$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft File: UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json) Hash identifier: QqhRaPCd3rphtmTRCDZyeY+VAMxUVf2/M+U1xZMIgFw= Subject key identifier: 65:4C:6E:73:2A:54:E2:F0:F8:44:65:FB:89:58:60:71:15:4D:BF:0F Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 Certificate issuer: /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft Manifest number: 07A8 Signing time: Sat 18 Oct 2025 22:42:56 +0000 Manifest this update: Sat 18 Oct 2025 22:42:56 +0000 Manifest next update: Sat 25 Oct 2025 22:42:56 +0000 Files and hashes: 1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: 7kqujNY44DLQ3HIjsn+t1npjXtLFK2h++h3JIOsqcE4=) 2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: nkmWs3iqAu0OPxxjsFN0b2stVXj3stQjYTM1Oq4SJSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917552B, serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Validity Not Before: Oct 18 22:42:56 2025 GMT Not After : Oct 25 22:42:56 2025 GMT Subject: CN=68f417f0-e647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:0e:a9:c6:9b:6d:dd:62:8f:22:a3:b8:9c: 5b:b2:fe:f8:c4:e0:9d:31:ca:de:18:d2:c4:fe:ea: de:ef:4a:3a:57:62:bf:96:3e:15:1d:de:1b:aa:2a: 91:fc:90:60:0a:12:ff:cb:aa:35:42:fe:21:e0:51: fe:64:7b:dc:da:68:9e:c7:f6:5d:cf:e3:28:d8:c5: 8a:57:31:ae:bd:d5:4c:19:31:66:b0:1a:e3:15:51: e1:77:ec:03:4b:7c:5f:e1:95:22:57:5f:25:66:ab: b8:2f:17:29:41:8b:0a:bf:fb:4d:42:04:27:8c:b6: db:73:55:05:cc:15:c6:1c:21:f2:67:5d:c4:90:8f: 5d:58:14:d8:03:37:92:7c:e6:04:33:47:b2:0e:cf: be:8a:83:ec:f7:16:31:66:d9:3d:80:ab:7a:ef:34: 0e:31:94:21:f7:61:d8:fe:5f:9f:c3:76:c8:7f:be: 82:f4:c5:29:1c:c0:36:9a:a3:0c:c3:75:1c:f7:36: 6a:87:80:15:fa:27:0f:4d:38:e9:e8:0a:ae:3a:7a: 50:ed:d5:8e:2a:7d:30:29:e7:18:3c:f4:c1:a8:52: f8:e4:e2:cb:fe:30:82:c9:cb:d3:02:50:2e:79:e4: 0d:51:eb:e0:e4:b9:9f:9c:06:34:15:99:27:19:e5: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:6E:73:2A:54:E2:F0:F8:44:65:FB:89:58:60:71:15:4D:BF:0F X509v3 Authority Key Identifier: keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:4c:bb:fd:04:5f:29:3d:6d:3a:ff:d4:46:ea:d5:dc:ad:5a: 0e:e4:c3:30:f5:d2:03:58:7f:78:58:77:ec:9a:20:47:4c:6c: 39:d5:9e:56:f9:22:93:10:93:f9:2b:55:0c:14:d8:6f:45:0a: d3:bc:1b:d4:3c:df:77:56:6a:77:1f:c8:e1:dd:ea:01:76:e5: b4:78:6b:30:65:1e:97:7a:74:33:c3:ad:e2:aa:2e:29:38:b0: a9:13:7e:06:75:d8:63:06:d0:1c:6e:46:83:99:a0:8a:84:ca: 5d:35:33:ea:17:1b:f5:f0:36:c9:3d:bc:f3:ee:e6:3c:b2:4e: 0e:8a:ef:8c:d6:c2:ce:e0:2b:f0:82:35:2e:3f:e4:ee:2b:d2: 18:f6:77:ee:69:3b:69:d1:ce:2b:f7:4e:85:ae:91:d4:67:a9: 51:9f:15:e0:ee:9e:ef:18:ae:b4:24:16:5d:a6:95:c3:e4:08: aa:9e:b3:c2:53:7d:68:13:ab:7f:79:27:02:c9:dd:ea:3f:da: 53:9a:9f:99:6a:da:15:60:83:ee:0e:f7:a4:4e:03:9e:0b:24: c0:fc:15:69:3d:96:61:68:cf:88:3f:5f:0f:c6:31:63:ce:0b: 8f:4a:61:8c:cb:9a:84:4b:a6:a6:04:35:c3:33:bf:a2:f6:b6: c6:a7:5b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MkIxMTAvBgNVBAUTKDUwNzE3RTlGQTBDQzM3QzQwNjdGODMzRTkwRkI3RTcy MTBGM0M1OTMwHhcNMjUxMDE4MjI0MjU2WhcNMjUxMDI1MjI0MjU2WjAYMRYwFAYD VQQDEw02OGY0MTdmMC1lNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsggOqcabbd1ijyKjuJxbsv74xOCdMcreGNLE/ure70o6V2K/lj4VHd4bqiqR /JBgChL/y6o1Qv4h4FH+ZHvc2miex/Zdz+Mo2MWKVzGuvdVMGTFmsBrjFVHhd+wD S3xf4ZUiV18lZqu4LxcpQYsKv/tNQgQnjLbbc1UFzBXGHCHyZ13EkI9dWBTYAzeS fOYEM0eyDs++ioPs9xYxZtk9gKt67zQOMZQh92HY/l+fw3bIf76C9MUpHMA2mqMM w3Uc9zZqh4AV+icPTTjp6AquOnpQ7dWOKn0wKecYPPTBqFL45OLL/jCCycvTAlAu eeQNUevg5LmfnAY0FZknGeVSUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVMbnMq VOLw+ERl+4lYYHEVTb8PMB8GA1UdIwQYMBaAFFBxfp+gzDfEBn+DPpD7fnIQ88WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyQi9EODNENjI5NDFF NkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44UUdmNE0ta1B0LWNoRHp4 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIRi1uNkRNTjhRR2Y0TS1rUHQtY2hEenhaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyQi9EODNENjI5NDFFNkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44 UUdmNE0ta1B0LWNoRHp4Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgTLv9BF8pPW06/9RG6tXcrVoO5MMw9dIDWH94WHfsmiBHTGw51Z5W +SKTEJP5K1UMFNhvRQrTvBvUPN93Vmp3H8jh3eoBduW0eGswZR6XenQzw63iqi4p OLCpE34GddhjBtAcbkaDmaCKhMpdNTPqFxv18DbJPbzz7uY8sk4Oiu+M1sLO4Cvw gjUuP+TuK9IY9nfuaTtp0c4r906FrpHUZ6lRnxXg7p7vGK60JBZdppXD5AiqnrPC U31oE6t/eScCyd3qP9pTmp+ZatoVYIPuDvekTgOeCyTA/BVpPZZhaM+IP18PxjFj zguPSmGMy5qES6amBDXDM7+i9rbGp1tT -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:32 2025 by rpki-client