$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft File: Uaqsf29Y90cHLIfsL0h47xy49M4.mft (raw, json) Hash identifier: SPBazsJr/ddqIbhiD/VAF6AO6LQFdgUm+yjGHQfdVn8= Subject key identifier: BA:06:E0:79:D3:45:76:C7:33:C3:85:4F:37:13:C2:B2:3E:1F:28:A9 Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE Certificate issuer: /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE Certificate serial: 126F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft Manifest number: 125B Signing time: Sat 18 Oct 2025 17:38:17 +0000 Manifest this update: Sat 18 Oct 2025 17:38:17 +0000 Manifest next update: Sat 25 Oct 2025 17:38:17 +0000 Files and hashes: 1: Uaqsf29Y90cHLIfsL0h47xy49M4.crl (hash: FsDEAx2/iTI6mgKmcXPpoNw3mlSpgrlNu9JOf+7j/OQ=) 2: AA47599A985F11EEBA5D186DC4F9AE02.roa (hash: abD2sJSusd+EergprKNOfnX9AY5e5SRUlXGm1ps4L/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4719 (0x126f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE Validity Not Before: Oct 18 17:38:17 2025 GMT Not After : Oct 25 17:38:17 2025 GMT Subject: CN=68f3d089-f9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:44:34:2b:b1:98:7d:ac:20:23:83:f7:bf: 24:78:53:66:af:d5:e3:b7:bf:c9:80:6e:25:9d:3c: 45:60:33:c9:d7:38:bb:7f:3b:6a:20:15:c2:2b:8e: 6c:7b:b8:d8:90:95:e9:f0:13:23:7a:cf:ba:49:39: 94:2b:28:12:69:0d:75:00:47:1a:33:a7:91:49:ee: 53:23:b2:18:12:c3:09:0e:80:44:3f:f7:50:8f:bb: 17:aa:06:32:db:aa:41:3e:04:95:b6:49:60:07:c4: 23:27:e6:90:b3:7d:1d:23:5f:94:36:3e:78:e4:2b: bd:e6:8b:29:80:05:bc:67:3d:54:a2:ed:bb:c4:5d: 0a:be:3b:cd:45:2b:66:08:ca:17:67:98:d5:0f:b8: ee:6d:48:d8:c2:81:63:e9:e7:40:75:79:9e:0b:81: ed:a5:94:68:c6:c7:26:df:84:5d:37:bf:e8:64:d2: 31:fc:0e:8e:d4:db:45:34:fc:84:46:ae:79:c6:ba: 58:ad:8c:8c:91:71:20:1a:fe:ab:6c:ca:0d:30:26: 41:a9:1a:77:a5:b3:52:96:82:8d:e0:5d:bd:28:51: 5c:aa:ab:51:83:98:cc:8a:78:ba:f7:ea:e2:aa:f9: 8b:f0:b6:97:35:a9:be:b6:ad:8f:67:17:2f:e9:3d: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:06:E0:79:D3:45:76:C7:33:C3:85:4F:37:13:C2:B2:3E:1F:28:A9 X509v3 Authority Key Identifier: keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ff:aa:17:5e:ca:bd:b0:a7:bc:f1:44:26:44:12:db:d1:d4: 09:bd:b4:cd:33:bd:fa:88:f7:c5:2f:2e:e7:a4:b1:76:14:8b: 2f:00:82:43:c5:ca:e4:25:07:d4:5b:a2:1d:0d:0f:8a:d7:89: f9:74:0e:50:69:a1:33:cc:17:d8:e9:45:c5:31:bd:6e:ae:e1: dd:c4:aa:0e:68:87:db:32:ab:94:31:a8:cc:19:fd:69:0a:9c: 16:8d:8b:25:a2:17:85:78:99:49:85:dd:27:1d:c3:4a:1e:c0: d1:cc:40:06:95:2a:7b:18:9e:30:0a:ac:be:31:23:68:3e:f3: e4:4d:4f:1f:b3:f5:dc:29:e7:f6:a7:53:c3:81:75:aa:30:30: 6a:ad:41:d0:9e:fa:0c:e9:59:6e:20:3f:ec:12:07:b9:9c:b1: 22:6e:10:83:41:9a:60:07:aa:cb:aa:a1:ab:6f:a3:ef:02:b6: b2:bb:ce:ab:b4:9b:94:0b:3c:f7:b1:68:64:66:b0:8f:c9:ed: 58:db:97:04:53:96:09:8e:c6:49:7b:91:15:b0:ba:e5:bc:80: 36:ca:6c:74:dc:27:84:c1:62:38:57:c8:ae:c3:6a:0f:d0:c9: cb:62:26:ec:cf:8e:e5:00:e0:78:3d:e8:9e:1b:59:32:fe:c2: ea:a5:fa:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDUxQUFBQzdGNkY1OEY3NDcwNzJDODdFQzJGNDg3OEVG MUNCOEY0Q0UwHhcNMjUxMDE4MTczODE3WhcNMjUxMDI1MTczODE3WjAYMRYwFAYD VQQDEw02OGYzZDA4OS1mOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuotENCuxmH2sICOD978keFNmr9Xjt7/JgG4lnTxFYDPJ1zi7fztqIBXCK45s e7jYkJXp8BMjes+6STmUKygSaQ11AEcaM6eRSe5TI7IYEsMJDoBEP/dQj7sXqgYy 26pBPgSVtklgB8QjJ+aQs30dI1+UNj545Cu95ospgAW8Zz1Uou27xF0KvjvNRStm CMoXZ5jVD7jubUjYwoFj6edAdXmeC4HtpZRoxscm34RdN7/oZNIx/A6O1NtFNPyE Rq55xrpYrYyMkXEgGv6rbMoNMCZBqRp3pbNSloKN4F29KFFcqqtRg5jMini69+ri qvmL8LaXNam+tq2PZxcv6T0fzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoG4HnT RXbHM8OFTzcTwrI+HyipMB8GA1UdIwQYMBaAFFGqrH9vWPdHByyH7C9IeO8cuPTO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9GODU4MzQ0RUUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9VYXFzZjI5WTkwY0hMSWZzTDBoNDd4eTQ5 TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhcXNmMjlZOTBjSExJZnNMMGg0N3h5NDlNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9GODU4MzQ0RUUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9VYXFzZjI5WTkw Y0hMSWZzTDBoNDd4eTQ5TTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC/6oXXsq9sKe88UQmRBLb0dQJvbTNM736iPfFLy7npLF2FIsvAIJD xcrkJQfUW6IdDQ+K14n5dA5QaaEzzBfY6UXFMb1uruHdxKoOaIfbMquUMajMGf1p CpwWjYsloheFeJlJhd0nHcNKHsDRzEAGlSp7GJ4wCqy+MSNoPvPkTU8fs/XcKef2 p1PDgXWqMDBqrUHQnvoM6VluID/sEge5nLEibhCDQZpgB6rLqqGrb6PvArayu86r tJuUCzz3sWhkZrCPye1Y25cEU5YJjsZJe5EVsLrlvIA2ymx03CeEwWI4V8iuw2oP 0MnLYibsz47lAOB4PeieG1ky/sLqpfp0 -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:49 2025 by rpki-client