$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: FCvyOybx8AnRjWucLVLZ4H9m2AqX3GsRsClxvrZiQmI= Subject key identifier: 2F:28:B8:D1:77:4A:76:65:35:40:44:0F:C4:31:CB:02:F4:E1:2A:8A Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 09CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 09C9 Signing time: Mon 20 Oct 2025 20:47:18 +0000 Manifest this update: Mon 20 Oct 2025 20:47:17 +0000 Manifest next update: Mon 27 Oct 2025 20:47:17 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: E5yyWc89cf247x2K79R8arnBhDrAqLowPtFkTszUwSU=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2511 (0x9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: Oct 20 20:47:17 2025 GMT Not After : Oct 27 20:47:17 2025 GMT Subject: CN=68f69fd6-99b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:8c:3e:54:e6:4b:e4:3a:44:2c:94:6f:96: 79:74:48:76:60:54:6a:13:6f:6e:84:51:03:ed:72: f0:26:7d:d7:ed:82:5f:eb:4b:51:35:96:d3:92:41: c7:3f:d8:19:ad:18:75:b4:dd:8b:47:7b:1c:12:e4: 95:3e:03:ec:79:96:a7:ff:54:02:15:a4:af:18:c9: 55:f2:5b:eb:de:2c:2a:31:cf:cb:d9:d2:ac:26:e3: b1:1f:e5:f1:c9:f6:fd:1f:ae:fb:5b:32:0d:f7:7e: 08:92:2a:c0:2e:01:f4:0d:12:7a:fd:2a:a0:b2:12: 1e:c4:16:c2:53:e8:27:f3:6c:59:30:1b:35:5f:5f: 9d:2e:c8:5f:b3:b7:00:38:11:84:49:60:b8:9a:b4: bb:91:ff:ff:b0:81:f4:a9:58:5d:59:04:f9:1f:8f: b6:74:ae:83:4a:34:68:07:52:a7:7c:c1:98:19:0d: db:43:74:0e:eb:67:53:a2:5d:b7:05:a1:ef:bd:32: 53:0c:2d:f6:97:e2:16:f7:00:a9:b1:48:a1:60:b0: 92:60:e9:37:68:4f:45:4e:4e:ad:f6:ad:3e:36:ea: eb:59:5c:f7:63:1d:16:4b:87:5b:9b:31:f4:1a:14: fb:02:87:e8:b4:dc:69:db:8d:66:62:b9:31:c1:9d: 2e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:28:B8:D1:77:4A:76:65:35:40:44:0F:C4:31:CB:02:F4:E1:2A:8A X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:3e:67:05:e9:22:eb:41:fa:eb:36:bd:f3:a1:cf:44:de:61: 42:1e:0f:91:05:aa:da:1b:ce:fc:af:6b:85:26:ba:58:dd:b2: 01:b3:e3:97:9d:49:18:34:83:f0:5a:02:5f:f8:4c:f3:35:26: 0c:70:00:92:eb:76:72:75:4a:55:7d:ec:cf:8d:08:a3:44:11: 0a:58:19:33:98:7d:2c:2b:e8:ec:a6:d9:ed:6a:da:e7:13:a6: 8f:b5:bb:60:00:9f:74:ea:4a:7e:8c:4b:8b:1b:64:a2:99:66: 8a:79:d9:04:61:28:9f:a9:61:c8:ee:0e:72:38:7d:14:2e:7d: 92:86:47:4a:0d:81:13:98:9d:64:60:97:f3:ae:dd:24:26:15: b3:1e:57:08:01:7b:9d:80:ba:30:6f:fc:dc:ee:ce:58:93:f2: 94:40:40:a2:44:f1:de:0e:a1:20:92:42:06:ba:a4:ca:fb:8a: ef:00:be:d7:0f:c3:f7:bf:80:ac:6e:06:c1:09:c0:7f:98:0e: fb:db:8f:fc:9b:a1:cd:b5:99:f1:b9:20:33:e6:0e:52:98:93: 18:02:8b:01:fc:37:ce:7f:04:75:46:2d:4d:6f:80:0e:34:a9: 5a:3a:9f:af:2e:0c:8d:ff:62:c1:73:7d:c5:33:18:e8:40:2b: d4:04:bc:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjUxMDIwMjA0NzE3WhcNMjUxMDI3MjA0NzE3WjAYMRYwFAYD VQQDEw02OGY2OWZkNi05OWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAym+MPlTmS+Q6RCyUb5Z5dEh2YFRqE29uhFED7XLwJn3X7YJf60tRNZbTkkHH P9gZrRh1tN2LR3scEuSVPgPseZan/1QCFaSvGMlV8lvr3iwqMc/L2dKsJuOxH+Xx yfb9H677WzIN934IkirALgH0DRJ6/SqgshIexBbCU+gn82xZMBs1X1+dLshfs7cA OBGESWC4mrS7kf//sIH0qVhdWQT5H4+2dK6DSjRoB1KnfMGYGQ3bQ3QO62dTol23 BaHvvTJTDC32l+IW9wCpsUihYLCSYOk3aE9FTk6t9q0+NurrWVz3Yx0WS4dbmzH0 GhT7AofotNxp241mYrkxwZ0uyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8ouNF3 SnZlNUBED8QxywL04SqKMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHPmcF6SLrQfrrNr3zoc9E3mFCHg+RBaraG878r2uFJrpY3bIBs+OX nUkYNIPwWgJf+EzzNSYMcACS63ZydUpVfezPjQijRBEKWBkzmH0sK+jsptntatrn E6aPtbtgAJ906kp+jEuLG2SimWaKedkEYSifqWHI7g5yOH0ULn2ShkdKDYETmJ1k YJfzrt0kJhWzHlcIAXudgLowb/zc7s5Yk/KUQECiRPHeDqEgkkIGuqTK+4rvAL7X D8P3v4CsbgbBCcB/mA7724/8m6HNtZnxuSAz5g5SmJMYAosB/DfOfwR1Ri1Nb4AO NKlaOp+vLgyN/2LBc33FMxjoQCvUBLxW -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:22 2025 by rpki-client