$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json) Hash identifier: AoMmQB3iT4I/EpSVqQ039iQtGIqujXQ4AP1VuGh4W1A= Subject key identifier: 04:D2:E9:E7:F4:71:7D:A0:A4:90:ED:DE:1D:6B:67:02:CB:9E:C3:80 Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft Manifest number: 0194 Signing time: Mon 27 Oct 2025 05:16:13 +0000 Manifest this update: Mon 27 Oct 2025 05:16:12 +0000 Manifest next update: Mon 03 Nov 2025 05:16:12 +0000 Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: yA/KLwSCtjfD3L93FqvmpKWlp9vHM5zYrpv4HhsH3wI=) 2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: aad5STWtZPNgSUZlTpHai7ItORShh/+m60YWqMbY2wU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 05:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Validity Not Before: Oct 27 05:16:12 2025 GMT Not After : Nov 3 05:16:12 2025 GMT Subject: CN=68ff001d-b57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:02:a4:37:7f:50:91:02:1e:29:ba:1a:d2: 77:40:17:2a:b7:b2:db:3c:d4:14:fd:fa:6a:61:f2: 62:b1:9b:6c:b7:a6:a7:ae:d2:9e:20:2a:20:97:62: 16:5b:bd:4b:6f:4c:af:b2:81:8c:20:60:8f:26:aa: 23:fa:1e:9c:44:53:ed:be:6b:70:04:d7:94:37:dc: 8c:31:76:6e:fb:5b:34:54:b8:b6:e2:7a:44:fe:4c: 92:d4:93:00:7b:e3:fd:1e:bb:89:3f:cf:eb:ea:c6: 19:73:31:4b:2d:45:c9:02:b4:57:d1:37:92:dc:fb: d5:ff:bf:b8:f3:c0:7d:e8:1a:ca:bb:de:fe:ec:ca: 52:41:2d:71:e6:75:29:ca:d0:2d:03:f9:c3:71:9c: 06:6d:62:46:e1:1a:72:06:05:51:ba:33:71:e4:b1: ac:1c:21:6c:48:d9:69:e5:67:8b:42:4d:56:5b:b1: d6:c8:1b:b4:be:81:03:24:9c:66:4e:f0:32:6a:1b: a4:8c:31:b3:8a:03:1c:70:19:62:b2:3c:10:ab:7a: de:51:26:7b:d3:72:7c:a3:78:8e:5a:cb:87:b8:20: ce:82:6b:35:c0:96:5f:91:45:f0:ce:4e:ec:9f:3d: 95:23:d4:84:6b:bb:34:e9:a6:93:20:b5:97:53:09: 0e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D2:E9:E7:F4:71:7D:A0:A4:90:ED:DE:1D:6B:67:02:CB:9E:C3:80 X509v3 Authority Key Identifier: keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:53:14:3c:82:ec:ab:34:92:5c:24:fc:5d:b2:16:84:fd:ef: ce:95:0e:53:df:e9:a4:cb:bf:7e:fe:29:65:5f:ae:df:a5:93: 78:80:0a:4a:03:2a:6d:73:50:95:66:85:0d:dd:01:f7:a8:e0: 56:ed:8b:4f:06:53:d1:b2:db:a2:1b:1c:a7:91:33:7b:b5:1a: e7:96:9c:c2:c3:73:e1:18:2d:49:f9:6c:f7:20:8a:1d:ae:82: 1a:f3:90:6f:de:c8:e8:de:aa:e7:98:9c:41:08:2e:ec:23:c4: 85:4f:a5:13:a1:a5:0d:82:a3:8a:68:9b:cf:5a:47:66:5b:6e: 96:b6:31:36:a6:f2:21:cb:00:84:9b:e3:0d:8e:06:f1:c2:3b: c4:25:a8:ac:95:89:2f:ed:f5:75:36:d4:55:c4:0a:1d:34:7f: ad:83:02:65:60:6a:61:ac:76:41:ea:00:2a:23:02:69:7b:dc: 0b:6b:48:eb:c4:08:51:ad:cf:dc:a1:b8:82:8a:12:25:52:af: 3b:e9:3e:5b:4c:19:24:d8:a1:fc:45:f2:6d:24:94:74:1b:00: 14:2f:12:59:11:43:06:3b:3d:50:31:c1:59:f2:54:46:c8:f6: 43:87:2b:c0:cf:3b:e5:d7:34:c8:b2:66:38:c4:65:a4:bd:3a: 6d:50:a7:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4 MjI4RDc0NzMwHhcNMjUxMDI3MDUxNjEyWhcNMjUxMTAzMDUxNjEyWjAYMRYwFAYD VQQDEw02OGZmMDAxZC1iNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3YCpDd/UJECHim6GtJ3QBcqt7LbPNQU/fpqYfJisZtst6anrtKeICogl2IW W71Lb0yvsoGMIGCPJqoj+h6cRFPtvmtwBNeUN9yMMXZu+1s0VLi24npE/kyS1JMA e+P9HruJP8/r6sYZczFLLUXJArRX0TeS3PvV/7+488B96BrKu97+7MpSQS1x5nUp ytAtA/nDcZwGbWJG4RpyBgVRujNx5LGsHCFsSNlp5WeLQk1WW7HWyBu0voEDJJxm TvAyahukjDGzigMccBlisjwQq3reUSZ703J8o3iOWsuHuCDOgms1wJZfkUXwzk7s nz2VI9SEa7s06aaTILWXUwkOiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATS6ef0 cX2gpJDt3h1rZwLLnsOAMB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4 RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAUxQ8guyrNJJcJPxdshaE/e/OlQ5T3+mky79+/illX67fpZN4gApK Ayptc1CVZoUN3QH3qOBW7YtPBlPRstuiGxynkTN7tRrnlpzCw3PhGC1J+Wz3IIod roIa85Bv3sjo3qrnmJxBCC7sI8SFT6UToaUNgqOKaJvPWkdmW26WtjE2pvIhywCE m+MNjgbxwjvEJaislYkv7fV1NtRVxAodNH+tgwJlYGphrHZB6gAqIwJpe9wLa0jr xAhRrc/cobiCihIlUq876T5bTBkk2KH8RfJtJJR0GwAULxJZEUMGOz1QMcFZ8lRG yPZDhyvAzzvl1zTIsmY4xGWkvTptUKcu -----END CERTIFICATE-----Generated at Mon Oct 27 15:45:15 2025 by rpki-client