$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft File: UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json) Hash identifier: DBotGRm/tlSzxGkTnAklshOE0ne5RAJcSu7gXnWfVPY= Subject key identifier: 1B:E9:B4:B9:BB:B7:68:3E:B3:57:2C:E5:09:75:BE:92:68:42:0D:01 Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Certificate serial: 1014 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft Manifest number: 100B Signing time: Mon 20 Oct 2025 17:55:43 +0000 Manifest this update: Mon 20 Oct 2025 17:55:43 +0000 Manifest next update: Mon 27 Oct 2025 17:55:43 +0000 Files and hashes: 1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: ZhbBKEyWtYHMOLvH2WJvzz8svdIL66TXc/rGkT9Og9Q=) 2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: gPm95k9B9IRjr3SYjHp0eLr7oEtltC4Q30ofIoBPOx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4116 (0x1014) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CA20, serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Validity Not Before: Oct 20 17:55:43 2025 GMT Not After : Oct 27 17:55:43 2025 GMT Subject: CN=68f6779f-d9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:96:6d:f5:41:e3:81:3e:1e:60:29:52:4b:18: 58:a0:c3:ce:8a:ff:39:8a:fe:63:1c:3a:10:15:fd: a1:4b:fb:53:41:ee:6b:72:77:73:72:17:52:4a:47: 05:00:b6:85:b4:e7:b9:14:3f:9b:f3:99:3e:f4:a7: dc:a7:b7:70:17:c0:c2:23:4f:d3:07:18:be:62:8b: fd:71:11:8d:ca:ab:44:cd:3c:2a:0a:95:1e:cd:1a: fb:40:4a:6e:e8:27:2e:ba:9c:b2:ad:78:c4:a4:20: 5f:71:2d:97:1a:19:df:06:68:87:bc:69:17:7d:87: 27:42:91:11:b7:0e:c0:27:87:e3:fe:58:7d:41:8a: bb:59:76:8a:d2:a1:d3:c1:a8:61:bd:4e:32:66:98: 91:18:d9:49:60:6b:f9:e6:b6:fb:78:8a:c3:31:51: 48:c1:96:a7:24:6c:ce:56:25:78:14:ba:a4:72:0b: 82:56:00:8f:f1:00:e6:6b:05:da:4a:0b:3e:a2:76: fb:e0:31:70:f5:ef:d2:43:ce:6a:df:5f:1a:86:27: fb:14:6e:33:81:02:36:f2:47:cb:1b:61:fb:9a:da: cb:b8:98:70:b3:cf:0b:c3:56:6c:78:d7:e6:ab:b3: 39:9d:bc:22:d7:68:2d:ae:ef:d8:f6:d3:88:49:92: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E9:B4:B9:BB:B7:68:3E:B3:57:2C:E5:09:75:BE:92:68:42:0D:01 X509v3 Authority Key Identifier: keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:22:e2:e9:85:b7:bd:4d:0c:79:08:ac:53:06:5a:ad:0b:d9: 13:b6:95:09:0d:e4:a0:e8:39:d1:a5:7b:dd:da:ce:68:7f:25: 4a:02:07:ec:82:64:c9:1b:d4:6f:42:ae:3a:e4:a0:94:bd:5b: 37:d4:5b:c1:30:b9:ab:cc:3b:ea:68:91:6f:b2:f1:d0:14:d8: 29:95:1b:83:62:65:c5:96:53:36:dc:15:a0:34:b8:80:42:c7: 8f:66:78:37:71:aa:98:1c:e2:ee:d0:8e:8c:11:8b:8e:6e:2a: 17:49:c3:c1:e6:c2:59:d9:a4:df:32:75:b5:b3:6b:ea:92:eb: e8:54:9a:5d:2d:a2:0f:0f:72:d1:bd:18:db:6b:99:60:4f:33: 8e:49:07:f2:aa:fe:c5:cb:f0:d1:18:1f:29:39:db:4d:71:f8: 3a:ca:4e:8a:9d:3e:b1:84:9f:fd:50:fd:96:ac:af:d3:e2:50: 67:d8:83:62:9a:af:bf:94:c2:a4:3a:52:2a:7e:d7:82:f8:01: df:73:c9:f9:e3:0b:d7:49:fb:0a:95:7a:9d:bc:5f:62:1f:d5: 1d:73:9f:30:62:4a:2c:8a:42:f3:cc:32:41:95:72:d9:8b:cf: 18:b2:4d:51:58:8f:85:bd:6f:be:39:31:b7:a3:1d:3d:d4:7f: 9c:6e:8b:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNBMjAxMTAvBgNVBAUTKDUyRTE2QTlCODlBRUM4MkEwQ0YwODVDRjVBRTdEQzNF QjA4RjBDOTEwHhcNMjUxMDIwMTc1NTQzWhcNMjUxMDI3MTc1NTQzWjAYMRYwFAYD VQQDEw02OGY2Nzc5Zi1kOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpZt9UHjgT4eYClSSxhYoMPOiv85iv5jHDoQFf2hS/tTQe5rcndzchdSSkcF ALaFtOe5FD+b85k+9Kfcp7dwF8DCI0/TBxi+Yov9cRGNyqtEzTwqCpUezRr7QEpu 6CcuupyyrXjEpCBfcS2XGhnfBmiHvGkXfYcnQpERtw7AJ4fj/lh9QYq7WXaK0qHT wahhvU4yZpiRGNlJYGv55rb7eIrDMVFIwZanJGzOViV4FLqkcguCVgCP8QDmawXa Sgs+onb74DFw9e/SQ85q318ahif7FG4zgQI28kfLG2H7mtrLuJhws88Lw1ZseNfm q7M5nbwi12gtru/Y9tOISZLlpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvptLm7 t2g+s1cs5Ql1vpJoQg0BMB8GA1UdIwQYMBaAFFLhapuJrsgqDPCFz1rn3D6wjwyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0EyMC8yMjY2QUUyMjU1 MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlDb004SVhQV3VmY1ByQ1BE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1RnFtNG11eUNvTThJWFBXdWZjUHJDUERKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0EyMC8yMjY2QUUyMjU1MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlD b004SVhQV3VmY1ByQ1BESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvIuLphbe9TQx5CKxTBlqtC9kTtpUJDeSg6DnRpXvd2s5ofyVKAgfs gmTJG9RvQq465KCUvVs31FvBMLmrzDvqaJFvsvHQFNgplRuDYmXFllM23BWgNLiA QsePZng3caqYHOLu0I6MEYuObioXScPB5sJZ2aTfMnW1s2vqkuvoVJpdLaIPD3LR vRjba5lgTzOOSQfyqv7Fy/DRGB8pOdtNcfg6yk6KnT6xhJ/9UP2WrK/T4lBn2INi mq+/lMKkOlIqfteC+AHfc8n54wvXSfsKlXqdvF9iH9Udc58wYkosikLzzDJBlXLZ i88Ysk1RWI+FvW++OTG3ox091H+cbosD -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:06 2025 by rpki-client