$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft File: Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json) Hash identifier: LptWETLaahpMNDaEsJA+VYAkpQxD+fl0EVGhB0d8Rzk= Subject key identifier: B4:5A:0C:D7:FB:24:6A:3C:E2:7A:9F:79:8C:9C:73:56:12:4E:2A:E0 Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft Manifest number: 068D Signing time: Sat 18 Oct 2025 23:57:14 +0000 Manifest this update: Sat 18 Oct 2025 23:57:13 +0000 Manifest next update: Sat 25 Oct 2025 23:57:13 +0000 Files and hashes: 1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: drNRsL3cecVaxVq7sf5qYH0Bk1NYNWQLjjPcY1GGN64=) 2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: rP6Pu7EfL4ZTfd4hkNZXRMND1x04kCFhfmQKKfFcDnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Validity Not Before: Oct 18 23:57:13 2025 GMT Not After : Oct 25 23:57:13 2025 GMT Subject: CN=68f4295a-2a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:8e:b3:16:fb:4b:70:bd:9a:a7:c0:f6:20: be:c3:93:75:65:0b:48:26:1d:8d:15:e6:5c:0d:60: 2f:fc:99:f7:52:f4:34:d9:5d:73:dd:c1:c1:88:9a: 1f:fb:ef:84:72:de:39:d8:09:a3:a2:3c:b4:b8:9a: f9:f8:40:b3:57:03:74:a0:cb:a8:3c:5e:f3:43:8b: ab:63:17:b1:15:98:eb:23:ce:28:fc:01:38:04:bc: 44:45:e4:d8:90:94:49:c8:21:e5:ef:6f:74:b3:3f: b6:1e:b8:c3:de:06:e5:8f:45:0c:f9:a6:c8:ff:6a: 21:8f:ad:2f:d6:33:be:42:a9:63:94:21:e3:8d:f2: 13:61:f4:e3:72:b6:2d:b0:ad:44:88:58:a9:bf:48: a1:ce:06:de:30:e6:38:4d:62:54:34:06:1b:e8:64: da:66:a8:f0:a9:cf:ac:74:f9:3f:ad:f2:bb:5f:51: 2f:37:41:c1:47:71:68:e5:eb:ee:1b:2b:d7:2a:4e: 83:36:9e:b3:c5:a7:46:17:6e:18:13:59:0d:4b:6c: 27:df:9a:15:c5:28:17:d1:1f:ef:a4:2f:33:3a:0e: 89:17:86:7c:ae:8b:db:86:b4:f9:03:40:06:bd:c1: 7a:9c:23:34:a5:89:83:46:37:e3:77:ba:09:0b:9c: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5A:0C:D7:FB:24:6A:3C:E2:7A:9F:79:8C:9C:73:56:12:4E:2A:E0 X509v3 Authority Key Identifier: keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5b:70:f0:a2:53:44:33:4e:28:7f:3b:f9:38:e0:38:08:5d: f2:0e:aa:3e:19:a8:34:22:81:a2:55:db:16:b3:6a:1d:6b:f7: e8:9a:dc:df:d0:e8:1c:09:5f:65:34:d2:03:3f:89:d1:6a:14: 49:5b:b6:bb:2b:c1:65:e7:3e:77:fb:17:01:bd:45:42:3a:7c: 73:af:b5:83:01:56:40:96:db:a3:bf:de:b2:c5:47:ba:80:dc: e4:2b:b3:50:b6:1e:53:6a:a9:8b:40:fb:0a:d7:65:19:04:74: 55:40:63:18:f1:ef:a9:18:f6:ef:f7:d4:7d:2a:0a:3e:45:95: 54:3c:29:fc:6c:18:fa:97:18:2e:38:46:21:37:27:82:84:53: 69:63:33:bb:06:c3:00:eb:3f:3b:6b:70:16:ac:b6:9c:7f:a9: cc:23:7e:34:c4:01:08:e1:de:b6:e5:94:45:00:08:60:19:73: cc:bd:25:86:28:7e:73:e8:89:89:87:4d:41:b6:46:cf:f1:af: c5:78:f4:1f:48:c5:48:5b:a7:5d:49:a2:4c:b4:64:e5:b6:e7: 93:c4:06:b5:fb:38:24:15:cc:fb:7d:24:c0:69:d1:c5:88:71: 48:de:ce:b6:c1:15:4d:b5:51:48:49:08:e6:8b:bc:a5:e5:aa: a2:1f:1b:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCMzMxMTAvBgNVBAUTKDUxQUVCQTIzRkI3NDVBNTUzQTVFNDk5NkRGMUM4MTcz NDczRjE3OTgwHhcNMjUxMDE4MjM1NzEzWhcNMjUxMDI1MjM1NzEzWjAYMRYwFAYD VQQDEw02OGY0Mjk1YS0yYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK2Osxb7S3C9mqfA9iC+w5N1ZQtIJh2NFeZcDWAv/Jn3UvQ02V1z3cHBiJof +++Ect452Amjojy0uJr5+ECzVwN0oMuoPF7zQ4urYxexFZjrI84o/AE4BLxEReTY kJRJyCHl7290sz+2HrjD3gblj0UM+abI/2ohj60v1jO+QqljlCHjjfITYfTjcrYt sK1EiFipv0ihzgbeMOY4TWJUNAYb6GTaZqjwqc+sdPk/rfK7X1EvN0HBR3Fo5evu GyvXKk6DNp6zxadGF24YE1kNS2wn35oVxSgX0R/vpC8zOg6JF4Z8rovbhrT5A0AG vcF6nCM0pYmDRjfjd7oJC5zccQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRaDNf7 JGo84nqfeYycc1YSTirgMB8GA1UdIwQYMBaAFFGuuiP7dFpVOl5Jlt8cgXNHPxeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9DRDM1REIxQTkx MjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFdsVTZYa21XM3h5QmMwY19G NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhNjZJX3QwV2xVNlhrbVczeHlCYzBjX0Y1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0IzMy9DRDM1REIxQTkxMjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFds VTZYa21XM3h5QmMwY19GNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqW3DwolNEM04ofzv5OOA4CF3yDqo+Gag0IoGiVdsWs2oda/fomtzf 0OgcCV9lNNIDP4nRahRJW7a7K8Fl5z53+xcBvUVCOnxzr7WDAVZAltujv96yxUe6 gNzkK7NQth5TaqmLQPsK12UZBHRVQGMY8e+pGPbv99R9Kgo+RZVUPCn8bBj6lxgu OEYhNyeChFNpYzO7BsMA6z87a3AWrLacf6nMI340xAEI4d625ZRFAAhgGXPMvSWG KH5z6ImJh01BtkbP8a/FePQfSMVIW6ddSaJMtGTltueTxAa1+zgkFcz7fSTAadHF iHFI3s62wRVNtVFISQjmi7yl5aqiHxsR -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:05 2025 by rpki-client