$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json) Hash identifier: tKcULRnLkbSrrlCfeth0w5VUKRgwHpiU/sPrGNUlh10= Subject key identifier: 42:DB:5E:7F:3F:F1:52:95:AC:86:A3:B3:0E:64:C3:E5:8F:24:C8:BE Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft Manifest number: 01A3 Signing time: Sun 19 Oct 2025 05:54:10 +0000 Manifest this update: Sun 19 Oct 2025 05:54:09 +0000 Manifest next update: Sun 26 Oct 2025 05:54:09 +0000 Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: FKy8sT8f8B6nW3rUYjLjgUDBiyK8DoVHU2VeYt/g0+o=) 2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: fV4R5q8jmyaZ1y6M6EGHK7qWH/l+INutGWYgcX5lTMc=) 3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: ArfhB2PhVsHpBnCuxTAZaN9fEqhnqfH2tcV0KRWRM8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: Oct 19 05:54:09 2025 GMT Not After : Oct 26 05:54:09 2025 GMT Subject: CN=68f47d01-2392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:49:50:76:49:1d:0c:f8:56:26:13:9b:84: 1c:98:e1:b3:6c:9b:13:cc:5a:12:50:cc:3c:34:df: e5:3f:7d:b6:66:e6:17:d4:82:a4:75:af:c2:2f:14: a0:fe:0b:4a:ca:04:48:f9:89:2e:d9:12:5c:c3:5b: 62:26:3b:98:fe:b7:bc:65:21:6c:d7:cb:0f:28:c6: aa:3a:c9:0a:55:d3:f4:5b:f0:9b:2f:66:47:77:58: bb:81:2c:17:93:cb:b6:f2:d1:cc:12:7f:a2:d4:a8: 91:96:e1:58:09:05:38:d6:18:17:60:ca:d8:36:d0: a1:8c:82:3e:46:ca:46:03:63:63:c1:79:9e:08:a3: d1:9b:ac:57:28:ba:29:f4:ce:5d:a8:b4:0f:24:1b: 0e:77:7e:95:19:6d:3d:e3:b9:d0:9e:6c:e3:37:dd: 89:a9:98:ac:e9:c4:17:c9:f5:50:92:12:3d:5c:d9: 33:ba:5b:f8:50:e9:74:93:a8:ec:88:2a:bd:94:b3: d0:79:94:a9:fa:7d:a9:eb:0c:76:8b:bf:3b:ac:5e: e3:72:d5:3d:ed:bc:b8:a4:77:49:08:09:e6:08:41: bd:84:98:07:aa:ef:af:60:9f:65:63:5c:eb:5c:5b: d0:52:bb:0c:13:05:a0:5a:30:a3:4d:ae:71:57:c1: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DB:5E:7F:3F:F1:52:95:AC:86:A3:B3:0E:64:C3:E5:8F:24:C8:BE X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:48:0c:d0:3e:6b:6f:79:84:e4:1d:dc:91:bd:46:73:e7:ad: 1b:44:78:6c:86:ed:aa:fe:2f:e4:2a:2a:a7:9d:c3:ed:4b:62: 58:bb:b0:f1:af:4f:fd:17:01:1a:1f:cc:c1:63:38:31:60:1c: 00:30:8d:b1:42:b3:55:1f:65:40:79:57:76:bc:29:0a:01:2c: 5f:44:b2:33:fd:3c:81:4f:c7:1a:65:96:43:ff:b5:0a:d3:3d: da:40:a8:ea:b3:dc:a2:a4:87:3f:75:fe:bb:0b:2e:94:25:95: 9e:e9:d6:a1:f8:af:15:10:80:80:2d:c3:05:a8:96:78:b9:fe: 4b:fb:de:63:01:0d:05:6f:a3:17:72:0c:7d:4b:9f:a7:87:65: 93:67:47:41:8a:c4:60:09:1e:8e:15:fd:1d:fd:78:14:e1:b5: 64:fe:5a:b0:69:26:cc:57:ad:9d:43:22:67:22:7a:91:cd:b6: 83:78:f0:4f:6d:90:9b:34:01:81:fe:65:06:76:f6:4e:bc:4c: 51:d9:c8:b8:7d:97:41:fa:4f:0c:65:1d:3b:28:15:b9:c8:d8: 97:ec:61:17:ac:5f:17:40:d4:9a:8f:17:1e:0c:c8:fc:76:a7: 8b:99:fb:57:92:12:8b:3e:dc:50:b3:ca:1b:7c:c3:e5:05:04: 0d:b3:6d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjUxMDE5MDU1NDA5WhcNMjUxMDI2MDU1NDA5WjAYMRYwFAYD VQQDEw02OGY0N2QwMS0yMzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnpJUHZJHQz4ViYTm4QcmOGzbJsTzFoSUMw8NN/lP322ZuYX1IKkda/CLxSg /gtKygRI+Yku2RJcw1tiJjuY/re8ZSFs18sPKMaqOskKVdP0W/CbL2ZHd1i7gSwX k8u28tHMEn+i1KiRluFYCQU41hgXYMrYNtChjII+RspGA2NjwXmeCKPRm6xXKLop 9M5dqLQPJBsOd36VGW0947nQnmzjN92JqZis6cQXyfVQkhI9XNkzulv4UOl0k6js iCq9lLPQeZSp+n2p6wx2i787rF7jctU97by4pHdJCAnmCEG9hJgHqu+vYJ9lY1zr XFvQUrsMEwWgWjCjTa5xV8EH8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELbXn8/ 8VKVrIajsw5kw+WPJMi+MB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3 cnR4WkhfeU56YW5HYmhMSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOSAzQPmtveYTkHdyRvUZz560bRHhshu2q/i/kKiqnncPtS2JYu7Dx r0/9FwEaH8zBYzgxYBwAMI2xQrNVH2VAeVd2vCkKASxfRLIz/TyBT8caZZZD/7UK 0z3aQKjqs9yipIc/df67Cy6UJZWe6dah+K8VEICALcMFqJZ4uf5L+95jAQ0Fb6MX cgx9S5+nh2WTZ0dBisRgCR6OFf0d/XgU4bVk/lqwaSbMV62dQyJnInqRzbaDePBP bZCbNAGB/mUGdvZOvExR2ci4fZdB+k8MZR07KBW5yNiX7GEXrF8XQNSajxceDMj8 dqeLmftXkhKLPtxQs8obfMPlBQQNs23M -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:18 2025 by rpki-client