$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft File: uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json) Hash identifier: gT9wjiT57dILUBgt6EDjx4blujlWO2rwl/UHzuYkfaw= Subject key identifier: 23:70:F5:DC:E3:5E:C6:6F:35:1C:8D:A8:20:4B:79:CB:06:EE:F8:16 Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0 Certificate issuer: /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft Manifest number: 03AF Signing time: Sun 19 Oct 2025 02:41:47 +0000 Manifest this update: Sun 19 Oct 2025 02:41:46 +0000 Manifest next update: Sun 26 Oct 2025 02:41:46 +0000 Files and hashes: 1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: Iyi85fG0lP5HiRrFJMgfCghH+E8atwH03qBENijbmWA=) 2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: fCg3LsUh16wFnDfXkxVhThF2ZOUkgckgr+TaTcI9RIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0 Validity Not Before: Oct 19 02:41:46 2025 GMT Not After : Oct 26 02:41:46 2025 GMT Subject: CN=68f44fea-b770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:87:4b:c1:33:ff:72:fc:12:5e:c5:8e:49: 45:38:c8:17:8a:0d:e5:3b:c7:b4:15:e4:82:90:aa: e6:c1:83:e0:4f:ea:31:16:66:14:23:51:01:32:47: fa:72:26:1a:88:09:9a:e7:a9:10:bc:bf:71:47:ee: 12:2a:d3:a7:69:58:c0:e9:4b:39:6a:05:33:c5:69: b9:8d:59:a8:a8:86:6c:89:00:9f:17:a9:83:eb:3f: 96:8e:b3:f2:1d:c1:1e:ff:39:de:b1:11:b6:1f:29: a6:3d:d5:38:18:87:e4:02:93:eb:b0:de:c9:0b:32: 4e:99:7b:ea:13:88:84:ae:e8:c3:0b:89:14:c8:c0: ab:59:58:8f:d7:1b:21:9b:cb:7b:ce:26:22:58:11: 75:5c:1c:a5:ea:31:1e:e1:81:29:73:96:cb:c1:29: e4:23:a9:47:5e:93:c4:4e:34:82:f2:ca:43:dd:5e: 1a:cd:0e:e5:6a:69:20:f3:4f:69:25:ce:7e:21:29: 73:e7:c4:08:73:72:60:75:e5:b2:c6:66:a2:cd:a3: d2:82:7f:93:fb:44:32:5f:a9:a3:27:2b:52:c3:b8: bc:ab:78:b8:1b:bb:46:24:8b:d7:7f:fc:a9:89:3b: 2a:75:19:19:a4:f8:c5:04:79:20:81:2c:d3:12:18: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:70:F5:DC:E3:5E:C6:6F:35:1C:8D:A8:20:4B:79:CB:06:EE:F8:16 X509v3 Authority Key Identifier: keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:bc:2f:26:34:05:1d:0e:d8:ec:08:5b:ff:68:ad:d2:7c:80: 73:e9:78:2b:5b:0d:d5:74:02:ff:61:10:93:ac:78:4a:c3:2f: a7:75:9d:64:e7:a1:17:3e:dc:45:8b:6e:da:f5:fc:24:63:c2: 7e:ab:b2:46:a7:2c:2d:f6:67:33:8e:a1:ab:02:e3:fb:a8:95: b7:7e:cb:ce:63:e7:65:b6:bd:6e:e5:6c:11:90:e9:c9:0f:fd: be:de:fc:4d:fe:5a:6b:27:00:dc:b9:88:fd:a2:2a:54:a2:3c: 83:69:72:7d:60:e7:f7:4d:61:cb:af:06:bb:41:c7:79:e4:dd: 19:3f:c4:fa:30:2c:91:b5:ed:15:ef:b8:d6:87:fe:bf:59:94: 28:64:a9:7e:2f:35:bf:56:a7:27:26:c9:34:77:b8:e6:96:0a: 86:75:5e:be:bd:37:2d:33:87:ae:45:67:04:ed:0a:34:b1:46: f1:f8:f8:9f:b8:4b:c5:48:a1:0f:20:0e:13:5b:ab:05:36:28: c2:17:b3:28:60:d9:06:36:0b:25:47:a0:d8:36:23:6b:0f:92: ba:2b:93:ad:6f:ad:74:14:59:78:91:04:6e:9a:ca:6a:12:e1: d1:13:da:58:61:a7:e3:4a:2d:cf:7f:78:67:79:3c:59:b2:d8: ad:d3:7d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1Q0MxMTAvBgNVBAUTKEI4QTIyMjc3RUNDNkIxMEEzRDIwMkFBMzkwQ0NBN0ZC QjkyQTQ2RTAwHhcNMjUxMDE5MDI0MTQ2WhcNMjUxMDI2MDI0MTQ2WjAYMRYwFAYD VQQDEw02OGY0NGZlYS1iNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1KHS8Ez/3L8El7FjklFOMgXig3lO8e0FeSCkKrmwYPgT+oxFmYUI1EBMkf6 ciYaiAma56kQvL9xR+4SKtOnaVjA6Us5agUzxWm5jVmoqIZsiQCfF6mD6z+WjrPy HcEe/znesRG2HymmPdU4GIfkApPrsN7JCzJOmXvqE4iErujDC4kUyMCrWViP1xsh m8t7ziYiWBF1XByl6jEe4YEpc5bLwSnkI6lHXpPETjSC8spD3V4azQ7lamkg809p Jc5+ISlz58QIc3JgdeWyxmaizaPSgn+T+0QyX6mjJytSw7i8q3i4G7tGJIvXf/yp iTsqdRkZpPjFBHkggSzTEhjepQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNw9dzj XsZvNRyNqCBLecsG7vgWMB8GA1UdIwQYMBaAFLiiInfsxrEKPSAqo5DMp/u5Kkbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xM0U3RDcyRUFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi91S0lpZC16R3NRbzlJQ3Fqa015bi03a3FS dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3VLSWlkLXpHc1FvOUlDcWprTXluLTdrcVJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVDQy8xM0U3RDcyRUFGRTMxMUVDQTJDQjA2NkRDNEY5QUUwMi91S0lpZC16R3NR bzlJQ3Fqa015bi03a3FSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYvC8mNAUdDtjsCFv/aK3SfIBz6XgrWw3VdAL/YRCTrHhKwy+ndZ1k 56EXPtxFi27a9fwkY8J+q7JGpywt9mczjqGrAuP7qJW3fsvOY+dltr1u5WwRkOnJ D/2+3vxN/lprJwDcuYj9oipUojyDaXJ9YOf3TWHLrwa7Qcd55N0ZP8T6MCyRte0V 77jWh/6/WZQoZKl+LzW/VqcnJsk0d7jmlgqGdV6+vTctM4euRWcE7Qo0sUbx+Pif uEvFSKEPIA4TW6sFNijCF7MoYNkGNgslR6DYNiNrD5K6K5Otb610FFl4kQRumspq EuHRE9pYYafjSi3Pf3hneTxZstit032O -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:41 2025 by rpki-client