$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json) Hash identifier: gW3MLBupv2iubsISbNxjqYr+ypwWIyjHcP+ZcSOLS24= Subject key identifier: 86:27:12:33:0A:EB:30:E5:1D:35:DD:EB:52:75:62:C8:6B:D7:6C:79 Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Certificate serial: 0847 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft Manifest number: 0829 Signing time: Mon 20 Oct 2025 01:40:25 +0000 Manifest this update: Mon 20 Oct 2025 01:40:25 +0000 Manifest next update: Mon 27 Oct 2025 01:40:25 +0000 Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: XSMQIVh3EWnhE4o0YZqHE7I+sEcPuxciH6ftJJRyRkU=) 2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=) 3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=) 4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=) 5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 01:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2119 (0x847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Validity Not Before: Oct 20 01:40:25 2025 GMT Not After : Oct 27 01:40:25 2025 GMT Subject: CN=68f59309-e639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:6e:cb:e6:fd:22:c5:c7:b3:55:13:9b:94: 03:ec:45:21:68:32:dd:de:32:0f:a3:1a:ea:2c:82: 1b:cf:a6:d6:f1:e9:39:b7:23:e6:4a:16:e9:9f:26: e1:3a:76:13:be:55:8b:64:c0:67:9b:7f:26:35:54: 30:71:a5:ac:93:9b:58:d3:32:b2:33:22:57:ea:2b: b2:2a:3d:91:29:d7:21:85:83:d2:79:2d:da:a9:a7: f4:0f:b1:09:1d:65:94:68:bc:9d:0b:c3:c9:2c:8f: 95:7b:b7:b0:97:fa:34:c2:61:d9:94:36:09:8d:9a: dd:04:6b:2c:95:5f:c9:56:7b:14:60:7e:4f:ef:d6: 29:72:43:88:99:4e:22:27:c3:8e:9e:0a:dd:98:a5: d5:f1:09:98:09:5c:c6:49:11:0e:54:70:41:28:12: f7:eb:cf:b5:55:c0:03:8a:04:6d:c8:78:f3:01:e0: fd:2f:2f:0d:4d:47:7d:73:12:30:13:ca:7c:db:c6: 1f:a5:47:6e:82:4f:e0:b3:f4:51:92:8a:a3:fc:14: 2d:56:a9:ea:fe:2e:21:35:0c:68:ff:38:22:8d:c6: 33:f3:a9:38:73:69:95:7c:82:5d:18:0d:f3:90:cf: 01:3f:08:f2:5e:9e:c7:20:00:1d:d9:b3:c3:9a:3a: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:27:12:33:0A:EB:30:E5:1D:35:DD:EB:52:75:62:C8:6B:D7:6C:79 X509v3 Authority Key Identifier: keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:14:05:2c:f5:ee:39:9d:82:fd:87:08:af:3f:13:c2:72:03: 2a:29:32:05:85:eb:06:fd:04:fa:22:7a:22:fd:51:ad:f1:96: cd:e1:56:61:44:8a:ac:f2:d5:f0:77:a2:35:78:73:e6:6c:6b: 5b:4f:2d:b5:e0:0c:75:9a:a4:57:81:39:fb:cc:81:fd:fc:90: 59:08:1b:a2:03:79:a0:6d:71:cd:2a:db:36:0f:3d:a0:4f:87: 94:f0:84:70:1c:41:5f:f3:65:9c:2b:ce:b0:f8:c0:4c:4d:4d: 77:18:d1:83:d2:65:f9:20:30:d4:bc:cb:58:2a:bb:9c:8c:a2: 6c:a7:be:aa:27:2f:37:59:be:8e:b3:08:6e:c8:c8:be:7f:e4: 86:eb:76:7b:44:b4:f4:01:74:13:dc:f7:7d:db:68:85:b8:7a: 36:6d:e5:8a:3b:66:d7:9b:68:f6:e1:e5:03:13:2f:b4:4e:90: d1:6f:6d:29:b2:7f:32:18:d3:45:09:6b:30:94:d5:f9:88:21: 70:ba:79:41:5c:b1:97:88:bc:84:d7:c6:f9:70:dc:e8:b0:f8: a4:20:e1:df:c2:cd:1a:84:23:42:e4:8b:69:7f:0f:ac:82:21: b9:33:a3:d7:94:0f:3c:09:1a:06:af:fd:1e:22:63:6b:73:f7: c4:cf:59:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2 QzNBMEUxQzkwHhcNMjUxMDIwMDE0MDI1WhcNMjUxMDI3MDE0MDI1WjAYMRYwFAYD VQQDEw02OGY1OTMwOS1lNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWZuy+b9IsXHs1UTm5QD7EUhaDLd3jIPoxrqLIIbz6bW8ek5tyPmShbpnybh OnYTvlWLZMBnm38mNVQwcaWsk5tY0zKyMyJX6iuyKj2RKdchhYPSeS3aqaf0D7EJ HWWUaLydC8PJLI+Ve7ewl/o0wmHZlDYJjZrdBGsslV/JVnsUYH5P79YpckOImU4i J8OOngrdmKXV8QmYCVzGSREOVHBBKBL368+1VcADigRtyHjzAeD9Ly8NTUd9cxIw E8p828YfpUdugk/gs/RRkoqj/BQtVqnq/i4hNQxo/zgijcYz86k4c2mVfIJdGA3z kM8BPwjyXp7HIAAd2bPDmjrdxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYnEjMK 6zDlHTXd61J1Yshr12x5MB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp NFVjMzJUN2o1dk5zT2c0Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWFAUs9e45nYL9hwivPxPCcgMqKTIFhesG/QT6Inoi/VGt8ZbN4VZh RIqs8tXwd6I1eHPmbGtbTy214Ax1mqRXgTn7zIH9/JBZCBuiA3mgbXHNKts2Dz2g T4eU8IRwHEFf82WcK86w+MBMTU13GNGD0mX5IDDUvMtYKrucjKJsp76qJy83Wb6O swhuyMi+f+SG63Z7RLT0AXQT3Pd922iFuHo2beWKO2bXm2j24eUDEy+0TpDRb20p sn8yGNNFCWswlNX5iCFwunlBXLGXiLyE18b5cNzosPikIOHfws0ahCNC5Itpfw+s giG5M6PXlA88CRoGr/0eImNrc/fEz1lB -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:00 2025 by rpki-client