02:a1:e2:90: 82:65:c2:93:22:b5:ec:06:fc:78:da:58:c0:f5:e3: 1b:8b:16:ad:55:6c:2c:76:34:d3:36:d1:d9:b4:50: b0:45:52:93:33:c8:92:8b:ed:01:6e:7a:1f:45:dc: 7d:2a:78:52:cf:a3:32:ba:8e:03:66:a0:0b:0f:70: 5c:f3:b8:c5:62:f7:ea:81:d4:15:8b:2e:49:1e:57: bb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:8F:5F:64:E1:89:A4:0F:9B:19:D4:05:49:AF:DA:C7:95:7A:C8 X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:1c:27:93:6e:34:69:f4:e2:06:61:69:a7:26:fa:a6:6f:dd: 23:f6:4c:67:c0:31:47:ea:67:34:de:35:10:2f:75:a4:2f:40: d8:bd:79:69:c2:0d:82:d4:61:78:a9:6c:f5:98:d3:4a:5c:d6: d0:fd:4d:d5:02:4d:d2:73:23:60:b3:62:e6:81:11:e6:7b:d8: 62:d0:ed:e7:89:54:68:8e:60:04:28:1c:91:e3:1d:f9:61:df: 59:42:49:d9:a4:e7:a3:af:3a:ee:58:b7:5e:e1:cc:79:8b:cb: d1:f5:26:a6:08:4a:01:7e:bc:83:49:97:f6:e7:0b:25:60:cb: 5d:ad:29:22:37:e7:b3:6c:db:ba:3e:80:05:f6:63:b7:07:3a: ec:6a:c1:9e:02:2f:67:3f:ff:c4:31:dc:f1:3b:b2:73:e0:70: 8d:66:1c:1a:71:0e:b1:a4:21:6e:3d:99:c4:8a:6b:66:66:c5: 6f:8f:80:ef:94:56:84:fb:f1:75:d5:dc:b7:03:52:75:1b:8c: 22:a2:d3:87:fd:2e:f2:9a:d9:9f:01:8a:a1:7b:34:44:be:3d: 75:29:d3:49:20:97:e2:34:34:0f:46:dc:3a:bd:f0:f7:c8:40: 12:4a:32:88:96:ea:74:9b:b2:56:b7:df:9d:79:0c:66:a9:ef: ac:ad:2f:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjUxMDE4MjA0NjA4WhcNMjUxMDI1MjA0NjA4WjAYMRYwFAYD VQQDEw02OGYzZmM5MC1hNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1AdYusIjV+e6cLLz0oSpM9rgS/xCIl31adcNTrZiDvoUCfGPvXgW2EX8w8u lmQElaGZ7CnJirhR8fxqPmi4Jx2qjsVFxSWCQE8It8h2CJqSvE4gKjMXA+pzqKG5 H167QlnerTo4QHKIk2QC06n3MWkFlgno0sH+rclmrcw1Q7hj+SQce1zhXi5WON82 yGWYj1iXyuRc4OI9Y7UIr52lm8c9MCN7VrHvPS+TvzkrGQKh4pCCZcKTIrXsBvx4 2ljA9eMbixatVWwsdjTTNtHZtFCwRVKTM8iSi+0BbnofRdx9KnhSz6Myuo4DZqAL D3Bc87jFYvfqgdQViy5JHle7HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGaj19k 4YmkD5sZ1AVJr9rHlXrIMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkHCeTbjRp9OIGYWmnJvqmb90j9kxnwDFH6mc03jUQL3WkL0DYvXlp wg2C1GF4qWz1mNNKXNbQ/U3VAk3ScyNgs2LmgRHme9hi0O3niVRojmAEKByR4x35 Yd9ZQknZpOejrzruWLde4cx5i8vR9SamCEoBfryDSZf25wslYMtdrSkiN+ezbNu6 PoAF9mO3BzrsasGeAi9nP//EMdzxO7Jz4HCNZhwacQ6xpCFuPZnEimtmZsVvj4Dv lFaE+/F11dy3A1J1G4wiotOH/S7ymtmfAYqhezREvj11KdNJIJfiNDQPRtw6vfD3 yEASSjKIlup0m7JWt9+deQxmqe+srS8x -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:13 2025 by rpki-client