$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft File: UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json) Hash identifier: KNAkyU059t9VfXau8DFy9aS0lS4j8Pz/yuvY9VOcviU= Subject key identifier: B2:08:32:B8:86:E0:09:EA:C4:F3:80:27:FB:39:DA:18:42:34:CD:D6 Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8 Certificate issuer: /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8 Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft Manifest number: 0B81 Signing time: Sun 02 Nov 2025 19:00:39 +0000 Manifest this update: Sun 02 Nov 2025 19:00:39 +0000 Manifest next update: Sun 09 Nov 2025 19:00:39 +0000 Files and hashes: 1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: yIK+g0FR37Ikr/kzMde32k/Fcj19pvosz3TDDuUFLrE=) 2: 74D2ABEE39F811EAA4343534C4F9AE02.roa (hash: WNF8DvI+W4AUYThET4ebOd4+s48ZJAgIRPErXZ/X2b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8 Validity Not Before: Nov 2 19:00:39 2025 GMT Not After : Nov 9 19:00:39 2025 GMT Subject: CN=6907aa57-8fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:ed:d4:81:d8:6d:b0:83:be:b4:ae:ca:7e: 52:87:ce:23:87:c6:95:92:b1:88:23:dd:93:49:8c: 64:f2:da:b0:1c:81:bf:70:a7:44:01:fe:4d:62:00: 6e:41:3a:2f:ed:7f:43:38:7d:62:e5:a1:bc:20:4a: d5:c1:20:74:32:13:e8:8a:96:bb:ce:87:82:c4:7c: 35:98:7f:30:0f:d6:8c:ff:2d:9f:f6:98:25:3e:ae: bb:3b:dc:80:30:c0:ed:24:1b:aa:e5:2f:a3:65:f3: 24:dd:40:dc:cc:4a:41:76:c3:52:4a:45:f6:0f:1f: a8:d1:97:87:e8:18:12:6f:ba:14:8c:4c:78:6c:9f: 2d:23:98:fa:90:d0:43:b1:08:08:76:9f:72:04:1c: 79:2a:5d:19:b3:61:b1:70:57:8c:07:cd:11:3a:72: 00:59:07:c7:8c:a0:87:23:00:e9:d9:da:8c:7b:06: 30:4b:32:2a:ef:f7:4f:2c:5e:e9:27:9e:a8:be:55: 5d:77:6c:95:b1:7e:94:ad:ce:0c:75:b7:74:4c:29: fa:7f:61:40:25:27:c3:99:33:5f:0d:83:24:a0:71: 7f:0f:35:25:d1:e0:da:b6:82:61:2b:78:3c:97:99: da:a8:3d:98:2f:53:ed:00:fb:25:1d:16:0d:d6:24: bf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:08:32:B8:86:E0:09:EA:C4:F3:80:27:FB:39:DA:18:42:34:CD:D6 X509v3 Authority Key Identifier: keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:49:16:d0:ff:12:53:50:8a:09:7f:cd:d2:18:3f:c6:44:f3: e9:d6:12:10:a5:5f:c1:f1:3e:a3:8d:e1:e8:4c:29:d0:9f:56: 9a:eb:84:f1:bd:04:95:04:d4:23:15:57:96:33:03:3b:aa:65: 43:3a:da:ec:5e:7a:21:cc:92:65:9b:48:31:7c:15:ed:d4:f6: d0:e6:29:31:e0:79:b0:3c:39:75:04:cb:95:58:5b:ce:0e:4b: 63:82:dd:0f:bc:c6:fa:ca:9c:59:28:0d:1c:46:61:60:de:25: 38:90:f3:a0:a3:83:6f:8f:be:0f:94:46:fa:2b:54:92:2b:6b: 35:8a:ea:57:65:05:73:a9:ab:c8:0e:09:ee:f2:d0:4a:4d:d4: 77:18:c2:54:46:e9:4a:0b:84:8a:e1:18:03:11:de:53:f5:f9: 64:b2:42:5a:e6:aa:fe:ac:5f:90:cb:89:e3:f6:07:65:80:5e: a0:c0:6b:31:c3:4f:e4:af:dc:88:20:02:cd:04:21:f4:b0:71: 02:6e:6d:5d:29:10:0a:ad:4e:14:09:86:33:9e:30:f7:f6:d5: e2:dc:f7:c2:c8:b9:0b:24:44:a4:27:f5:85:cd:33:95:17:46: ba:b1:33:93:68:3c:21:51:02:7a:1f:8f:8a:6e:b5:f8:97:ed: ed:6a:2a:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MEYxMTAvBgNVBAUTKDUwQUIxMzEwMDU0M0Y2NDZDMEM1NTM3NURFRjg1MDVE MTRGMzY2QjgwHhcNMjUxMTAyMTkwMDM5WhcNMjUxMTA5MTkwMDM5WjAYMRYwFAYD VQQDEw02OTA3YWE1Ny04ZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfPt1IHYbbCDvrSuyn5Sh84jh8aVkrGII92TSYxk8tqwHIG/cKdEAf5NYgBu QTov7X9DOH1i5aG8IErVwSB0MhPoipa7zoeCxHw1mH8wD9aM/y2f9pglPq67O9yA MMDtJBuq5S+jZfMk3UDczEpBdsNSSkX2Dx+o0ZeH6BgSb7oUjEx4bJ8tI5j6kNBD sQgIdp9yBBx5Kl0Zs2GxcFeMB80ROnIAWQfHjKCHIwDp2dqMewYwSzIq7/dPLF7p J56ovlVdd2yVsX6Urc4Mdbd0TCn6f2FAJSfDmTNfDYMkoHF/DzUl0eDatoJhK3g8 l5naqD2YL1PtAPslHRYN1iS/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIIMriG 4AnqxPOAJ/s52hhCNM3WMB8GA1UdIwQYMBaAFFCrExAFQ/ZGwMVTdd74UF0U82a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwRi8wNUQ4MkVFMDM5 RjcxMUVBOTY3RUJBMkVDNEY5QUUwMi9VS3NURUFWRDlrYkF4Vk4xM3ZoUVhSVHpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLc1RFQVZEOWtiQXhWTjEzdmhRWFJUelpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwRi8wNUQ4MkVFMDM5RjcxMUVBOTY3RUJBMkVDNEY5QUUwMi9VS3NURUFWRDlr YkF4Vk4xM3ZoUVhSVHpacmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDSRbQ/xJTUIoJf83SGD/GRPPp1hIQpV/B8T6jjeHoTCnQn1aa64Tx vQSVBNQjFVeWMwM7qmVDOtrsXnohzJJlm0gxfBXt1PbQ5ikx4HmwPDl1BMuVWFvO Dktjgt0PvMb6ypxZKA0cRmFg3iU4kPOgo4Nvj74PlEb6K1SSK2s1iupXZQVzqavI Dgnu8tBKTdR3GMJURulKC4SK4RgDEd5T9flkskJa5qr+rF+Qy4nj9gdlgF6gwGsx w0/kr9yIIALNBCH0sHECbm1dKRAKrU4UCYYznjD39tXi3PfCyLkLJESkJ/WFzTOV F0a6sTOTaDwhUQJ6H4+KbrX4l+3taiqE -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:49 2025 by rpki-client