$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: rwsrulejEcPItEU1Wozchg9wkRJNt5kwy06SD7DBwlU= Subject key identifier: C1:33:1A:1B:F8:0F:F9:C3:4A:6B:2C:B4:1A:26:DE:95:7B:C7:27:EA Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 0955 Signing time: Sat 18 Oct 2025 21:13:12 +0000 Manifest this update: Sat 18 Oct 2025 21:13:11 +0000 Manifest next update: Sat 25 Oct 2025 21:13:11 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: YxH7dvjdlkl2Hy6in094IU71R76GDg7HuBQoyHxLdnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Oct 18 21:13:11 2025 GMT Not After : Oct 25 21:13:11 2025 GMT Subject: CN=68f402e8-10f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:4c:c1:44:28:1a:45:97:8c:df:c4:f9:f4: e9:d8:1a:3a:ba:48:d6:94:c4:64:a3:9d:16:8a:c8: 2d:4c:d9:b5:56:de:dd:15:b2:da:c6:45:96:92:3a: bd:81:45:6f:da:c6:75:34:21:a5:d0:e8:77:bd:b0: 3d:68:a7:2f:d1:db:70:af:f4:94:9f:78:05:7a:71: 0b:1e:6a:a6:43:98:76:2c:63:ef:d7:c9:2c:88:05: 7d:56:2e:14:5a:ec:c3:f9:ff:c8:3a:40:c0:c2:c8: bf:f7:02:42:41:04:b5:c2:4b:9b:4e:4c:a1:b6:cc: 3c:26:43:cd:31:91:1c:c1:ec:bc:c0:0f:6e:0d:c3: 6c:8e:3d:40:1f:35:02:df:30:3d:35:07:bb:4e:4c: 1b:b4:1e:c5:31:10:81:d8:14:1e:96:2a:95:e2:01: 12:d7:ce:a8:7c:d2:f1:27:b3:f1:59:a3:29:57:ef: 88:fd:76:1b:5e:dd:94:9a:66:3c:39:b0:aa:75:b4: 07:4f:6e:ef:a4:e7:3a:fd:ff:04:80:08:9c:d5:c7: 92:f1:17:dd:d0:98:35:5b:55:73:21:4b:dd:e7:52: b2:76:76:5f:c2:65:21:49:cc:78:d2:de:4c:35:16: a5:f2:8c:63:ab:ce:fb:8b:9f:60:05:6c:2d:7f:a4: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:33:1A:1B:F8:0F:F9:C3:4A:6B:2C:B4:1A:26:DE:95:7B:C7:27:EA X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a7:27:49:6b:ea:ac:d0:4e:89:4f:ff:b9:1e:1b:a6:33:28: 63:7c:e8:97:48:9b:e4:80:e8:8b:6b:06:7b:fe:bf:be:9c:ba: 52:bd:ea:51:b6:8d:94:2d:20:05:41:6d:b0:af:8d:9f:f0:e2: 33:1e:68:53:23:e3:ab:72:b2:a0:2d:72:3e:ed:0f:9d:e0:da: 16:b8:56:df:c8:65:76:d7:af:91:ea:ed:82:c1:67:c2:10:56: 7c:69:4b:96:b9:65:0b:1d:ea:90:2b:38:3c:30:cd:85:88:ad: 96:fa:29:fa:e0:5a:cc:6d:b0:5c:be:e7:96:ea:74:80:c3:fd: a9:3c:a7:fa:f0:e7:b7:00:ed:f5:c9:b6:4d:62:a9:f3:93:66: fd:e9:b6:37:ad:ab:6d:4e:8f:42:dc:8e:7e:17:4b:a3:ea:5c: be:74:fc:04:84:24:71:23:1a:ab:68:96:9c:09:e6:23:ca:f0: 0a:79:03:da:b8:a8:f0:5a:7e:60:8e:a9:1a:8b:6c:de:49:6a: fa:25:f7:81:40:dc:6f:13:f7:14:64:6f:e1:8a:0e:23:c9:e9: 33:99:a8:32:c7:8a:fe:a5:9b:6d:59:b8:2f:ce:ab:58:10:ab: 40:31:e1:43:74:df:b3:06:27:46:f0:eb:6e:1b:94:f5:6c:60: 57:c2:4b:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjUxMDE4MjExMzExWhcNMjUxMDI1MjExMzExWjAYMRYwFAYD VQQDEw02OGY0MDJlOC0xMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AJMwUQoGkWXjN/E+fTp2Bo6ukjWlMRko50WisgtTNm1Vt7dFbLaxkWWkjq9 gUVv2sZ1NCGl0Oh3vbA9aKcv0dtwr/SUn3gFenELHmqmQ5h2LGPv18ksiAV9Vi4U WuzD+f/IOkDAwsi/9wJCQQS1wkubTkyhtsw8JkPNMZEcwey8wA9uDcNsjj1AHzUC 3zA9NQe7TkwbtB7FMRCB2BQeliqV4gES186ofNLxJ7PxWaMpV++I/XYbXt2UmmY8 ObCqdbQHT27vpOc6/f8EgAic1ceS8Rfd0Jg1W1VzIUvd51KydnZfwmUhScx40t5M NRal8oxjq877i59gBWwtf6Qt+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEzGhv4 D/nDSmsstBom3pV7xyfqMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALpydJa+qs0E6JT/+5HhumMyhjfOiXSJvkgOiLawZ7/r++nLpSvepR to2ULSAFQW2wr42f8OIzHmhTI+OrcrKgLXI+7Q+d4NoWuFbfyGV216+R6u2CwWfC EFZ8aUuWuWULHeqQKzg8MM2FiK2W+in64FrMbbBcvueW6nSAw/2pPKf68Oe3AO31 ybZNYqnzk2b96bY3rattTo9C3I5+F0uj6ly+dPwEhCRxIxqraJacCeYjyvAKeQPa uKjwWn5gjqkai2zeSWr6JfeBQNxvE/cUZG/hig4jyekzmagyx4r+pZttWbgvzqtY EKtAMeFDdN+zBidG8OtuG5T1bGBXwkvg -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:31 2025 by rpki-client