$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: 00gUEaRqbPjES+zW+HXN31U37erNmzcxM5Kk4T4B2ts= Subject key identifier: FD:75:36:67:20:4F:E1:F4:CF:8A:EC:76:07:94:6F:26:61:E5:A3:A1 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: 0152 Signing time: Sun 19 Oct 2025 07:00:11 +0000 Manifest this update: Sun 19 Oct 2025 07:00:11 +0000 Manifest next update: Sun 26 Oct 2025 07:00:11 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: t/pV1Vc3j80yBhBb/S+msCcCVaZciWJAMxpaH3he51I=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: s22fNuehfcR8cdi3cFR8Z1yPLk8LwMQLolDpdzgZgc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Oct 19 07:00:11 2025 GMT Not After : Oct 26 07:00:11 2025 GMT Subject: CN=68f48c7b-9c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:eb:ec:c8:27:34:25:0b:e4:14:9e:22:4e:63: 2c:8a:39:05:d9:70:f6:50:0b:b0:7a:86:c8:37:cc: 60:c8:52:64:90:28:9e:e1:df:8e:9a:c3:fb:5c:8f: b4:ee:88:c4:c1:aa:55:26:f2:e1:7a:59:cb:ef:a1: 29:3b:16:54:69:72:ed:3f:25:b9:31:d6:27:f7:ec: 0f:f4:17:8c:be:04:85:a4:99:ee:20:fb:38:d8:4a: 02:07:be:3a:b7:f5:a8:4d:a5:92:6c:f8:fa:2b:8b: e9:28:30:69:20:5b:21:38:b7:cd:74:2e:91:6d:28: 52:d1:13:06:9a:6f:87:28:48:bb:22:aa:ee:cf:b9: a5:9d:24:1f:63:9a:15:d5:40:9c:4f:a8:5f:a5:a3: fd:06:9f:89:09:93:9f:bc:58:6a:82:87:ab:56:4a: 0d:b4:61:f0:5a:3f:16:cd:b5:15:ad:a0:ee:3b:b0: 17:ad:b5:30:59:4d:83:32:5b:47:3b:b9:60:36:6b: 76:89:0e:4b:54:ce:63:7a:65:5a:dd:2a:34:49:61: bd:b5:a1:9b:f1:78:ac:ce:63:af:2b:39:f0:9b:35: 27:76:bc:eb:fc:8a:20:ae:0b:37:0b:8f:a1:8d:44: 27:39:50:38:3e:dd:c6:da:cb:d6:35:12:ba:cf:b9: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:75:36:67:20:4F:E1:F4:CF:8A:EC:76:07:94:6F:26:61:E5:A3:A1 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:cb:4d:c3:66:7b:1f:4f:e9:f2:a7:69:9c:56:f0:27:b6:12: b5:fe:30:e7:10:c6:5f:85:4d:3c:40:e6:3a:62:a9:c1:0b:6f: b1:9b:23:f6:81:15:15:8f:56:f3:08:37:e0:e8:29:ab:40:e9: e2:3f:54:c4:36:88:a6:04:b7:9c:22:09:c4:7b:b2:1f:72:54: bb:3c:93:1d:eb:0a:9a:4c:90:63:f9:1c:88:c7:cb:b7:32:7e: b1:1a:87:0a:10:67:99:8d:87:46:c5:eb:5b:4a:59:24:34:ab: 01:b3:38:81:f9:f2:e5:b1:39:ce:95:e2:e0:d4:69:1e:68:53: 31:fb:9c:0e:72:d5:91:5c:9a:2f:b4:38:6c:6a:43:1c:45:31: 83:22:36:a3:7c:28:a5:d3:e9:2d:ce:50:cd:59:90:28:d2:8a: 73:5a:0e:60:e9:c5:f5:71:e5:62:b7:0b:53:6a:a6:2c:61:f7: cc:2e:7e:3f:68:c4:d2:65:46:83:92:45:04:89:f2:b1:5a:9f: 5e:14:d2:84:a2:38:e7:c8:d1:9c:6b:f4:cc:c8:fb:bf:62:af: de:45:b2:fd:23:99:4a:18:d9:10:18:cc:b0:9e:b6:e6:4c:28: 50:12:d3:43:86:e9:a7:cf:30:af:4e:cd:3e:1f:92:32:50:81: dd:9f:76:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUxMDE5MDcwMDExWhcNMjUxMDI2MDcwMDExWjAYMRYwFAYD VQQDEw02OGY0OGM3Yi05YzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+vsyCc0JQvkFJ4iTmMsijkF2XD2UAuweobIN8xgyFJkkCie4d+OmsP7XI+0 7ojEwapVJvLhelnL76EpOxZUaXLtPyW5MdYn9+wP9BeMvgSFpJnuIPs42EoCB746 t/WoTaWSbPj6K4vpKDBpIFshOLfNdC6RbShS0RMGmm+HKEi7Iqruz7mlnSQfY5oV 1UCcT6hfpaP9Bp+JCZOfvFhqgoerVkoNtGHwWj8WzbUVraDuO7AXrbUwWU2DMltH O7lgNmt2iQ5LVM5jemVa3So0SWG9taGb8XiszmOvKznwmzUndrzr/Iogrgs3C4+h jUQnOVA4Pt3G2svWNRK6z7nyywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP11Nmcg T+H0z4rsdgeUbyZh5aOhMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwy03DZnsfT+nyp2mcVvAnthK1/jDnEMZfhU08QOY6YqnBC2+xmyP2 gRUVj1bzCDfg6CmrQOniP1TENoimBLecIgnEe7IfclS7PJMd6wqaTJBj+RyIx8u3 Mn6xGocKEGeZjYdGxetbSlkkNKsBsziB+fLlsTnOleLg1GkeaFMx+5wOctWRXJov tDhsakMcRTGDIjajfCil0+ktzlDNWZAo0opzWg5g6cX1ceVitwtTaqYsYffMLn4/ aMTSZUaDkkUEifKxWp9eFNKEojjnyNGca/TMyPu/Yq/eRbL9I5lKGNkQGMywnrbm TChQEtNDhumnzzCvTs0+H5IyUIHdn3Zs -----END CERTIFICATE-----Generated at Mon Oct 20 16:46:30 2025 by rpki-client