$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json) Hash identifier: 5sd75aegIIZAIjv3Z/YTedAcHGg3a8jtL8D2DKfEvKk= Subject key identifier: CB:B5:57:77:C1:BF:27:B2:4B:35:6E:F7:67:23:55:3F:2F:66:DE:D9 Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Certificate serial: 0B71 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft Manifest number: 0B68 Signing time: Sat 18 Oct 2025 19:56:50 +0000 Manifest this update: Sat 18 Oct 2025 19:56:49 +0000 Manifest next update: Sat 25 Oct 2025 19:56:49 +0000 Files and hashes: 1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: ZFicKSMPdunLfeQGwbdBw7NWD+iNH2QCYS40k3VPpEo=) 2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: K8liO7Xk31uaDD5yrLQ/2bkKZExCc4ANVhaCHC181Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2929 (0xb71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Validity Not Before: Oct 18 19:56:49 2025 GMT Not After : Oct 25 19:56:49 2025 GMT Subject: CN=68f3f101-3a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dd:c6:f8:30:4b:87:f8:00:7f:26:13:64:b3: 1a:31:72:2e:19:3c:e8:cf:20:09:f5:e0:89:cf:72: 94:cd:e5:e2:de:2b:0a:3f:c9:11:bc:62:ca:ba:91: cc:ee:ef:6e:8d:e9:93:c7:be:84:cf:a3:f4:87:7b: 95:d3:cc:1a:6e:08:a5:65:1e:bf:80:96:34:96:a3: 0d:5f:ab:5d:fc:3f:9e:df:11:1d:1f:68:d8:f2:ee: 72:32:3f:4b:56:81:9c:ee:c0:f5:68:e9:c0:ee:c9: 65:7e:3d:2f:3e:82:aa:a5:4a:21:c8:57:32:c6:da: a1:31:62:5c:8a:f8:1e:1d:4e:79:35:00:c6:9d:33: 81:c5:df:f3:e0:7c:fd:3c:05:95:6f:81:71:13:9e: 1f:61:2e:5b:69:6e:67:a9:30:3b:f0:dc:18:9c:f9: 9b:1f:d3:5c:3d:98:c4:c6:8a:77:2f:d8:74:17:7f: 8c:37:40:7c:06:e2:69:1f:2e:ee:25:8d:41:b0:36: 5e:0e:32:29:27:ec:aa:25:78:77:f7:c4:38:50:21: ca:b3:df:af:f0:95:72:ba:a5:67:a0:89:a0:42:28: 6e:a1:66:99:5c:a0:08:12:cf:1f:d7:66:41:68:ef: e7:63:36:76:0f:3f:e7:0d:1b:d5:86:e6:09:4b:2a: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B5:57:77:C1:BF:27:B2:4B:35:6E:F7:67:23:55:3F:2F:66:DE:D9 X509v3 Authority Key Identifier: keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:84:4a:93:ee:39:80:df:47:05:d3:04:9f:12:3e:01:f2:68: c9:21:8b:05:da:47:e4:04:99:a7:aa:9a:1d:56:08:c3:15:42: 3a:cf:3b:6c:f2:1e:79:0c:27:fe:22:e8:87:00:87:af:94:68: 07:7f:db:dd:36:72:03:ea:f9:a0:9c:90:cc:ae:77:2e:f6:5b: 54:f1:69:5d:77:38:30:d0:a7:94:ed:eb:be:80:b1:20:9e:d6: 93:8b:ae:ab:da:c4:94:b3:57:a4:5b:10:2c:89:cb:5b:bd:5d: e8:98:98:0e:b8:c3:53:6c:40:5a:10:1b:79:bf:88:eb:1d:99: 4f:8d:30:46:20:28:6b:8f:6d:84:fa:9c:be:58:54:b1:1d:9d: 94:dd:3b:d5:51:63:e5:3b:f0:7e:f3:32:91:ea:4e:5a:04:48: 70:c3:85:22:0b:0e:a1:11:10:d2:72:0e:1a:29:3d:96:03:20: bc:76:27:f1:85:7b:7d:6a:89:67:e8:1c:68:cd:c9:c9:82:d9: 69:dc:5c:40:9f:d3:d8:d5:41:ec:be:fb:dd:3d:0a:df:c1:24: 68:80:6c:61:77:57:76:7a:3e:e8:e2:ad:92:b8:81:38:f4:de: 8d:38:3d:63:33:41:dd:f2:05:b2:f1:a9:05:41:76:29:9d:7e: 47:a6:d7:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDUyRDY4MEUwNDVEQ0U5OTA3ODlFMEQ3NzcyNjE3QzYw QzM2RUQxOEUwHhcNMjUxMDE4MTk1NjQ5WhcNMjUxMDI1MTk1NjQ5WjAYMRYwFAYD VQQDEw02OGYzZjEwMS0zYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8d3G+DBLh/gAfyYTZLMaMXIuGTzozyAJ9eCJz3KUzeXi3isKP8kRvGLKupHM 7u9ujemTx76Ez6P0h3uV08wabgilZR6/gJY0lqMNX6td/D+e3xEdH2jY8u5yMj9L VoGc7sD1aOnA7sllfj0vPoKqpUohyFcyxtqhMWJcivgeHU55NQDGnTOBxd/z4Hz9 PAWVb4FxE54fYS5baW5nqTA78NwYnPmbH9NcPZjExop3L9h0F3+MN0B8BuJpHy7u JY1BsDZeDjIpJ+yqJXh398Q4UCHKs9+v8JVyuqVnoImgQihuoWaZXKAIEs8f12ZB aO/nYzZ2Dz/nDRvVhuYJSyrJlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMu1V3fB vyeySzVu92cjVT8vZt7ZMB8GA1UdIwQYMBaAFFLWgOBF3OmQeJ4Nd3JhfGDDbtGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9CQTNDRDRBNjNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZaQjRuZzEzY21GOFlNTnUw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1V0YUE0RVhjNlpCNG5nMTNjbUY4WU1OdTBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9CQTNDRDRBNjNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZa QjRuZzEzY21GOFlNTnUwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUhEqT7jmA30cF0wSfEj4B8mjJIYsF2kfkBJmnqpodVgjDFUI6zzts 8h55DCf+IuiHAIevlGgHf9vdNnID6vmgnJDMrncu9ltU8Wlddzgw0KeU7eu+gLEg ntaTi66r2sSUs1ekWxAsictbvV3omJgOuMNTbEBaEBt5v4jrHZlPjTBGIChrj22E +py+WFSxHZ2U3TvVUWPlO/B+8zKR6k5aBEhww4UiCw6hERDScg4aKT2WAyC8difx hXt9aoln6BxozcnJgtlp3FxAn9PY1UHsvvvdPQrfwSRogGxhd1d2ej7o4q2SuIE4 9N6NOD1jM0Hd8gWy8akFQXYpnX5HptfU -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:26 2025 by rpki-client