$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: lsT3n18OlXOz5h9PtHF9yDKYBzjk84IE0TXVcCb+bo4= Subject key identifier: D7:41:0F:35:EB:C2:6E:95:5E:1F:90:F5:37:EC:30:FD:61:19:5F:F2 Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: 85 Signing time: Wed 05 Nov 2025 06:50:16 +0000 Manifest this update: Wed 05 Nov 2025 06:50:15 +0000 Manifest next update: Wed 12 Nov 2025 06:50:15 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: YBmGUEosuag3GhRPH+E/6eDOQIHraJXSVEJDhuxJueg=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Nov 5 06:50:15 2025 GMT Not After : Nov 12 06:50:15 2025 GMT Subject: CN=690af3a7-2481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2e:38:29:82:c5:88:ec:60:ef:52:3f:8f:08: d8:13:e2:6f:7c:ce:0f:be:7a:c6:55:7e:1f:12:3b: 6f:c4:b0:a3:33:f1:85:8a:13:67:62:54:ce:91:e6: d6:55:6a:24:1e:29:60:d1:bd:c0:65:44:ac:15:2d: 4e:59:ec:35:0f:a0:ae:a7:d0:37:91:3d:f5:06:bd: 6f:86:4f:24:76:85:35:07:e3:a1:51:72:be:c0:54: 82:7e:22:19:4d:f5:6c:54:f4:de:1e:73:c2:30:df: c8:07:ad:e2:43:57:ba:a8:1b:a1:d9:60:af:a2:f9: 60:a4:e2:ed:b9:57:f8:61:37:e2:a0:4d:ac:29:fa: 66:45:43:b1:28:c9:76:85:04:39:6c:56:e1:47:0e: 91:73:e3:c3:62:e3:a3:2f:fd:3d:fe:50:7e:fe:3f: 32:22:ea:80:1e:0c:61:c6:e6:68:ce:9f:cf:94:9d: 1a:49:cc:75:e9:ea:c5:35:b7:75:d5:13:11:3e:bb: f0:08:4d:dc:d1:ec:d1:cd:df:f0:c2:49:66:1e:e0: 63:b5:83:10:a7:72:69:43:1d:f4:57:fe:5c:21:ee: d5:c3:59:78:84:9f:fc:9b:01:32:c2:9c:37:13:c1: f6:08:a2:4e:73:eb:b7:7f:ee:2d:87:79:83:c3:79: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:41:0F:35:EB:C2:6E:95:5E:1F:90:F5:37:EC:30:FD:61:19:5F:F2 X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:72:43:0f:b2:0e:fa:7f:d0:05:48:58:89:bc:8a:36:9c:00: 43:cc:17:ca:ab:52:66:d5:dc:97:d6:b5:59:2c:8e:06:a9:6b: cc:db:7e:d5:59:59:c3:08:b5:2e:69:9e:33:d7:f4:2d:95:51: 57:91:c3:70:3e:00:ae:d8:e9:38:29:c7:b4:44:cf:bf:6e:d8: ca:b2:3f:1f:41:eb:40:1e:ba:a6:68:2a:63:ab:a1:96:fc:3f: bd:42:b2:78:58:89:20:0e:6b:7d:7e:ab:7b:e9:20:6a:65:77: b2:d3:07:c9:85:3f:79:f4:fc:1e:ec:99:38:ef:db:64:c3:c7: c8:9e:14:5e:82:ea:b2:2a:a5:1b:1f:67:4b:2c:e8:63:d2:8c: 15:01:16:e2:e1:1c:ff:bc:b7:bf:d4:a0:c1:65:75:54:b3:4f: 61:49:60:66:81:26:cd:45:23:7b:20:c1:1f:78:cf:ca:06:d4: 37:e0:19:57:a3:46:5e:02:e3:68:73:09:79:b3:fa:81:3b:47: 23:0a:c4:ae:53:0e:54:a6:72:41:e2:90:45:53:07:c0:7d:33: ff:71:32:c7:58:e7:5c:3b:ec:d9:af:4c:e9:eb:f9:6f:1d:a8: 69:bc:58:75:31:c6:56:e6:73:30:66:a7:d4:04:bd:d8:f0:fc: b3:8d:bd:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA1NjIxMTAvBgNVBAUTKEI5RkFEQzQxRTdFMUY5NzU2QzdCQzlCM0RFMzk3MkNC RjZDRjYwQjUwHhcNMjUxMTA1MDY1MDE1WhcNMjUxMTEyMDY1MDE1WjAYMRYwFAYD VQQDEw02OTBhZjNhNy0yNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7C44KYLFiOxg71I/jwjYE+JvfM4PvnrGVX4fEjtvxLCjM/GFihNnYlTOkebW VWokHilg0b3AZUSsFS1OWew1D6Cup9A3kT31Br1vhk8kdoU1B+OhUXK+wFSCfiIZ TfVsVPTeHnPCMN/IB63iQ1e6qBuh2WCvovlgpOLtuVf4YTfioE2sKfpmRUOxKMl2 hQQ5bFbhRw6Rc+PDYuOjL/09/lB+/j8yIuqAHgxhxuZozp/PlJ0aScx16erFNbd1 1RMRPrvwCE3c0ezRzd/wwklmHuBjtYMQp3JpQx30V/5cIe7Vw1l4hJ/8mwEywpw3 E8H2CKJOc+u3f+4th3mDw3mDBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdBDzXr wm6VXh+Q9TfsMP1hGV/yMB8GA1UdIwQYMBaAFLn63EHn4fl1bHvJs945csv2z2C1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDU2Mi82NkMzQzk3RUVE RjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1YVnNlOG16M2pseXlfYlBZ TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDU2Mi82NkMzQzk3RUVERjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1Y VnNlOG16M2pseXlfYlBZTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGckMPsg76f9AFSFiJvIo2nABDzBfKq1Jm1dyX1rVZLI4GqWvM237V WVnDCLUuaZ4z1/QtlVFXkcNwPgCu2Ok4Kce0RM+/btjKsj8fQetAHrqmaCpjq6GW /D+9QrJ4WIkgDmt9fqt76SBqZXey0wfJhT959Pwe7Jk479tkw8fInhReguqyKqUb H2dLLOhj0owVARbi4Rz/vLe/1KDBZXVUs09hSWBmgSbNRSN7IMEfeM/KBtQ34BlX o0ZeAuNocwl5s/qBO0cjCsSuUw5UpnJB4pBFUwfAfTP/cTLHWOdcO+zZr0zp6/lv HahpvFh1McZW5nMwZqfUBL3Y8Pyzjb1j -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:05 2025 by rpki-client