$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: +r1p/46RDykkVKIKHFKZh3I4ehgVoY6cgsf0VbevCkk= Subject key identifier: 96:A3:FE:66:34:F4:09:E9:54:F7:04:9D:7C:5E:39:4D:2A:A0:39:FA Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 0144 Signing time: Tue 07 Oct 2025 04:42:42 +0000 Manifest this update: Tue 07 Oct 2025 04:42:41 +0000 Manifest next update: Tue 14 Oct 2025 04:42:41 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: FTN6t0ZyuZKSFu0BNTqfRZ6ksXFElsycfsv+7scH8n0=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: Cg10Lh1/jWjaqO5EBHv5C6vMK3khuwZ/+iMJMpvh7AE=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: lJjM0vXxFGkR8fpKRXKFywWPgH/0gbH+qkVNiWKRaAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 04:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Oct 7 04:42:41 2025 GMT Not After : Oct 14 04:42:41 2025 GMT Subject: CN=68e49a42-f836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c4:b9:c0:22:8f:66:6d:b1:bb:48:c7:da:6e: 0f:7b:76:29:94:bc:13:dc:03:06:6e:ea:49:2c:09: d5:7c:52:36:ee:62:0b:69:34:cc:8a:83:6e:f9:0c: 46:ad:06:16:cf:61:a5:d6:e6:d4:36:aa:64:57:79: 41:32:eb:9a:49:3f:dd:31:d6:ec:a5:2e:ac:49:fd: 3e:a8:58:d9:d8:23:2f:2b:25:a7:dd:84:7a:8a:e5: 90:18:ea:96:ba:70:e5:3d:8e:af:a6:8c:91:0b:7a: 12:e1:6c:46:68:0e:87:78:d7:fe:70:bf:cb:e1:9b: 7e:e1:bf:3a:ab:18:a9:97:21:60:6e:d2:7c:99:10: 00:53:5d:2c:bc:6b:c4:99:96:5b:d6:ec:48:11:fb: 44:fc:e2:37:22:e6:d6:3e:59:55:1d:8a:c6:fc:80: 4f:5a:03:fd:d7:37:10:ce:10:73:85:7e:06:6d:fe: 0b:ef:7b:c8:42:7d:17:86:49:24:49:d3:ae:c0:b7: 32:39:79:95:c7:b4:e6:d6:44:d8:60:20:e3:15:c7: dc:64:e1:86:39:70:68:d3:56:57:3a:0f:9b:42:9e: a3:ef:03:4f:23:d5:ad:e7:cb:dc:9e:43:d3:c3:bb: c8:75:e2:d3:ea:16:2e:2b:62:3d:f2:0f:c4:40:d4: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A3:FE:66:34:F4:09:E9:54:F7:04:9D:7C:5E:39:4D:2A:A0:39:FA X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:19:9c:93:9f:54:e5:a4:9e:e1:7a:5d:83:69:2e:2a:f4:11: b7:e2:3c:5f:55:27:1c:cf:b9:a3:b2:cf:0c:99:1a:16:7c:fd: 66:30:17:76:88:80:2a:d0:f0:83:20:9c:15:82:7d:59:b1:5d: a4:a5:a8:95:b7:20:ad:a3:3c:d2:12:3d:ba:12:15:33:15:b6: 35:bd:4d:d2:07:30:01:00:d5:8b:ad:38:a2:19:56:a1:b4:f2: 96:6d:84:25:4a:7a:79:28:45:b6:3c:2f:9b:44:9d:26:af:96: 04:e3:05:a4:09:3d:a4:50:b2:45:8c:e8:76:29:9f:13:b8:d3: bb:b2:a0:ee:db:26:e9:a6:9a:96:a5:e1:07:4a:4c:c5:c8:08: 9c:a7:72:78:c8:15:6a:fc:0e:38:c6:b1:b0:a8:50:e0:13:e3: 4b:a7:2f:33:81:67:07:ab:8c:19:f6:02:0f:10:ac:0d:80:3b: 1c:b4:c5:98:98:de:c9:4a:3e:14:f8:b8:e6:b1:46:3c:d6:2e: 02:ef:88:83:d6:01:a4:d0:6d:b6:96:89:2d:fe:5f:bf:6d:90: e2:18:04:06:ad:4e:50:3c:aa:09:b2:91:ff:be:fa:1b:c0:92: e1:67:cc:3d:cd:bf:89:1a:c4:a8:da:14:ff:36:62:1f:20:94: 42:5e:c0:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjUxMDA3MDQ0MjQxWhcNMjUxMDE0MDQ0MjQxWjAYMRYwFAYD VQQDEw02OGU0OWE0Mi1mODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+8S5wCKPZm2xu0jH2m4Pe3YplLwT3AMGbupJLAnVfFI27mILaTTMioNu+QxG rQYWz2Gl1ubUNqpkV3lBMuuaST/dMdbspS6sSf0+qFjZ2CMvKyWn3YR6iuWQGOqW unDlPY6vpoyRC3oS4WxGaA6HeNf+cL/L4Zt+4b86qxiplyFgbtJ8mRAAU10svGvE mZZb1uxIEftE/OI3IubWPllVHYrG/IBPWgP91zcQzhBzhX4Gbf4L73vIQn0Xhkkk SdOuwLcyOXmVx7Tm1kTYYCDjFcfcZOGGOXBo01ZXOg+bQp6j7wNPI9Wt58vcnkPT w7vIdeLT6hYuK2I98g/EQNQTvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaj/mY0 9AnpVPcEnXxeOU0qoDn6MB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuGZyTn1TlpJ7hel2DaS4q9BG34jxfVSccz7mjss8MmRoWfP1mMBd2 iIAq0PCDIJwVgn1ZsV2kpaiVtyCtozzSEj26EhUzFbY1vU3SBzABANWLrTiiGVah tPKWbYQlSnp5KEW2PC+bRJ0mr5YE4wWkCT2kULJFjOh2KZ8TuNO7sqDu2ybpppqW peEHSkzFyAicp3J4yBVq/A44xrGwqFDgE+NLpy8zgWcHq4wZ9gIPEKwNgDsctMWY mN7JSj4U+LjmsUY81i4C74iD1gGk0G22lokt/l+/bZDiGAQGrU5QPKoJspH/vvob wJLhZ8w9zb+JGsSo2hT/NmIfIJRCXsDF -----END CERTIFICATE-----Generated at Wed Oct 8 15:47:25 2025 by rpki-client