$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json) Hash identifier: r3hAnlna6O1Ua3B7eou9w+jEip5reH30QkGfmM5YWDE= Subject key identifier: D8:73:7C:B4:01:08:E5:91:A5:0A:C1:ED:3C:5D:71:D8:C7:F2:33:AD Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft Manifest number: 0C93 Signing time: Tue 16 Sep 2025 18:32:52 +0000 Manifest this update: Tue 16 Sep 2025 18:32:52 +0000 Manifest next update: Tue 23 Sep 2025 18:32:52 +0000 Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: 49AJi3E5YHZZ5XFsxleEH6YnaTzu/bFAAotAP4OQTWM=) 2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: n01/3EIjRvyLbA9XmobgbcsSzY3lQa7SmWy3AZPr1nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 18:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: Sep 16 18:32:52 2025 GMT Not After : Sep 23 18:32:52 2025 GMT Subject: CN=68c9ad54-f297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:6b:f5:c0:40:04:e5:66:b9:16:74:27:90: ca:61:a0:13:a7:17:13:10:52:10:ba:0b:45:cf:5a: fd:df:1a:4e:1e:ef:92:07:4b:2e:65:5d:f4:1f:ca: 9c:2f:c7:22:e0:b7:b8:5f:9b:31:14:dc:35:85:46: 60:a9:c4:4a:a5:f2:2e:06:34:d5:09:b9:4c:a0:af: b4:67:b7:98:fa:ec:2b:e0:ab:14:ba:17:2e:35:9b: 2f:2c:31:a7:38:78:98:1d:40:2b:31:24:4e:12:5e: a7:dc:29:e1:bc:0f:b3:7c:db:76:4a:26:92:5a:df: f4:63:83:8e:cc:25:e5:5d:1e:0c:fc:69:4c:77:e2: 3d:10:f2:34:d9:d0:dd:83:8e:4b:91:5c:34:04:6e: d3:dd:72:ed:5e:4c:73:3e:da:5e:f6:03:5a:44:1c: be:7d:70:a1:7d:84:9c:22:40:8f:45:1d:1b:74:e5: 59:bf:b0:59:7c:03:0d:19:27:06:ad:58:94:c1:1f: d8:f0:0a:cd:b5:ae:96:44:c6:55:4c:17:30:c0:ea: 3f:c0:91:b9:68:c5:12:92:5a:72:68:99:9f:22:c7: 77:5c:d5:2b:0e:88:25:d1:b2:7f:44:2c:ef:2a:e0: 17:ee:44:cb:96:3d:9a:16:e5:77:0a:23:4c:98:39: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:73:7C:B4:01:08:E5:91:A5:0A:C1:ED:3C:5D:71:D8:C7:F2:33:AD X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7e:71:1d:3f:74:54:6c:f2:3a:65:a1:ac:e6:1b:79:04:72: d7:82:9d:1c:c1:0d:3d:08:ec:da:a4:5f:63:0e:ed:a3:6e:fb: b6:47:84:24:37:d3:df:74:44:92:ef:74:20:5f:27:43:f2:ec: 6c:ae:f9:90:89:59:31:3e:6e:a7:02:ea:5b:52:7b:dd:4c:08: 0e:cf:30:06:fa:9a:c1:85:e8:7a:2d:61:f4:8e:9d:40:1b:13: 2d:48:40:59:43:f2:71:6f:5e:64:a8:76:cc:71:e5:6e:a5:5b: e5:c4:88:49:17:75:82:7a:a5:96:39:e8:af:9b:81:5a:03:0b: 07:39:cc:73:d0:6d:85:50:42:9f:e1:b8:66:54:3d:84:dd:c0: ff:f7:ea:03:d5:3d:27:72:31:36:f5:a0:f2:cd:78:6b:bf:00: ab:7a:ec:5d:83:e2:1b:15:a7:c0:2d:a7:96:0c:18:15:76:e7: 18:86:26:53:79:0b:d4:cc:b3:21:5c:48:56:17:11:ad:47:8f: 1d:df:6b:e6:61:6b:7d:11:bb:b9:3c:c6:96:dd:19:1f:71:c4: 59:2e:04:73:63:a5:a3:18:ff:e4:05:9d:c8:b2:58:25:e1:69: 83:aa:1e:43:5e:c1:6a:91:42:35:94:9e:46:e7:43:7d:b7:4c: d7:22:f0:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjUwOTE2MTgzMjUyWhcNMjUwOTIzMTgzMjUyWjAYMRYwFAYD VQQDEw02OGM5YWQ1NC1mMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgtr9cBABOVmuRZ0J5DKYaATpxcTEFIQugtFz1r93xpOHu+SB0suZV30H8qc L8ci4Le4X5sxFNw1hUZgqcRKpfIuBjTVCblMoK+0Z7eY+uwr4KsUuhcuNZsvLDGn OHiYHUArMSROEl6n3CnhvA+zfNt2SiaSWt/0Y4OOzCXlXR4M/GlMd+I9EPI02dDd g45LkVw0BG7T3XLtXkxzPtpe9gNaRBy+fXChfYScIkCPRR0bdOVZv7BZfAMNGScG rViUwR/Y8ArNta6WRMZVTBcwwOo/wJG5aMUSklpyaJmfIsd3XNUrDogl0bJ/RCzv KuAX7kTLlj2aFuV3CiNMmDlp5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhzfLQB COWRpQrB7TxdcdjH8jOtMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI QjJXMDVoMS11YklzWUFSamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/fnEdP3RUbPI6ZaGs5ht5BHLXgp0cwQ09COzapF9jDu2jbvu2R4Qk N9PfdESS73QgXydD8uxsrvmQiVkxPm6nAupbUnvdTAgOzzAG+prBheh6LWH0jp1A GxMtSEBZQ/Jxb15kqHbMceVupVvlxIhJF3WCeqWWOeivm4FaAwsHOcxz0G2FUEKf 4bhmVD2E3cD/9+oD1T0ncjE29aDyzXhrvwCreuxdg+IbFafALaeWDBgVducYhiZT eQvUzLMhXEhWFxGtR48d32vmYWt9Ebu5PMaW3RkfccRZLgRzY6WjGP/kBZ3Islgl 4WmDqh5DXsFqkUI1lJ5G50N9t0zXIvBd -----END CERTIFICATE-----Generated at Thu Sep 18 19:13:29 2025 by rpki-client