$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json) Hash identifier: zp6YQp13ohxD9z0O0Pj6anmnvJ1rpZ5alrKINHjrmkI= Subject key identifier: AB:5A:DA:09:A6:44:CC:3C:23:76:E4:73:3A:72:AA:97:E2:14:E4:FB Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft Manifest number: 0138 Signing time: Sun 19 Oct 2025 07:17:51 +0000 Manifest this update: Sun 19 Oct 2025 07:17:50 +0000 Manifest next update: Sun 26 Oct 2025 07:17:50 +0000 Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: Gqd0DL+NCoz0rkhqbYqpK3c7oqvvAJL83mgi83LBleg=) 2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: GLQc94rusVtQbATmFzKX5DyXm0E80+RpBsTaqBZ5TIc=) 3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: g+h2X039YfWFdq3nneNF8fX2UZhaS8/1cDtSjJwB84Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Validity Not Before: Oct 19 07:17:50 2025 GMT Not After : Oct 26 07:17:50 2025 GMT Subject: CN=68f4909e-60da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:4c:97:52:91:29:ac:29:6b:7e:fc:d6:fb: b9:0b:8b:a2:15:d6:b7:0e:35:ac:97:65:d3:83:e2: 41:36:32:cc:0b:47:20:6c:0d:fe:f4:1e:6a:93:2d: d0:4c:aa:8c:8e:ff:79:d2:d5:b0:6f:73:3d:38:da: 56:e0:ed:18:8c:36:de:bb:12:fb:4f:93:85:dc:cc: 6b:95:42:27:5c:76:1f:7f:4c:8b:4a:ee:84:86:52: f1:72:d9:ef:8d:81:36:dc:ba:b2:81:1f:ca:b6:07: 09:b4:b2:7e:64:b7:95:a3:be:78:15:0c:f5:f5:0e: 0e:05:e8:a7:8c:14:2d:e8:c1:7e:45:9c:ee:2a:cf: 3d:7c:af:04:43:a6:ec:fd:18:32:4b:b1:9c:fa:24: b2:8f:ca:d5:de:79:00:f1:b5:39:c4:f4:c6:4b:9e: 6a:c6:a9:e8:f0:93:22:97:92:0c:7e:c9:06:d7:a1: b6:58:22:94:e7:fd:07:15:cf:b5:75:9b:4b:00:20: 38:d0:41:54:37:4e:80:b2:d8:96:a5:e1:05:a0:d8: 7e:f4:b3:30:fc:8f:d1:bf:74:77:d5:37:c2:89:10: 09:de:c8:95:b3:ce:7f:9b:26:1d:91:45:02:4d:8a: d0:e8:bd:04:f1:97:b1:3d:90:a8:b5:c4:de:25:fc: 3f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5A:DA:09:A6:44:CC:3C:23:76:E4:73:3A:72:AA:97:E2:14:E4:FB X509v3 Authority Key Identifier: keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:50:b8:fa:e0:1e:98:d3:45:1e:02:3c:c3:35:00:26:eb:d4: ce:80:3c:e2:72:d7:d0:df:63:d8:40:26:14:c6:74:c3:15:bb: d3:72:44:77:39:d5:1b:8b:f9:7b:12:75:be:83:b9:d4:db:71: 0b:af:a4:f5:e9:d0:b2:f6:e8:6c:f8:b2:85:c1:1d:fa:3c:a3: 3b:b2:b7:29:7b:a4:d5:e9:3d:3c:3a:af:df:72:98:ca:90:d7: 75:e0:f5:1b:d7:e6:41:76:1c:5e:ac:d9:e7:01:b6:d0:7c:bc: 9d:48:7a:6e:96:65:c0:d0:d5:ca:22:e4:93:a0:71:f7:ca:92: da:cf:39:09:16:6a:22:94:ef:12:ce:e3:ea:c8:9a:f0:96:71: 9e:f7:a3:ad:4f:20:72:ad:ab:31:ac:51:64:58:90:e5:13:d8: 1d:0f:08:07:d6:87:13:2e:cb:20:af:55:67:1b:18:3c:0b:7e: 75:e7:b9:1b:62:52:60:2e:d8:fe:5f:55:92:3b:06:89:7d:74: 4e:d5:73:a8:cf:06:52:a6:19:48:53:3e:b7:0e:8e:ad:37:2e: 77:10:a9:a4:a4:51:a1:8c:4e:28:ed:28:9d:18:8a:f7:1e:af: 6f:f5:54:e0:41:fc:92:4c:07:76:61:25:f8:a4:1e:6a:f8:f2: f5:15:9b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDQ3RjUwQzk1OEJGOUNGNTQ1QzYwMUFERUIwNEY4QTA1 RTEwMUQ5QTUwHhcNMjUxMDE5MDcxNzUwWhcNMjUxMDI2MDcxNzUwWjAYMRYwFAYD VQQDEw02OGY0OTA5ZS02MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfZMl1KRKawpa3781vu5C4uiFda3DjWsl2XTg+JBNjLMC0cgbA3+9B5qky3Q TKqMjv950tWwb3M9ONpW4O0YjDbeuxL7T5OF3MxrlUInXHYff0yLSu6EhlLxctnv jYE23LqygR/KtgcJtLJ+ZLeVo754FQz19Q4OBeinjBQt6MF+RZzuKs89fK8EQ6bs /RgyS7Gc+iSyj8rV3nkA8bU5xPTGS55qxqno8JMil5IMfskG16G2WCKU5/0HFc+1 dZtLACA40EFUN06AstiWpeEFoNh+9LMw/I/Rv3R31TfCiRAJ3siVs85/myYdkUUC TYrQ6L0E8ZexPZCotcTeJfw/pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKta2gmm RMw8I3bkczpyqpfiFOT7MB8GA1UdIwQYMBaAFEf1DJWL+c9UXGAa3rBPigXhAdml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC84RjUyNDg4RUQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXoxUmNZQnJlc0UtS0JlRUIy YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JfVU1sWXY1ejFSY1lCcmVzRS1LQmVFQjJhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC84RjUyNDg4RUQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXox UmNZQnJlc0UtS0JlRUIyYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4ULj64B6Y00UeAjzDNQAm69TOgDzictfQ32PYQCYUxnTDFbvTckR3 OdUbi/l7EnW+g7nU23ELr6T16dCy9uhs+LKFwR36PKM7srcpe6TV6T08Oq/fcpjK kNd14PUb1+ZBdhxerNnnAbbQfLydSHpulmXA0NXKIuSToHH3ypLazzkJFmoilO8S zuPqyJrwlnGe96OtTyByrasxrFFkWJDlE9gdDwgH1ocTLssgr1VnGxg8C35157kb YlJgLtj+X1WSOwaJfXRO1XOozwZSphlIUz63Do6tNy53EKmkpFGhjE4o7SidGIr3 Hq9v9VTgQfySTAd2YSX4pB5q+PL1FZvQ -----END CERTIFICATE-----Generated at Mon Oct 20 22:44:18 2025 by rpki-client