$ rpki-client -vvf rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft File: rUk9yaPSQDSDYoWHBR93lRWJFnk.mft (raw, json) Hash identifier: i7LBfY4qF7cCYsHyAs7aT4bgOUKasVlmh17/VieNFBE= Subject key identifier: 28:ED:E6:93:08:F9:90:B0:9E:F9:22:87:6A:E6:10:D1:53:24:AD:E0 Authority key identifier: AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 Certificate issuer: /CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679 Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft Manifest number: 02A2 Signing time: Wed 05 Nov 2025 01:37:29 +0000 Manifest this update: Wed 05 Nov 2025 01:37:28 +0000 Manifest next update: Wed 12 Nov 2025 01:37:28 +0000 Files and hashes: 1: rUk9yaPSQDSDYoWHBR93lRWJFnk.crl (hash: 2qFtCjiAESkKA/ybgLO//zSx+i+xDQZcYifMoLBPvsc=) 2: 8275E1721C5311EDA75CF137C4F9AE02.roa (hash: QBccf8qiB/fg1E5oo2BszC0tBdDW5Z5O97MgPa2rWD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B418, serialNumber=AD493DC9A3D2403483628587051F779515891679 Validity Not Before: Nov 5 01:37:28 2025 GMT Not After : Nov 12 01:37:28 2025 GMT Subject: CN=690aaa58-e7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:26:0d:cc:e1:4f:a7:bf:cf:bd:99:c5:09:78: 54:37:76:7c:21:e1:c1:6d:a6:55:66:1b:6b:fc:b4: a2:7d:5d:87:01:4e:ad:28:5d:50:93:5c:ed:f1:63: 21:cb:42:3c:ef:c4:10:54:a0:6f:46:a0:f2:9d:b1: a9:cc:29:0d:34:3d:e1:65:b3:73:d1:a2:a5:7d:ce: 88:5b:46:32:c8:bf:e9:9e:d3:a2:ba:aa:39:70:b6: 73:1f:d3:9b:01:4b:f1:56:3c:cf:59:26:9d:b3:93: ad:14:84:0a:b6:eb:f4:44:ba:fb:fc:6c:80:69:19: 20:49:59:1b:fc:be:2c:7f:ce:3f:1c:0a:fd:ea:c0: ac:1d:05:01:94:22:f0:49:b8:c0:e8:06:0c:59:98: d2:ac:6c:3d:02:a6:fb:7f:52:34:fc:e8:fe:cc:1f: 05:3b:8a:ab:78:7e:f5:44:f9:02:dd:a0:d3:24:5f: 1e:16:07:0f:c2:2b:59:4b:20:0b:d1:ab:54:52:67: 7b:02:ad:02:5f:33:a2:7a:a2:3a:55:67:84:a9:a5: 5a:55:3b:2a:78:ca:b9:1e:ec:83:46:af:f3:db:0a: bb:ad:93:4f:af:06:72:ae:86:bc:0d:f3:38:aa:94: fd:b6:bc:45:92:b2:f6:f5:98:18:f5:42:23:54:b9: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:E6:93:08:F9:90:B0:9E:F9:22:87:6A:E6:10:D1:53:24:AD:E0 X509v3 Authority Key Identifier: keyid:AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:ed:a0:94:20:c0:03:54:bf:d2:db:ff:b7:87:f6:ba:a6:96: 08:9f:c4:92:1e:4a:28:9e:dc:09:89:9b:ff:53:8f:13:47:8b: 5f:59:72:f5:fd:e0:e9:bf:17:ed:63:a6:60:ad:f0:a3:d5:70: f8:b0:b1:69:57:e8:c3:48:c9:c0:4c:3c:ef:a0:ae:39:30:08: 46:80:30:5d:e8:a0:f2:70:3c:eb:a3:97:8e:32:fc:13:8a:48: 3e:45:96:0c:75:a3:82:8f:40:a9:f1:2c:24:34:6c:d8:f8:43: a9:4e:97:13:fe:50:94:e3:92:5f:bf:57:26:33:d4:4d:03:93: e3:48:d6:dd:8d:8b:b4:ea:85:d2:81:eb:65:33:08:07:de:b9: b0:62:68:e6:44:2d:e8:04:ad:74:e2:e8:c6:61:00:91:e0:29: 46:48:43:1b:9a:bb:f9:1d:11:b7:87:7d:51:82:dd:c0:f1:e4: 94:12:ef:b2:87:a1:0b:78:3a:80:8e:2c:f6:22:c5:96:23:43: 04:bb:d1:4b:d9:ac:18:c7:58:08:26:be:7a:30:1b:56:be:f2: 0f:24:bc:74:fe:ca:6d:70:37:2c:98:2b:05:ea:39:54:fe:31: ad:54:d8:54:1f:c3:e9:ee:19:31:b7:1c:08:1e:b0:74:2b:ac: 08:7a:40:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI0MTgxMTAvBgNVBAUTKEFENDkzREM5QTNEMjQwMzQ4MzYyODU4NzA1MUY3Nzk1 MTU4OTE2NzkwHhcNMjUxMTA1MDEzNzI4WhcNMjUxMTEyMDEzNzI4WjAYMRYwFAYD VQQDEw02OTBhYWE1OC1lN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SYNzOFPp7/PvZnFCXhUN3Z8IeHBbaZVZhtr/LSifV2HAU6tKF1Qk1zt8WMh y0I878QQVKBvRqDynbGpzCkNND3hZbNz0aKlfc6IW0YyyL/pntOiuqo5cLZzH9Ob AUvxVjzPWSads5OtFIQKtuv0RLr7/GyAaRkgSVkb/L4sf84/HAr96sCsHQUBlCLw SbjA6AYMWZjSrGw9Aqb7f1I0/Oj+zB8FO4qreH71RPkC3aDTJF8eFgcPwitZSyAL 0atUUmd7Aq0CXzOieqI6VWeEqaVaVTsqeMq5HuyDRq/z2wq7rZNPrwZyroa8DfM4 qpT9trxFkrL29ZgY9UIjVLlGiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjt5pMI +ZCwnvkih2rmENFTJK3gMB8GA1UdIwQYMBaAFK1JPcmj0kA0g2KFhwUfd5UViRZ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQxOC9BRDBEQzQ4MDFD NEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FEU0RZb1dIQlI5M2xSV0pG bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVazl5YVBTUURTRFlvV0hCUjkzbFJXSkZuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjQxOC9BRDBEQzQ4MDFDNEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FE U0RZb1dIQlI5M2xSV0pGbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG7aCUIMADVL/S2/+3h/a6ppYIn8SSHkoontwJiZv/U48TR4tfWXL1 /eDpvxftY6ZgrfCj1XD4sLFpV+jDSMnATDzvoK45MAhGgDBd6KDycDzro5eOMvwT ikg+RZYMdaOCj0Cp8SwkNGzY+EOpTpcT/lCU45Jfv1cmM9RNA5PjSNbdjYu06oXS getlMwgH3rmwYmjmRC3oBK104ujGYQCR4ClGSEMbmrv5HRG3h31Rgt3A8eSUEu+y h6ELeDqAjiz2IsWWI0MEu9FL2awYx1gIJr56MBtWvvIPJLx0/sptcDcsmCsF6jlU /jGtVNhUH8Pp7hkxtxwIHrB0K6wIekAO -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:33 2025 by rpki-client