$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: pLLZgFHGF3R+qYRfsbyIpJtRxrvDVPDuwc+GrbGTicg= Subject key identifier: 15:EA:FD:08:3F:16:E0:F0:34:93:D0:F8:2F:65:F8:90:50:E5:75:3C Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 1971 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 1971 Signing time: Mon 20 Oct 2025 16:43:19 +0000 Manifest this update: Mon 20 Oct 2025 16:43:18 +0000 Manifest next update: Mon 27 Oct 2025 16:43:18 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: QX0S+n2Bug6lhgUph6mnzf3UtsR3JYtcAcPt4voj1cQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6513 (0x1971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: Oct 20 16:43:18 2025 GMT Not After : Oct 27 16:43:18 2025 GMT Subject: CN=68f666a6-b523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:6b:95:11:48:ff:1b:71:83:40:5d:12:5c: b7:56:9f:4f:17:14:8a:18:c5:1b:2a:f5:c6:79:71: 7d:1a:da:b9:d2:0b:a0:06:49:ae:24:a5:d4:5d:2b: 2f:0f:71:71:6b:0d:78:e3:46:7c:ce:58:06:c3:f4: 1b:f0:f9:68:51:69:c4:08:a3:77:54:05:1b:4e:df: 3a:49:cb:07:6b:9a:e2:6c:5d:bf:2f:05:2e:10:b7: 14:19:d1:c0:4b:c8:a5:92:75:f9:50:b1:7b:75:35: 46:20:f4:f8:2c:49:f8:e1:a6:ad:7e:6c:69:fd:57: 01:05:f9:f4:d0:93:54:1d:64:a2:56:2d:78:ed:17: 60:27:75:90:28:72:04:69:91:34:63:40:db:27:5f: ef:2f:6a:c7:9f:5b:69:0c:f6:00:e4:16:84:9a:0d: 24:ce:9f:37:0a:86:d0:3f:bb:29:50:ff:b0:06:e7: 59:bc:08:a3:23:3b:2d:90:79:77:2f:99:9a:74:d5: 48:0c:57:92:3c:5e:3c:43:60:f0:43:a4:42:4c:0c: b6:f0:66:20:a7:86:41:40:53:a5:74:af:28:c3:21: 97:bc:a7:cd:48:8b:89:05:07:94:1a:bd:94:38:8d: 07:8d:2f:90:4d:7b:5e:1f:7d:92:fc:5d:4c:9a:c8: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EA:FD:08:3F:16:E0:F0:34:93:D0:F8:2F:65:F8:90:50:E5:75:3C X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c4:68:50:c6:de:55:96:f1:e3:70:90:39:6d:d7:c3:81:05: 63:18:30:cd:db:3b:d1:1f:4e:99:a6:fc:47:41:17:4f:81:95: a0:ca:7c:8d:4d:f8:33:0c:5c:69:bb:dc:f2:d4:5e:16:db:cf: 10:d2:13:e6:42:e5:05:50:a1:f2:5d:f8:05:44:91:9d:1f:e1: e3:b9:1a:ba:bb:3e:7d:f8:81:26:91:ca:ca:15:80:81:a6:c9: 77:5c:f9:a5:e0:87:27:70:ee:c5:dc:94:e9:fd:bf:f7:1f:be: 21:71:19:38:61:08:3e:d7:8e:03:6f:bc:f5:c3:35:7e:61:ee: 7f:10:f5:78:04:76:1f:79:61:52:b1:fb:23:75:20:31:1f:18: bc:ee:13:68:6e:9b:06:48:f4:7c:4a:a0:dc:1d:f3:96:fb:2d: 22:7c:a5:90:c5:d1:90:ec:4a:11:42:66:26:00:12:8f:dd:1f: 97:d9:59:f8:4a:fb:aa:22:d3:79:60:9f:a1:ac:99:1e:fd:4a: 9a:da:d9:ef:6c:7b:24:ea:86:d1:2b:fe:9a:7d:e1:67:63:56: d3:2c:36:3e:67:11:0a:4b:a8:90:53:15:96:de:bc:60:04:85: be:76:9c:cd:fc:e2:cb:be:38:7a:3e:e3:5d:ad:56:a2:ca:21: aa:ce:73:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUxMDIwMTY0MzE4WhcNMjUxMDI3MTY0MzE4WjAYMRYwFAYD VQQDEw02OGY2NjZhNi1iNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApw5rlRFI/xtxg0BdEly3Vp9PFxSKGMUbKvXGeXF9Gtq50gugBkmuJKXUXSsv D3Fxaw1440Z8zlgGw/Qb8PloUWnECKN3VAUbTt86ScsHa5ribF2/LwUuELcUGdHA S8ilknX5ULF7dTVGIPT4LEn44aatfmxp/VcBBfn00JNUHWSiVi147RdgJ3WQKHIE aZE0Y0DbJ1/vL2rHn1tpDPYA5BaEmg0kzp83CobQP7spUP+wBudZvAijIzstkHl3 L5madNVIDFeSPF48Q2DwQ6RCTAy28GYgp4ZBQFOldK8owyGXvKfNSIuJBQeUGr2U OI0HjS+QTXteH32S/F1MmsjMEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXq/Qg/ FuDwNJPQ+C9l+JBQ5XU8MB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACxGhQxt5VlvHjcJA5bdfDgQVjGDDN2zvRH06ZpvxHQRdPgZWgynyN TfgzDFxpu9zy1F4W288Q0hPmQuUFUKHyXfgFRJGdH+HjuRq6uz59+IEmkcrKFYCB psl3XPml4IcncO7F3JTp/b/3H74hcRk4YQg+144Db7z1wzV+Ye5/EPV4BHYfeWFS sfsjdSAxHxi87hNobpsGSPR8SqDcHfOW+y0ifKWQxdGQ7EoRQmYmABKP3R+X2Vn4 SvuqItN5YJ+hrJke/Uqa2tnvbHsk6obRK/6afeFnY1bTLDY+ZxEKS6iQUxWW3rxg BIW+dpzN/OLLvjh6PuNdrVaiyiGqznMV -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:32 2025 by rpki-client