$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft File: uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json) Hash identifier: 7o1efmkveOKw/xSlCBmTEBPHYFxZGSujQ0Reg5mlOPU= Subject key identifier: 56:4E:A2:44:88:2B:D7:D7:10:87:11:35:55:A2:E0:63:6D:C5:8F:3B Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25 Certificate issuer: /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft Manifest number: 06A5 Signing time: Sat 18 Oct 2025 23:44:51 +0000 Manifest this update: Sat 18 Oct 2025 23:44:51 +0000 Manifest next update: Sat 25 Oct 2025 23:44:51 +0000 Files and hashes: 1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: sXLxHvaaAD9MIXg2IkCJmp2oPSbb8yfBwwk5b1bY1rw=) 2: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: lWZRobhtO0oFUd+vRpiCuxRaZUL791izmBtb3cII0fo=) 3: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: zpTvJznQ+5mTsWYuBwFqmhL2aTwH3SE1aCKMAY/WGXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25 Validity Not Before: Oct 18 23:44:51 2025 GMT Not After : Oct 25 23:44:51 2025 GMT Subject: CN=68f42673-ec47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:29:66:71:89:ce:72:30:8c:6c:db:d7:50: 4e:74:7d:cb:d7:1e:3e:21:ff:d9:f2:5d:1c:6e:70: c0:47:96:9d:60:0e:2d:36:d8:d1:b1:9e:f4:9b:ce: c8:4d:f3:54:1d:95:80:c4:55:42:49:1e:bc:6b:64: 68:e3:12:2b:3b:d5:bd:3d:e1:5c:de:11:c3:ed:da: 7e:a5:b8:8e:1c:3b:c8:5b:0f:bc:de:f0:df:e1:f4: df:df:dd:cc:54:f5:23:82:21:33:50:1f:34:22:94: 35:22:86:c5:37:58:74:08:22:25:16:1a:9f:0f:fb: 14:ba:42:d7:f1:a8:9c:0a:0e:2e:7c:65:e6:57:30: 2a:81:3c:c4:85:bc:79:4c:93:f5:79:d3:2a:4b:82: 62:8d:8e:12:a0:da:27:b6:ad:77:bb:4f:e0:4a:81: ad:6c:28:a7:f5:ce:a9:84:2c:2e:fb:b5:b3:36:ab: 71:73:f2:48:bc:af:4c:79:fd:c1:83:6f:8a:6c:b5: f4:5d:87:64:55:79:45:a4:9f:bd:ca:1d:ba:c2:ac: 41:80:af:1a:ea:bf:58:8d:e1:85:3d:75:ba:77:c7: a4:cd:eb:f8:e9:62:fe:11:5d:a7:44:5c:9b:8e:c3: fe:63:d3:a3:0f:eb:2d:75:22:ca:52:81:96:fa:f3: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4E:A2:44:88:2B:D7:D7:10:87:11:35:55:A2:E0:63:6D:C5:8F:3B X509v3 Authority Key Identifier: keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:af:84:90:ad:d0:9e:7b:26:85:34:88:a4:b6:5c:62:49:03: 54:41:43:fe:be:26:fe:cf:3c:2a:ae:f4:12:59:ea:d4:c8:37: 83:14:37:30:74:12:d5:62:1e:68:21:23:61:98:dc:df:09:7b: bf:18:86:04:e3:ba:87:dd:06:74:d7:53:53:18:61:ea:60:bb: 54:25:b6:c8:15:0c:3e:ce:0e:3a:57:c8:d7:d8:b4:b7:16:0c: 23:f1:9d:a3:cc:b9:e0:dd:ae:84:dd:c7:2a:2c:9a:d3:e2:ac: 7d:0b:28:7d:f6:46:46:ea:3e:74:09:8c:06:aa:f5:c3:30:6a: 28:16:66:d1:67:05:8a:29:36:76:e7:97:01:e2:68:5e:e9:f7: ed:39:ae:46:5e:5c:43:39:45:95:39:f7:d2:05:18:05:b1:57: 6f:e6:a0:24:c3:41:ca:e6:14:8d:ad:8a:fe:91:c0:1d:37:e4: ad:3f:6c:fa:1a:d3:1f:4d:73:a7:ba:12:68:e6:89:94:eb:be: 89:80:eb:37:bb:87:97:59:77:7e:16:a8:ea:8a:cb:c9:f6:cf: 77:0c:a2:09:87:75:31:2a:4d:24:dc:5a:eb:21:56:10:16:97: ad:38:b4:d2:90:7d:d7:ce:04:89:10:de:f1:dd:b5:53:16:fa: 90:eb:db:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2OEUxMTAvBgNVBAUTKEI4RjhDMzYyNkREMDYxNjJFNjdFMjVGNTlBOUE4MUZB RTQ3MjBBMjUwHhcNMjUxMDE4MjM0NDUxWhcNMjUxMDI1MjM0NDUxWjAYMRYwFAYD VQQDEw02OGY0MjY3My1lYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRopZnGJznIwjGzb11BOdH3L1x4+If/Z8l0cbnDAR5adYA4tNtjRsZ70m87I TfNUHZWAxFVCSR68a2Ro4xIrO9W9PeFc3hHD7dp+pbiOHDvIWw+83vDf4fTf393M VPUjgiEzUB80IpQ1IobFN1h0CCIlFhqfD/sUukLX8aicCg4ufGXmVzAqgTzEhbx5 TJP1edMqS4JijY4SoNontq13u0/gSoGtbCin9c6phCwu+7WzNqtxc/JIvK9Mef3B g2+KbLX0XYdkVXlFpJ+9yh26wqxBgK8a6r9YjeGFPXW6d8ekzev46WL+EV2nRFyb jsP+Y9OjD+stdSLKUoGW+vOQAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZOokSI K9fXEIcRNVWi4GNtxY87MB8GA1UdIwQYMBaAFLj4w2Jt0GFi5n4l9Zqagfrkcgol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDY4RS9ENkVGNjcxQTg0 QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlXTG1maVgxbXBxQi11UnlD aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQakRZbTNRWVdMbWZpWDFtcHFCLXVSeUNpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDY4RS9ENkVGNjcxQTg0QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlX TG1maVgxbXBxQi11UnlDaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIr4SQrdCeeyaFNIiktlxiSQNUQUP+vib+zzwqrvQSWerUyDeDFDcw dBLVYh5oISNhmNzfCXu/GIYE47qH3QZ011NTGGHqYLtUJbbIFQw+zg46V8jX2LS3 Fgwj8Z2jzLng3a6E3ccqLJrT4qx9Cyh99kZG6j50CYwGqvXDMGooFmbRZwWKKTZ2 55cB4mhe6fftOa5GXlxDOUWVOffSBRgFsVdv5qAkw0HK5hSNrYr+kcAdN+StP2z6 GtMfTXOnuhJo5omU676JgOs3u4eXWXd+FqjqisvJ9s93DKIJh3UxKk0k3FrrIVYQ FpetOLTSkH3XzgSJEN7x3bVTFvqQ69sh -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:45 2025 by rpki-client