$ rpki-client -vvf rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.mft File: uuVjDSphMw-sujf4zP3PiSgH8EU.mft (raw, json) Hash identifier: 9jLE5vtGeoPGQSYB9lXOqge4crtzlE4SY/I2aIH+wcY= Subject key identifier: 38:E5:42:3B:8F:C9:F4:BC:3E:CE:16:F2:71:4D:B6:34:17:91:6F:D4 Authority key identifier: BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45 Certificate issuer: /CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045 Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.mft Manifest number: 072A Signing time: Sat 18 Oct 2025 23:16:56 +0000 Manifest this update: Sat 18 Oct 2025 23:16:56 +0000 Manifest next update: Sat 25 Oct 2025 23:16:56 +0000 Files and hashes: 1: uuVjDSphMw-sujf4zP3PiSgH8EU.crl (hash: q3RrVWatfhGV0fhmBGY+emCZJfaTV9Wl7vgFzG3NpSw=) 2: 26A7AD3CBCEA11EF8B15B963C4F9AE02.roa (hash: NIkIlK6PYVblk/b10VV99eCfawXco9+WWJ0yiTeebmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E157, serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045 Validity Not Before: Oct 18 23:16:56 2025 GMT Not After : Oct 25 23:16:56 2025 GMT Subject: CN=68f41fe8-2933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:8f:76:fb:41:8c:52:8c:30:e0:de:90:75: 95:f8:7e:2e:5b:af:0b:6c:8b:a2:ac:54:ef:33:b9: 73:c4:54:cd:19:83:cd:f0:e8:08:39:e5:87:43:78: d0:7e:d3:80:38:f8:21:ab:1a:5b:d2:05:87:6a:69: b1:85:10:07:64:b4:73:71:a7:2d:85:44:93:fa:05: 98:f2:e6:ff:9c:28:6f:20:c7:ff:1b:9f:0e:12:c4: d0:75:fa:be:01:a3:ea:2f:6e:6e:de:50:56:08:c2: 34:e3:0c:c1:ba:d4:79:4b:aa:92:db:6e:41:84:b4: a2:aa:44:39:29:43:db:8c:23:13:37:ac:86:ee:e7: bb:62:df:62:69:95:be:4e:a3:cf:76:16:e2:76:7e: 82:7b:fa:ff:03:f3:0a:28:e4:0d:88:e5:c1:e3:b7: 56:39:b1:48:cd:e2:c8:35:aa:3a:00:b7:37:72:bc: 55:70:72:1f:8b:46:77:ee:c1:0f:a3:ca:67:3c:cd: 2d:60:d9:75:85:d3:48:d0:67:66:18:a0:f3:95:9f: 74:f8:b7:7f:5c:6b:8d:f3:f3:d8:38:17:ba:7d:3f: 53:ff:2c:55:55:ad:a5:e7:c0:81:bf:de:f5:c5:00: e5:a8:e7:c9:f6:1e:b9:fd:1a:b5:35:69:02:d0:35: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E5:42:3B:8F:C9:F4:BC:3E:CE:16:F2:71:4D:B6:34:17:91:6F:D4 X509v3 Authority Key Identifier: keyid:BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d8:2b:33:d6:ba:51:4d:c9:13:ee:ed:b2:c3:09:3b:8d:fe: a4:1c:a3:59:f8:b3:a6:de:41:73:79:4d:2b:49:ac:11:0f:4a: bf:dc:81:1f:5d:59:77:16:42:6d:b3:33:7f:b2:a2:aa:49:f9: ed:c0:02:72:fa:2e:2f:63:4e:20:5d:89:76:47:15:9a:62:c2: dc:c1:71:e9:75:35:a0:37:f8:d2:32:4b:9c:c2:d0:7a:20:06: 04:f9:da:f0:65:59:19:e6:38:4d:98:21:9a:b0:21:1e:6c:ec: a6:5e:17:4d:a9:92:a8:bc:3c:27:52:61:0a:02:42:f8:24:08: 34:8e:71:0d:d0:be:63:ed:66:fc:7b:f6:25:b2:19:35:c9:10: 7f:56:92:96:fd:91:7a:11:91:ef:c1:3e:28:b5:fb:72:ef:2b: 14:04:68:0a:61:48:99:b8:b4:5e:90:2e:ff:d2:41:5a:f6:92: 43:23:fc:0f:98:2f:1d:28:ba:df:34:95:f4:fe:53:a4:4d:76: b4:b5:e4:f4:0e:ea:b7:c9:01:2f:72:e7:2c:92:98:dd:fa:c9: c5:28:14:ed:82:dc:7f:1b:51:62:db:fd:02:99:f5:44:b8:38: 70:b8:58:9d:ea:50:68:3a:05:aa:82:ac:d8:6d:69:7a:d9:be: cd:e5:b2:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxNTcxMTAvBgNVBAUTKEJBRTU2MzBEMkE2MTMzMEZBQ0JBMzdGOENDRkRDRjg5 MjgwN0YwNDUwHhcNMjUxMDE4MjMxNjU2WhcNMjUxMDI1MjMxNjU2WjAYMRYwFAYD VQQDEw02OGY0MWZlOC0yOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUuPdvtBjFKMMODekHWV+H4uW68LbIuirFTvM7lzxFTNGYPN8OgIOeWHQ3jQ ftOAOPghqxpb0gWHammxhRAHZLRzcacthUST+gWY8ub/nChvIMf/G58OEsTQdfq+ AaPqL25u3lBWCMI04wzButR5S6qS225BhLSiqkQ5KUPbjCMTN6yG7ue7Yt9iaZW+ TqPPdhbidn6Ce/r/A/MKKOQNiOXB47dWObFIzeLINao6ALc3crxVcHIfi0Z37sEP o8pnPM0tYNl1hdNI0GdmGKDzlZ90+Ld/XGuN8/PYOBe6fT9T/yxVVa2l58CBv971 xQDlqOfJ9h65/Rq1NWkC0DVjLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjlQjuP yfS8Ps4W8nFNtjQXkW/UMB8GA1UdIwQYMBaAFLrlYw0qYTMPrLo3+Mz9z4koB/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTE1Ny9FM0FGOTQ5QzU5 RTAxMUVCQTkxNjEzNTJDNEY5QUUwMi91dVZqRFNwaE13LXN1amY0elAzUGlTZ0g4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V1VmpEU3BoTXctc3VqZjR6UDNQaVNnSDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTE1Ny9FM0FGOTQ5QzU5RTAxMUVCQTkxNjEzNTJDNEY5QUUwMi91dVZqRFNwaE13 LXN1amY0elAzUGlTZ0g4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG2Csz1rpRTckT7u2ywwk7jf6kHKNZ+LOm3kFzeU0rSawRD0q/3IEf XVl3FkJtszN/sqKqSfntwAJy+i4vY04gXYl2RxWaYsLcwXHpdTWgN/jSMkucwtB6 IAYE+drwZVkZ5jhNmCGasCEebOymXhdNqZKovDwnUmEKAkL4JAg0jnEN0L5j7Wb8 e/Ylshk1yRB/VpKW/ZF6EZHvwT4otfty7ysUBGgKYUiZuLRekC7/0kFa9pJDI/wP mC8dKLrfNJX0/lOkTXa0teT0Duq3yQEvcucskpjd+snFKBTtgtx/G1Fi2/0CmfVE uDhwuFid6lBoOgWqgqzYbWl62b7N5bJn -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:23 2025 by rpki-client