$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft File: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft (raw, json) Hash identifier: ZYf6m4UkWzMcr64bb5jNouf/VZ7ZvtIinMGFH6VOlzs= Subject key identifier: 7A:83:6B:79:03:9B:64:30:0E:06:45:7A:FB:95:D3:59:1D:55:E4:2D Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6 Certificate issuer: /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft Manifest number: 0293 Signing time: Tue 04 Nov 2025 14:20:39 +0000 Manifest this update: Tue 04 Nov 2025 14:20:38 +0000 Manifest next update: Tue 11 Nov 2025 14:20:38 +0000 Files and hashes: 1: Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl (hash: lsy6q8wLlUuohcYSpipM8IoitK/DjL5j+goDyotLUq4=) 2: 84094296EF5E11EF81B0790EC4F9AE02.roa (hash: Ckg4hw6DabBO2d7okoEF2pancj6gViKBZRAEfAu13oo=) 3: DFA79FA2EFD811EE87F4440AC4F9AE02.roa (hash: hQScYTUNqe8SfNNwSXoRwPKv/1EvvMjHkzfsNEe+pKg=) 4: C3923CE6EFD811EEB93EE009C4F9AE02.roa (hash: EgTNqiKvmZXEy9LjOSG2dN0ynTpnYuhjXlrpPTL50KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6 Validity Not Before: Nov 4 14:20:38 2025 GMT Not After : Nov 11 14:20:38 2025 GMT Subject: CN=690a0bb6-98a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:92:73:e1:a9:be:8b:c0:4d:ac:10:5e:43: 00:de:eb:8a:c4:9f:49:58:2b:bf:f9:c1:13:b3:00: b5:c1:09:f5:6f:8e:8a:6c:3f:4b:42:e6:f6:81:46: 1b:fd:fe:bd:29:16:e0:47:d8:5b:60:90:75:0a:56: 9f:d4:47:59:ad:9b:38:bf:31:d8:5b:1a:49:f9:9f: ca:7a:4b:5f:df:20:e9:5d:7f:7a:12:bb:a9:72:4d: 0a:ae:b8:4d:29:07:e3:3d:ce:78:ae:bd:2c:8d:20: b2:41:8c:9b:31:3b:5b:59:ff:28:01:7b:d2:b0:b7: c5:aa:34:c9:82:a5:0a:dc:0c:17:b8:90:93:aa:3f: 6a:a7:60:28:38:2b:3e:f0:88:46:35:7a:db:a9:6e: 5a:af:16:8b:3f:b9:3a:6e:93:f7:e7:80:84:6d:58: c0:d2:27:45:2c:99:c0:73:c8:e8:6b:83:4e:df:49: e1:1a:5d:2f:f4:74:c3:d0:4e:80:c6:74:61:dd:9f: 34:a4:54:68:62:9c:50:78:3d:83:c9:d3:3f:2e:a3: 61:2c:6a:2f:1b:2b:17:3e:ab:8a:f3:d2:73:e6:8c: 94:22:b6:cb:63:68:b8:99:3c:19:02:e2:e6:81:d1: 7d:60:c4:b9:0c:0a:c9:2c:01:37:52:43:0f:61:eb: 35:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:83:6B:79:03:9B:64:30:0E:06:45:7A:FB:95:D3:59:1D:55:E4:2D X509v3 Authority Key Identifier: keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:71:80:59:0f:d7:bc:93:88:56:80:f4:60:77:26:23:30:cd: 5c:b0:d4:1a:05:f9:94:2a:b8:6e:e0:f6:f9:2c:21:b5:ca:cd: 6e:cc:de:97:1d:6e:fe:63:b0:fa:dc:a1:f8:7a:93:3b:af:8d: 11:e9:3c:22:1b:70:fa:df:b5:14:7c:46:d3:3c:c8:75:3e:a5: 4b:a2:78:1c:e8:4c:34:71:f9:b7:31:b1:a8:0d:96:50:db:f6: c4:ea:a4:df:01:ca:ec:d1:6a:f5:6c:86:6a:ac:ac:70:6b:d1: ee:53:ca:ee:0f:58:08:c1:22:80:7c:61:3e:0f:a8:83:90:0a: 2e:00:72:64:47:5a:6d:86:1e:93:26:74:3a:cb:f4:5a:1a:36: c7:d9:fa:a0:c8:29:00:9b:62:00:92:52:d3:3d:6b:e9:ac:d2: 42:b3:f0:c7:e9:c2:20:0a:c5:f8:79:a7:a6:5e:c1:dd:fd:07: 3d:5e:7d:f3:75:e1:19:32:fe:6d:b5:5c:4d:0f:aa:9d:5d:6f: c0:68:ae:fc:c0:b8:d3:3d:cd:75:bd:d8:10:f8:c0:db:8d:c5: 3d:f6:a6:fc:a5:e9:91:3a:b1:8b:13:b4:54:47:e5:e5:b4:64: fc:8d:02:fe:46:58:64:bf:29:4e:64:4c:bf:23:e3:5e:8b:e7: db:4e:62:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDUyRkUyQjZCN0Y0OTdGOTRGMUQ0OTJEMTkxN0I0ODY0 NzhCRjU5RDYwHhcNMjUxMTA0MTQyMDM4WhcNMjUxMTExMTQyMDM4WjAYMRYwFAYD VQQDEw02OTBhMGJiNi05OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHaSc+GpvovATawQXkMA3uuKxJ9JWCu/+cETswC1wQn1b46KbD9LQub2gUYb /f69KRbgR9hbYJB1Claf1EdZrZs4vzHYWxpJ+Z/Kektf3yDpXX96Erupck0KrrhN KQfjPc54rr0sjSCyQYybMTtbWf8oAXvSsLfFqjTJgqUK3AwXuJCTqj9qp2AoOCs+ 8IhGNXrbqW5arxaLP7k6bpP354CEbVjA0idFLJnAc8joa4NO30nhGl0v9HTD0E6A xnRh3Z80pFRoYpxQeD2DydM/LqNhLGovGysXPquK89Jz5oyUIrbLY2i4mTwZAuLm gdF9YMS5DArJLAE3UkMPYes1rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqDa3kD m2QwDgZFevuV01kdVeQtMB8GA1UdIwQYMBaAFFL+K2t/SX+U8dSS0ZF7SGR4v1nW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9DMTMxMTZGMjI4 RDMxMUVEOEZCRDZENkNDNEY5QUUwMi9VdjRyYTM5SmY1VHgxSkxSa1h0SVpIaV9X ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1V2NHJhMzlKZjVUeDFKTFJrWHRJWkhpX1dkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9DMTMxMTZGMjI4RDMxMUVEOEZCRDZENkNDNEY5QUUwMi9VdjRyYTM5SmY1 VHgxSkxSa1h0SVpIaV9XZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAscYBZD9e8k4hWgPRgdyYjMM1csNQaBfmUKrhu4Pb5LCG1ys1uzN6X HW7+Y7D63KH4epM7r40R6TwiG3D637UUfEbTPMh1PqVLongc6Ew0cfm3MbGoDZZQ 2/bE6qTfAcrs0Wr1bIZqrKxwa9HuU8ruD1gIwSKAfGE+D6iDkAouAHJkR1pthh6T JnQ6y/RaGjbH2fqgyCkAm2IAklLTPWvprNJCs/DH6cIgCsX4eaemXsHd/Qc9Xn3z deEZMv5ttVxND6qdXW/AaK78wLjTPc11vdgQ+MDbjcU99qb8pemROrGLE7RUR+Xl tGT8jQL+RlhkvylOZEy/I+Nei+fbTmJk -----END CERTIFICATE-----Generated at Wed Nov 5 16:27:52 2025 by rpki-client