$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json) Hash identifier: wHC7IJo4hSKqbwXw0jzBjePJxBIITIIzhlQVWK+eqKk= Subject key identifier: 2E:B5:D3:6A:03:92:D3:50:9F:DE:D5:25:F4:20:49:FD:2E:97:06:EE Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft Manifest number: 6C Signing time: Mon 03 Nov 2025 06:56:29 +0000 Manifest this update: Mon 03 Nov 2025 06:56:28 +0000 Manifest next update: Mon 10 Nov 2025 06:56:28 +0000 Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: nlzJw8PXWGG294ILGK3S/qkSP3PrjvQCRG4xLsQZp/4=) 2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Validity Not Before: Nov 3 06:56:28 2025 GMT Not After : Nov 10 06:56:28 2025 GMT Subject: CN=6908521d-a108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:64:1b:83:c2:c9:7a:91:d6:53:2d:f5:de: 53:c4:26:76:1a:0b:19:9a:d1:c4:2c:fe:13:20:3f: 6c:4d:6a:28:64:79:10:82:08:fc:6a:eb:95:bd:fb: 29:13:e8:c4:7b:88:e0:2d:09:c8:9b:c5:c6:31:b9: fc:35:57:8d:4c:e3:bd:35:4f:24:05:fe:44:c0:e8: 7a:31:d5:fc:af:79:0e:de:a2:38:9d:0c:56:b1:2c: c4:37:d0:00:d6:07:54:2a:05:a6:2a:95:c2:7e:1b: 47:b5:5d:82:28:d6:00:7c:ba:54:4a:ed:d3:2d:e1: ce:1b:9f:df:61:58:8f:36:04:f8:d1:1c:97:82:e0: d2:ed:4a:19:2d:10:a4:aa:fd:11:af:d5:27:dd:cb: f9:73:8a:99:72:77:92:d4:2a:00:59:d3:18:2f:67: 39:6f:de:1d:0a:c8:74:20:1e:10:21:61:0f:91:4d: a2:bf:bf:4c:5e:33:55:17:ae:ed:91:73:6b:08:ee: fd:f4:68:37:0a:d5:19:a4:26:cc:3f:bc:ec:87:dc: 4f:b1:71:da:23:80:02:3b:53:c1:c7:33:65:46:14: 6d:4d:a4:af:15:3c:95:14:6f:04:37:5a:52:2c:4d: 18:7c:25:8b:34:1e:30:07:58:fa:ba:f9:71:35:a8: f8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B5:D3:6A:03:92:D3:50:9F:DE:D5:25:F4:20:49:FD:2E:97:06:EE X509v3 Authority Key Identifier: keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a7:f8:25:d7:b9:cf:ba:64:65:a0:ed:5f:c3:60:9a:66:b6: 7f:33:42:a9:e8:27:42:14:a9:ae:7f:a7:96:46:31:b4:ba:82: 73:2d:1c:d1:94:29:91:4a:74:46:ee:a3:fd:91:d0:09:5b:f5: 41:1f:3e:46:e7:74:0c:7c:e9:a4:f7:15:77:d7:19:98:4f:93: 18:45:44:8a:db:5b:71:bd:cd:29:18:f1:3b:28:0b:ac:09:a7: 5a:50:5d:30:b4:a9:b9:d9:65:48:37:b7:13:29:f4:71:c7:bc: 3c:c9:c1:ba:8a:ae:9f:0c:34:c5:ab:f7:5a:b7:c6:b9:63:d0: e0:24:ee:b5:6d:67:b2:6c:e7:ab:60:b2:7a:aa:38:5f:d6:6a: b0:67:a9:16:d6:32:32:df:df:19:b7:3a:e7:e1:03:c1:98:ae: 12:e8:c0:9f:21:de:8e:5e:89:e6:90:4b:1d:c4:fd:fb:02:43: 48:11:1a:48:fa:fd:10:55:dd:75:36:2d:2c:d8:e8:2a:13:c5: c2:da:8f:4f:f2:42:f4:8b:be:e5:5e:92:fc:18:ce:c2:9a:f8: 1b:2b:36:fa:d6:21:62:3a:2e:f6:e6:ff:a5:9a:b9:4e:5c:50: ad:e5:f6:d3:be:c1:7a:68:85:31:d4:d6:6e:b3:3e:b2:fe:dd: e8:5e:db:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTAyMzExMC8GA1UEBRMoQjlDRDU3RTJGRjRGNThCQjk1OUE5NTQxQTMxQ0ZERjY2 OTc2MThCMjAeFw0yNTExMDMwNjU2MjhaFw0yNTExMTAwNjU2MjhaMBgxFjAUBgNV BAMTDTY5MDg1MjFkLWExMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0TmQbg8LJepHWUy313lPEJnYaCxma0cQs/hMgP2xNaihkeRCCCPxq65W9+ykT 6MR7iOAtCcibxcYxufw1V41M4701TyQF/kTA6Hox1fyveQ7eojidDFaxLMQ30ADW B1QqBaYqlcJ+G0e1XYIo1gB8ulRK7dMt4c4bn99hWI82BPjRHJeC4NLtShktEKSq /RGv1Sfdy/lziplyd5LUKgBZ0xgvZzlv3h0KyHQgHhAhYQ+RTaK/v0xeM1UXru2R c2sI7v30aDcK1RmkJsw/vOyH3E+xcdojgAI7U8HHM2VGFG1NpK8VPJUUbwQ3WlIs TRh8JYs0HjAHWPq6+XE1qPgvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULrXTagOS 01Cf3tUl9CBJ/S6XBu4wHwYDVR0jBBgwFoAUuc1X4v9PWLuVmpVBoxz99ml2GLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMDIzL0E2NTRGRUYwMTEx QzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1Vm1wVkJveHo5OW1sMkdM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWMxWDR2OVBXTHVWbXBWQm94ejk5bWwyR0xJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MDIzL0E2NTRGRUYwMTExQzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1 Vm1wVkJveHo5OW1sMkdMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAByn+CXXuc+6ZGWg7V/DYJpmtn8zQqnoJ0IUqa5/p5ZGMbS6gnMtHNGU KZFKdEbuo/2R0Alb9UEfPkbndAx86aT3FXfXGZhPkxhFRIrbW3G9zSkY8TsoC6wJ p1pQXTC0qbnZZUg3txMp9HHHvDzJwbqKrp8MNMWr91q3xrlj0OAk7rVtZ7Js56tg snqqOF/WarBnqRbWMjLf3xm3OufhA8GYrhLowJ8h3o5eieaQSx3E/fsCQ0gRGkj6 /RBV3XU2LSzY6CoTxcLaj0/yQvSLvuVekvwYzsKa+BsrNvrWIWI6Lvbm/6WauU5c UK3l9tO+wXpohTHU1m6zPrL+3ehe20s= -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:07 2025 by rpki-client