$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft File: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json) Hash identifier: rE8MCsTgwlwpcjpyQzc/nH0csLiZpAG22yn0IOUHQp0= Subject key identifier: 72:51:C8:A1:F2:6D:B6:8D:AF:7F:1F:7E:72:18:54:7E:DF:F0:23:54 Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 Certificate issuer: /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft Manifest number: B3 Signing time: Sun 19 Oct 2025 09:19:03 +0000 Manifest this update: Sun 19 Oct 2025 09:19:02 +0000 Manifest next update: Sun 26 Oct 2025 09:19:02 +0000 Files and hashes: 1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: o4wuwJKk7miGzoCN5tFmmMXgZwZ1s0UCQU0z+yyL3Vk=) 2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Validity Not Before: Oct 19 09:19:02 2025 GMT Not After : Oct 26 09:19:02 2025 GMT Subject: CN=68f4ad06-ecff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:59:9a:a7:7a:53:6a:9e:a2:e1:2e:e2:f9: d1:f8:0b:3c:89:84:6d:c6:37:58:53:0f:b2:e8:e4: ed:ef:4c:2d:39:9e:5d:97:84:da:f1:e4:fc:11:39: bf:06:87:9d:4e:09:89:e2:b8:64:41:c2:2d:5d:a8: 7a:0a:3b:9b:3e:89:ce:e9:82:d3:44:7a:e7:45:f7: fe:74:c7:41:3d:7d:dd:c8:83:47:69:23:20:f0:03: 63:cf:dd:42:a5:cb:0a:4f:df:ef:8c:e6:b3:2e:c0: 9b:fb:1c:b7:06:8d:c5:18:ac:fc:0b:9e:d9:7b:3f: 3c:a3:e4:24:f0:82:ca:55:62:48:d2:4f:e0:a2:b9: 22:07:49:e2:d6:14:d0:c0:cf:e8:b6:50:5a:bb:9a: 85:e3:3e:ae:5d:9e:9b:ae:f7:eb:66:d5:64:69:9c: 40:8f:95:da:4c:f2:bd:9f:8c:b8:0b:34:0d:ef:ad: be:11:2b:10:e3:9c:9a:e9:54:4e:7f:8a:4a:b4:00: fb:05:1e:d8:f0:e0:0d:00:ce:e6:aa:44:28:e1:28: f1:e7:70:c3:a3:59:19:58:1f:80:a3:7c:27:74:c7: ef:36:90:39:3a:22:e1:27:cc:9b:5e:cf:37:d3:67: 8c:00:9c:be:40:2a:e2:a0:9f:33:bb:88:12:08:94: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:51:C8:A1:F2:6D:B6:8D:AF:7F:1F:7E:72:18:54:7E:DF:F0:23:54 X509v3 Authority Key Identifier: keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e2:c6:5e:86:00:5c:20:83:be:20:2c:2f:7f:f3:e1:a9:80: 69:84:07:3c:07:0b:ca:a3:f1:d1:40:9a:f6:6c:c0:0c:08:ab: 2c:6a:07:94:b4:7c:0b:f2:f4:5a:71:4c:5e:89:68:db:90:e6: 43:f3:02:ca:fd:7c:cc:63:fb:88:d3:19:87:20:c0:e3:3f:9b: 2e:69:26:07:ef:0f:ea:ef:ed:4c:d5:e7:53:3f:2e:71:82:8e: 24:1c:45:02:3c:b4:e8:fc:37:95:51:df:4f:fa:76:7d:b2:ea: f9:11:74:b0:3d:f8:79:6b:ea:15:cd:78:9b:e6:fd:5b:3f:3b: 3a:b7:83:a4:3f:14:b5:83:98:23:cc:8d:85:79:5c:9e:8f:32: c4:47:3a:10:46:ef:b0:0f:8e:1e:2d:b1:9e:5e:f5:fe:84:89: 6b:58:fe:1a:53:35:9d:01:70:84:7d:6e:69:09:cf:b0:0d:f9: ba:26:cb:24:0a:bc:0b:3f:7e:76:7f:4a:c5:3e:03:a7:d8:bb: 6e:99:a4:eb:db:0d:b2:bb:ed:8a:fd:1b:21:a6:a6:43:23:55: ed:1c:4f:e5:84:02:8f:c0:65:ac:4e:85:f6:94:bc:e7:de:9f: 90:69:15:39:ee:18:e0:97:aa:81:cf:b4:a2:ae:af:5a:7a:64: 93:8c:61:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyNUQxMTAvBgNVBAUTKEI4OEJENUQ1QjlCODY0NkQ4RTQzRTY0QzEyN0I4NDgx QTQxOEM2MzYwHhcNMjUxMDE5MDkxOTAyWhcNMjUxMDI2MDkxOTAyWjAYMRYwFAYD VQQDEw02OGY0YWQwNi1lY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/dZmqd6U2qeouEu4vnR+As8iYRtxjdYUw+y6OTt70wtOZ5dl4Ta8eT8ETm/ BoedTgmJ4rhkQcItXah6CjubPonO6YLTRHrnRff+dMdBPX3dyINHaSMg8ANjz91C pcsKT9/vjOazLsCb+xy3Bo3FGKz8C57Zez88o+Qk8ILKVWJI0k/gorkiB0ni1hTQ wM/otlBau5qF4z6uXZ6brvfrZtVkaZxAj5XaTPK9n4y4CzQN762+ESsQ45ya6VRO f4pKtAD7BR7Y8OANAM7mqkQo4Sjx53DDo1kZWB+Ao3wndMfvNpA5OiLhJ8ybXs83 02eMAJy+QCrioJ8zu4gSCJQVSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJRyKHy bbaNr38ffnIYVH7f8CNUMB8GA1UdIwQYMBaAFLiL1dW5uGRtjkPmTBJ7hIGkGMY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODI1RC9FNThCMjI2OEE0 NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi91SXZWMWJtNFpHMk9RLVpNRW51RWdhUVl4 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJdlYxYm00WkcyT1EtWk1FbnVFZ2FRWXhqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODI1RC9FNThCMjI2OEE0NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi91SXZWMWJtNFpH Mk9RLVpNRW51RWdhUVl4alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl4sZehgBcIIO+ICwvf/PhqYBphAc8BwvKo/HRQJr2bMAMCKssageU tHwL8vRacUxeiWjbkOZD8wLK/XzMY/uI0xmHIMDjP5suaSYH7w/q7+1M1edTPy5x go4kHEUCPLTo/DeVUd9P+nZ9sur5EXSwPfh5a+oVzXib5v1bPzs6t4OkPxS1g5gj zI2FeVyejzLERzoQRu+wD44eLbGeXvX+hIlrWP4aUzWdAXCEfW5pCc+wDfm6Jssk CrwLP352f0rFPgOn2LtumaTr2w2yu+2K/RshpqZDI1XtHE/lhAKPwGWsToX2lLzn 3p+QaRU57hjgl6qBz7Sirq9aemSTjGEH -----END CERTIFICATE-----Generated at Mon Oct 20 05:50:03 2025 by rpki-client