$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft File: uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json) Hash identifier: MD+7cAsoFwPYUqnnqY26rYZqdgPKlOeEAwgy4QSEycM= Subject key identifier: A9:71:4A:15:54:6B:14:E4:F8:33:CB:88:FE:40:8F:2B:D2:D0:25:79 Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 Certificate issuer: /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft Manifest number: 02A2 Signing time: Wed 05 Nov 2025 01:38:14 +0000 Manifest this update: Wed 05 Nov 2025 01:38:14 +0000 Manifest next update: Wed 12 Nov 2025 01:38:14 +0000 Files and hashes: 1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: iN3yIXzQ0ZDfF7Hd+fDaNBSesldEslEac2hSqV+sAek=) 2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: gIwDWIDp8+Uz5STSFrQB1zJpip3RVo/LQNwdpuz8o1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E4C6, serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Validity Not Before: Nov 5 01:38:14 2025 GMT Not After : Nov 12 01:38:14 2025 GMT Subject: CN=690aaa86-407c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:27:5e:f1:ab:0e:e0:1f:9e:b9:ee:72:94: 32:7a:63:9d:47:16:86:38:01:9e:8f:90:65:8d:02: bb:1e:ce:67:19:9e:a7:17:b1:4b:23:b4:84:7b:81: dc:50:6d:38:b7:72:8c:75:08:ff:61:75:87:9f:55: dd:84:40:fb:79:52:05:08:1c:dd:ba:32:e9:86:85: 19:d3:5e:d3:56:74:d4:e8:2e:0a:89:77:0c:01:93: 08:28:f5:21:70:45:d2:cf:8d:ab:82:de:bb:62:08: 90:63:46:3e:04:71:6a:01:1e:39:c0:ad:29:b6:05: 3f:69:d4:da:33:62:c8:67:a7:51:04:c7:40:cd:c0: 2d:1a:ac:b5:63:be:bf:3d:14:e2:d2:74:18:ee:a4: 82:2d:e5:0f:b5:c6:be:e8:a9:00:50:55:4b:5e:09: d3:7e:50:f9:30:93:ae:e5:9b:92:b5:c3:6d:70:9c: b7:11:d2:3d:98:18:ed:b4:a3:48:89:06:93:02:02: 5e:d2:4e:05:6d:9d:e6:11:e9:29:bd:91:86:9f:79: 3c:ac:63:06:e0:10:3d:ae:19:5f:d1:0b:dd:6c:41: 20:5f:46:d6:3e:fc:9e:f0:0c:65:b4:d7:ff:cb:c1: 5d:ca:ab:ca:f7:82:23:18:74:6d:04:9a:41:f6:27: 27:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:71:4A:15:54:6B:14:E4:F8:33:CB:88:FE:40:8F:2B:D2:D0:25:79 X509v3 Authority Key Identifier: keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:76:87:bb:ce:98:a5:b0:c6:9d:75:d6:a2:c4:a9:86:f1:1b: 76:40:cc:62:4d:19:22:a0:d8:52:33:bb:2b:0f:de:27:23:1f: 49:ee:90:6b:16:d6:40:46:6d:6b:f6:d1:8d:de:b2:ee:0a:fb: 22:b8:65:c3:3e:d3:1d:20:b4:a6:14:97:9e:0c:b0:e6:84:a8: 9a:af:ab:e4:6c:d0:8a:90:45:84:63:df:ad:95:72:6d:9b:a2: 69:bf:40:61:b0:f7:08:20:3c:f3:08:f2:86:08:f8:d6:13:65: 37:b5:95:7b:df:22:91:ce:60:90:b9:b8:24:4b:7b:e4:d8:59: 31:5a:89:1c:6d:7c:8c:44:f3:00:21:da:9a:36:f7:67:89:40: a3:70:8b:75:e2:87:87:b6:0f:b4:77:a0:d8:67:1d:d6:74:4c: 8d:53:3f:b8:ad:c2:f3:08:bf:c1:75:02:f7:9d:eb:5a:fa:41: 9b:48:90:68:9b:d2:79:ba:80:24:3e:46:51:29:56:2c:af:c3: 9c:c3:6e:85:75:d0:41:82:d0:5c:84:bd:79:c3:a5:0c:b8:29: 90:c4:65:fb:a9:4f:d8:76:eb:0c:e2:b9:f2:fc:4e:1b:43:33: ae:e0:1c:3c:69:ae:6e:20:d5:62:85:21:56:44:9b:de:d7:a8: a0:dc:89:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU0QzYxMTAvBgNVBAUTKEI5MTlCQTBCM0FENUUyNkZDMzFEMzk0QkUxMzJCQkNB ODdGQ0M4NTIwHhcNMjUxMTA1MDEzODE0WhcNMjUxMTEyMDEzODE0WjAYMRYwFAYD VQQDEw02OTBhYWE4Ni00MDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDcnXvGrDuAfnrnucpQyemOdRxaGOAGej5BljQK7Hs5nGZ6nF7FLI7SEe4Hc UG04t3KMdQj/YXWHn1XdhED7eVIFCBzdujLphoUZ017TVnTU6C4KiXcMAZMIKPUh cEXSz42rgt67YgiQY0Y+BHFqAR45wK0ptgU/adTaM2LIZ6dRBMdAzcAtGqy1Y76/ PRTi0nQY7qSCLeUPtca+6KkAUFVLXgnTflD5MJOu5ZuStcNtcJy3EdI9mBjttKNI iQaTAgJe0k4FbZ3mEekpvZGGn3k8rGMG4BA9rhlf0QvdbEEgX0bWPvye8AxltNf/ y8FdyqvK94IjGHRtBJpB9icn3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlxShVU axTk+DPLiP5AjyvS0CV5MB8GA1UdIwQYMBaAFLkZugs61eJvwx05S+Eyu8qH/MhS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTRDNi9FQUI5NDdBODFF MTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRtX0RIVGxMNFRLN3lvZjh5 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VSbTZDenJWNG1fREhUbEw0VEs3eW9mOHlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTRDNi9FQUI5NDdBODFFMTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRt X0RIVGxMNFRLN3lvZjh5RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNdoe7zpilsMadddaixKmG8Rt2QMxiTRkioNhSM7srD94nIx9J7pBr FtZARm1r9tGN3rLuCvsiuGXDPtMdILSmFJeeDLDmhKiar6vkbNCKkEWEY9+tlXJt m6Jpv0BhsPcIIDzzCPKGCPjWE2U3tZV73yKRzmCQubgkS3vk2FkxWokcbXyMRPMA IdqaNvdniUCjcIt14oeHtg+0d6DYZx3WdEyNUz+4rcLzCL/BdQL3neta+kGbSJBo m9J5uoAkPkZRKVYsr8Ocw26FddBBgtBchL15w6UMuCmQxGX7qU/YdusM4rny/E4b QzOu4Bw8aa5uINVihSFWRJve16ig3Il0 -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:19 2025 by rpki-client