$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: EWuzPltMHtAIXInmN3BstxN2s2DZBFyg+RRRTAzjhMQ= Subject key identifier: 7F:56:38:5B:09:E5:90:BF:8B:01:2B:C7:0F:5F:29:18:57:F2:3A:39 Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 03A5 Signing time: Sun 19 Oct 2025 02:47:30 +0000 Manifest this update: Sun 19 Oct 2025 02:47:30 +0000 Manifest next update: Sun 26 Oct 2025 02:47:30 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: uuCk+Q/jCnqhAmAg0U1EZRFEU8fmA0TanD1g7IQwlRc=) 2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: U5oQvcg4w4KLcI7rzHf7QE3coC6CkJg5TgXKnBGDWvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Oct 19 02:47:30 2025 GMT Not After : Oct 26 02:47:30 2025 GMT Subject: CN=68f45142-4807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f7:da:80:82:1a:28:31:60:e1:60:f5:63:1d: 12:f4:8b:8f:74:9a:88:a7:55:68:e4:5e:eb:05:a5: 97:cb:0c:eb:82:70:a1:ba:7d:44:fd:18:4f:c7:d1: e5:78:18:9b:fc:c9:c7:fa:31:2d:c9:11:d5:af:67: 27:95:59:f4:38:fe:62:b2:67:e9:e1:17:aa:8e:2a: 15:d6:3f:0f:b4:a3:ef:06:95:f8:ac:74:cf:90:e0: 8e:ba:35:d8:f1:6d:24:1f:bf:f1:56:d5:a4:19:3f: f2:ee:a2:fd:99:71:f2:10:db:15:fe:c5:3a:57:ee: 5a:c0:9e:70:cd:a1:a3:56:ff:9d:93:b2:7e:ad:b6: 2a:1d:62:30:05:af:7b:ee:45:9b:5b:3b:aa:d9:b6: be:c1:41:04:df:fe:0d:48:22:72:9b:b6:78:91:ff: 90:6e:10:c0:30:9a:d1:a2:b6:38:4d:37:1a:9d:ef: 59:ab:29:d7:ca:8f:1d:27:96:0b:a5:55:a6:fd:d8: 18:d3:b9:09:c6:cd:7f:f8:59:2c:f6:53:e2:7c:e7: 9f:4d:ee:38:d4:76:16:33:3f:3a:30:ac:7d:85:cf: 58:26:75:9f:19:7b:1a:56:2a:04:bc:bd:d8:44:f4: aa:37:f1:21:30:be:d8:c2:1c:e7:c4:46:a6:92:57: f8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:56:38:5B:09:E5:90:BF:8B:01:2B:C7:0F:5F:29:18:57:F2:3A:39 X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d2:c6:29:d3:8c:03:5d:db:38:2b:cc:12:ba:54:9e:0f:78: 07:3b:92:ea:8b:e3:23:aa:a0:69:45:43:ee:fe:58:77:0f:cf: 85:b2:ff:0a:63:de:79:74:d5:3d:71:2d:81:34:8a:f3:b4:6e: cc:f8:6d:8e:d1:d5:62:3d:6e:6b:2e:5e:d8:3d:c4:00:d8:e2: 5c:da:3d:87:28:93:5c:de:94:73:fa:0e:d4:44:86:2e:f6:89: 4d:5c:6b:c0:c3:b4:20:4e:e0:b6:c6:21:26:29:4f:36:8f:74: f3:27:a8:24:df:c9:9a:f4:0b:7f:53:d6:6a:77:7f:f8:20:6b: d3:35:5f:1b:9f:df:6e:18:86:48:27:b3:fe:ea:0c:66:7f:ed: 52:82:70:d1:e6:25:c2:b4:87:d0:9b:87:5a:87:21:b2:5e:5e: ee:87:a5:af:5b:7a:9d:07:c7:b1:f3:70:a9:38:58:a4:e0:54: c9:b1:18:47:9d:25:5b:73:4b:68:8b:98:de:80:0b:56:5b:f6: db:61:e5:7e:54:df:ed:a8:8c:19:2f:17:c6:bf:7d:91:e4:00: 47:22:dc:e0:92:57:dc:bf:09:17:32:b9:4f:24:86:c7:7a:43: 8e:63:61:a4:cd:c1:b5:61:09:3b:84:6e:d5:ea:aa:e3:6c:1f: a5:88:de:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUxMDE5MDI0NzMwWhcNMjUxMDI2MDI0NzMwWjAYMRYwFAYD VQQDEw02OGY0NTE0Mi00ODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PfagIIaKDFg4WD1Yx0S9IuPdJqIp1Vo5F7rBaWXywzrgnChun1E/RhPx9Hl eBib/MnH+jEtyRHVr2cnlVn0OP5ismfp4ReqjioV1j8PtKPvBpX4rHTPkOCOujXY 8W0kH7/xVtWkGT/y7qL9mXHyENsV/sU6V+5awJ5wzaGjVv+dk7J+rbYqHWIwBa97 7kWbWzuq2ba+wUEE3/4NSCJym7Z4kf+QbhDAMJrRorY4TTcane9ZqynXyo8dJ5YL pVWm/dgY07kJxs1/+Fks9lPifOefTe441HYWMz86MKx9hc9YJnWfGXsaVioEvL3Y RPSqN/EhML7YwhznxEamklf4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9WOFsJ 5ZC/iwErxw9fKRhX8jo5MB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK0sYp04wDXds4K8wSulSeD3gHO5Lqi+MjqqBpRUPu/lh3D8+Fsv8K Y955dNU9cS2BNIrztG7M+G2O0dViPW5rLl7YPcQA2OJc2j2HKJNc3pRz+g7URIYu 9olNXGvAw7QgTuC2xiEmKU82j3TzJ6gk38ma9At/U9Zqd3/4IGvTNV8bn99uGIZI J7P+6gxmf+1SgnDR5iXCtIfQm4dahyGyXl7uh6WvW3qdB8ex83CpOFik4FTJsRhH nSVbc0toi5jegAtWW/bbYeV+VN/tqIwZLxfGv32R5ABHItzgklfcvwkXMrlPJIbH ekOOY2GkzcG1YQk7hG7V6qrjbB+liN4L -----END CERTIFICATE-----Generated at Mon Oct 20 15:41:03 2025 by rpki-client