$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft File: uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json) Hash identifier: IbcGyfisznZ3wMGzOzDsrRZJczMkRcGcxiEWxwNf/oE= Subject key identifier: FD:54:C4:CF:97:D5:FF:F4:A4:9C:F8:24:FF:F3:48:A7:06:AA:CB:BF Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D Certificate issuer: /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft Manifest number: 06AD Signing time: Sat 18 Oct 2025 23:41:41 +0000 Manifest this update: Sat 18 Oct 2025 23:41:41 +0000 Manifest next update: Sat 25 Oct 2025 23:41:40 +0000 Files and hashes: 1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: 1Lnr+2BTn1XmH326RDFgelXDbqNzNvvheDYXcd/dI0Y=) 2: 179D126A80BB11EB8827C40AC4F9AE02.roa (hash: PFHRoE4gpt/1Wvai15N8aRrkyA+0he7HHF21tuqRgXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D5A2, serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Validity Not Before: Oct 18 23:41:41 2025 GMT Not After : Oct 25 23:41:40 2025 GMT Subject: CN=68f425b5-c9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:7c:27:76:62:d1:40:7a:1b:bb:ce:20:4c: 79:77:83:cb:0b:f3:98:28:9f:7c:ad:2b:05:29:e3: 64:3c:9e:92:69:c0:04:c7:e1:22:73:1e:ea:4c:c4: b5:82:82:81:fb:cd:19:24:2d:d3:6f:17:1b:88:8d: cf:3a:d9:56:9d:5c:52:3f:f3:a0:1a:b1:f6:b1:bf: 56:52:a9:bc:5e:fd:ee:31:f9:e7:4f:9e:9b:4f:6c: 3b:55:f7:fb:23:90:d9:c5:aa:e5:6a:0f:cc:47:1a: 54:35:06:a6:60:17:49:51:2a:a6:1a:4e:65:51:f2: ea:c4:d8:27:29:43:39:a8:49:0a:4d:4f:e7:e0:8f: 76:b9:86:e3:b3:64:e9:31:21:3f:a1:d2:55:0d:08: 29:ff:1c:2b:62:2a:c6:d1:4d:48:6e:78:f6:fa:45: d5:e7:e9:d8:0e:47:e3:25:7f:da:fb:8b:df:1c:b5: 4c:9a:cd:c8:6e:10:61:a0:bf:2f:60:4e:be:6a:50: 59:26:80:b1:2f:51:41:b4:40:7f:2e:54:57:56:97: 7e:da:a7:7e:63:59:0c:48:d2:44:8d:00:75:9c:64: 29:4f:96:4b:33:c7:47:c1:50:73:6c:b1:0f:d4:8f: f1:27:02:1b:ca:2e:50:3b:3e:01:0b:d4:68:ee:7a: 2a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:54:C4:CF:97:D5:FF:F4:A4:9C:F8:24:FF:F3:48:A7:06:AA:CB:BF X509v3 Authority Key Identifier: keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3b:b1:65:66:7a:42:c2:41:97:7e:9d:5a:00:6a:f6:7f:23: 86:dc:a3:67:a2:b1:53:b5:f3:ee:0f:e6:23:ad:9d:9f:e1:48: 4a:b7:d8:00:35:e5:a6:63:e3:0b:b1:a9:af:c7:49:87:fd:92: d0:ea:aa:fa:4e:8d:5f:cf:36:de:90:38:ab:1f:b9:83:52:af: ff:4c:59:dd:b0:c2:61:c9:57:90:72:d7:1d:9a:ba:0e:4f:10: 12:2c:47:dd:e1:ff:25:f4:82:20:b1:36:89:52:51:df:9e:b5: b4:91:81:dc:ec:3b:8a:a7:91:8d:72:e3:9e:b5:d4:e1:4a:19: c4:d6:b1:3a:04:71:4a:be:30:6c:15:33:c9:f6:25:7f:8f:f7: a8:75:09:db:71:e1:78:96:09:db:7b:fe:f2:bc:7a:71:0b:b2: ad:47:34:d7:25:ba:d9:69:1a:14:3a:91:e8:05:51:51:09:68: fb:01:c1:ad:f9:b9:76:f9:b7:37:cc:fc:a0:97:75:ba:4e:af: 7a:dd:8f:47:87:60:22:53:d9:a6:50:05:52:f8:f0:03:6c:83: a6:c9:7a:b7:48:ef:89:55:72:30:a7:8f:83:f6:c9:2b:06:4d: ff:11:d2:25:1a:98:a5:d3:8d:70:52:59:8a:f1:7d:59:a5:4b: 2d:24:5f:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ1QTIxMTAvBgNVBAUTKEI5RkI0MjIzRUIwM0JBMEVFNkNFMDdCNDY2MDIxN0FG QUY3MTZENUQwHhcNMjUxMDE4MjM0MTQxWhcNMjUxMDI1MjM0MTQwWjAYMRYwFAYD VQQDEw02OGY0MjViNS1jOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCN8J3Zi0UB6G7vOIEx5d4PLC/OYKJ98rSsFKeNkPJ6SacAEx+Eicx7qTMS1 goKB+80ZJC3TbxcbiI3POtlWnVxSP/OgGrH2sb9WUqm8Xv3uMfnnT56bT2w7Vff7 I5DZxarlag/MRxpUNQamYBdJUSqmGk5lUfLqxNgnKUM5qEkKTU/n4I92uYbjs2Tp MSE/odJVDQgp/xwrYirG0U1Ibnj2+kXV5+nYDkfjJX/a+4vfHLVMms3IbhBhoL8v YE6+alBZJoCxL1FBtEB/LlRXVpd+2qd+Y1kMSNJEjQB1nGQpT5ZLM8dHwVBzbLEP 1I/xJwIbyi5QOz4BC9Ro7noqIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1UxM+X 1f/0pJz4JP/zSKcGqsu/MB8GA1UdIwQYMBaAFLn7QiPrA7oO5s4HtGYCF6+vcW1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDVBMi9DMjFBNTM4Njgw QjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVnN216Z2UwWmdJWHI2OXhi VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmdENJLXNEdWc3bXpnZTBaZ0lYcjY5eGJWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDVBMi9DMjFBNTM4NjgwQjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVn N216Z2UwWmdJWHI2OXhiVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/O7FlZnpCwkGXfp1aAGr2fyOG3KNnorFTtfPuD+YjrZ2f4UhKt9gA NeWmY+MLsamvx0mH/ZLQ6qr6To1fzzbekDirH7mDUq//TFndsMJhyVeQctcdmroO TxASLEfd4f8l9IIgsTaJUlHfnrW0kYHc7DuKp5GNcuOetdThShnE1rE6BHFKvjBs FTPJ9iV/j/eodQnbceF4lgnbe/7yvHpxC7KtRzTXJbrZaRoUOpHoBVFRCWj7AcGt +bl2+bc3zPygl3W6Tq963Y9Hh2AiU9mmUAVS+PADbIOmyXq3SO+JVXIwp4+D9skr Bk3/EdIlGpil041wUlmK8X1ZpUstJF9u -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:35 2025 by rpki-client