$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: ScL6zRe97+ALlY5hxLULW3IO1GNVF92eJnedK0kW9uQ= Subject key identifier: 91:47:CD:03:1F:73:F2:15:E6:1C:10:38:57:AB:11:F6:32:CE:73:07 Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 0916 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 19AC Signing time: Sat 18 Oct 2025 17:52:26 +0000 Manifest this update: Sat 18 Oct 2025 17:52:25 +0000 Manifest next update: Sat 25 Oct 2025 17:52:25 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: KkSNB85CGthVnFpONLFHW4h26wFpUhYIl1qPmq7uZO0=) 2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: mtUL6kpWcJ0s0WYAq9l26D9HLDGvLgZ5GCmZqFRcyjs=) 3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2326 (0x916) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Oct 18 17:52:25 2025 GMT Not After : Oct 25 17:52:25 2025 GMT Subject: CN=68f3d3da-f3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:54:0d:04:d7:23:f5:a3:28:51:64:8c:3c: 9e:78:b4:21:25:c6:64:2a:5c:40:ad:32:ef:1b:5a: 28:65:94:ea:23:06:02:1a:0d:c4:92:5a:fd:20:04: ae:6b:14:f2:69:04:bb:3b:50:4f:c2:37:11:2c:f1: 6a:d1:36:b1:b8:62:89:ac:02:a5:b6:38:fe:e7:ff: 98:77:6b:d5:04:e9:39:2c:c3:74:f7:b9:a9:2c:cd: b0:38:9d:3d:f3:ff:0c:16:99:31:a9:75:2a:12:46: 52:43:e7:b9:c8:c6:88:fd:43:9a:bd:36:e4:9e:40: c0:97:d1:25:7e:b4:d3:da:46:f7:87:40:36:7b:6f: 3d:ad:cf:16:12:8f:0f:a3:6f:49:72:e4:c0:65:e9: ea:4d:d4:4a:85:ce:bd:b2:56:de:e4:a8:c4:b1:86: ce:d0:90:0e:3d:ec:63:39:fe:a6:ae:37:1a:95:e5: d6:ea:d2:a6:ee:46:6f:09:fe:64:14:52:83:80:71: 96:60:ea:3d:3d:9d:20:2a:58:6f:40:af:d6:a1:20: d8:02:fe:60:96:a4:3c:99:75:24:4d:5e:f6:b3:7e: d8:50:38:70:58:0d:a2:e3:b9:a3:e9:1c:6e:36:53: e5:43:b5:52:19:14:48:21:39:98:0e:ad:d2:d0:8c: 4b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:47:CD:03:1F:73:F2:15:E6:1C:10:38:57:AB:11:F6:32:CE:73:07 X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:50:58:15:c4:33:ee:f1:01:87:c6:bd:57:28:57:bb:bf:9e: be:af:50:2a:62:49:a6:f8:6d:57:1f:19:b6:a7:8b:3a:64:ab: 7c:2c:95:b3:b2:60:c3:a0:78:af:aa:2b:a9:8f:83:0a:f4:80: f0:80:1f:68:88:0e:9a:f9:3d:46:17:d9:1f:d1:5f:a7:d0:ac: 8b:bd:ca:c2:4b:a7:e1:97:8a:f1:26:0c:03:a4:97:8b:7b:2b: 80:32:cf:93:55:63:1c:40:97:04:b4:b8:61:1a:d0:15:62:e0: 5a:7d:b1:eb:4f:6a:df:03:48:aa:82:9b:1f:e2:82:d0:4f:de: 4b:61:77:e1:d8:8a:81:8e:a5:e5:f5:3a:70:6c:9e:46:6b:ac: 0e:36:1d:db:64:d8:00:34:9f:67:4b:69:32:6c:c7:84:bd:18: 31:db:3f:c8:73:00:ea:2b:93:33:10:65:5b:e7:82:34:c7:69: 06:cc:82:4a:4e:38:fd:b6:86:3b:26:5c:09:81:e8:48:e9:2f: b1:24:27:79:bf:44:a6:31:0e:94:ca:fe:76:53:25:69:a7:bc: a8:97:5c:c7:19:d7:ce:07:9b:c1:17:31:51:1f:66:19:ef:13: 04:1d:5c:d1:4e:fe:8a:85:dd:ff:fd:0e:13:7e:f0:f5:8d:b2: 5d:f9:0b:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUxMDE4MTc1MjI1WhcNMjUxMDI1MTc1MjI1WjAYMRYwFAYD VQQDEw02OGYzZDNkYS1mM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZtUDQTXI/WjKFFkjDyeeLQhJcZkKlxArTLvG1ooZZTqIwYCGg3Eklr9IASu axTyaQS7O1BPwjcRLPFq0TaxuGKJrAKltjj+5/+Yd2vVBOk5LMN097mpLM2wOJ09 8/8MFpkxqXUqEkZSQ+e5yMaI/UOavTbknkDAl9ElfrTT2kb3h0A2e289rc8WEo8P o29JcuTAZenqTdRKhc69slbe5KjEsYbO0JAOPexjOf6mrjcaleXW6tKm7kZvCf5k FFKDgHGWYOo9PZ0gKlhvQK/WoSDYAv5glqQ8mXUkTV72s37YUDhwWA2i47mj6Rxu NlPlQ7VSGRRIITmYDq3S0IxL2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFHzQMf c/IV5hwQOFerEfYyznMHMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKUFgVxDPu8QGHxr1XKFe7v56+r1AqYkmm+G1XHxm2p4s6ZKt8LJWz smDDoHivqiupj4MK9IDwgB9oiA6a+T1GF9kf0V+n0KyLvcrCS6fhl4rxJgwDpJeL eyuAMs+TVWMcQJcEtLhhGtAVYuBafbHrT2rfA0iqgpsf4oLQT95LYXfh2IqBjqXl 9TpwbJ5Ga6wONh3bZNgANJ9nS2kybMeEvRgx2z/IcwDqK5MzEGVb54I0x2kGzIJK Tjj9toY7JlwJgehI6S+xJCd5v0SmMQ6Uyv52UyVpp7yol1zHGdfOB5vBFzFRH2YZ 7xMEHVzRTv6Khd3//Q4TfvD1jbJd+Qvr -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:16 2025 by rpki-client