$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json) Hash identifier: 7ZCynFAC+yAukwMW4oI7cHq+Ko+2T3kkPx7YTpj4sLY= Subject key identifier: C4:33:99:FF:E2:28:28:61:5D:40:69:DA:FA:BA:04:39:19:46:CA:6A Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft Manifest number: 1B Signing time: Sun 19 Oct 2025 11:23:30 +0000 Manifest this update: Sun 19 Oct 2025 11:23:30 +0000 Manifest next update: Sun 26 Oct 2025 11:23:30 +0000 Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: jv0rwfN1dmxw16KQ3/BroZpZZsCMTvO3sOK7XImsBUA=) 2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: zLa9BDHDG7v+U27ctD90rRBbm+JhYqq8GC5uRJX34CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Validity Not Before: Oct 19 11:23:30 2025 GMT Not After : Oct 26 11:23:30 2025 GMT Subject: CN=68f4ca32-4cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:67:10:36:f5:93:98:bf:47:38:08:1f:43: 6c:1f:59:99:e0:72:0c:44:1b:1b:41:77:54:82:70: e1:c6:5a:f7:05:37:59:73:b4:95:d2:2d:49:e7:e0: fc:28:6d:38:84:04:34:27:72:c9:cc:ff:2c:dc:c3: f7:c6:93:50:85:1e:92:29:c3:e4:88:a9:da:07:9a: dd:0d:6f:f2:a8:63:28:9c:b6:e9:98:8b:94:73:e5: 2a:02:09:c7:d4:3d:f3:d5:ee:e3:f8:d0:35:9d:73: 1c:9b:f6:a5:11:16:31:70:c5:ff:ab:93:65:b8:97: eb:0a:33:8d:e1:f8:e7:b2:55:c2:94:0d:2d:cf:87: 4c:87:09:35:64:a7:b5:96:55:ed:80:57:68:b5:a0: 0e:d0:99:51:73:25:73:8f:4e:22:71:d9:e0:f0:63: e1:46:00:08:fe:1b:ba:ed:46:3b:a4:d0:be:2b:aa: 6b:d6:c5:2a:17:8b:57:fa:11:39:14:ec:61:19:84: dc:09:2a:ad:52:59:7d:5c:87:1d:db:ef:79:13:81: 37:7b:e5:d0:5d:8b:c6:ee:2d:a2:79:9b:62:3a:c2: aa:02:ff:c7:d9:5e:f6:a0:7b:84:c4:b1:91:3e:28: a3:2a:39:40:e6:c4:33:5e:d4:e1:f9:2a:ba:87:88: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:33:99:FF:E2:28:28:61:5D:40:69:DA:FA:BA:04:39:19:46:CA:6A X509v3 Authority Key Identifier: keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f1:96:d6:8f:e4:23:5b:af:c1:09:a9:19:9c:16:51:77:31: 74:0e:5a:b8:b4:ed:18:e3:85:69:c7:5b:5f:ed:2c:1c:d6:93: 1b:48:45:b4:92:e5:a3:a0:4a:a7:e4:69:67:c2:0a:59:e4:c9: a5:f1:75:97:fb:5a:74:e7:ed:07:b5:43:f6:4f:c1:c2:57:83: db:f4:d5:66:b0:82:b8:d6:53:39:79:d9:c1:86:35:13:8d:5c: 5d:63:e2:46:53:14:72:50:c0:10:ff:15:37:cd:6f:43:2d:dc: 42:81:f5:c2:aa:44:3d:20:9e:d3:ba:35:10:9f:c6:1a:78:1f: 90:f1:78:08:ad:1f:77:eb:b5:36:36:21:5a:5b:a1:6d:97:6b: 37:7a:ac:09:17:80:27:28:60:52:98:7c:b5:0e:1c:f2:bf:57: 3e:92:75:8d:c8:da:0a:55:bc:46:fd:11:14:78:c1:3f:ce:18: 1b:94:c5:59:0a:94:64:94:41:65:12:3a:76:fd:89:6d:32:4b: 6a:f6:61:00:05:50:27:6e:bd:f7:86:e4:43:1d:22:8c:3d:38: 7a:8a:1e:58:3f:4c:d1:bc:08:bd:05:9c:8f:eb:60:40:30:69: 33:55:e7:d9:56:eb:3a:52:21:34:e8:41:b7:73:a5:e7:0b:55: 91:e3:6d:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFDRDExMC8GA1UEBRMoNTMyRTcwNTRDNDcxQkZGMkVEN0E2QTE4OEVEMzczNjM2 NUU0NjA4QTAeFw0yNTEwMTkxMTIzMzBaFw0yNTEwMjYxMTIzMzBaMBgxFjAUBgNV BAMTDTY4ZjRjYTMyLTRjY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsaWcQNvWTmL9HOAgfQ2wfWZngcgxEGxtBd1SCcOHGWvcFN1lztJXSLUnn4Pwo bTiEBDQncsnM/yzcw/fGk1CFHpIpw+SIqdoHmt0Nb/KoYyictumYi5Rz5SoCCcfU PfPV7uP40DWdcxyb9qURFjFwxf+rk2W4l+sKM43h+OeyVcKUDS3Ph0yHCTVkp7WW Ve2AV2i1oA7QmVFzJXOPTiJx2eDwY+FGAAj+G7rtRjuk0L4rqmvWxSoXi1f6ETkU 7GEZhNwJKq1SWX1chx3b73kTgTd75dBdi8buLaJ5m2I6wqoC/8fZXvage4TEsZE+ KKMqOUDmxDNe1OH5KrqHiMFZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxDOZ/+Io KGFdQGna+roEORlGymowHwYDVR0jBBgwFoAUUy5wVMRxv/LtemoYjtNzY2XkYIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QUNEL0Q4MzVBOTBFODRB RjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXk1d1ZNUnh2X0x0ZW1vWWp0TnpZMlhrWUlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QUNEL0Q4MzVBOTBFODRBRjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9M dGVtb1lqdE56WTJYa1lJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAvxltaP5CNbr8EJqRmcFlF3MXQOWri07RjjhWnHW1/tLBzWkxtIRbSS 5aOgSqfkaWfCClnkyaXxdZf7WnTn7Qe1Q/ZPwcJXg9v01WawgrjWUzl52cGGNRON XF1j4kZTFHJQwBD/FTfNb0Mt3EKB9cKqRD0gntO6NRCfxhp4H5DxeAitH3frtTY2 IVpboW2Xazd6rAkXgCcoYFKYfLUOHPK/Vz6SdY3I2gpVvEb9ERR4wT/OGBuUxVkK lGSUQWUSOnb9iW0yS2r2YQAFUCduvfeG5EMdIow9OHqKHlg/TNG8CL0FnI/rYEAw aTNV59lW6zpSITToQbdzpecLVZHjbXg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:42 2025 by rpki-client