$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft File: rUZnzujj-e3_kuf7uzf_xmwAc6I.mft (raw, json) Hash identifier: BsRURaMNCD5rx8JmZXF8pZU9WtYU7LDaJfX/W4ZPF80= Subject key identifier: 92:32:62:CC:EF:CA:F0:91:20:6D:93:F9:BB:D8:6D:BF:8E:D4:D1:2D Authority key identifier: AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2 Certificate issuer: /CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft Manifest number: 01CC Signing time: Sun 19 Oct 2025 05:19:48 +0000 Manifest this update: Sun 19 Oct 2025 05:19:48 +0000 Manifest next update: Sun 26 Oct 2025 05:19:48 +0000 Files and hashes: 1: rUZnzujj-e3_kuf7uzf_xmwAc6I.crl (hash: cnkgCqA90u+CvLrevNzx3bKdzBUziHQVGKN/nJHdmKo=) 2: D016C916EF5A11EDA6863E67C4F9AE02.roa (hash: eiPnVd5qH0st8XKPTvL7lm0W7OhTr1gyWFD5Z01ogbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C0F6, serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2 Validity Not Before: Oct 19 05:19:48 2025 GMT Not After : Oct 26 05:19:48 2025 GMT Subject: CN=68f474f4-a5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:8d:9a:4b:60:0a:02:0f:69:83:28:4e:9c: 69:79:a6:b4:37:83:26:30:7c:19:30:ba:2f:4a:c3: e0:de:8c:2b:22:14:5a:f0:fc:d4:0c:1d:35:4d:c0: 6a:be:cd:a4:5a:98:fa:84:e5:f7:7d:60:42:0b:b6: 89:99:4a:74:b7:ae:f1:7d:25:4f:f3:94:df:fe:9e: a6:80:59:a7:28:0b:cf:72:4a:ed:09:19:90:40:80: c6:0a:c7:79:11:be:02:36:f6:ad:e4:80:30:80:27: fd:f7:f1:1e:9e:a0:7a:b3:b1:15:3c:74:6e:73:d2: 4a:87:f7:34:fd:ca:f5:d1:55:f3:01:91:3e:4a:a1: 21:94:87:2c:d0:d3:22:9a:c3:5e:de:de:cc:e5:90: f5:83:5f:d8:8f:0d:a2:4d:37:ec:8d:a3:3d:f1:ef: 11:57:fd:80:1a:53:95:7c:dd:99:f9:83:88:66:dc: e3:ba:89:6e:70:98:c8:66:23:e8:b5:8e:75:3c:7a: f6:8e:8e:4f:e4:5d:9e:09:ff:c9:8d:ca:f8:0c:2e: d2:a0:85:43:d3:6f:90:2c:66:e0:7c:3d:0e:03:e8: 92:5e:cc:30:25:97:88:b4:a9:89:d8:75:67:06:ee: 5e:7d:83:ab:20:95:de:c8:1c:cb:00:9c:44:8a:4f: 09:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:32:62:CC:EF:CA:F0:91:20:6D:93:F9:BB:D8:6D:BF:8E:D4:D1:2D X509v3 Authority Key Identifier: keyid:AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8d:6f:33:8b:35:08:d8:b0:3e:2a:0e:38:9e:b6:30:30:f0: 9a:f3:90:49:20:5b:a8:d5:fc:86:46:4f:63:a5:f3:27:2f:6f: a8:35:9d:11:cd:1e:b6:49:47:ae:93:6f:74:45:45:6f:ff:96: 82:8b:9c:15:aa:d8:39:42:a6:78:e6:2e:1c:29:43:bd:85:fa: 40:37:4a:e0:07:23:da:61:3b:81:ce:dc:2e:19:73:96:9d:d6: 60:ca:3d:a9:76:3b:b1:7c:4d:27:e3:02:ab:98:9b:05:52:74: 68:5c:fc:48:54:40:d2:c7:36:39:d2:ac:ed:7c:8b:bd:f8:e7: 8d:fd:d6:02:27:03:ff:a8:0d:b2:d2:b3:5e:5c:2e:e3:21:71: be:c4:76:29:78:04:0c:92:79:40:fa:60:e9:d3:b7:d8:c2:29: fc:75:71:3d:10:90:e7:17:d9:35:a3:ce:fd:0b:c7:b8:c1:85: 88:bf:45:ca:0e:ec:40:a5:bf:b3:8f:5b:a1:cd:14:f0:22:75: 57:e6:b6:61:b2:f1:fe:cf:46:e4:3e:64:cc:63:25:36:61:12: cb:e3:08:0e:f6:bc:fc:d0:c7:aa:a7:f1:f0:86:fd:d6:60:fe: a2:2f:0e:fb:bd:ad:f3:ac:3f:c2:f2:4e:28:04:59:76:cd:c7: ea:78:d5:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMwRjYxMTAvBgNVBAUTKEFENDY2N0NFRThFM0Y5RURGRjkyRTdGQkJCMzdGRkM2 NkMwMDczQTIwHhcNMjUxMDE5MDUxOTQ4WhcNMjUxMDI2MDUxOTQ4WjAYMRYwFAYD VQQDEw02OGY0NzRmNC1hNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq6NmktgCgIPaYMoTpxpeaa0N4MmMHwZMLovSsPg3owrIhRa8PzUDB01TcBq vs2kWpj6hOX3fWBCC7aJmUp0t67xfSVP85Tf/p6mgFmnKAvPckrtCRmQQIDGCsd5 Eb4CNvat5IAwgCf99/EenqB6s7EVPHRuc9JKh/c0/cr10VXzAZE+SqEhlIcs0NMi msNe3t7M5ZD1g1/Yjw2iTTfsjaM98e8RV/2AGlOVfN2Z+YOIZtzjuolucJjIZiPo tY51PHr2jo5P5F2eCf/Jjcr4DC7SoIVD02+QLGbgfD0OA+iSXswwJZeItKmJ2HVn Bu5efYOrIJXeyBzLAJxEik8JyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIyYszv yvCRIG2T+bvYbb+O1NEtMB8GA1UdIwQYMBaAFK1GZ87o4/nt/5Ln+7s3/8ZsAHOi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzBGNi9EMkJCNzU1QUVG NEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1lM19rdWY3dXpmX3htd0Fj NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVWm56dWpqLWUzX2t1Zjd1emZfeG13QWM2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzBGNi9EMkJCNzU1QUVGNEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1l M19rdWY3dXpmX3htd0FjNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbjW8zizUI2LA+Kg44nrYwMPCa85BJIFuo1fyGRk9jpfMnL2+oNZ0R zR62SUeuk290RUVv/5aCi5wVqtg5QqZ45i4cKUO9hfpAN0rgByPaYTuBztwuGXOW ndZgyj2pdjuxfE0n4wKrmJsFUnRoXPxIVEDSxzY50qztfIu9+OeN/dYCJwP/qA2y 0rNeXC7jIXG+xHYpeAQMknlA+mDp07fYwin8dXE9EJDnF9k1o879C8e4wYWIv0XK DuxApb+zj1uhzRTwInVX5rZhsvH+z0bkPmTMYyU2YRLL4wgO9rz80Meqp/Hwhv3W YP6iLw77va3zrD/C8k4oBFl2zcfqeNVz -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:33 2025 by rpki-client