$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json) Hash identifier: wUTvbVePsD8zK7DWOscAVLYI5k/AbBl78DaP2+rG800= Subject key identifier: 16:73:E1:05:59:B6:9A:82:B0:01:7F:46:74:FA:F5:0B:B1:17:A2:7E Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft Manifest number: 99 Signing time: Mon 03 Nov 2025 06:23:31 +0000 Manifest this update: Mon 03 Nov 2025 06:23:31 +0000 Manifest next update: Mon 10 Nov 2025 06:23:31 +0000 Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: kwqWoiDy235XEbNRV5ZnM9G1acZRLrxrKJ4KquNAkZ0=) 2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Validity Not Before: Nov 3 06:23:31 2025 GMT Not After : Nov 10 06:23:31 2025 GMT Subject: CN=69084a63-de01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:fc:22:43:a6:8f:57:41:9f:f1:fc:ef:8b: 51:5a:65:65:b8:2e:e9:55:bd:3f:f5:83:cd:7a:f1: c9:6d:7b:bf:33:1b:16:1e:77:fb:2b:91:23:55:2e: 44:6c:1b:62:b4:6e:34:5c:89:17:ec:7c:6e:75:23: 4a:b1:4e:ee:08:ad:2f:10:5a:3f:60:e6:8b:ee:6b: 23:29:11:ab:70:b0:10:cd:87:13:14:94:3d:43:3a: b5:10:6a:cd:52:d6:40:19:93:40:64:2a:f6:36:b2: b8:d7:7a:2a:7f:a8:6d:bc:fd:be:de:d0:b2:38:3e: 36:72:eb:f8:f3:b6:1c:8f:84:f2:b4:ef:bb:1f:5a: 40:fe:1f:89:18:9f:fe:78:16:df:47:d6:23:d2:48: 43:60:fa:c9:d9:42:34:63:ef:88:51:37:7f:94:3a: 94:e6:3d:94:83:38:ff:14:01:07:39:ad:20:cd:59: a2:41:a5:1e:0e:de:be:3a:64:08:75:f1:fd:f7:e5: fa:59:a1:4a:c7:8d:df:f1:00:06:f7:d4:69:98:60: 8a:9a:d6:e1:35:fa:e0:e4:94:a6:5b:60:d8:8a:09: f1:7f:b0:9d:cd:cc:9f:a0:c8:4c:9a:64:e4:7e:3c: f9:6b:2e:43:bc:ca:20:0a:17:db:b7:30:83:dc:77: 4d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:73:E1:05:59:B6:9A:82:B0:01:7F:46:74:FA:F5:0B:B1:17:A2:7E X509v3 Authority Key Identifier: keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:71:e7:d4:ec:77:f6:f3:fd:a9:b9:58:08:ce:8a:b7:16:36: 6f:98:6b:74:36:37:e8:81:31:72:5d:69:e4:6a:0f:d7:d5:d0: f2:68:4b:33:7a:52:24:09:ee:2e:4b:a2:81:a6:af:8b:3f:b8: 21:4b:44:ef:18:76:8d:20:c8:99:07:51:2e:cd:d6:65:d1:12: 4e:d8:61:98:14:35:49:20:de:4f:8f:88:72:64:6c:56:40:e5: 9f:0d:38:f4:5e:d3:6a:fc:22:f1:4a:88:83:df:a5:0e:2f:d8: 1a:c7:b6:a4:20:d9:84:07:32:b6:b2:c3:53:6d:90:a2:4c:97: bb:41:bc:11:0a:10:79:23:c5:e1:c1:3e:c7:2b:d9:a3:1a:b6: 23:08:79:48:07:f0:13:43:43:19:a7:cd:df:25:ce:f3:20:e8: 49:0a:34:60:1c:54:85:ee:25:91:e5:5d:d9:aa:05:29:50:7b: b4:92:27:f2:09:27:44:8c:97:85:40:8e:13:d7:44:7b:79:85: 35:c9:b6:64:88:5b:8a:b1:8f:05:1a:51:5e:b6:b8:bc:83:08: f0:0d:3a:9b:cd:f5:6d:a0:7a:99:91:14:a6:7c:cc:18:0a:77: 35:71:73:15:73:9e:d9:d9:47:3c:d9:7a:1f:08:ca:8b:a3:51: 52:35:14:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJEOEUxMTAvBgNVBAUTKDUwNjE5NDcxMDBCQ0IzMzI4OUUyNkEwQkRGRUNFMkM1 RkI5RTA5RDIwHhcNMjUxMTAzMDYyMzMxWhcNMjUxMTEwMDYyMzMxWjAYMRYwFAYD VQQDEw02OTA4NGE2My1kZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1z8IkOmj1dBn/H874tRWmVluC7pVb0/9YPNevHJbXu/MxsWHnf7K5EjVS5E bBtitG40XIkX7HxudSNKsU7uCK0vEFo/YOaL7msjKRGrcLAQzYcTFJQ9Qzq1EGrN UtZAGZNAZCr2NrK413oqf6htvP2+3tCyOD42cuv487Ycj4TytO+7H1pA/h+JGJ/+ eBbfR9Yj0khDYPrJ2UI0Y++IUTd/lDqU5j2Ugzj/FAEHOa0gzVmiQaUeDt6+OmQI dfH99+X6WaFKx43f8QAG99RpmGCKmtbhNfrg5JSmW2DYignxf7CdzcyfoMhMmmTk fjz5ay5DvMogChfbtzCD3HdNiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZz4QVZ tpqCsAF/RnT69QuxF6J+MB8GA1UdIwQYMBaAFFBhlHEAvLMyieJqC9/s4sX7ngnS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQ4RS8zQUY1N0ZEQUNF ODgxMUVGODdDMDcxMTdDNEY5QUUwMi9VR0dVY1FDOHN6S0o0bW9MMy16aXhmdWVD ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VHR1VjUUM4c3pLSjRtb0wzLXppeGZ1ZUNkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkQ4RS8zQUY1N0ZEQUNFODgxMUVGODdDMDcxMTdDNEY5QUUwMi9VR0dVY1FDOHN6 S0o0bW9MMy16aXhmdWVDZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAccefU7Hf28/2puVgIzoq3FjZvmGt0NjfogTFyXWnkag/X1dDyaEsz elIkCe4uS6KBpq+LP7ghS0TvGHaNIMiZB1EuzdZl0RJO2GGYFDVJIN5Pj4hyZGxW QOWfDTj0XtNq/CLxSoiD36UOL9gax7akINmEBzK2ssNTbZCiTJe7QbwRChB5I8Xh wT7HK9mjGrYjCHlIB/ATQ0MZp83fJc7zIOhJCjRgHFSF7iWR5V3ZqgUpUHu0kify CSdEjJeFQI4T10R7eYU1ybZkiFuKsY8FGlFetri8gwjwDTqbzfVtoHqZkRSmfMwY Cnc1cXMVc57Z2Uc82XofCMqLo1FSNRRD -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:29 2025 by rpki-client