$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: dP5a8OkARymMdCnOzdlLRAHotdmz8gO5bCEpQFwX28w= Subject key identifier: F1:13:AE:D8:AE:7B:6E:2E:E2:7B:8C:52:B5:1B:45:DC:C5:E5:B5:E7 Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 0602 Signing time: Sun 19 Oct 2025 02:01:35 +0000 Manifest this update: Sun 19 Oct 2025 02:01:35 +0000 Manifest next update: Sun 26 Oct 2025 02:01:35 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: TEnlY9X1CkZxYHSSoP+WSxXNBkYDvhN7j7QfpdUd/0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: Oct 19 02:01:35 2025 GMT Not After : Oct 26 02:01:35 2025 GMT Subject: CN=68f4467f-c715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:18:b0:8c:0f:f8:e4:78:cf:90:f8:7a:00: 75:16:5c:d5:5b:88:d6:ee:9f:97:d8:42:d4:39:c1: 7e:1d:12:1f:04:35:dd:57:da:22:77:df:b5:05:56: 0a:f0:b8:90:b3:76:06:72:0a:96:23:aa:f6:64:76: f2:66:a2:35:8f:8b:04:cb:cf:7a:eb:ce:c2:97:3a: 2c:1a:92:43:c5:02:3c:b6:96:7f:18:08:d2:f9:62: 9b:b4:3d:80:21:9e:f7:b5:93:53:67:b7:dd:83:88: 01:78:3b:63:dc:b3:d2:7d:38:ce:e2:44:db:75:48: 33:f2:6c:e5:71:dd:d5:af:1b:e8:21:f1:fb:f8:f2: 71:eb:d5:86:2a:26:06:94:6c:73:e8:97:34:43:a8: 00:89:30:c6:7c:33:54:8a:8a:8b:3d:f0:3d:da:50: 93:2b:8a:cf:fb:2d:de:0a:5a:9c:a9:aa:85:b3:f3: 8f:8e:5d:6f:19:bb:5e:a7:d9:df:c5:a0:da:7e:cb: 24:25:14:c1:65:ba:f1:9a:6c:47:eb:1c:95:4e:40: 52:30:23:e6:8d:42:b9:3b:62:76:ce:3c:8a:c7:65: 06:86:33:f3:7e:05:03:be:a4:1d:42:a8:03:85:e7: db:ec:2a:df:ee:27:e9:8d:b3:8a:e6:56:f5:d7:d3: 7d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:13:AE:D8:AE:7B:6E:2E:E2:7B:8C:52:B5:1B:45:DC:C5:E5:B5:E7 X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:da:59:ec:dc:dd:b7:fc:88:b8:b1:2f:86:dc:04:5c:7e:f9: 9f:3a:fd:a7:74:ba:87:70:d2:c7:9e:80:ab:72:49:2a:9d:f2: fc:45:15:3a:c1:e5:2d:d4:9a:65:1b:94:94:aa:a2:e6:ae:85: 8d:fd:5e:03:4f:7b:1e:c7:79:99:8e:b4:24:23:01:9e:7c:41: 74:84:14:74:e5:d7:fd:d5:74:cd:08:63:b0:df:a8:06:d4:44: 07:20:a9:0f:0d:d0:b5:1f:cc:33:f8:8c:09:ad:65:15:3a:cb: 14:f3:d6:8d:0d:88:9c:8d:e8:7b:60:59:ac:67:be:5e:53:49: b8:66:5d:8b:48:90:9c:59:c0:bd:a9:14:d7:15:f0:13:9a:c7: 28:f5:40:ff:28:0d:81:81:3a:be:7e:87:1f:da:72:e9:40:80: d9:ba:81:2e:0c:c0:40:ea:dc:6c:67:aa:34:f2:b9:bb:ba:81: 6b:6d:7a:02:31:1d:97:2e:7f:78:f3:17:11:26:1b:dc:7b:f4: 4f:3c:48:3e:19:2e:b1:04:ff:a1:dd:57:b3:b8:6d:7b:71:13: 6b:2c:d0:81:24:35:60:f6:26:87:be:0e:0a:14:ae:60:51:36: ad:89:e8:aa:45:bd:25:be:b1:1a:6a:dd:1a:ac:83:fa:83:08: 3c:23:b8:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjUxMDE5MDIwMTM1WhcNMjUxMDI2MDIwMTM1WjAYMRYwFAYD VQQDEw02OGY0NDY3Zi1jNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxroYsIwP+OR4z5D4egB1FlzVW4jW7p+X2ELUOcF+HRIfBDXdV9oid9+1BVYK 8LiQs3YGcgqWI6r2ZHbyZqI1j4sEy896687ClzosGpJDxQI8tpZ/GAjS+WKbtD2A IZ73tZNTZ7fdg4gBeDtj3LPSfTjO4kTbdUgz8mzlcd3VrxvoIfH7+PJx69WGKiYG lGxz6Jc0Q6gAiTDGfDNUioqLPfA92lCTK4rP+y3eClqcqaqFs/OPjl1vGbtep9nf xaDafsskJRTBZbrxmmxH6xyVTkBSMCPmjUK5O2J2zjyKx2UGhjPzfgUDvqQdQqgD hefb7Crf7ifpjbOK5lb119N9cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPETrtiu e24u4nuMUrUbRdzF5bXnMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA92lns3N23/Ii4sS+G3ARcfvmfOv2ndLqHcNLHnoCrckkqnfL8RRU6 weUt1JplG5SUqqLmroWN/V4DT3sex3mZjrQkIwGefEF0hBR05df91XTNCGOw36gG 1EQHIKkPDdC1H8wz+IwJrWUVOssU89aNDYicjeh7YFmsZ75eU0m4Zl2LSJCcWcC9 qRTXFfATmsco9UD/KA2BgTq+focf2nLpQIDZuoEuDMBA6txsZ6o08rm7uoFrbXoC MR2XLn948xcRJhvce/RPPEg+GS6xBP+h3VezuG17cRNrLNCBJDVg9iaHvg4KFK5g UTatieiqRb0lvrEaat0arIP6gwg8I7i9 -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:33 2025 by rpki-client