$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: JxdU51WD2gSvdxI50DTM0U5TI9edCv+6iXAzf5l0uTg= Subject key identifier: D0:08:A9:9B:54:2E:81:34:6E:68:03:19:30:FD:71:42:C6:0E:BD:31 Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: F7 Signing time: Sun 19 Oct 2025 08:08:39 +0000 Manifest this update: Sun 19 Oct 2025 08:08:39 +0000 Manifest next update: Sun 26 Oct 2025 08:08:39 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: +vKc+ETlv89VtuDtu4JF0NIO86+ExRbEsI5pMTdbSl4=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324 Validity Not Before: Oct 19 08:08:39 2025 GMT Not After : Oct 26 08:08:39 2025 GMT Subject: CN=68f49c87-04f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:84:e7:a9:75:43:93:cb:05:ec:72:60:25: 96:e9:f1:3d:85:bf:65:43:ab:56:bd:12:18:d9:aa: 01:fa:0c:45:50:6d:fe:36:20:44:9c:01:02:58:bf: 83:2f:2b:b0:f8:b0:d2:b4:85:d4:3e:a2:73:78:68: 5f:0b:1c:4c:8f:4b:91:8b:26:d1:c2:82:18:5d:4c: 7c:a8:b3:c2:ad:65:4f:73:59:97:d5:9a:82:0d:42: 8d:8e:84:37:74:d8:41:5a:83:11:08:e4:07:b3:71: 09:82:ef:86:b2:e6:d3:51:34:60:88:7d:e2:83:c1: 56:f0:6c:ae:e1:fd:55:9b:29:a5:a0:b8:9c:42:93: c5:b1:19:67:aa:b7:95:ef:f5:0c:1c:af:60:d2:30: 8b:a2:df:bd:5a:7d:04:32:39:52:f4:71:35:12:a3: a2:24:a7:72:d5:d2:8f:75:f7:b3:9f:b0:a3:6a:f4: 7d:5f:69:ef:98:6b:ee:30:a9:68:5c:1d:f6:0f:06: 2e:51:20:0f:75:22:d9:b3:5b:bd:9a:57:fd:c7:1c: a6:39:6b:ab:cc:92:ce:f7:ab:cd:04:96:ae:c5:56: b2:2a:66:8f:58:16:fd:75:6c:d8:d1:61:2e:ff:8f: 41:71:9c:d1:4b:47:3b:f3:fe:33:da:7c:32:59:50: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:08:A9:9B:54:2E:81:34:6E:68:03:19:30:FD:71:42:C6:0E:BD:31 X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bb:ff:27:46:f5:67:b0:5c:ca:15:da:1a:7a:e5:59:41:8e: 86:9e:01:02:9b:b9:4c:fc:13:96:cf:4e:78:73:79:dd:23:35: 23:9a:80:51:52:ff:5c:87:2d:3e:a6:4d:2d:2d:fd:e6:ab:f5: 13:6b:d3:d8:66:67:b6:a6:d7:01:99:5c:09:1a:0f:aa:5c:c1: ac:d5:7b:8e:38:a3:78:f3:40:f9:28:d6:81:a7:a7:22:5a:32: bc:73:cf:79:6e:4b:e5:8a:db:9b:8d:c8:32:4d:3c:7b:12:ce: 4e:26:6b:4a:98:ce:74:ff:b4:35:41:c1:e8:fd:ab:16:13:ba: f2:e5:0e:f3:14:d1:09:83:c4:d6:53:90:ba:68:06:a0:ef:a6: f0:f0:a2:f3:b6:8e:2a:0d:d3:35:e3:bf:a3:f0:c4:ed:5b:dd: fd:52:1b:4a:39:5b:f7:4e:3b:3d:bf:f0:79:de:2f:ae:5e:5e: b9:14:80:33:7d:64:09:73:86:cd:7d:bd:d7:0c:34:98:a7:2c: af:88:54:60:f2:17:92:02:47:b2:e6:29:e2:59:59:ba:42:75: ac:ce:46:24:d8:cd:e7:f8:46:23:8f:ee:e2:cb:93:7d:53:c8: cb:b5:a8:2d:78:9c:38:e5:b9:ee:d1:60:d9:9d:43:f6:fe:bd: 00:58:2e:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0 NjU0MTQzMjQwHhcNMjUxMDE5MDgwODM5WhcNMjUxMDI2MDgwODM5WjAYMRYwFAYD VQQDEw02OGY0OWM4Ny0wNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXWE56l1Q5PLBexyYCWW6fE9hb9lQ6tWvRIY2aoB+gxFUG3+NiBEnAECWL+D Lyuw+LDStIXUPqJzeGhfCxxMj0uRiybRwoIYXUx8qLPCrWVPc1mX1ZqCDUKNjoQ3 dNhBWoMRCOQHs3EJgu+GsubTUTRgiH3ig8FW8Gyu4f1VmymloLicQpPFsRlnqreV 7/UMHK9g0jCLot+9Wn0EMjlS9HE1EqOiJKdy1dKPdfezn7CjavR9X2nvmGvuMKlo XB32DwYuUSAPdSLZs1u9mlf9xxymOWurzJLO96vNBJauxVayKmaPWBb9dWzY0WEu /49BcZzRS0c78/4z2nwyWVDswwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAIqZtU LoE0bmgDGTD9cULGDr0xMB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi83ODk3RjgxNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6 a0o5Wkhoa0pYeUpHVkJReVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAru/8nRvVnsFzKFdoaeuVZQY6GngECm7lM/BOWz054c3ndIzUjmoBR Uv9chy0+pk0tLf3mq/UTa9PYZme2ptcBmVwJGg+qXMGs1XuOOKN480D5KNaBp6ci WjK8c895bkvlitubjcgyTTx7Es5OJmtKmM50/7Q1QcHo/asWE7ry5Q7zFNEJg8TW U5C6aAag76bw8KLzto4qDdM147+j8MTtW939UhtKOVv3Tjs9v/B53i+uXl65FIAz fWQJc4bNfb3XDDSYpyyviFRg8heSAkey5iniWVm6QnWszkYk2M3n+EYjj+7iy5N9 U8jLtagteJw45bnu0WDZnUP2/r0AWC71 -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:50 2025 by rpki-client