$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft File: UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json) Hash identifier: TttBfQdU0/U7Vcj5MOPvu4FmhRCo7SC2WJsRvxltblY= Subject key identifier: F3:2E:92:A7:EB:D8:D2:48:41:B0:BB:B2:37:A5:EC:3E:F7:22:C3:18 Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Certificate serial: 101C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft Manifest number: 1013 Signing time: Tue 04 Nov 2025 17:32:13 +0000 Manifest this update: Tue 04 Nov 2025 17:32:13 +0000 Manifest next update: Tue 11 Nov 2025 17:32:13 +0000 Files and hashes: 1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: cf21Gw6RnDBqvw00GJxcwiV48RCsjPpxDJrScasXOj8=) 2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: gPm95k9B9IRjr3SYjHp0eLr7oEtltC4Q30ofIoBPOx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4124 (0x101c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CA20, serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Validity Not Before: Nov 4 17:32:13 2025 GMT Not After : Nov 11 17:32:13 2025 GMT Subject: CN=690a389d-ccc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:e6:65:05:d7:38:56:56:16:59:ca:fe:39: ad:fb:00:2e:e0:46:59:83:82:b6:cb:f1:d9:b2:7e: 24:95:d4:6c:ce:af:e1:14:17:b3:2f:41:48:89:e7: ab:d1:b1:11:3f:f1:7b:6e:15:71:4a:b9:12:35:00: 51:d1:3b:5e:9d:ef:c8:85:fc:d3:d7:3a:db:52:66: d5:59:ce:41:18:a6:9f:de:a6:b6:d6:d5:cb:bf:e6: 39:8d:d7:35:73:58:3a:52:22:50:2c:d6:ac:8f:cd: 07:df:55:11:8d:c1:2d:3f:73:15:1d:1f:33:20:c3: b9:2b:b0:9c:62:67:74:44:0d:1c:23:fb:87:dd:71: ab:a0:9d:7f:b7:ed:1c:10:2f:8f:0d:86:86:fb:6f: 16:de:69:2b:f5:bf:1a:93:0e:fe:05:da:3b:a8:0a: d4:35:d7:dc:3a:22:2e:53:4d:bd:48:db:73:4a:74: a3:f5:5f:8d:8e:a9:47:9a:a6:a0:30:6e:b4:0f:39: 42:28:86:65:34:98:30:46:87:6f:5a:9c:4e:a1:37: c9:e1:e2:7f:4e:3e:48:f3:d6:fd:2a:a5:be:31:ea: ac:39:41:3e:88:9f:59:ca:a0:95:59:d3:3d:bd:ab: a6:37:3b:60:5a:84:65:3e:21:3a:fd:d1:42:47:b6: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2E:92:A7:EB:D8:D2:48:41:B0:BB:B2:37:A5:EC:3E:F7:22:C3:18 X509v3 Authority Key Identifier: keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fe:40:df:9c:91:71:0e:ee:d8:13:3f:1f:ab:11:ef:be:10: 69:b1:48:98:16:6d:fd:82:c1:8c:8b:23:6a:4f:2e:57:6b:a9: c3:4c:bc:d7:83:7a:cb:aa:80:75:5a:9d:c1:d8:21:93:9f:b0: 0b:f1:bb:33:6b:dc:a0:f5:46:2b:be:74:d3:05:72:2d:c6:4d: ce:89:7b:a1:20:15:81:16:4c:06:5f:d3:76:19:b9:3d:6c:db: bb:54:15:63:e5:5f:5b:07:9b:b0:ee:22:4e:30:74:29:e9:55: ea:18:40:11:81:f9:e0:d0:28:a1:14:fd:65:bf:9f:b2:71:4a: ba:03:c1:37:68:47:a0:83:4d:c0:f0:92:81:ee:70:9b:8d:59: 28:5f:b8:91:31:c5:05:f3:fa:39:cb:14:72:e1:54:01:74:78: f7:66:5b:5c:f1:ec:72:93:cb:63:ab:64:74:cf:1f:99:db:40: ee:84:c8:6e:98:ad:d8:b8:fb:58:10:8c:1e:db:f5:b4:14:67: 89:7e:f7:6a:95:c6:9b:97:8b:4e:f8:83:7d:a1:27:85:8b:bd: 22:49:82:9e:2e:a2:8c:61:37:2b:0f:90:04:01:b1:dc:8e:04: 42:fb:83:53:0a:5a:1b:6a:2c:55:7f:9e:d7:b6:04:c3:3b:9b: a6:80:40:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNBMjAxMTAvBgNVBAUTKDUyRTE2QTlCODlBRUM4MkEwQ0YwODVDRjVBRTdEQzNF QjA4RjBDOTEwHhcNMjUxMTA0MTczMjEzWhcNMjUxMTExMTczMjEzWjAYMRYwFAYD VQQDEw02OTBhMzg5ZC1jY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRnmZQXXOFZWFlnK/jmt+wAu4EZZg4K2y/HZsn4kldRszq/hFBezL0FIieer 0bERP/F7bhVxSrkSNQBR0Ttene/IhfzT1zrbUmbVWc5BGKaf3qa21tXLv+Y5jdc1 c1g6UiJQLNasj80H31URjcEtP3MVHR8zIMO5K7CcYmd0RA0cI/uH3XGroJ1/t+0c EC+PDYaG+28W3mkr9b8akw7+Bdo7qArUNdfcOiIuU029SNtzSnSj9V+NjqlHmqag MG60DzlCKIZlNJgwRodvWpxOoTfJ4eJ/Tj5I89b9KqW+MeqsOUE+iJ9ZyqCVWdM9 vaumNztgWoRlPiE6/dFCR7ZfTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMukqfr 2NJIQbC7sjel7D73IsMYMB8GA1UdIwQYMBaAFFLhapuJrsgqDPCFz1rn3D6wjwyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0EyMC8yMjY2QUUyMjU1 MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlDb004SVhQV3VmY1ByQ1BE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1RnFtNG11eUNvTThJWFBXdWZjUHJDUERKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0EyMC8yMjY2QUUyMjU1MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlD b004SVhQV3VmY1ByQ1BESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP/kDfnJFxDu7YEz8fqxHvvhBpsUiYFm39gsGMiyNqTy5Xa6nDTLzX g3rLqoB1Wp3B2CGTn7AL8bsza9yg9UYrvnTTBXItxk3OiXuhIBWBFkwGX9N2Gbk9 bNu7VBVj5V9bB5uw7iJOMHQp6VXqGEARgfng0CihFP1lv5+ycUq6A8E3aEegg03A 8JKB7nCbjVkoX7iRMcUF8/o5yxRy4VQBdHj3Zltc8exyk8tjq2R0zx+Z20DuhMhu mK3YuPtYEIwe2/W0FGeJfvdqlcabl4tO+IN9oSeFi70iSYKeLqKMYTcrD5AEAbHc jgRC+4NTClobaixVf57XtgTDO5umgEAA -----END CERTIFICATE-----Generated at Wed Nov 5 15:02:56 2025 by rpki-client