$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft File: uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json) Hash identifier: HCgsP5MsvmbIhISo03NXtGBNGqWizwzvNd9JyGw7dL0= Subject key identifier: 17:EE:39:CF:58:F2:ED:E3:86:89:0D:99:65:0A:91:E7:65:84:07:87 Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B Certificate issuer: /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft Manifest number: BD Signing time: Sun 19 Oct 2025 09:06:10 +0000 Manifest this update: Sun 19 Oct 2025 09:06:09 +0000 Manifest next update: Sun 26 Oct 2025 09:06:09 +0000 Files and hashes: 1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: YcTIOYr3lBLLrV2AW4Lnva+9mQl7Ix9I3ARGsOPs+io=) 2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: NvjP/LYwW9l6MqSSpH5THMx2WmCXtMYC8PmhjmLmzIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B Validity Not Before: Oct 19 09:06:09 2025 GMT Not After : Oct 26 09:06:09 2025 GMT Subject: CN=68f4aa02-1a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:2f:b6:c6:13:bc:d7:34:5a:98:37:28:04: 52:a8:b4:3d:ef:45:e4:e4:04:64:95:fa:da:23:da: 0d:a1:4a:a0:e7:0b:65:7c:b4:f0:05:ea:9e:b4:cf: 41:5f:a9:f5:de:0f:81:74:3d:ce:be:9f:19:fd:87: 73:55:27:3f:41:25:0d:10:1a:cf:72:d7:1f:b3:aa: c3:19:d2:a4:db:ef:78:24:06:16:0e:dd:56:aa:fe: 99:54:7c:e5:61:bc:a1:2e:b9:39:54:26:32:70:a1: 4b:5d:82:8a:37:17:bc:7c:2e:b8:29:33:7b:3a:2d: 03:05:3a:69:00:e3:a4:18:41:5b:8f:e4:e7:ca:67: dd:8e:d2:1a:da:3f:72:e2:1f:50:90:86:9e:30:03: 48:e4:ef:04:72:23:c3:30:2c:c3:8c:3a:9f:77:c9: 77:b2:bc:81:00:4f:e6:10:a8:eb:fe:da:89:ff:f6: bd:a4:24:44:a6:6e:f9:d6:14:a2:00:dd:4d:00:77: 00:b0:be:7e:ad:cc:11:56:5f:a0:c3:62:3e:0b:93: f1:28:ca:32:54:b1:91:f3:57:69:08:9f:e9:e7:37: 18:2d:44:85:4c:5f:59:64:85:66:49:15:fe:2a:3d: f4:85:d4:a5:29:e4:4c:db:8e:33:9b:51:70:fd:8b: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EE:39:CF:58:F2:ED:E3:86:89:0D:99:65:0A:91:E7:65:84:07:87 X509v3 Authority Key Identifier: keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:53:79:f3:c8:10:26:65:0a:fb:4f:6f:88:57:33:bb:b3:7a: 03:6b:a4:19:17:04:36:3c:fe:aa:b2:0f:d1:1c:e9:5c:be:0b: a5:84:35:6d:ba:d9:0f:f0:40:8b:84:7b:19:ec:cd:65:97:35: dc:d8:76:6f:d8:0f:39:61:95:f2:4a:97:8c:50:69:28:06:5d: e6:24:64:cc:a2:94:07:ce:b2:9a:4e:8c:c1:9f:8b:07:e8:5c: 9e:53:b3:d2:b7:c6:fd:c1:80:05:2c:b9:2e:75:be:37:f7:4e: 96:0a:4e:02:6e:b3:12:3d:bc:4f:34:56:0b:b9:24:c1:03:1c: 45:56:89:4b:36:64:f6:3d:3c:4b:2a:83:f8:1c:22:3d:a8:63: 71:2b:98:74:eb:af:4a:17:47:83:d6:a2:b4:31:24:48:b8:ca: b1:f8:97:85:b5:39:d8:1e:03:c2:1c:6c:67:d5:af:67:45:6f: 69:67:d3:43:a5:f1:bf:85:d7:4a:85:60:60:c7:a8:38:f7:81: ed:a2:f6:6b:8b:50:bd:7c:06:1d:7d:62:f1:af:b3:b6:d2:5a: d1:fb:43:3f:9c:9d:d6:0f:5d:f5:c5:22:16:91:a3:a0:58:30: 82:32:f9:f2:ee:50:d4:13:31:9e:ef:0e:f4:4f:e2:c3:03:7d: db:4a:8f:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKEI4MTVDRjg1MDUzNjhCQTdGOTc2NzRFOUJCMUExNDAw OTVCNEZGOUIwHhcNMjUxMDE5MDkwNjA5WhcNMjUxMDI2MDkwNjA5WjAYMRYwFAYD VQQDEw02OGY0YWEwMi0xYTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsj8vtsYTvNc0Wpg3KARSqLQ970Xk5ARklfraI9oNoUqg5wtlfLTwBeqetM9B X6n13g+BdD3Ovp8Z/YdzVSc/QSUNEBrPctcfs6rDGdKk2+94JAYWDt1Wqv6ZVHzl YbyhLrk5VCYycKFLXYKKNxe8fC64KTN7Oi0DBTppAOOkGEFbj+TnymfdjtIa2j9y 4h9QkIaeMANI5O8EciPDMCzDjDqfd8l3sryBAE/mEKjr/tqJ//a9pCREpm751hSi AN1NAHcAsL5+rcwRVl+gw2I+C5PxKMoyVLGR81dpCJ/p5zcYLUSFTF9ZZIVmSRX+ Kj30hdSlKeRM244zm1Fw/YubSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfuOc9Y 8u3jhokNmWUKkedlhAeHMB8GA1UdIwQYMBaAFLgVz4UFNoun+XZ06bsaFACVtP+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri83QkI2RjIxMDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi91QlhQaFFVMmk2ZjVkblRwdXhvVUFKVzBf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VCWFBoUVUyaTZmNWRuVHB1eG9VQUpXMF81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDg4Ri83QkI2RjIxMDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi91QlhQaFFVMmk2 ZjVkblRwdXhvVUFKVzBfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2U3nzyBAmZQr7T2+IVzO7s3oDa6QZFwQ2PP6qsg/RHOlcvgulhDVt utkP8ECLhHsZ7M1llzXc2HZv2A85YZXySpeMUGkoBl3mJGTMopQHzrKaTozBn4sH 6FyeU7PSt8b9wYAFLLkudb43906WCk4CbrMSPbxPNFYLuSTBAxxFVolLNmT2PTxL KoP4HCI9qGNxK5h0669KF0eD1qK0MSRIuMqx+JeFtTnYHgPCHGxn1a9nRW9pZ9ND pfG/hddKhWBgx6g494HtovZri1C9fAYdfWLxr7O20lrR+0M/nJ3WD131xSIWkaOg WDCCMvny7lDUEzGe7w70T+LDA33bSo/m -----END CERTIFICATE-----Generated at Mon Oct 20 21:01:12 2025 by rpki-client