$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft File: UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json) Hash identifier: A4gJSTtm4SNtWnbTo8wzSBvOL7r0WyLbuIXtZWFu2Ww= Subject key identifier: CD:B4:E8:A2:1D:B5:13:6D:66:DB:3C:9E:36:F5:9D:46:30:BB:4E:41 Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 0A78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft Manifest number: 0A6F Signing time: Sat 18 Oct 2025 20:37:35 +0000 Manifest this update: Sat 18 Oct 2025 20:37:34 +0000 Manifest next update: Sat 25 Oct 2025 20:37:34 +0000 Files and hashes: 1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: ZM69NEuoA7XWCJcRRfj1LtjXmy67tNnXRcAk55KkYg0=) 2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: qgPwBHuJNODFhkIhrJVb9VAEuenY+/fH1u9JlBx0mT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2680 (0xa78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: Oct 18 20:37:34 2025 GMT Not After : Oct 25 20:37:34 2025 GMT Subject: CN=68f3fa8f-8ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:f4:c6:a8:64:40:65:2a:a2:63:17:b7:31: 64:49:6f:2f:6b:39:01:20:77:86:b7:63:6a:b7:d0: 07:a6:39:f6:05:bd:2d:45:a2:81:39:29:95:89:cb: 84:b4:b4:6f:cc:26:7c:f1:80:fb:2f:bb:f3:9d:8a: 60:ae:0d:a1:13:b6:8d:57:2b:1a:1b:32:24:7a:0d: 7b:74:ba:49:9b:d9:ad:19:c8:24:56:6e:55:18:d2: 7f:6f:e2:b6:09:f8:9c:92:b5:d7:51:bf:d2:29:74: fe:2e:24:70:81:51:34:95:53:40:4a:14:9f:de:e7: 26:22:0e:a6:fb:c2:41:70:5b:69:e4:2f:15:08:2f: bd:4d:ce:36:1f:9d:39:c8:60:5f:55:93:a9:66:2a: 90:a8:e7:7a:21:9f:51:bc:59:9b:36:11:1d:85:84: 0f:ba:c8:45:3e:b0:eb:92:b8:52:64:0d:ac:c2:f4: 22:43:cf:01:18:0e:c2:be:30:ea:8e:ca:61:f5:71: 35:3c:c4:5f:de:d5:5f:4d:1f:dd:d0:68:0e:40:b1: ba:37:43:ce:fe:41:89:4e:ed:6e:7c:ff:c5:b2:f3: f3:19:78:34:e9:b6:0a:e8:39:f0:fa:0b:b2:4c:d6: e5:20:9e:47:b5:32:11:e8:71:4f:6d:93:b9:5a:88: 8e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:E8:A2:1D:B5:13:6D:66:DB:3C:9E:36:F5:9D:46:30:BB:4E:41 X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fa:8d:5f:f6:d2:20:cb:e7:b2:52:87:12:70:b1:cd:b2:ff: 1c:d1:6c:ee:d0:29:ec:98:0a:68:ce:cd:9a:4f:19:d5:65:b7: 22:81:06:3e:d7:c8:98:b7:61:9a:66:d8:bb:88:ce:5f:12:aa: ac:33:a5:2d:77:e1:59:90:9d:fb:bd:d4:5e:01:e0:77:56:e9: 75:5a:ba:e2:ea:a3:15:92:a5:d9:f2:f0:49:6b:1d:3f:fb:a8: 3d:db:28:df:91:dc:0f:08:08:70:fc:8d:da:84:0a:d6:b3:8c: 20:ee:e3:16:ca:b2:bf:f8:48:04:bd:1e:bb:fd:57:fa:3f:57: 93:8d:dc:5a:9a:13:5f:7c:4d:a9:c7:86:0a:3e:e5:f7:c1:49: 9d:32:3e:ba:bc:ec:a5:64:09:5f:ea:11:e5:27:e6:56:82:5f: 8f:20:80:da:b9:0f:f4:73:90:08:8c:8f:90:92:14:7f:56:72: db:e6:48:25:2c:4c:37:ff:20:79:2a:ea:0e:8d:0c:d8:38:ab: 93:97:b3:f3:b2:52:a4:75:ae:7e:0d:84:ee:ca:46:af:8d:79: 65:ff:ec:f6:34:79:68:56:2e:1c:96:64:d1:db:56:fe:2c:bd: c8:59:fc:8a:b5:05:fc:46:6b:03:3b:de:99:e9:84:12:e9:87: 27:17:b3:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjUxMDE4MjAzNzM0WhcNMjUxMDI1MjAzNzM0WjAYMRYwFAYD VQQDEw02OGYzZmE4Zi04YWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuz/0xqhkQGUqomMXtzFkSW8vazkBIHeGt2Nqt9AHpjn2Bb0tRaKBOSmVicuE tLRvzCZ88YD7L7vznYpgrg2hE7aNVysaGzIkeg17dLpJm9mtGcgkVm5VGNJ/b+K2 CfickrXXUb/SKXT+LiRwgVE0lVNAShSf3ucmIg6m+8JBcFtp5C8VCC+9Tc42H505 yGBfVZOpZiqQqOd6IZ9RvFmbNhEdhYQPushFPrDrkrhSZA2swvQiQ88BGA7CvjDq jsph9XE1PMRf3tVfTR/d0GgOQLG6N0PO/kGJTu1ufP/FsvPzGXg06bYK6Dnw+guy TNblIJ5HtTIR6HFPbZO5WoiOJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM206KId tRNtZts8njb1nUYwu05BMB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0JBRC8zNjU5RTdBRTcwOTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8x VkxsQWNEODNUOE5Ya2lqREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8+o1f9tIgy+eyUocScLHNsv8c0Wzu0CnsmApozs2aTxnVZbcigQY+ 18iYt2GaZti7iM5fEqqsM6Utd+FZkJ37vdReAeB3Vul1Wrri6qMVkqXZ8vBJax0/ +6g92yjfkdwPCAhw/I3ahArWs4wg7uMWyrK/+EgEvR67/Vf6P1eTjdxamhNffE2p x4YKPuX3wUmdMj66vOylZAlf6hHlJ+ZWgl+PIIDauQ/0c5AIjI+QkhR/VnLb5kgl LEw3/yB5KuoOjQzYOKuTl7PzslKkda5+DYTuykavjXll/+z2NHloVi4clmTR21b+ LL3IWfyKtQX8RmsDO96Z6YQS6YcnF7MI -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:00 2025 by rpki-client