$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft File: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json) Hash identifier: zgKqoLsyLQY6HIgWtfvThQFE1e6ZUYaTxWlJJi2daRw= Subject key identifier: C1:17:55:84:34:02:EA:25:A5:A7:9F:CE:E3:2C:CC:77:B0:93:53:81 Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 Certificate issuer: /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft Manifest number: 01F6 Signing time: Sun 19 Oct 2025 04:51:31 +0000 Manifest this update: Sun 19 Oct 2025 04:51:30 +0000 Manifest next update: Sun 26 Oct 2025 04:51:30 +0000 Files and hashes: 1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: A8XSRuSI9FpkRwmAAE+Ki9CwIym/sBg3kCqJCC9AqRY=) 2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: ztxAi6NVLvlOVRaY5LiA8lZVY+4GBUWq8sHQO2NcSn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Validity Not Before: Oct 19 04:51:30 2025 GMT Not After : Oct 26 04:51:30 2025 GMT Subject: CN=68f46e52-aba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:81:b1:6b:f0:c7:84:95:ed:b3:31:ab:a0: 08:67:a4:e2:03:2d:1a:54:9e:2b:b4:28:1d:63:aa: dc:fd:1e:2f:aa:5d:be:14:c0:59:3c:cc:7b:15:7b: 88:7e:fe:59:2b:e5:fa:57:95:aa:5c:b2:f6:b5:06: 40:4f:e0:1a:92:b1:21:b8:46:b9:f8:fb:f7:09:40: 5c:e7:0a:45:26:62:0d:bd:92:6e:84:6b:4c:1e:4f: 6f:b2:5f:a5:5e:55:a4:41:7d:5e:63:b3:d4:12:50: 1a:a8:49:53:ea:05:62:87:e7:96:2f:19:fb:e8:f4: b8:6b:4d:bb:06:44:ab:8d:6c:b7:63:47:cb:af:b7: 18:2c:8f:f4:37:b4:85:ab:2d:dc:27:43:70:52:3a: 5f:8b:ac:13:bd:c9:99:6a:9a:e5:ca:33:5a:d2:d2: ad:62:fb:c9:c5:aa:93:a1:7b:f3:c9:d6:ff:7f:f1: 61:3e:52:74:2e:b6:c8:7d:0c:38:da:eb:9d:06:b2: cb:91:46:ba:78:56:84:fc:56:29:2f:9a:55:d5:08: 54:9d:2e:18:f6:dd:87:f9:21:bd:41:c7:24:57:82: 16:ce:86:b0:9e:e1:09:ad:81:b9:4e:7b:0a:3d:10: 70:f5:ba:ff:ed:d3:e7:6b:bd:6e:a2:31:e4:cb:6c: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:17:55:84:34:02:EA:25:A5:A7:9F:CE:E3:2C:CC:77:B0:93:53:81 X509v3 Authority Key Identifier: keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:5b:09:4f:12:94:87:bc:7e:a0:e5:97:6b:ac:be:78:dc:91: d2:ea:ef:fd:af:f4:b0:48:0d:61:86:d9:8d:bd:2e:5c:1f:46: 23:56:b6:0d:be:0c:23:40:7d:33:68:bf:94:7a:09:c1:30:39: f1:ac:a5:63:3f:99:6c:bf:26:ab:76:4e:87:e9:da:7d:99:c3: d9:ea:88:aa:3a:0c:0e:72:b4:29:7d:a5:0e:0b:02:6a:0f:df: 74:4c:aa:0f:81:3f:67:c2:ca:9b:4c:12:f3:46:57:ce:06:e8: be:0c:0b:17:a1:b2:2c:71:e6:ed:63:46:7f:0e:e8:d0:53:d1: 4f:0a:4f:c0:3b:a6:81:11:ab:c3:aa:40:96:bc:3c:f8:78:95: 4d:4d:66:7d:bd:8f:44:ad:a8:a1:b5:70:d4:ca:cd:30:64:b8: 8f:e5:02:db:33:87:00:e3:51:87:a8:d1:69:93:28:44:06:31: 71:de:5b:fe:9f:50:bf:87:f4:d8:f1:21:8e:e9:9b:3f:1d:6a: e0:d6:e4:6e:6c:74:84:f2:2e:d1:98:90:fb:34:f1:c3:ba:fb: 5e:91:44:0d:87:36:00:cd:b9:ef:a7:12:61:2b:dd:f3:dd:76: 5e:82:a6:04:5c:9b:cb:86:9c:fb:8b:84:a0:2a:e0:11:02:a2: 0d:dd:ee:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMjIxMTAvBgNVBAUTKEJCNEZBRTg1NTQwQTVBRDlGOTNDQjQ4MkM0NUM5NTc2 RjUyQTNCRjQwHhcNMjUxMDE5MDQ1MTMwWhcNMjUxMDI2MDQ1MTMwWjAYMRYwFAYD VQQDEw02OGY0NmU1Mi1hYmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0CBsWvwx4SV7bMxq6AIZ6TiAy0aVJ4rtCgdY6rc/R4vql2+FMBZPMx7FXuI fv5ZK+X6V5WqXLL2tQZAT+AakrEhuEa5+Pv3CUBc5wpFJmINvZJuhGtMHk9vsl+l XlWkQX1eY7PUElAaqElT6gVih+eWLxn76PS4a027BkSrjWy3Y0fLr7cYLI/0N7SF qy3cJ0NwUjpfi6wTvcmZaprlyjNa0tKtYvvJxaqToXvzydb/f/FhPlJ0LrbIfQw4 2uudBrLLkUa6eFaE/FYpL5pV1QhUnS4Y9t2H+SG9QcckV4IWzoawnuEJrYG5TnsK PRBw9br/7dPna71uojHky2zXuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEXVYQ0 AuolpaefzuMszHewk1OBMB8GA1UdIwQYMBaAFLtProVUClrZ+Ty0gsRclXb1Kjv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEyMi8wRkQ0RUY0RUFF RUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0bjVQTFNDeEZ5VmR2VXFP X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UwLXVoVlFLV3RuNVBMU0N4RnlWZHZVcU9fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEyMi8wRkQ0RUY0RUFFRUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0 bjVQTFNDeEZ5VmR2VXFPX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACWwlPEpSHvH6g5ZdrrL543JHS6u/9r/SwSA1hhtmNvS5cH0YjVrYN vgwjQH0zaL+UegnBMDnxrKVjP5lsvyardk6H6dp9mcPZ6oiqOgwOcrQpfaUOCwJq D990TKoPgT9nwsqbTBLzRlfOBui+DAsXobIscebtY0Z/DujQU9FPCk/AO6aBEavD qkCWvDz4eJVNTWZ9vY9EraihtXDUys0wZLiP5QLbM4cA41GHqNFpkyhEBjFx3lv+ n1C/h/TY8SGO6Zs/HWrg1uRubHSE8i7RmJD7NPHDuvtekUQNhzYAzbnvpxJhK93z 3XZegqYEXJvLhpz7i4SgKuARAqIN3e5g -----END CERTIFICATE-----Generated at Mon Oct 20 10:51:32 2025 by rpki-client