$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft File: UBJV6QF6Y3iSbTaute_xnEXWV04.mft (raw, json) Hash identifier: /OOnhvofBX5D6djv9vKjR2fwxZgzr2i6UZi9yzGgksw= Subject key identifier: B9:CC:BF:B5:4D:56:93:A1:A4:6B:2A:C6:A9:24:1B:0B:70:6B:99:2B Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E Certificate issuer: /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft Manifest number: 42 Signing time: Fri 17 Oct 2025 11:10:05 +0000 Manifest this update: Fri 17 Oct 2025 11:10:05 +0000 Manifest next update: Fri 24 Oct 2025 11:10:05 +0000 Files and hashes: 1: UBJV6QF6Y3iSbTaute_xnEXWV04.crl (hash: Gq7E+wFV4ndqRm5N7thRcdfZuDbGlBoLXSu8MiUpCFg=) 2: 6654FB224CDE11F092AD8884C4F9AE02.roa (hash: liQT4xahQ5o7fJUAyQXDum5T6VsmCHKLCFUQqV7AJDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Validity Not Before: Oct 17 11:10:05 2025 GMT Not After : Oct 24 11:10:05 2025 GMT Subject: CN=68f2240d-c401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:27:39:a9:77:8b:8e:ea:c0:a8:f0:4c:f6: a1:31:5d:65:01:17:4b:35:3b:c9:d1:e3:b8:e3:76: e3:1b:2e:76:c9:90:1f:a4:0c:57:b8:85:5d:88:56: 91:d6:08:d7:67:e8:9a:d6:70:8e:76:83:01:53:82: 72:eb:42:e1:09:2f:8d:6e:9c:61:b2:00:73:1e:17: 7d:8a:91:6d:01:0a:36:98:20:f6:f0:46:19:6a:63: bf:03:27:15:0b:dd:0e:a8:01:63:4d:2a:8e:eb:c7: b3:da:50:6f:4b:d4:e4:d7:e4:ea:b4:65:75:5f:62: 6e:86:80:fe:1a:63:ef:85:68:33:73:a2:71:76:e2: d7:df:3a:af:28:79:52:ab:70:97:5a:da:6c:bc:ae: 3a:b8:67:5f:d0:dc:be:24:85:89:71:06:a1:53:67: 3c:66:16:e2:2d:fc:87:a2:76:ef:cb:09:43:59:6b: 4a:fd:e9:85:09:71:d8:25:2c:e9:11:33:17:15:be: 26:9f:2b:3f:3d:18:7b:11:e9:6f:b3:58:3b:05:67: d5:02:f7:01:9c:c5:40:28:f9:bb:d1:d7:0d:3f:9f: 8d:af:70:35:81:b9:7f:d5:ae:8f:88:c8:6c:48:83: 5f:a0:53:3c:e2:d0:f2:84:af:50:e2:e8:bb:65:3f: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CC:BF:B5:4D:56:93:A1:A4:6B:2A:C6:A9:24:1B:0B:70:6B:99:2B X509v3 Authority Key Identifier: keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:85:5f:d0:27:24:2b:4c:2c:b2:58:c2:86:6b:56:69:ee:be: e0:98:2d:78:ce:8b:fd:15:f6:e7:96:81:a7:db:5a:f9:c3:a0: 8b:cb:2d:bd:4b:88:81:52:91:9e:80:2b:c9:6f:e8:48:54:20: 17:63:a9:a5:e1:7d:df:f0:45:55:cd:d4:31:34:06:cb:2f:89: 06:68:20:27:fe:b6:5a:ce:09:29:42:49:a9:54:ea:69:37:11: a5:b7:f4:68:08:6c:7e:57:78:1a:2b:ff:e1:9a:e4:93:29:0a: 56:a7:07:da:d4:61:11:eb:1e:71:c1:0e:32:40:9d:d9:53:fa: d3:0d:74:7b:9b:06:51:b9:9b:0a:a7:f0:05:82:00:f3:63:68: b2:cf:6d:4c:4d:cc:2b:14:33:d2:0d:07:82:b2:58:85:1b:9a: 64:3b:62:3d:7a:c2:0b:9c:09:8b:bc:a4:e4:79:5b:07:71:13: 3d:92:ab:e7:31:5b:88:20:48:d7:69:1f:ed:4f:f8:fd:27:db: 14:9e:f1:90:6e:10:6b:ab:45:d6:d8:97:36:7d:fb:ba:41:37: e0:20:c0:f1:76:87:17:53:a5:7d:1e:76:35:67:52:bc:44:0b: 71:5b:38:e9:5e:ce:8f:7d:8b:63:40:99:d7:fa:31:ac:4d:6c: 3b:88:2c:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTIzQTExMC8GA1UEBRMoNTAxMjU1RTkwMTdBNjM3ODkyNkQzNkFFQjVFRkYxOUM0 NUQ2NTc0RTAeFw0yNTEwMTcxMTEwMDVaFw0yNTEwMjQxMTEwMDVaMBgxFjAUBgNV BAMTDTY4ZjIyNDBkLWM0MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYoyc5qXeLjurAqPBM9qExXWUBF0s1O8nR47jjduMbLnbJkB+kDFe4hV2IVpHW CNdn6JrWcI52gwFTgnLrQuEJL41unGGyAHMeF32KkW0BCjaYIPbwRhlqY78DJxUL 3Q6oAWNNKo7rx7PaUG9L1OTX5Oq0ZXVfYm6GgP4aY++FaDNzonF24tffOq8oeVKr cJda2my8rjq4Z1/Q3L4khYlxBqFTZzxmFuIt/Ieidu/LCUNZa0r96YUJcdglLOkR MxcVviafKz89GHsR6W+zWDsFZ9UC9wGcxUAo+bvR1w0/n42vcDWBuX/Vro+IyGxI g1+gUzzi0PKEr1Di6LtlP4mlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUucy/tU1W k6GkayrGqSQbC3BrmSswHwYDVR0jBBgwFoAUUBJV6QF6Y3iSbTaute/xnEXWV04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MjNBL0RFODJDQjQ4NENE RDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNpU2JUYXV0ZV94bkVYV1Yw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUJKVjZRRjZZM2lTYlRhdXRlX3huRVhXVjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 MjNBL0RFODJDQjQ4NENERDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNp U2JUYXV0ZV94bkVYV1YwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACuFX9AnJCtMLLJYwoZrVmnuvuCYLXjOi/0V9ueWgafbWvnDoIvLLb1L iIFSkZ6AK8lv6EhUIBdjqaXhfd/wRVXN1DE0BssviQZoICf+tlrOCSlCSalU6mk3 EaW39GgIbH5XeBor/+Ga5JMpClanB9rUYRHrHnHBDjJAndlT+tMNdHubBlG5mwqn 8AWCAPNjaLLPbUxNzCsUM9INB4KyWIUbmmQ7Yj16wgucCYu8pOR5WwdxEz2Sq+cx W4ggSNdpH+1P+P0n2xSe8ZBuEGurRdbYlzZ9+7pBN+AgwPF2hxdTpX0edjVnUrxE C3FbOOlezo99i2NAmdf6MaxNbDuILAY= -----END CERTIFICATE-----Generated at Sat Oct 18 23:35:51 2025 by rpki-client