$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft File: uwftRksoDVf6dxhB939S6n1QeSc.mft (raw, json) Hash identifier: PJfhyYrQAZWDRBAyT1GiL7UHWamOJ4WxSP3MSOGMZYU= Subject key identifier: DB:B6:A1:17:79:52:E3:BC:B6:5F:A1:5F:1F:5B:E5:C2:8F:C5:2E:E7 Authority key identifier: BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27 Certificate issuer: /CN=A9193D85/serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927 Certificate serial: 109C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft Manifest number: 1082 Signing time: Mon 20 Oct 2025 17:50:48 +0000 Manifest this update: Mon 20 Oct 2025 17:50:48 +0000 Manifest next update: Mon 27 Oct 2025 17:50:48 +0000 Files and hashes: 1: uwftRksoDVf6dxhB939S6n1QeSc.crl (hash: v4ckfzg+Hg7jKGDNhGvD1vl2eToW0uiifpGB8NVBHL4=) 2: AB2D69A4217A11EA9AB7211BC4F9AE02.roa (hash: hPa4OatTYIMb+8b6uDB3EXHHSfu/EbUrHJIf5q9LY6E=) 3: 52138B923FCA11E9AB28853CC4F9AE02.roa (hash: F7eiYk5VKF5lCSCN/hKOx3267YakxI+D95C5/M/ItF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4252 (0x109c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193D85, serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927 Validity Not Before: Oct 20 17:50:48 2025 GMT Not After : Oct 27 17:50:48 2025 GMT Subject: CN=68f67678-4a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:78:28:0b:85:8f:88:21:e4:8c:b2:18:56: bc:9a:a8:19:cc:c1:a0:af:e9:25:ef:57:13:24:8e: 2a:2b:fb:a6:27:4f:3b:ac:01:d5:71:c2:24:38:98: ae:03:38:8c:99:81:48:a4:31:bb:54:bf:36:b0:38: b4:00:4e:a8:b2:23:7c:d0:11:f6:a2:fc:33:a4:61: f4:c9:4e:cb:9c:1b:6f:c2:bb:88:f3:19:a5:ad:1c: bd:ee:39:75:8e:52:92:14:69:9a:ad:f8:73:b3:cc: 03:37:7f:0a:16:6e:cd:49:2a:cd:6e:b7:72:e0:06: 89:a9:f0:43:7c:61:33:a2:32:2a:33:df:c8:08:8b: ad:ea:c9:d2:44:bd:4b:30:b3:ce:f6:9d:10:f3:44: d0:23:c7:59:e0:bf:ae:88:97:66:8d:ef:a6:f5:2d: 34:57:38:f9:f0:72:e5:2f:98:8d:b7:b5:bb:72:26: 59:b8:6e:c2:61:08:39:25:69:63:54:ba:bc:00:c8: 59:60:09:5d:4a:9a:18:d3:0e:bd:a4:1d:53:32:2a: 18:74:86:de:e1:ab:56:8e:fb:68:e3:e8:aa:08:af: f3:c7:bc:5a:fa:56:9d:8b:c4:07:46:3e:c9:a1:88: bf:03:44:d7:98:66:17:ce:f7:a0:aa:9b:1c:1b:e0: 25:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B6:A1:17:79:52:E3:BC:B6:5F:A1:5F:1F:5B:E5:C2:8F:C5:2E:E7 X509v3 Authority Key Identifier: keyid:BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:91:c5:37:f4:6f:4a:98:93:28:df:d9:d3:4f:3e:57:d3:44: 0a:4d:77:23:ae:a7:df:c5:2a:5f:28:61:cf:37:d2:b1:e6:6d: 71:b8:af:93:2a:fd:7a:cb:38:09:a6:37:17:3d:cf:c7:6d:97: d1:0e:99:5e:d5:22:a9:a2:13:e9:45:11:c8:c3:41:a8:7a:b9: 86:e3:ba:92:fa:58:4d:6f:7a:a1:8b:7c:ae:ea:d5:de:fb:c7: fe:72:86:6d:91:53:fb:73:44:04:c7:6c:98:b1:12:52:98:47: 53:c6:d2:67:c0:c5:6f:b6:93:a6:2a:73:c8:22:f1:58:c2:2e: 74:6e:be:d0:89:8b:51:33:63:54:e0:2a:e5:85:da:5d:b7:fe: f0:c7:1b:c4:32:32:63:c3:c2:4c:b0:c9:c3:ac:d7:11:1e:e9: 67:e6:2e:d7:69:71:27:56:d3:0a:94:9d:a3:6b:1e:63:cc:43: c9:76:dd:e7:8c:4f:fb:b8:2f:b1:1f:48:68:ca:f5:99:c9:18: a5:5c:5b:33:4a:7d:00:dd:e1:91:9f:c8:18:c9:2f:5f:c7:f8: 0d:3b:86:32:2b:06:b8:b6:cc:ed:a0:29:73:c4:6c:fb:4d:5c: 4f:84:d0:5d:2d:3f:73:b0:f2:67:b2:e5:ec:01:97:21:6f:dc: d2:04:b7:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNEODUxMTAvBgNVBAUTKEJCMDdFRDQ2NEIyODBENTdGQTc3MTg0MUY3N0Y1MkVB N0Q1MDc5MjcwHhcNMjUxMDIwMTc1MDQ4WhcNMjUxMDI3MTc1MDQ4WjAYMRYwFAYD VQQDEw02OGY2NzY3OC00YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCt4KAuFj4gh5IyyGFa8mqgZzMGgr+kl71cTJI4qK/umJ087rAHVccIkOJiu AziMmYFIpDG7VL82sDi0AE6osiN80BH2ovwzpGH0yU7LnBtvwruI8xmlrRy97jl1 jlKSFGmarfhzs8wDN38KFm7NSSrNbrdy4AaJqfBDfGEzojIqM9/ICIut6snSRL1L MLPO9p0Q80TQI8dZ4L+uiJdmje+m9S00Vzj58HLlL5iNt7W7ciZZuG7CYQg5JWlj VLq8AMhZYAldSpoY0w69pB1TMioYdIbe4atWjvto4+iqCK/zx7xa+ladi8QHRj7J oYi/A0TXmGYXzvegqpscG+AlDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu2oRd5 UuO8tl+hXx9b5cKPxS7nMB8GA1UdIwQYMBaAFLsH7UZLKA1X+ncYQfd/Uup9UHkn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4NS85MTUzMjUyMDNG QzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RWZjZkeGhCOTM5UzZuMVFl U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V3ZnRSa3NvRFZmNmR4aEI5MzlTNm4xUWVTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Q4NS85MTUzMjUyMDNGQzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RW ZjZkeGhCOTM5UzZuMVFlU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHkcU39G9KmJMo39nTTz5X00QKTXcjrqffxSpfKGHPN9Kx5m1xuK+T Kv16yzgJpjcXPc/HbZfRDple1SKpohPpRRHIw0GoermG47qS+lhNb3qhi3yu6tXe +8f+coZtkVP7c0QEx2yYsRJSmEdTxtJnwMVvtpOmKnPIIvFYwi50br7QiYtRM2NU 4Crlhdpdt/7wxxvEMjJjw8JMsMnDrNcRHuln5i7XaXEnVtMKlJ2jax5jzEPJdt3n jE/7uC+xH0hoyvWZyRilXFszSn0A3eGRn8gYyS9fx/gNO4YyKwa4tsztoClzxGz7 TVxPhNBdLT9zsPJnsuXsAZchb9zSBLd2 -----END CERTIFICATE-----Generated at Mon Oct 20 21:54:23 2025 by rpki-client