$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json) Hash identifier: 0jNtUBffG5yLQ4AaIz25BbzTfiDxQNrQGqVR1P7NuJU= Subject key identifier: A4:1A:01:8F:4A:1A:DF:A1:8F:5F:DC:B5:17:8D:41:03:D9:19:DE:2B Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft Manifest number: 040F Signing time: Wed 05 Nov 2025 00:31:19 +0000 Manifest this update: Wed 05 Nov 2025 00:31:18 +0000 Manifest next update: Wed 12 Nov 2025 00:31:18 +0000 Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: OK6xANroEnzWlHd13litZOsV9b7bZmnJILLDtQcZGI8=) 2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: 93z4oqW7DQ1yUII6DWRvY7Xrtn4iF7Cp5BMrU5CKBhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737 Validity Not Before: Nov 5 00:31:18 2025 GMT Not After : Nov 12 00:31:18 2025 GMT Subject: CN=690a9ad7-0d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9b:47:75:4e:58:db:40:c7:4a:ce:f9:41:6a: 32:9f:65:cc:19:b2:37:dd:e5:17:71:7f:18:13:74: af:82:06:38:25:22:b9:16:74:72:16:cd:fd:54:54: 5d:74:57:1d:e1:3d:cd:99:66:94:10:2c:be:a1:51: 76:12:19:76:0f:58:1e:dd:cc:6d:26:7f:c5:cd:60: 09:94:fb:22:f4:e9:8c:0a:5d:8e:e3:89:36:51:65: 76:1a:e8:24:33:10:2a:09:71:fd:bb:90:54:d5:e8: 85:4b:ac:3f:24:ec:34:f0:4a:7b:01:6e:33:14:32: 20:e8:08:94:c8:4d:3f:06:68:c0:52:bf:d0:33:af: 28:b0:b2:ea:26:86:af:34:c0:17:83:f8:07:5a:f6: 14:07:d3:e5:13:b3:25:32:fb:7e:9b:7f:c4:a2:ab: 8f:b3:a9:41:d2:a7:f2:d3:53:3d:e9:ef:75:4f:07: 52:d5:63:f7:56:5d:bf:13:a5:46:86:4e:74:f2:bf: ce:3e:48:e1:b6:52:b8:56:85:5d:08:b7:51:ae:64: 8f:46:84:22:4f:ea:58:b9:78:3e:1a:3e:ae:be:cf: c0:df:64:0a:1e:c2:98:a7:e1:72:10:8a:49:07:79: 01:a0:3c:48:92:d8:be:0d:5e:47:fe:dc:a3:9d:fa: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1A:01:8F:4A:1A:DF:A1:8F:5F:DC:B5:17:8D:41:03:D9:19:DE:2B X509v3 Authority Key Identifier: keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ec:98:1a:62:56:c8:e5:01:9f:e9:a2:92:b2:d7:12:f2:34: 8c:63:98:06:a8:93:97:2d:b4:c3:db:45:8f:6e:a2:6d:6f:55: c8:05:88:e8:6f:bb:1c:be:cb:44:45:f9:71:7a:81:7f:b8:65: 59:47:9e:fc:f2:57:8a:be:64:c5:10:fe:7b:37:09:ee:32:f6: 3e:3e:72:f8:a6:9c:57:e1:11:b4:41:47:60:5e:3a:fb:23:3d: aa:e6:c6:66:f7:52:e4:13:95:67:86:43:4a:2a:2d:77:d3:04: 19:7c:c1:bd:49:20:b8:77:5a:91:23:8b:e3:15:03:64:13:a3: 57:54:59:53:fa:28:84:8b:f7:c8:ca:4f:e0:ab:5a:98:82:dc: a9:2c:9d:26:d1:c9:2f:b7:e5:2e:3a:da:20:00:b5:c4:d5:bd: 79:d3:12:05:65:83:c7:9c:4e:fc:fb:a2:fe:d1:6a:be:b0:e9: dc:dc:45:47:3a:56:f2:7e:0e:c9:ef:a6:22:fc:e9:67:52:0b: d5:77:ef:52:69:d9:97:fc:dd:ac:65:a3:8d:46:f8:16:dd:2c: c8:d3:6d:14:ef:e2:6d:dc:0a:9e:52:a1:a9:7b:6a:97:20:6d: dd:b3:a0:62:18:4d:91:5f:74:79:18:89:59:95:2c:1a:eb:fe: 5a:4d:42:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MDYxMTAvBgNVBAUTKEI4NzJGMzRENTUyNTFGQTc3MEVDQzM5M0QyNjcxMjEw M0Q1NTA3MzcwHhcNMjUxMTA1MDAzMTE4WhcNMjUxMTEyMDAzMTE4WjAYMRYwFAYD VQQDEw02OTBhOWFkNy0wZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ptHdU5Y20DHSs75QWoyn2XMGbI33eUXcX8YE3SvggY4JSK5FnRyFs39VFRd dFcd4T3NmWaUECy+oVF2Ehl2D1ge3cxtJn/FzWAJlPsi9OmMCl2O44k2UWV2Gugk MxAqCXH9u5BU1eiFS6w/JOw08Ep7AW4zFDIg6AiUyE0/BmjAUr/QM68osLLqJoav NMAXg/gHWvYUB9PlE7MlMvt+m3/EoquPs6lB0qfy01M96e91TwdS1WP3Vl2/E6VG hk508r/OPkjhtlK4VoVdCLdRrmSPRoQiT+pYuXg+Gj6uvs/A32QKHsKYp+FyEIpJ B3kBoDxIkti+DV5H/tyjnfpc9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQaAY9K Gt+hj1/ctReNQQPZGd4rMB8GA1UdIwQYMBaAFLhy801VJR+ncOzDk9JnEhA9VQc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYwNi83QzhCMTM3QThG QzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2ZHc3TU9UMG1jU0VEMVZC emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VITHpUVlVsSDZkdzdNT1QwbWNTRUQxVkJ6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYwNi83QzhCMTM3QThGQzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2 ZHc3TU9UMG1jU0VEMVZCemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs7JgaYlbI5QGf6aKSstcS8jSMY5gGqJOXLbTD20WPbqJtb1XIBYjo b7scvstERflxeoF/uGVZR5788leKvmTFEP57NwnuMvY+PnL4ppxX4RG0QUdgXjr7 Iz2q5sZm91LkE5VnhkNKKi130wQZfMG9SSC4d1qRI4vjFQNkE6NXVFlT+iiEi/fI yk/gq1qYgtypLJ0m0ckvt+UuOtogALXE1b150xIFZYPHnE78+6L+0Wq+sOnc3EVH Olbyfg7J76Yi/OlnUgvVd+9SadmX/N2sZaONRvgW3SzI020U7+Jt3AqeUqGpe2qX IG3ds6BiGE2RX3R5GIlZlSwa6/5aTUI+ -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:43 2025 by rpki-client