$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: wl5icdhgutHLgt4go5xrw2xnMEWhphhxzuf6JT9plvo= Subject key identifier: 60:D6:0E:50:11:26:13:01:27:E0:2D:7C:C0:8E:FD:53:E2:F0:7C:62 Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 1038 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 199F Signing time: Sun 02 Nov 2025 17:26:03 +0000 Manifest this update: Sun 02 Nov 2025 17:26:03 +0000 Manifest next update: Sun 09 Nov 2025 17:26:03 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: jHUxH1j8C97/5Cms/sPK4xdUN2gyW5a2mYQ7Wr65ZAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4152 (0x1038) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Nov 2 17:26:03 2025 GMT Not After : Nov 9 17:26:03 2025 GMT Subject: CN=6907942b-5f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:5a:91:2e:7e:d8:14:33:33:f9:3e:e6:08: 06:10:01:81:33:1c:5a:b5:9d:a2:42:88:b5:f8:74: 16:78:14:77:4d:fb:96:cd:0f:a5:ac:23:8d:06:e7: 2e:fb:8c:15:3f:21:4c:59:9f:88:6f:47:79:67:3a: 29:38:09:8a:8a:a6:81:ea:61:ca:84:13:ef:9c:2a: 00:75:bb:d5:e5:72:4c:61:cf:24:ee:29:88:51:28: 28:34:fa:90:4f:ad:f1:5a:e6:fc:f6:2e:d9:94:ba: dc:ba:d5:06:fc:fd:41:55:e6:6a:3e:97:0e:6f:b9: c5:95:7d:35:1b:e7:7e:11:61:23:47:9c:5a:48:5e: 7e:66:1e:00:38:9a:7d:8d:04:5a:90:39:6b:db:d4: c9:fe:6f:2c:bf:8d:0c:50:5e:1b:a0:9e:70:4c:d3: 77:b3:5f:c7:bb:55:13:10:c2:a1:9f:45:c1:1d:bd: 59:47:b2:ea:f7:f9:ea:a7:04:78:75:65:c9:9c:6e: 92:f2:71:a8:65:77:70:cb:18:ee:ce:29:cd:24:e0: 1b:14:0b:ca:e2:01:42:81:9a:09:de:47:72:d1:33: 00:bb:fa:67:70:72:fc:07:3b:2c:3b:bd:c9:2b:5d: 51:37:3a:52:b6:29:22:f7:e1:7e:26:f5:25:3c:3f: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D6:0E:50:11:26:13:01:27:E0:2D:7C:C0:8E:FD:53:E2:F0:7C:62 X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ae:cf:18:44:13:3b:95:e6:35:f7:78:00:ae:c1:73:5d:80: 1d:43:1e:8e:fc:f1:6c:be:2e:85:76:5a:8e:3b:18:5c:f0:ed: 92:78:e2:2d:31:94:50:59:95:fa:41:a6:0f:d0:e6:df:b8:c7: ae:bd:ae:05:ce:d5:f5:20:5d:76:7c:4a:0c:24:5b:17:6e:2d: 9c:6e:62:4c:ce:35:f4:62:0c:1a:99:87:d0:91:b1:36:63:d1: ed:51:88:5b:bf:6f:52:91:96:0e:a1:63:aa:0e:05:84:24:40: 6a:0f:0b:e6:65:3f:cd:9b:03:9d:12:90:9d:b2:06:d5:71:6b: 39:07:61:5e:30:65:7c:44:d6:80:45:49:b2:4b:3a:e2:db:61: f6:25:ce:53:84:ae:88:40:28:ac:64:57:ee:5d:bc:61:f8:41: 3e:3e:3b:2a:ac:3e:87:90:74:06:6b:9e:f2:8a:a2:55:a0:43: 80:cb:c9:41:92:5e:67:7e:40:72:f6:66:f9:d4:4f:50:5d:3a: 6a:55:34:e7:14:23:68:42:46:05:58:0d:4d:98:65:0a:25:0b: af:2b:5f:d0:33:d1:ef:07:73:c2:85:78:a2:08:da:78:d2:51: b0:5d:e5:ef:81:5b:7d:1b:1f:fe:0d:1d:e4:23:13:05:0e:62: 01:40:4e:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjUxMTAyMTcyNjAzWhcNMjUxMTA5MTcyNjAzWjAYMRYwFAYD VQQDEw02OTA3OTQyYi01ZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQFakS5+2BQzM/k+5ggGEAGBMxxatZ2iQoi1+HQWeBR3TfuWzQ+lrCONBucu +4wVPyFMWZ+Ib0d5ZzopOAmKiqaB6mHKhBPvnCoAdbvV5XJMYc8k7imIUSgoNPqQ T63xWub89i7ZlLrcutUG/P1BVeZqPpcOb7nFlX01G+d+EWEjR5xaSF5+Zh4AOJp9 jQRakDlr29TJ/m8sv40MUF4boJ5wTNN3s1/Hu1UTEMKhn0XBHb1ZR7Lq9/nqpwR4 dWXJnG6S8nGoZXdwyxjuzinNJOAbFAvK4gFCgZoJ3kdy0TMAu/pncHL8BzssO73J K11RNzpStiki9+F+JvUlPD/6yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDWDlAR JhMBJ+AtfMCO/VPi8HxiMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCurs8YRBM7leY193gArsFzXYAdQx6O/PFsvi6FdlqOOxhc8O2SeOIt MZRQWZX6QaYP0ObfuMeuva4FztX1IF12fEoMJFsXbi2cbmJMzjX0YgwamYfQkbE2 Y9HtUYhbv29SkZYOoWOqDgWEJEBqDwvmZT/NmwOdEpCdsgbVcWs5B2FeMGV8RNaA RUmySzri22H2Jc5ThK6IQCisZFfuXbxh+EE+PjsqrD6HkHQGa57yiqJVoEOAy8lB kl5nfkBy9mb51E9QXTpqVTTnFCNoQkYFWA1NmGUKJQuvK1/QM9HvB3PChXiiCNp4 0lGwXeXvgVt9Gx/+DR3kIxMFDmIBQE62 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:27 2025 by rpki-client