$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json) Hash identifier: wmLMNIpuBXj2n552Zw5ZJhDxlMFxNE6O6H4B3mXarno= Subject key identifier: 97:0B:38:01:03:A5:52:F3:A7:11:E7:34:DE:86:42:E9:9B:27:FB:DA Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737 Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft Manifest number: 0407 Signing time: Sun 19 Oct 2025 02:23:41 +0000 Manifest this update: Sun 19 Oct 2025 02:23:40 +0000 Manifest next update: Sun 26 Oct 2025 02:23:40 +0000 Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: zxcXCZRW+q+4dumcnRRwc1XwQk43blH+f5ZBZmS/0wI=) 2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: 93z4oqW7DQ1yUII6DWRvY7Xrtn4iF7Cp5BMrU5CKBhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737 Validity Not Before: Oct 19 02:23:40 2025 GMT Not After : Oct 26 02:23:40 2025 GMT Subject: CN=68f44bac-44eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:e1:e1:1f:61:d0:6f:db:a8:a5:be:d5:14: d1:15:fe:fc:b8:d1:e4:c4:2b:9b:e3:51:ca:c4:b3: b0:f9:e7:65:e0:35:6d:d1:68:ec:03:95:c2:45:43: 04:3a:94:95:c4:da:5f:eb:c7:20:42:22:f8:15:eb: e9:59:e8:b8:16:4e:07:e5:3f:82:79:4d:a6:7f:77: 84:d6:7b:aa:35:5a:27:f4:62:04:9a:5f:9e:5d:92: a2:81:3b:27:9d:e6:ea:59:85:7f:7e:ff:5e:ae:18: d6:01:6d:13:b3:66:a5:02:25:12:f2:0e:94:9d:54: 21:7e:56:c1:cf:73:f9:b6:7f:d3:c5:d3:fe:80:c2: e4:0d:15:7d:92:06:08:25:0a:d5:87:54:f5:d7:ff: aa:de:c8:e2:10:aa:0c:bd:d5:46:62:89:34:90:2b: 2c:d5:81:1c:9f:9d:0e:98:ee:93:97:8c:4c:3f:68: fe:a0:c5:c2:eb:73:d1:f2:75:37:c1:f1:29:82:b9: f0:9c:82:40:4b:ce:cc:61:34:15:0f:7b:6c:37:7d: 13:51:f8:b9:21:90:eb:e1:e7:0f:d3:f5:ee:b5:7d: 03:ac:79:60:a4:68:d3:40:fe:5a:c5:36:4a:d1:dc: 15:9e:ce:20:5b:da:9a:6e:04:e2:06:06:78:c9:b6: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:38:01:03:A5:52:F3:A7:11:E7:34:DE:86:42:E9:9B:27:FB:DA X509v3 Authority Key Identifier: keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c1:b4:e7:58:0d:4c:dc:45:2c:21:1c:06:0d:2e:d1:57:82: 38:22:da:e8:b7:cf:95:fc:cc:9f:df:b5:08:81:57:76:e6:38: 56:7e:4a:9a:fb:3e:86:65:e0:8d:26:9b:8e:27:ea:25:99:25: 48:86:ae:85:ee:35:01:38:f5:c9:4f:f8:44:9b:ec:6e:c9:c6: 16:99:d4:08:76:23:36:87:73:81:94:f7:db:3a:9e:8c:2a:62: 8b:3d:31:0d:0e:f3:ed:77:e1:8a:de:91:b5:16:9f:f4:1d:76: e3:9b:01:e6:2b:3c:8e:f2:aa:e8:84:34:2c:a7:57:8b:1c:1d: 98:f1:b7:d8:6c:1a:2f:5b:8e:2e:13:03:bc:1d:28:ee:68:30: 06:0c:09:35:0c:4f:56:8b:fa:b0:8e:d0:e6:87:b3:6d:8f:60: c5:2b:a7:61:c1:58:a6:4e:00:0d:1c:c5:77:f4:ec:85:5b:80: a3:07:1a:3c:a9:97:79:6d:f8:ad:3f:e1:40:cd:31:44:fa:90: f0:bb:fb:81:40:b6:0a:01:91:97:90:e8:64:5b:27:56:dc:65: a7:c4:7d:d2:51:77:ee:ed:61:7a:ba:fc:8b:cd:09:fa:de:f3: e5:b8:0c:68:1e:1b:f6:00:5c:af:e7:c3:28:6b:98:41:d6:62: 75:25:64:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MDYxMTAvBgNVBAUTKEI4NzJGMzRENTUyNTFGQTc3MEVDQzM5M0QyNjcxMjEw M0Q1NTA3MzcwHhcNMjUxMDE5MDIyMzQwWhcNMjUxMDI2MDIyMzQwWjAYMRYwFAYD VQQDEw02OGY0NGJhYy00NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD7h4R9h0G/bqKW+1RTRFf78uNHkxCub41HKxLOw+edl4DVt0WjsA5XCRUME OpSVxNpf68cgQiL4FevpWei4Fk4H5T+CeU2mf3eE1nuqNVon9GIEml+eXZKigTsn nebqWYV/fv9erhjWAW0Ts2alAiUS8g6UnVQhflbBz3P5tn/TxdP+gMLkDRV9kgYI JQrVh1T11/+q3sjiEKoMvdVGYok0kCss1YEcn50OmO6Tl4xMP2j+oMXC63PR8nU3 wfEpgrnwnIJAS87MYTQVD3tsN30TUfi5IZDr4ecP0/XutX0DrHlgpGjTQP5axTZK 0dwVns4gW9qabgTiBgZ4ybZG/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcLOAED pVLzpxHnNN6GQumbJ/vaMB8GA1UdIwQYMBaAFLhy801VJR+ncOzDk9JnEhA9VQc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYwNi83QzhCMTM3QThG QzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2ZHc3TU9UMG1jU0VEMVZC emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VITHpUVlVsSDZkdzdNT1QwbWNTRUQxVkJ6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYwNi83QzhCMTM3QThGQzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2 ZHc3TU9UMG1jU0VEMVZCemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnwbTnWA1M3EUsIRwGDS7RV4I4Itrot8+V/Myf37UIgVd25jhWfkqa +z6GZeCNJpuOJ+olmSVIhq6F7jUBOPXJT/hEm+xuycYWmdQIdiM2h3OBlPfbOp6M KmKLPTENDvPtd+GK3pG1Fp/0HXbjmwHmKzyO8qrohDQsp1eLHB2Y8bfYbBovW44u EwO8HSjuaDAGDAk1DE9Wi/qwjtDmh7Ntj2DFK6dhwVimTgANHMV39OyFW4CjBxo8 qZd5bfitP+FAzTFE+pDwu/uBQLYKAZGXkOhkWydW3GWnxH3SUXfu7WF6uvyLzQn6 3vPluAxoHhv2AFyv58Moa5hB1mJ1JWSg -----END CERTIFICATE-----Generated at Mon Oct 20 21:40:05 2025 by rpki-client