$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft File: rUZnzujj-e3_kuf7uzf_xmwAc6I.mft (raw, json) Hash identifier: ZauELyI6uEiMcgwBNUtXl44uHk5RATQlKNGT+WwOrHs= Subject key identifier: B5:CD:0B:63:F1:A3:B3:AD:98:94:8E:08:68:BB:54:A1:34:36:DF:9F Authority key identifier: AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2 Certificate issuer: /CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft Manifest number: 01D3 Signing time: Mon 03 Nov 2025 02:47:02 +0000 Manifest this update: Mon 03 Nov 2025 02:47:02 +0000 Manifest next update: Mon 10 Nov 2025 02:47:02 +0000 Files and hashes: 1: rUZnzujj-e3_kuf7uzf_xmwAc6I.crl (hash: 4Eb5lZWfITiw3q2AsMMprPHUiqTSn0OS5A7xhctZ/K8=) 2: D016C916EF5A11EDA6863E67C4F9AE02.roa (hash: eiPnVd5qH0st8XKPTvL7lm0W7OhTr1gyWFD5Z01ogbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C0F6, serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2 Validity Not Before: Nov 3 02:47:02 2025 GMT Not After : Nov 10 02:47:02 2025 GMT Subject: CN=690817a6-32d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:93:5c:1b:55:5d:e5:f7:2c:7e:df:5a:09: 24:37:ce:b1:69:93:52:f5:61:42:bc:78:e6:ac:c6: 79:12:d6:72:a7:6a:18:e3:34:a8:37:9d:5c:aa:18: 29:2b:ca:9d:57:b4:12:7d:6e:f6:12:85:47:d1:19: 93:91:cf:bc:e0:10:30:9b:0f:87:75:ea:19:d5:66: 26:48:4d:c2:b7:55:70:af:d7:31:81:09:93:39:28: fb:52:67:fa:ea:5b:93:61:20:9d:94:db:e4:7b:d0: 08:1a:54:6b:b9:f7:8b:13:68:70:0a:17:18:d8:c3: 1c:d3:8e:61:19:e6:47:68:0e:52:2b:27:1b:9b:2b: bb:37:9c:d6:96:04:99:72:89:dd:04:7b:6a:ce:3b: 9b:0b:95:fc:ab:9b:06:54:51:6a:2e:13:1b:e0:28: 85:74:7d:17:28:fe:1d:e5:f9:9d:07:5c:3d:a0:19: 72:5d:65:4c:b0:8f:d8:e3:f5:3d:7b:fc:8a:a1:b9: df:d8:8b:13:ee:c4:5e:fd:e4:5c:87:c1:ff:a6:ba: 7a:a9:44:56:84:d2:bb:35:1a:2e:17:39:69:ac:21: ff:04:50:b5:0e:d0:d2:ef:c8:c3:66:42:9c:67:fc: 25:ee:51:43:30:b7:d9:c6:a0:9d:7c:d0:35:02:29: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CD:0B:63:F1:A3:B3:AD:98:94:8E:08:68:BB:54:A1:34:36:DF:9F X509v3 Authority Key Identifier: keyid:AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:90:2e:63:c6:b3:88:46:98:36:06:76:5f:af:8d:93:8d:45: 5d:d6:1f:3f:45:b0:83:dc:b4:5a:b3:1c:35:76:5a:b2:5b:d8: 2b:f0:d6:ce:ed:78:3e:78:fd:22:44:6a:66:da:97:41:24:3f: 07:93:cb:d3:50:b9:26:a1:a7:3f:95:fa:d4:34:05:71:48:97: 56:c2:cc:a9:11:e5:53:42:b7:53:e5:6b:d2:52:da:a8:d2:af: 64:2f:73:bd:9f:33:8f:51:f0:d5:c6:ab:c0:32:46:af:1e:4d: dc:d5:66:89:de:31:a9:e5:6a:4e:c8:17:42:ee:e1:28:43:fb: f6:33:84:48:4f:c6:45:5e:2a:54:3e:ff:55:e9:8b:fc:e0:d0: d5:1e:11:45:a2:5d:99:8f:1a:1d:03:8d:de:4a:29:18:e1:37: a1:89:4b:e6:82:72:bf:8b:3a:8e:d1:54:e1:d3:b1:0f:9c:b3: 90:c0:88:dd:a3:27:aa:d4:94:c3:f7:02:60:55:c3:ec:82:6d: f3:be:98:40:75:c3:ff:0a:c3:b5:c9:99:20:a1:f3:f9:90:92: 9a:b3:2c:f8:1c:50:d7:09:73:dd:50:7f:00:45:f3:fc:1b:5b: 10:3c:a0:a5:88:73:b9:98:b3:18:92:b6:3c:d1:1b:30:f6:22: c5:f6:8a:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMwRjYxMTAvBgNVBAUTKEFENDY2N0NFRThFM0Y5RURGRjkyRTdGQkJCMzdGRkM2 NkMwMDczQTIwHhcNMjUxMTAzMDI0NzAyWhcNMjUxMTEwMDI0NzAyWjAYMRYwFAYD VQQDEw02OTA4MTdhNi0zMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NuTXBtVXeX3LH7fWgkkN86xaZNS9WFCvHjmrMZ5EtZyp2oY4zSoN51cqhgp K8qdV7QSfW72EoVH0RmTkc+84BAwmw+HdeoZ1WYmSE3Ct1Vwr9cxgQmTOSj7Umf6 6luTYSCdlNvke9AIGlRrufeLE2hwChcY2MMc045hGeZHaA5SKycbmyu7N5zWlgSZ condBHtqzjubC5X8q5sGVFFqLhMb4CiFdH0XKP4d5fmdB1w9oBlyXWVMsI/Y4/U9 e/yKobnf2IsT7sRe/eRch8H/prp6qURWhNK7NRouFzlprCH/BFC1DtDS78jDZkKc Z/wl7lFDMLfZxqCdfNA1Ail2BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXNC2Px o7OtmJSOCGi7VKE0Nt+fMB8GA1UdIwQYMBaAFK1GZ87o4/nt/5Ln+7s3/8ZsAHOi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzBGNi9EMkJCNzU1QUVG NEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1lM19rdWY3dXpmX3htd0Fj NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVWm56dWpqLWUzX2t1Zjd1emZfeG13QWM2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzBGNi9EMkJCNzU1QUVGNEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1l M19rdWY3dXpmX3htd0FjNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4kC5jxrOIRpg2BnZfr42TjUVd1h8/RbCD3LRasxw1dlqyW9gr8NbO 7Xg+eP0iRGpm2pdBJD8Hk8vTULkmoac/lfrUNAVxSJdWwsypEeVTQrdT5WvSUtqo 0q9kL3O9nzOPUfDVxqvAMkavHk3c1WaJ3jGp5WpOyBdC7uEoQ/v2M4RIT8ZFXipU Pv9V6Yv84NDVHhFFol2ZjxodA43eSikY4TehiUvmgnK/izqO0VTh07EPnLOQwIjd oyeq1JTD9wJgVcPsgm3zvphAdcP/CsO1yZkgofP5kJKasyz4HFDXCXPdUH8ARfP8 G1sQPKCliHO5mLMYkrY80Rsw9iLF9or1 -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:57 2025 by rpki-client