$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json) Hash identifier: PpSj5MoO8cUymaQ+wDRDn3H39/QXchARdJm4hFD27ZU= Subject key identifier: 16:07:1E:D0:64:BC:86:F6:49:32:11:B3:12:E9:EA:37:68:99:08:BC Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0CBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft Manifest number: 0CA3 Signing time: Sat 18 Oct 2025 19:07:28 +0000 Manifest this update: Sat 18 Oct 2025 19:07:27 +0000 Manifest next update: Sat 25 Oct 2025 19:07:27 +0000 Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: yBfeFv5bXYyuCj5gsO/DhCSw888cYEMRM0wRXNLP4yg=) 2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: n01/3EIjRvyLbA9XmobgbcsSzY3lQa7SmWy3AZPr1nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: Oct 18 19:07:27 2025 GMT Not After : Oct 25 19:07:27 2025 GMT Subject: CN=68f3e56f-41b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:02:62:3e:f0:ec:4a:69:42:cd:57:99:21:4d: 66:5f:49:0e:76:d0:b6:a4:05:d3:4a:7d:8f:ea:6c: a8:b3:62:00:a9:41:3b:8b:f2:d0:cf:a6:8a:e4:1d: e1:91:e5:48:a7:31:c3:cc:37:70:b8:d7:18:f5:fd: f3:3e:bf:68:a9:ae:db:c3:5c:00:37:f6:9d:30:73: 21:be:83:7c:64:2f:76:2b:dd:2a:b3:20:f8:18:cc: 59:30:ac:b7:7a:2f:1c:07:e4:60:d3:7f:82:40:76: d0:af:c3:e0:4e:8a:fb:d1:97:5a:b7:53:cd:ab:97: 71:f1:88:1d:bd:8a:49:d7:e2:72:a6:c0:c0:3b:6c: 39:72:93:f8:94:60:a8:f7:31:c1:dd:5d:b7:64:30: 64:e0:d3:82:18:71:24:1a:15:ea:f2:2a:e1:47:97: e3:21:70:cf:05:71:19:56:00:cb:a6:25:ab:d3:56: 50:07:6f:42:ac:78:e8:12:c1:cc:fd:e7:0b:5d:c4: 9c:fb:ec:7a:74:e3:04:d8:bf:81:d9:fe:3a:ca:f6: 5d:65:b7:d4:69:c8:25:25:08:64:54:9d:f4:1c:87: f2:3b:b4:81:f2:35:b2:d8:b3:0b:1e:1a:e1:3b:47: 40:73:32:4c:a5:e3:cf:54:cc:7d:70:be:4c:4b:69: 77:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:07:1E:D0:64:BC:86:F6:49:32:11:B3:12:E9:EA:37:68:99:08:BC X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:54:b6:85:c6:75:2e:c1:05:8f:34:f2:76:bf:84:b2:c4:9d: 84:68:3f:ef:e8:b8:78:7e:cd:02:56:3e:26:f4:e2:ad:6f:79: 86:66:48:5b:72:8b:a0:66:02:0d:4d:14:b8:5f:81:83:45:b1: 40:33:63:c2:d8:7e:71:21:4d:d1:12:92:ba:52:64:c3:97:ef: a5:c7:9f:c8:8f:75:c3:e2:d3:be:f8:88:2c:ea:4b:9e:3a:3e: 99:d9:00:35:b2:00:58:65:66:80:9c:f5:c4:eb:b6:d5:1d:d8: 08:6b:a9:41:32:9f:40:0d:9d:da:06:7a:db:23:2c:98:64:88: e0:64:45:e0:60:dc:24:c0:2c:e1:4a:cd:da:54:2e:7e:5f:53: 00:d7:3f:23:7e:fd:20:6d:05:22:0a:42:5d:b6:44:6a:78:4b: ea:73:c1:f9:71:de:41:64:3f:0b:57:d8:e0:63:9c:f5:c6:f7: 3b:2f:74:9f:94:d6:d5:bd:27:73:d0:ba:da:80:19:33:94:0b: 97:54:a2:29:51:ae:a6:fb:d4:6d:e3:b8:21:dc:ea:8b:0e:31: a0:2e:8c:0e:a4:76:fd:54:2f:38:db:91:47:d5:6b:4e:35:23: 54:3b:f4:e8:7e:8e:70:90:6d:74:c2:65:54:1b:56:a1:13:34: 9e:2b:01:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjUxMDE4MTkwNzI3WhcNMjUxMDI1MTkwNzI3WjAYMRYwFAYD VQQDEw02OGYzZTU2Zi00MWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QJiPvDsSmlCzVeZIU1mX0kOdtC2pAXTSn2P6myos2IAqUE7i/LQz6aK5B3h keVIpzHDzDdwuNcY9f3zPr9oqa7bw1wAN/adMHMhvoN8ZC92K90qsyD4GMxZMKy3 ei8cB+Rg03+CQHbQr8PgTor70Zdat1PNq5dx8YgdvYpJ1+JypsDAO2w5cpP4lGCo 9zHB3V23ZDBk4NOCGHEkGhXq8irhR5fjIXDPBXEZVgDLpiWr01ZQB29CrHjoEsHM /ecLXcSc++x6dOME2L+B2f46yvZdZbfUacglJQhkVJ30HIfyO7SB8jWy2LMLHhrh O0dAczJMpePPVMx9cL5MS2l34QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYHHtBk vIb2STIRsxLp6jdomQi8MB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI QjJXMDVoMS11YklzWUFSamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCVLaFxnUuwQWPNPJ2v4SyxJ2EaD/v6Lh4fs0CVj4m9OKtb3mGZkhb cougZgINTRS4X4GDRbFAM2PC2H5xIU3REpK6UmTDl++lx5/Ij3XD4tO++Igs6kue Oj6Z2QA1sgBYZWaAnPXE67bVHdgIa6lBMp9ADZ3aBnrbIyyYZIjgZEXgYNwkwCzh Ss3aVC5+X1MA1z8jfv0gbQUiCkJdtkRqeEvqc8H5cd5BZD8LV9jgY5z1xvc7L3Sf lNbVvSdz0LragBkzlAuXVKIpUa6m+9Rt47gh3OqLDjGgLowOpHb9VC8425FH1WtO NSNUO/Tofo5wkG10wmVUG1ahEzSeKwFA -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:49 2025 by rpki-client