$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: AhPgbHha/60o4Rs5L4AMwSXaBHSWr1LMzifVi2Hby0A= Subject key identifier: 71:48:3B:BA:3C:A3:B6:48:92:C2:88:F8:FA:F8:53:55:E4:92:C4:D5 Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0BFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0BFA Signing time: Tue 04 Nov 2025 18:55:00 +0000 Manifest this update: Tue 04 Nov 2025 18:54:58 +0000 Manifest next update: Tue 11 Nov 2025 18:54:58 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: ytvWj7isxVpcdK3ult5ybvjqOt4TDzfa2FKKIwsvHlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3066 (0xbfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: Nov 4 18:54:58 2025 GMT Not After : Nov 11 18:54:58 2025 GMT Subject: CN=690a4c03-11f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:60:f8:af:0a:2b:0a:0d:7b:a8:f1:13:75: ec:9f:a0:80:77:ac:39:e0:89:c2:22:73:0b:d2:bc: 77:eb:95:9e:f4:96:8a:05:e6:4e:18:48:90:05:b5: 66:fe:0b:5a:2d:54:26:23:2f:8a:6a:7e:8c:9c:98: 9e:ed:0f:dc:6f:9d:31:17:73:1d:92:17:bb:b8:f0: b7:b3:d8:97:45:29:12:5c:63:6b:60:09:44:ac:08: 7a:62:d3:61:f2:7b:3e:35:99:28:a6:55:f0:93:92: 31:39:8a:44:3f:b4:6f:bb:00:49:bc:c5:ec:c8:c7: 98:a0:9e:e0:60:88:27:0e:64:ee:63:d1:d6:60:5d: e4:99:5b:d9:e1:00:a7:e0:f7:8d:67:77:80:f3:41: 82:73:e2:0c:e1:8c:b8:89:cf:89:1a:b8:7c:cd:bf: 5d:cd:2d:23:6c:1c:37:f4:38:c4:42:37:1d:23:47: 08:55:c5:e4:1b:44:8d:0c:90:54:99:fb:b4:d6:cb: 20:a9:cb:c9:79:2a:09:20:43:5c:c8:19:4c:83:0e: ce:f8:06:c1:f6:ed:0e:08:53:d3:cd:ef:1f:c8:83: b8:44:2d:9d:c5:90:1b:30:1a:99:0d:ea:bd:7c:75: 37:37:13:90:b4:72:4b:48:8d:ab:20:58:2b:b5:34: ac:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:48:3B:BA:3C:A3:B6:48:92:C2:88:F8:FA:F8:53:55:E4:92:C4:D5 X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fe:f8:45:af:21:1c:67:2d:4c:2c:f3:c7:a0:e1:d8:24:ae: 7c:48:69:54:55:f7:55:fc:06:ce:ac:af:54:66:83:3d:f6:1b: 59:be:dd:40:c6:bf:04:72:8e:5e:6c:17:86:27:52:0c:4c:ee: 1a:8a:fe:31:9f:58:a3:99:14:ff:25:fe:e2:fc:f2:52:ce:05: d9:ae:85:4e:30:5c:c4:8a:44:05:00:e4:37:90:a0:45:eb:05: ea:d6:e5:63:c2:53:df:1d:c4:da:95:74:74:36:95:03:d4:75: 42:de:07:45:4d:5e:22:bb:66:c0:01:3a:b9:0a:3d:7a:a5:dd: 97:94:dd:da:0f:1e:f3:6d:a7:9b:a5:70:ed:0c:ac:98:34:07: 7f:83:6b:4a:f6:e6:1e:80:41:ce:de:58:1f:70:f1:8d:bc:4c: dd:b7:6b:28:c9:4f:f2:bf:3e:de:94:35:07:1f:22:e7:67:38: 84:05:e3:dd:e0:1e:ad:8f:80:86:eb:30:b2:1e:3d:05:07:93: 8e:45:38:20:e4:a5:49:98:31:13:62:16:79:a1:c8:5c:8c:e6: 69:8b:53:16:7b:f6:3f:d0:59:96:54:a3:80:fe:38:85:d4:ac: df:62:39:63:1a:30:52:66:2f:54:c7:6f:d4:cf:1f:0c:0e:95: d6:e0:0b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUxMTA0MTg1NDU4WhcNMjUxMTExMTg1NDU4WjAYMRYwFAYD VQQDEw02OTBhNGMwMy0xMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrlg+K8KKwoNe6jxE3Xsn6CAd6w54InCInML0rx365We9JaKBeZOGEiQBbVm /gtaLVQmIy+Kan6MnJie7Q/cb50xF3Mdkhe7uPC3s9iXRSkSXGNrYAlErAh6YtNh 8ns+NZkoplXwk5IxOYpEP7RvuwBJvMXsyMeYoJ7gYIgnDmTuY9HWYF3kmVvZ4QCn 4PeNZ3eA80GCc+IM4Yy4ic+JGrh8zb9dzS0jbBw39DjEQjcdI0cIVcXkG0SNDJBU mfu01ssgqcvJeSoJIENcyBlMgw7O+AbB9u0OCFPTze8fyIO4RC2dxZAbMBqZDeq9 fHU3NxOQtHJLSI2rIFgrtTSsLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFIO7o8 o7ZIksKI+Pr4U1XkksTVMB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO/vhFryEcZy1MLPPHoOHYJK58SGlUVfdV/AbOrK9UZoM99htZvt1A xr8Eco5ebBeGJ1IMTO4aiv4xn1ijmRT/Jf7i/PJSzgXZroVOMFzEikQFAOQ3kKBF 6wXq1uVjwlPfHcTalXR0NpUD1HVC3gdFTV4iu2bAATq5Cj16pd2XlN3aDx7zbaeb pXDtDKyYNAd/g2tK9uYegEHO3lgfcPGNvEzdt2soyU/yvz7elDUHHyLnZziEBePd 4B6tj4CG6zCyHj0FB5OORTgg5KVJmDETYhZ5ochcjOZpi1MWe/Y/0FmWVKOA/jiF 1KzfYjljGjBSZi9Ux2/Uzx8MDpXW4Au9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:25:05 2025 by rpki-client