$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft File: Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json) Hash identifier: A3Am/dPfVQewBfiVRgwdqxkRlYc2d723ncJHhgrVsqw= Subject key identifier: E2:BA:27:21:9E:BC:BF:C8:9D:58:81:4E:AD:F4:4D:B8:C4:61:A8:6C Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47 Certificate issuer: /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847 Certificate serial: 030F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft Manifest number: 030D Signing time: Sun 19 Oct 2025 03:14:43 +0000 Manifest this update: Sun 19 Oct 2025 03:14:42 +0000 Manifest next update: Sun 26 Oct 2025 03:14:42 +0000 Files and hashes: 1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: 7i+jH5Y8VuxtR3ljadiccs03OI5bAs+R3MgO8+KuBRE=) 2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: 90iQ52pzi3F+reOCS+hcjY5A8xSUULeYkZXVo6UNIXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847 Validity Not Before: Oct 19 03:14:42 2025 GMT Not After : Oct 26 03:14:42 2025 GMT Subject: CN=68f457a2-7b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c1:89:db:c9:99:00:28:fb:13:2f:37:87:6e: 4b:4d:e7:a2:b5:d6:75:87:c6:5a:ac:83:f0:e7:1f: 1f:03:fc:a6:4e:c4:57:b9:be:fe:89:4e:db:e5:80: ca:e6:24:e5:84:cb:41:a2:c5:6d:b2:32:31:31:4c: 56:43:69:74:63:13:38:b8:4e:9a:2b:e3:37:e2:06: 22:ae:f1:d4:52:c2:e7:21:ac:6d:23:a1:fb:73:e8: 84:ef:ce:07:30:66:d0:3d:44:87:cf:9a:ab:e9:e2: 3a:fc:41:46:49:0a:ae:e4:d9:0e:9c:2c:5a:f1:33: c3:3c:46:ed:7d:97:ec:da:b1:ee:32:15:b6:c8:6c: f3:57:f7:25:db:e5:ed:e2:b2:0a:b5:e2:b4:58:f1: cb:6f:93:da:5e:cb:88:db:94:b3:14:84:a8:ce:c9: 2b:74:8d:c6:20:7f:ba:51:4d:59:24:f1:1e:13:48: 7e:45:18:99:9f:27:a2:1b:15:3a:fb:3d:7b:b6:34: 3f:c1:c8:04:28:f3:fb:0b:3e:3e:30:db:71:8e:b0: cf:8b:4f:7c:3b:94:3e:a2:da:26:1c:9f:86:0d:a9: 26:04:5e:52:0d:6a:56:fc:ad:5a:08:b1:77:4f:1f: 5b:3e:b9:55:e3:11:b0:8f:22:10:bc:1b:55:ef:be: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BA:27:21:9E:BC:BF:C8:9D:58:81:4E:AD:F4:4D:B8:C4:61:A8:6C X509v3 Authority Key Identifier: keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:41:6f:0c:08:73:04:f6:bb:d4:91:16:92:b2:1d:05:a2:0b: a0:f8:69:5f:45:6d:2f:ce:3f:ae:48:bd:73:11:f3:5c:41:28: 2a:a5:98:c2:c5:a9:33:8b:1a:94:89:d1:fe:3c:44:67:60:d4: a7:44:14:4d:17:05:f5:7d:1d:69:03:59:3a:29:24:ed:ea:d7: 3f:e9:af:ad:50:56:4e:76:05:f6:b3:d7:35:bb:6e:36:1e:fb: 10:6d:14:01:c0:2a:e7:74:9d:d2:a8:26:52:30:31:4a:57:c1: 55:df:0b:f2:24:b8:21:15:10:05:8a:fb:b2:6b:cb:83:83:bf: 38:61:e3:4c:84:e6:22:59:c4:39:f4:53:a3:42:df:07:e0:2c: 5c:6b:e1:42:8d:50:fb:9d:cd:6c:8c:9b:c3:f3:e5:91:c4:bf: d9:75:9a:b3:b4:a5:03:14:1c:25:0d:3d:52:10:69:0f:ed:48: 3e:d0:90:fb:ea:ff:31:46:65:f6:e5:56:de:78:42:6d:b5:b5: f7:ed:cd:04:e2:42:e2:2b:7d:94:b2:fd:d1:88:0e:5d:dd:75: be:4f:18:ab:dd:c9:08:90:3b:dc:15:5a:1c:09:5c:95:9a:8f: 5b:fd:64:7f:b4:1c:80:44:06:61:89:cc:ba:17:93:5a:32:f9: c6:8b:93:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1RjExMTAvBgNVBAUTKDUyNUVBMjZCNkE2MTdFNUFBRkMwNTQyM0NDRTU4OERF MTlFQzU4NDcwHhcNMjUxMDE5MDMxNDQyWhcNMjUxMDI2MDMxNDQyWjAYMRYwFAYD VQQDEw02OGY0NTdhMi03YjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MGJ28mZACj7Ey83h25LTeeitdZ1h8ZarIPw5x8fA/ymTsRXub7+iU7b5YDK 5iTlhMtBosVtsjIxMUxWQ2l0YxM4uE6aK+M34gYirvHUUsLnIaxtI6H7c+iE784H MGbQPUSHz5qr6eI6/EFGSQqu5NkOnCxa8TPDPEbtfZfs2rHuMhW2yGzzV/cl2+Xt 4rIKteK0WPHLb5PaXsuI25SzFISozskrdI3GIH+6UU1ZJPEeE0h+RRiZnyeiGxU6 +z17tjQ/wcgEKPP7Cz4+MNtxjrDPi098O5Q+otomHJ+GDakmBF5SDWpW/K1aCLF3 Tx9bPrlV4xGwjyIQvBtV774QTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOK6JyGe vL/InViBTq30TbjEYahsMB8GA1UdIwQYMBaAFFJeomtqYX5ar8BUI8zliN4Z7FhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVGMS9DQjY2MzMwQUVF MkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZscXZ3RlFqek9XSTNobnNX RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VsNmlhMnBoZmxxdndGUWp6T1dJM2huc1dFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVGMS9DQjY2MzMwQUVFMkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZs cXZ3RlFqek9XSTNobnNXRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUQW8MCHME9rvUkRaSsh0Fogug+GlfRW0vzj+uSL1zEfNcQSgqpZjC xakzixqUidH+PERnYNSnRBRNFwX1fR1pA1k6KSTt6tc/6a+tUFZOdgX2s9c1u242 HvsQbRQBwCrndJ3SqCZSMDFKV8FV3wvyJLghFRAFivuya8uDg784YeNMhOYiWcQ5 9FOjQt8H4Cxca+FCjVD7nc1sjJvD8+WRxL/ZdZqztKUDFBwlDT1SEGkP7Ug+0JD7 6v8xRmX25VbeeEJttbX37c0E4kLiK32Usv3RiA5d3XW+Txir3ckIkDvcFVocCVyV mo9b/WR/tByARAZhicy6F5NaMvnGi5NW -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:20 2025 by rpki-client