$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: CFiqQG9/9LjT+y6DCStwVdBPdoi/+FsgL5l4Xnh4G2g= Subject key identifier: 24:93:8A:AB:09:4D:63:F6:65:46:AB:33:A5:43:68:AD:72:22:0A:63 Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 067B Signing time: Tue 28 Oct 2025 22:18:20 +0000 Manifest this update: Tue 28 Oct 2025 22:18:19 +0000 Manifest next update: Tue 04 Nov 2025 22:18:19 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: QwB6H1zBby/YYQPW/+xWHkg1lZiGkBKTuVyByrrDxW4=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 22:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: Oct 28 22:18:19 2025 GMT Not After : Nov 4 22:18:19 2025 GMT Subject: CN=6901412b-e39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:46:43:b7:48:32:0e:fc:ab:ba:5f:9c:80: 16:0d:bc:5e:e9:20:d7:32:fc:e2:46:8c:51:2e:cc: f1:5c:95:40:98:57:dc:f4:13:0a:97:0b:f2:69:1a: d3:06:65:62:a8:03:e1:69:85:49:60:70:fc:32:66: 19:96:68:fe:54:61:5f:0a:e5:ff:a8:00:27:0c:c2: bc:ee:c8:0c:42:d8:00:aa:e3:b0:d3:e6:37:2e:5e: 65:be:6a:b1:d5:90:aa:24:98:80:27:24:1e:f5:6b: 3a:ba:25:39:9b:23:3e:4a:0f:99:6e:0d:d4:1a:2f: 1c:74:49:98:65:d0:37:37:e3:3c:95:c0:1e:23:6a: 0e:db:a7:97:b4:c6:50:8d:70:2e:8d:0d:d3:f7:2c: 4e:e0:5c:02:58:8a:29:9e:e8:63:51:55:35:08:55: 4e:ef:11:0c:6f:ba:29:b0:91:ff:1a:ae:58:98:61: b4:13:ed:95:0e:fd:e7:49:5c:18:a2:ef:72:fc:b8: 35:68:2b:2e:1e:83:65:0c:13:e7:20:5d:ac:ef:fb: 12:43:d3:95:6c:e4:bb:ba:f4:65:73:69:fa:3d:a0: 9e:87:76:b0:dd:c9:5c:75:d8:35:27:d7:89:26:fa: e5:9a:3f:eb:b3:7a:0a:3e:91:4d:52:e6:a1:18:3c: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:93:8A:AB:09:4D:63:F6:65:46:AB:33:A5:43:68:AD:72:22:0A:63 X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:be:ee:90:1e:a1:c0:77:ee:4d:c4:9d:da:23:39:51:c2:4a: 53:c0:a4:96:00:1d:1c:e3:5a:d3:a0:e4:04:81:c3:74:17:8f: ed:c8:e3:f1:21:0a:df:8a:21:db:60:27:a0:5f:56:e4:fa:9b: e8:90:88:2f:db:40:18:fb:f7:fd:e5:4f:b7:cd:f3:0d:4c:25: 53:90:ea:90:f4:a6:e5:dc:64:1f:33:24:25:1a:b0:0d:28:3e: 49:6f:81:07:36:c2:46:69:02:c3:d0:76:4f:1d:13:3d:31:f4: 60:cd:0c:63:26:37:30:e0:cc:e3:b9:8b:73:7b:0e:f2:e1:28: 8b:2c:e5:8f:f9:59:76:cc:ea:08:67:5c:fe:43:5f:eb:f4:e7: 2e:09:11:c6:87:7a:51:d4:8b:80:29:68:8c:45:1b:10:73:9a: 8d:fa:de:f1:71:50:83:a7:ac:56:fe:95:29:0a:aa:3b:cb:b3: 84:b3:61:07:d7:2f:b2:ce:e7:b8:42:f0:60:97:f2:c1:07:ee: dc:7c:45:ca:eb:cf:d9:6b:79:0c:61:26:22:74:72:d4:a3:97: 84:27:3e:f7:97:83:ff:b9:26:16:6c:21:da:21:1a:da:a8:9c: a2:56:f6:21:88:12:c4:ae:12:ea:70:03:01:ec:1c:56:10:7b: 7b:04:88:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjUxMDI4MjIxODE5WhcNMjUxMTA0MjIxODE5WjAYMRYwFAYD VQQDEw02OTAxNDEyYi1lMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDNGQ7dIMg78q7pfnIAWDbxe6SDXMvziRoxRLszxXJVAmFfc9BMKlwvyaRrT BmViqAPhaYVJYHD8MmYZlmj+VGFfCuX/qAAnDMK87sgMQtgAquOw0+Y3Ll5lvmqx 1ZCqJJiAJyQe9Ws6uiU5myM+Sg+Zbg3UGi8cdEmYZdA3N+M8lcAeI2oO26eXtMZQ jXAujQ3T9yxO4FwCWIopnuhjUVU1CFVO7xEMb7opsJH/Gq5YmGG0E+2VDv3nSVwY ou9y/Lg1aCsuHoNlDBPnIF2s7/sSQ9OVbOS7uvRlc2n6PaCeh3aw3clcddg1J9eJ Jvrlmj/rs3oKPpFNUuahGDy3LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSTiqsJ TWP2ZUarM6VDaK1yIgpjMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBvu6QHqHAd+5NxJ3aIzlRwkpTwKSWAB0c41rToOQEgcN0F4/tyOPx IQrfiiHbYCegX1bk+pvokIgv20AY+/f95U+3zfMNTCVTkOqQ9Kbl3GQfMyQlGrAN KD5Jb4EHNsJGaQLD0HZPHRM9MfRgzQxjJjcw4MzjuYtzew7y4SiLLOWP+Vl2zOoI Z1z+Q1/r9OcuCRHGh3pR1IuAKWiMRRsQc5qN+t7xcVCDp6xW/pUpCqo7y7OEs2EH 1y+yzue4QvBgl/LBB+7cfEXK68/Za3kMYSYidHLUo5eEJz73l4P/uSYWbCHaIRra qJyiVvYhiBLErhLqcAMB7BxWEHt7BIhB -----END CERTIFICATE-----Generated at Thu Oct 30 19:36:02 2025 by rpki-client