$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json) Hash identifier: +00RTYgAaLKCMcHQ1MhnTmIu7GDc/VqTdil0/SXxcg4= Subject key identifier: 00:83:77:C2:E3:1A:04:D6:30:AC:EF:F4:CD:E7:0E:11:7F:79:CA:B8 Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft Manifest number: C2 Signing time: Sun 19 Oct 2025 08:59:23 +0000 Manifest this update: Sun 19 Oct 2025 08:59:22 +0000 Manifest next update: Sun 26 Oct 2025 08:59:22 +0000 Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: HL17USIyHMf3i5yNDWdtLFy4cNnZltC02Z0rMrwBpKk=) 2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: ZCgG7FYX4Z+FrZu/NpwbDBG7rLXKjEvv9WpnC42UALI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Validity Not Before: Oct 19 08:59:22 2025 GMT Not After : Oct 26 08:59:22 2025 GMT Subject: CN=68f4a86a-59bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:5a:a9:65:73:ca:00:cb:83:61:3e:4e:72: 58:18:bc:37:2e:02:1c:3e:a3:48:c2:19:db:90:a3: ed:97:a6:f1:2e:b5:d9:75:8a:22:2a:a1:4a:a3:ed: 6d:f0:01:cb:1f:de:2f:60:8a:4a:09:a7:e8:0d:e2: 03:c2:46:7a:44:b5:a0:c2:bc:de:ff:59:1f:b2:d4: 67:73:57:5b:4e:05:1b:97:ef:82:1b:8f:99:b2:b2: 3e:7d:c4:77:c5:1b:3c:3e:f2:56:81:0c:2f:5b:ba: 25:c4:2e:54:55:4d:cf:ec:cd:7b:15:38:81:b2:fc: 0d:df:ee:85:37:dd:31:6f:7b:0f:75:1c:26:5a:f7: c4:4b:15:8a:fc:5f:a4:d4:16:e3:e3:fc:34:23:6b: c2:45:98:38:5a:04:05:f5:71:1e:b0:29:9e:c6:23: 3f:d1:e6:ac:d3:6c:35:93:bf:77:0e:1f:1b:1e:81: 88:1e:a9:95:b0:7e:f8:56:96:5c:f3:93:ea:67:0b: 18:fc:1f:b5:f1:d3:5f:83:6c:a3:9e:82:59:bb:19: b7:5b:2a:fc:a1:34:f8:5b:19:37:92:3e:05:af:bd: bb:19:66:99:7c:18:2e:76:c7:68:3c:d5:16:3a:b5: 73:0e:e4:8e:81:a0:2c:ac:39:8b:8b:f5:21:2e:a1: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:83:77:C2:E3:1A:04:D6:30:AC:EF:F4:CD:E7:0E:11:7F:79:CA:B8 X509v3 Authority Key Identifier: keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b2:7c:2d:63:b2:f7:b8:7b:4d:d3:52:ea:a3:34:f4:62:a2: bb:cd:65:78:7b:fc:25:dc:c1:8f:4a:f3:a7:f3:8f:ac:ae:b0: 0c:32:f7:2c:23:53:ad:c9:f8:b5:8d:e3:3b:c3:dc:18:52:fd: f3:a8:83:8d:ce:9f:8f:6b:92:eb:3f:55:d3:2a:e1:91:e7:8a: a9:71:5c:a7:8c:81:01:72:76:38:2d:da:5a:cb:ba:f5:b7:77: 72:c2:f9:df:59:58:df:41:30:27:6c:a7:a8:2f:8e:cb:a7:b8: eb:cf:3e:ef:ca:18:1d:46:2f:93:e1:8a:b1:bc:a6:6b:59:2e: 79:9d:83:3a:3d:48:cd:13:84:d9:46:44:f4:d3:09:a1:0f:99: e5:e8:20:fd:53:b1:ba:8a:8a:07:fb:ba:e2:ab:b2:e9:37:5b: d2:37:36:ce:28:13:00:8c:45:37:21:6b:59:22:9b:f2:ba:b5: 51:f6:6b:cc:6c:35:d5:eb:29:32:58:2a:0e:fe:db:6e:f4:bd: ce:52:94:48:ad:5b:6b:db:b9:79:5a:b2:4c:11:43:93:33:ed: 88:f2:82:69:41:d3:0f:f1:0f:0a:e8:0a:00:60:2f:7a:2d:50: a6:40:39:ac:63:12:cd:c9:ad:da:63:06:ca:57:6a:a7:ee:b0: 66:ac:00:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3OEUxMTAvBgNVBAUTKEI4QzE5ODUyQUVDN0RBNTFBNDUwQkU3REE3RDk1ODcz QkVERTM3MzQwHhcNMjUxMDE5MDg1OTIyWhcNMjUxMDI2MDg1OTIyWjAYMRYwFAYD VQQDEw02OGY0YTg2YS01OWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kNaqWVzygDLg2E+TnJYGLw3LgIcPqNIwhnbkKPtl6bxLrXZdYoiKqFKo+1t 8AHLH94vYIpKCafoDeIDwkZ6RLWgwrze/1kfstRnc1dbTgUbl++CG4+ZsrI+fcR3 xRs8PvJWgQwvW7olxC5UVU3P7M17FTiBsvwN3+6FN90xb3sPdRwmWvfESxWK/F+k 1Bbj4/w0I2vCRZg4WgQF9XEesCmexiM/0eas02w1k793Dh8bHoGIHqmVsH74VpZc 85PqZwsY/B+18dNfg2yjnoJZuxm3Wyr8oTT4Wxk3kj4Fr727GWaZfBgudsdoPNUW OrVzDuSOgaAsrDmLi/UhLqHwBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACDd8Lj GgTWMKzv9M3nDhF/ecq4MB8GA1UdIwQYMBaAFLjBmFKux9pRpFC+fafZWHO+3jc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Qzc4RS9BMDIwMUIyMDg2 REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJsR2tVTDU5cDlsWWM3N2VO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Qzc4RS9BMDIwMUIyMDg2REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJs R2tVTDU5cDlsWWM3N2VOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJsnwtY7L3uHtN01LqozT0YqK7zWV4e/wl3MGPSvOn84+srrAMMvcs I1Otyfi1jeM7w9wYUv3zqIONzp+Pa5LrP1XTKuGR54qpcVynjIEBcnY4Ldpay7r1 t3dywvnfWVjfQTAnbKeoL47Lp7jrzz7vyhgdRi+T4YqxvKZrWS55nYM6PUjNE4TZ RkT00wmhD5nl6CD9U7G6iooH+7riq7LpN1vSNzbOKBMAjEU3IWtZIpvyurVR9mvM bDXV6ykyWCoO/ttu9L3OUpRIrVtr27l5WrJMEUOTM+2I8oJpQdMP8Q8K6AoAYC96 LVCmQDmsYxLNya3aYwbKV2qn7rBmrACT -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:05 2025 by rpki-client