$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json) Hash identifier: PGrUkV4hWSZY9LOSTKNQUu+/HB9iG7OVbMvlo5NJEVc= Subject key identifier: CB:FF:F9:31:DB:E2:81:9C:8D:EA:C1:56:5E:B2:3F:55:12:74:10:91 Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft Manifest number: 0191 Signing time: Sun 19 Oct 2025 06:03:41 +0000 Manifest this update: Sun 19 Oct 2025 06:03:41 +0000 Manifest next update: Sun 26 Oct 2025 06:03:41 +0000 Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: SkiAOkE4PBP0rdxVSSO8LPW8H06gqK5Xen0VBFcjCEo=) 2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: aad5STWtZPNgSUZlTpHai7ItORShh/+m60YWqMbY2wU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Validity Not Before: Oct 19 06:03:41 2025 GMT Not After : Oct 26 06:03:41 2025 GMT Subject: CN=68f47f3d-088c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:1d:01:df:db:bf:cb:08:85:db:a2:28:8d: 65:b3:61:c4:9a:20:ba:ba:c8:34:18:c4:89:1a:e1: 6a:28:7d:ea:e2:39:ee:73:4a:8c:3a:e1:79:a0:48: 8d:ea:49:90:c5:b2:75:52:ba:a0:cb:46:a5:bb:d1: 39:95:73:57:1d:8a:ff:16:da:fc:45:b3:2c:38:16: 11:7b:a7:00:f9:4f:57:e5:94:0e:90:73:f5:62:51: c6:05:e5:67:ff:29:d3:b1:7e:3b:66:d7:88:ae:61: 02:93:1d:25:f0:f4:12:ea:13:2d:26:52:02:44:78: 4a:ce:fd:fb:af:57:22:8a:1f:bf:ba:ea:44:b7:42: 5d:31:1d:db:d7:92:38:d6:c9:c1:23:e4:a5:12:9d: 5e:48:86:b4:0c:6b:4f:16:37:67:eb:fa:82:9c:d8: b5:28:32:98:c0:f5:e3:2b:6e:19:2b:ad:da:0c:99: 3e:da:99:7a:f7:84:e5:9b:97:06:13:c2:1b:4c:22: ef:b3:73:e8:f8:19:fb:02:75:29:2c:8c:e8:30:f3: ae:43:e0:67:5a:b8:e8:15:e9:ef:1c:85:9c:12:81: 59:5c:c0:eb:ba:5b:14:be:53:30:30:76:16:23:2c: ef:5b:4c:0a:36:47:ec:6c:54:6d:e0:d8:fa:90:e3: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:F9:31:DB:E2:81:9C:8D:EA:C1:56:5E:B2:3F:55:12:74:10:91 X509v3 Authority Key Identifier: keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:b6:8f:f9:c6:52:8a:9a:cc:3f:ad:08:e6:3f:d4:e9:73:08: 87:e4:5e:07:76:67:96:31:a3:56:21:9d:71:09:f0:72:e2:3d: 16:08:13:8c:d8:28:7c:93:b9:b8:ee:79:78:ff:44:fa:64:da: 7a:7c:08:c5:a1:ac:67:f2:59:ee:02:7c:a5:27:17:65:54:32: ba:52:02:6e:1e:b0:90:11:3c:43:af:c7:b7:cb:06:51:b8:aa: 31:de:ec:2b:f9:31:69:d0:d4:1d:c8:c6:9b:31:4e:da:cb:0e: 19:0c:a8:f3:1b:4c:a6:56:01:d0:5e:f7:22:2a:a7:f6:27:46: d7:e1:a6:6a:e2:93:32:06:17:a4:73:40:25:cf:32:ad:80:f1: f9:52:aa:01:50:78:c5:a8:6d:31:a5:60:ad:ff:24:27:56:ed: 51:51:4f:f5:6f:ae:f3:1a:91:00:a3:a9:55:37:32:3a:f4:2f: b5:fc:df:c9:2c:14:d5:28:9c:af:a5:90:36:4b:1f:82:b7:5d: e2:0e:78:5d:90:0e:f1:55:31:0a:9a:b6:6f:fe:aa:df:b7:17: 2a:34:98:28:00:09:6b:44:96:74:dd:3c:07:65:b9:a5:c1:12: 89:a1:f5:ea:7c:31:bc:4a:39:40:90:9a:25:9e:e8:0e:5a:5f: 84:de:97:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4 MjI4RDc0NzMwHhcNMjUxMDE5MDYwMzQxWhcNMjUxMDI2MDYwMzQxWjAYMRYwFAYD VQQDEw02OGY0N2YzZC0wODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+AdAd/bv8sIhduiKI1ls2HEmiC6usg0GMSJGuFqKH3q4jnuc0qMOuF5oEiN 6kmQxbJ1Urqgy0alu9E5lXNXHYr/Ftr8RbMsOBYRe6cA+U9X5ZQOkHP1YlHGBeVn /ynTsX47ZteIrmECkx0l8PQS6hMtJlICRHhKzv37r1ciih+/uupEt0JdMR3b15I4 1snBI+SlEp1eSIa0DGtPFjdn6/qCnNi1KDKYwPXjK24ZK63aDJk+2pl694Tlm5cG E8IbTCLvs3Po+Bn7AnUpLIzoMPOuQ+BnWrjoFenvHIWcEoFZXMDrulsUvlMwMHYW IyzvW0wKNkfsbFRt4Nj6kOO4QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMv/+THb 4oGcjerBVl6yP1USdBCRMB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4 RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJto/5xlKKmsw/rQjmP9TpcwiH5F4HdmeWMaNWIZ1xCfBy4j0WCBOM 2Ch8k7m47nl4/0T6ZNp6fAjFoaxn8lnuAnylJxdlVDK6UgJuHrCQETxDr8e3ywZR uKox3uwr+TFp0NQdyMabMU7ayw4ZDKjzG0ymVgHQXvciKqf2J0bX4aZq4pMyBhek c0AlzzKtgPH5UqoBUHjFqG0xpWCt/yQnVu1RUU/1b67zGpEAo6lVNzI69C+1/N/J LBTVKJyvpZA2Sx+Ct13iDnhdkA7xVTEKmrZv/qrftxcqNJgoAAlrRJZ03TwHZbml wRKJofXqfDG8SjlAkJolnugOWl+E3pdj -----END CERTIFICATE-----Generated at Sun Oct 19 23:02:20 2025 by rpki-client