$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft File: UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json) Hash identifier: yWE9OO5gw/u55G3qTnogT7J0JhEVkHjg7Y/v7dlpGeA= Subject key identifier: 86:9F:40:24:30:90:A8:8D:D1:B8:21:15:FB:8B:20:58:D9:B1:DC:AA Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft Manifest number: 012C Signing time: Sun 19 Oct 2025 07:27:30 +0000 Manifest this update: Sun 19 Oct 2025 07:27:30 +0000 Manifest next update: Sun 26 Oct 2025 07:27:30 +0000 Files and hashes: 1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: gGVaiCGT5u8cLZJEGSWy4/jVYoTkSSRP0YNhnG1sWh0=) 2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: 0mdd1hPCY77vgsAR82vZE3qWvhrgXofs3UYJMwrKnGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Validity Not Before: Oct 19 07:27:30 2025 GMT Not After : Oct 26 07:27:30 2025 GMT Subject: CN=68f492e2-4c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:f3:66:ef:32:10:b3:e6:59:df:1c:d0:c3: 02:e8:97:54:79:89:58:7b:e6:05:61:2b:00:c7:c7: cb:4d:d8:42:bb:68:95:bf:fe:75:6c:02:44:eb:7e: 31:65:af:d4:0f:f8:be:1b:a1:da:70:de:9e:c9:70: 14:cf:5f:6d:b6:f8:df:f4:51:ae:38:50:f8:2c:ba: fc:79:89:39:84:5e:74:32:79:67:46:e9:47:57:4a: b8:36:f9:b0:88:8e:79:2d:de:e9:c6:34:ab:c5:8b: c9:45:5e:ed:ba:14:16:73:c4:4f:a7:f2:32:fa:52: e5:f9:31:3d:31:d7:3c:c3:65:e5:b4:de:5b:0d:2b: 03:28:31:a1:dd:aa:8a:20:89:37:e6:c0:6a:f8:d2: c0:87:4d:ea:9c:2b:0a:69:29:b0:5c:9e:52:43:9d: e1:1d:0b:42:b2:d6:ea:6a:3d:e2:26:0d:04:c5:1d: 98:fd:63:c4:e1:a8:82:ff:15:70:70:20:31:34:04: 09:b8:7a:78:54:ad:79:5c:79:3e:c8:54:f2:e2:68: 42:dc:57:a2:40:8d:b0:83:28:1f:58:b1:33:3d:ef: d5:68:2b:4c:36:4a:0a:03:02:a5:e9:80:f1:fb:68: 2e:4d:61:b8:10:d3:83:f7:3a:a0:f8:5a:f3:53:99: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:40:24:30:90:A8:8D:D1:B8:21:15:FB:8B:20:58:D9:B1:DC:AA X509v3 Authority Key Identifier: keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:db:bd:ff:e2:61:fb:df:15:a2:06:90:9c:94:78:72:88:62: d2:c9:2a:a2:7d:75:d9:5c:84:0f:04:5b:d9:42:f2:6a:cf:97: 7c:dd:3d:db:6d:01:cc:59:7d:39:2b:67:35:de:c3:32:f5:7a: 2c:5d:73:5a:3b:f5:c5:15:14:2e:b1:a8:1b:9a:4f:ea:c3:d5: 23:d5:dc:b2:50:ac:86:d2:23:69:b3:00:c0:1e:a9:f5:eb:a0: 90:e8:26:3b:c1:aa:32:c6:4b:f2:65:9e:e2:25:2c:f5:34:54: 3f:10:25:49:72:d8:ea:3b:87:73:9f:97:26:56:7e:3e:a1:f2: 30:f4:7d:aa:dc:9e:1c:64:df:20:b7:bc:d5:bb:f1:76:55:da: 0d:48:f5:c6:60:27:9e:c9:29:c4:7d:06:08:7d:2f:fc:a6:7f: 77:54:25:4e:ba:d7:dc:2a:bc:4e:c6:37:fb:d0:dc:0c:d5:c9: 32:ac:47:55:b8:57:30:71:72:79:7c:0e:78:4e:df:5b:75:e0: 68:d4:16:78:b8:f6:db:0e:40:b9:61:62:95:56:8a:03:42:41: 78:85:dc:71:4a:88:7c:47:81:de:54:3a:fe:58:55:96:e6:83: e2:1d:95:43:a3:01:ea:3b:a8:fe:38:c6:d1:1c:f1:ed:8c:09: 97:59:dc:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFQzQxMTAvBgNVBAUTKDUzMjQwNjVBNjEzRDJEMTA3ODE3OUM2MjE2MzcxQ0ND NkE3NzUwN0EwHhcNMjUxMDE5MDcyNzMwWhcNMjUxMDI2MDcyNzMwWjAYMRYwFAYD VQQDEw02OGY0OTJlMi00YzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNDzZu8yELPmWd8c0MMC6JdUeYlYe+YFYSsAx8fLTdhCu2iVv/51bAJE634x Za/UD/i+G6HacN6eyXAUz19ttvjf9FGuOFD4LLr8eYk5hF50MnlnRulHV0q4Nvmw iI55Ld7pxjSrxYvJRV7tuhQWc8RPp/Iy+lLl+TE9Mdc8w2XltN5bDSsDKDGh3aqK IIk35sBq+NLAh03qnCsKaSmwXJ5SQ53hHQtCstbqaj3iJg0ExR2Y/WPE4aiC/xVw cCAxNAQJuHp4VK15XHk+yFTy4mhC3FeiQI2wgygfWLEzPe/VaCtMNkoKAwKl6YDx +2guTWG4ENOD9zqg+FrzU5kMEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIafQCQw kKiN0bghFfuLIFjZsdyqMB8GA1UdIwQYMBaAFFMkBlphPS0QeBecYhY3HMxqd1B6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEVDNC80NTA2NDc5MEU1 QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxSQjRGNXhpRmpjY3pHcDNV SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5UUdXbUU5TFJCNEY1eGlGamNjekdwM1VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEVDNC80NTA2NDc5MEU1QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxS QjRGNXhpRmpjY3pHcDNVSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP273/4mH73xWiBpCclHhyiGLSySqifXXZXIQPBFvZQvJqz5d83T3b bQHMWX05K2c13sMy9XosXXNaO/XFFRQusagbmk/qw9Uj1dyyUKyG0iNpswDAHqn1 66CQ6CY7waoyxkvyZZ7iJSz1NFQ/ECVJctjqO4dzn5cmVn4+ofIw9H2q3J4cZN8g t7zVu/F2VdoNSPXGYCeeySnEfQYIfS/8pn93VCVOutfcKrxOxjf70NwM1ckyrEdV uFcwcXJ5fA54Tt9bdeBo1BZ4uPbbDkC5YWKVVooDQkF4hdxxSoh8R4HeVDr+WFWW 5oPiHZVDowHqO6j+OMbRHPHtjAmXWdwq -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:57 2025 by rpki-client