$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: CDL0ZHSvxAmbpOdr6LXOJACDg98e9Xk6GOoRzm/d0Dc= Subject key identifier: 27:D2:11:6E:25:D7:7D:06:58:0B:05:E8:75:46:C2:31:2F:19:40:AC Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: 84 Signing time: Mon 03 Nov 2025 06:38:58 +0000 Manifest this update: Mon 03 Nov 2025 06:38:57 +0000 Manifest next update: Mon 10 Nov 2025 06:38:57 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: hjMHhGDkjRtbMYwGy5dy9haIVPleWP2D7hLv3lcLMmc=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Nov 3 06:38:57 2025 GMT Not After : Nov 10 06:38:57 2025 GMT Subject: CN=69084e01-3b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:a7:9f:b4:7e:89:be:65:90:d8:5b:6e:56: 3c:e8:7b:d3:64:ff:fc:ef:9e:f5:61:5a:07:ba:f5: 66:ed:64:cf:d4:8e:fb:63:19:1e:f1:9b:e0:18:c1: 84:d7:da:60:9d:ef:5a:51:fa:d3:c0:8d:c3:87:6d: 2d:fb:51:66:35:e4:d0:91:49:0f:2f:ed:00:84:3e: 33:88:2a:28:cd:44:81:fe:09:91:da:0a:64:a8:3f: 92:f2:7e:27:3c:b2:3a:60:77:e0:0c:e7:2b:c1:2e: b3:a8:13:32:76:8f:89:26:8f:f2:7e:e1:b0:b2:24: f2:8c:92:bc:cf:b2:98:ee:c8:6e:4f:25:ed:f1:1a: b8:a1:10:b0:1b:44:48:ba:51:f7:24:ff:8e:29:0b: 83:78:6d:2f:63:5d:44:eb:95:45:43:f3:13:f2:70: bc:7c:4a:c6:1a:d9:57:99:d3:26:9d:61:80:1a:a8: d4:8a:2f:f6:0a:1d:29:1c:d6:0c:7f:07:95:da:8a: 7a:72:3a:bd:f3:81:ad:f8:e5:cb:0b:39:44:3a:f2: 7b:4b:e0:58:e1:ad:33:82:a1:69:2b:7c:8d:1a:41: 41:eb:21:03:8a:e1:04:2f:cb:23:af:6c:35:10:30: 63:f0:af:69:c2:1c:b4:f6:5a:0a:81:de:06:f9:4b: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D2:11:6E:25:D7:7D:06:58:0B:05:E8:75:46:C2:31:2F:19:40:AC X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:eb:48:fc:06:99:1e:d9:a8:58:82:a1:6e:07:fb:98:7b:a6: cf:aa:e8:a7:6c:66:d4:cb:0b:c6:32:aa:07:23:18:00:cf:e4: 36:53:83:d8:05:40:84:c0:1d:e0:9d:48:60:40:d5:3d:79:70: 63:61:51:d9:09:ee:5b:8b:3b:f7:cd:8d:1f:8c:65:d9:b6:58: b7:74:92:82:30:e4:5e:6a:e9:9c:89:71:b5:10:bd:bf:5a:f8: bd:06:fa:a6:cb:d6:6a:d1:fb:da:9b:40:84:61:9f:56:ee:f0: c5:30:36:af:08:39:0f:d9:72:d9:75:7e:c1:4b:80:13:cb:24: ff:ab:80:5f:8f:c1:7b:69:b8:c3:b5:c0:4c:c2:d8:70:92:77: 0e:89:d6:57:29:e1:77:74:57:c1:80:c6:30:6f:d3:57:18:48: c7:aa:ab:d9:d0:96:4b:3c:0a:f7:5c:1b:f6:7a:76:db:bf:f8: ee:4f:89:aa:b4:d8:28:33:e9:48:5c:21:4e:8c:a6:49:02:29: 64:27:8e:6c:87:51:b3:8f:e3:b3:8c:cd:32:03:ce:ef:51:2f: ae:7b:8e:1b:eb:4d:27:81:9b:48:9b:b8:68:6b:39:d1:e4:43: 5c:98:85:06:30:cd:5f:f7:7d:1a:94:c4:6e:91:be:3e:85:70: 22:11:71:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA1NjIxMTAvBgNVBAUTKEI5RkFEQzQxRTdFMUY5NzU2QzdCQzlCM0RFMzk3MkNC RjZDRjYwQjUwHhcNMjUxMTAzMDYzODU3WhcNMjUxMTEwMDYzODU3WjAYMRYwFAYD VQQDEw02OTA4NGUwMS0zYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbWnn7R+ib5lkNhbblY86HvTZP/87571YVoHuvVm7WTP1I77Yxke8ZvgGMGE 19pgne9aUfrTwI3Dh20t+1FmNeTQkUkPL+0AhD4ziCoozUSB/gmR2gpkqD+S8n4n PLI6YHfgDOcrwS6zqBMydo+JJo/yfuGwsiTyjJK8z7KY7shuTyXt8Rq4oRCwG0RI ulH3JP+OKQuDeG0vY11E65VFQ/MT8nC8fErGGtlXmdMmnWGAGqjUii/2Ch0pHNYM fweV2op6cjq984Gt+OXLCzlEOvJ7S+BY4a0zgqFpK3yNGkFB6yEDiuEEL8sjr2w1 EDBj8K9pwhy09loKgd4G+UugFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfSEW4l 130GWAsF6HVGwjEvGUCsMB8GA1UdIwQYMBaAFLn63EHn4fl1bHvJs945csv2z2C1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDU2Mi82NkMzQzk3RUVE RjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1YVnNlOG16M2pseXlfYlBZ TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDU2Mi82NkMzQzk3RUVERjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1Y VnNlOG16M2pseXlfYlBZTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr60j8Bpke2ahYgqFuB/uYe6bPquinbGbUywvGMqoHIxgAz+Q2U4PY BUCEwB3gnUhgQNU9eXBjYVHZCe5bizv3zY0fjGXZtli3dJKCMOReaumciXG1EL2/ Wvi9Bvqmy9Zq0fvam0CEYZ9W7vDFMDavCDkP2XLZdX7BS4ATyyT/q4Bfj8F7abjD tcBMwthwkncOidZXKeF3dFfBgMYwb9NXGEjHqqvZ0JZLPAr3XBv2enbbv/juT4mq tNgoM+lIXCFOjKZJAilkJ45sh1Gzj+OzjM0yA87vUS+ue44b600ngZtIm7hoaznR 5ENcmIUGMM1f930alMRukb4+hXAiEXGg -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:11 2025 by rpki-client