$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json) Hash identifier: uaDnwbM9HqHbPHM2gzIt/DNU9MQcLAqvAAF4xbjFqVA= Subject key identifier: 3D:60:83:AA:51:94:74:85:25:AF:06:28:6C:24:20:27:48:81:24:A8 Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft Manifest number: 0680 Signing time: Sat 18 Oct 2025 23:58:37 +0000 Manifest this update: Sat 18 Oct 2025 23:58:37 +0000 Manifest next update: Sat 25 Oct 2025 23:58:37 +0000 Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: S05XSY+xRqk8SiKBPg8QYmMEEW6RbFjZyjzFpuZFwxE=) 2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: hzbXrtnctw9RaO4u4LO+M5su44TkMPAo6wV59Ue+QJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Validity Not Before: Oct 18 23:58:37 2025 GMT Not After : Oct 25 23:58:37 2025 GMT Subject: CN=68f429ad-b772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:77:e2:1e:7e:de:8f:0c:d4:0c:dd:16:e8:11: e9:19:98:ab:ab:13:5d:57:01:0c:67:dc:1f:59:e5: 74:0e:cb:da:d5:58:b0:b6:d0:55:4a:2d:73:e8:9c: 0f:8d:1a:f2:1e:6d:1b:5d:ef:0a:b3:68:36:f4:cd: db:d3:a6:0c:c7:69:fc:61:f7:36:9f:d0:8c:cd:53: e9:b9:7e:e7:d0:0a:10:a8:41:78:d0:96:b3:c8:e6: d9:be:b4:06:09:22:65:7a:15:cd:1b:57:b2:17:21: 59:8b:87:2f:b7:be:77:b1:e3:75:da:cc:b6:91:c7: 42:da:79:47:e7:76:b9:f2:0a:a2:25:bd:75:cc:d0: 86:a7:20:4b:71:83:5e:ba:74:82:00:b6:91:63:05: 15:1c:58:f9:58:e3:2e:35:1b:b6:54:d7:89:2c:25: 3f:ae:5d:26:42:c6:d4:6e:4b:6e:d6:29:bb:a3:45: c0:47:ff:c1:d6:58:a1:13:c6:96:d4:79:ba:f5:68: 5c:1a:7d:63:4e:65:9b:d5:a6:f3:28:0f:d1:28:3d: 35:62:bb:75:0e:9f:15:0f:ee:1f:8a:22:cf:40:09: bd:ef:5c:13:ba:72:e0:64:ad:a9:9d:8b:05:e2:00: 4f:74:2b:30:3f:e4:ee:7c:c4:1f:72:cd:ed:f4:90: 85:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:60:83:AA:51:94:74:85:25:AF:06:28:6C:24:20:27:48:81:24:A8 X509v3 Authority Key Identifier: keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5a:d5:35:23:5e:64:7c:94:3d:52:93:be:7d:ba:f8:b9:07: a1:c0:3c:2e:48:bc:79:17:ba:31:91:fd:b5:e0:de:af:4a:87: 84:fb:63:a9:50:b7:80:10:48:31:a6:d1:e0:54:65:30:b2:51: c1:45:d8:1e:fd:35:86:d8:47:62:86:5b:48:a7:6f:9e:27:5b: 7d:47:8e:d8:89:45:af:2b:47:c2:4e:ff:f4:b2:26:79:cb:a5: 75:9a:da:42:f9:24:a0:09:c3:d7:1e:d1:8f:98:0d:76:16:85: e6:8f:be:6a:4c:dc:ce:3b:51:ba:59:34:df:02:83:3c:55:56: 25:83:be:40:d6:59:c3:4d:2d:ed:c8:bf:18:cb:cb:2f:ef:ea: ee:24:de:9d:18:d6:53:bb:10:32:5b:d0:f4:4c:8f:68:3f:fe: a0:8d:a7:f7:a0:64:08:5a:36:11:ad:3f:61:72:9f:4d:9c:64: 0e:5c:03:31:e8:e7:ec:04:82:1b:ee:d4:ad:39:2b:dd:1c:0e: 30:12:47:1d:22:c2:1b:69:65:ee:29:b5:17:33:18:5d:2b:d3: 06:09:c6:79:7b:cd:01:17:2f:5b:ce:7a:64:c1:7f:1b:86:75: f3:5e:29:e2:ab:69:46:45:ce:e5:a2:20:f7:51:8f:c1:69:a8: 92:65:e2:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRUQxMTAvBgNVBAUTKDk1NEE3MDFCQUEwQzkzMUQwMTc2RTQ4NUI3QTI4N0Mx MzE2NTI2MEUwHhcNMjUxMDE4MjM1ODM3WhcNMjUxMDI1MjM1ODM3WjAYMRYwFAYD VQQDEw02OGY0MjlhZC1iNzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83fiHn7ejwzUDN0W6BHpGZirqxNdVwEMZ9wfWeV0Dsva1ViwttBVSi1z6JwP jRryHm0bXe8Ks2g29M3b06YMx2n8Yfc2n9CMzVPpuX7n0AoQqEF40JazyObZvrQG CSJlehXNG1eyFyFZi4cvt753seN12sy2kcdC2nlH53a58gqiJb11zNCGpyBLcYNe unSCALaRYwUVHFj5WOMuNRu2VNeJLCU/rl0mQsbUbktu1im7o0XAR//B1lihE8aW 1Hm69WhcGn1jTmWb1abzKA/RKD01Yrt1Dp8VD+4fiiLPQAm971wTunLgZK2pnYsF 4gBPdCswP+TufMQfcs3t9JCFFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1gg6pR lHSFJa8GKGwkICdIgSSoMB8GA1UdIwQYMBaAFJVKcBuqDJMdAXbkhbeih8ExZSYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNFRC8xQUFGN0Q5NDky MjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4MEJkdVNGdDZLSHdURmxK ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xVcHdHNm9Na3gwQmR1U0Z0NktId1RGbEpnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNFRC8xQUFGN0Q5NDkyMjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4 MEJkdVNGdDZLSHdURmxKZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPWtU1I15kfJQ9UpO+fbr4uQehwDwuSLx5F7oxkf214N6vSoeE+2Op ULeAEEgxptHgVGUwslHBRdge/TWG2EdihltIp2+eJ1t9R47YiUWvK0fCTv/0siZ5 y6V1mtpC+SSgCcPXHtGPmA12FoXmj75qTNzOO1G6WTTfAoM8VVYlg75A1lnDTS3t yL8Yy8sv7+ruJN6dGNZTuxAyW9D0TI9oP/6gjaf3oGQIWjYRrT9hcp9NnGQOXAMx 6OfsBIIb7tStOSvdHA4wEkcdIsIbaWXuKbUXMxhdK9MGCcZ5e80BFy9bznpkwX8b hnXzXiniq2lGRc7loiD3UY/BaaiSZeI7 -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:50 2025 by rpki-client