$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft File: uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json) Hash identifier: kdNf1LhE5nOw5iktnKx1FVsxsHH4+0QdLc8aGDDPhl8= Subject key identifier: 39:D8:94:61:D6:59:C0:C5:70:E0:85:22:72:69:7C:81:35:FB:28:27 Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B Certificate issuer: /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft Manifest number: C6 Signing time: Wed 05 Nov 2025 06:03:25 +0000 Manifest this update: Wed 05 Nov 2025 06:03:25 +0000 Manifest next update: Wed 12 Nov 2025 06:03:25 +0000 Files and hashes: 1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: GJQO2B/oLO+LmxTTgtJ0cPd8dOcUrzdfJhdWtQCV1Ow=) 2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: NvjP/LYwW9l6MqSSpH5THMx2WmCXtMYC8PmhjmLmzIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B Validity Not Before: Nov 5 06:03:25 2025 GMT Not After : Nov 12 06:03:25 2025 GMT Subject: CN=690ae8ad-3f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:2c:c4:39:01:23:68:6a:6b:81:b0:59:8e: 6e:74:d3:69:d5:31:15:ff:c3:d4:b5:27:0c:b4:7f: b5:fe:d8:12:11:52:74:2f:5e:48:7d:ba:6f:09:93: d7:7e:54:d5:90:0d:8c:ea:40:c7:0e:a0:bc:d0:71: fb:bc:34:30:28:63:7c:67:1b:f3:7e:5d:b0:18:83: db:fe:a9:8a:dc:82:9b:89:e7:80:89:3f:45:67:43: 3c:29:d5:08:3c:58:db:78:8c:a1:6d:28:77:6b:ca: 0d:9d:9f:4e:0a:df:d2:24:2c:27:d1:80:44:09:0a: 35:7f:57:fe:84:b3:d0:89:d7:54:49:02:f9:70:91: 4d:61:ab:27:b6:5c:41:0d:3d:09:75:91:e4:58:df: 21:c4:0d:7f:1c:12:d7:ff:99:1e:36:78:de:f2:45: d1:da:3b:2e:51:91:e4:00:1a:df:6b:b9:e6:a0:bf: db:53:ea:1d:ac:ca:5b:09:c6:18:a7:5d:a8:5d:fd: 0b:c6:57:8a:d6:7e:0e:8e:0d:c7:27:7c:3f:e9:59: 96:b8:07:b0:b2:7a:b9:ec:6a:13:fb:15:77:f8:67: d9:0d:8b:77:00:2f:27:b0:fe:1a:bd:f2:97:77:aa: e0:c0:ec:4a:2d:2d:fd:b2:92:81:ed:21:45:b4:9c: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D8:94:61:D6:59:C0:C5:70:E0:85:22:72:69:7C:81:35:FB:28:27 X509v3 Authority Key Identifier: keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e1:b5:4e:6f:29:ba:43:4d:81:05:43:d6:a5:10:47:e8:ee: 67:13:e1:38:74:6d:98:13:d2:f8:b5:2f:fc:89:da:2b:a9:af: e7:e9:b5:2b:49:6a:a1:19:90:16:ca:a9:5f:45:8b:ae:07:53: 53:1a:01:60:58:86:50:86:c3:f8:4e:14:d6:30:78:6a:50:f1: 19:37:60:c1:25:2d:cb:bb:0d:fc:32:13:8b:4d:6a:a6:42:64: a9:c4:74:fe:7d:bf:a6:12:87:9e:bf:4c:c7:82:b6:54:e8:27: a7:53:f7:6d:5e:ce:55:0a:bb:e3:73:55:4b:7d:1d:c7:19:85: 4d:84:ea:c7:f0:cc:40:ab:a2:32:dd:21:21:14:26:bc:24:4e: 78:0e:c8:4f:2e:a9:3f:3b:36:c5:8b:13:3f:ea:93:13:49:2b: 98:88:6c:d5:fe:88:8c:5e:28:08:52:c7:87:8d:b0:fe:4d:c2: 03:bc:f9:0c:29:14:a9:4c:6a:93:34:6a:c6:5b:1e:e3:82:b1: 73:0c:91:71:29:11:b7:d2:9d:e5:51:16:21:f7:27:7e:e1:fa: a4:f1:a3:d3:c4:4d:08:db:c7:ee:5c:d4:2d:e4:ae:31:15:f7: 84:52:a5:0b:b0:24:55:a7:17:fe:a0:06:75:d8:c3:60:f9:ad: ad:5e:ca:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKEI4MTVDRjg1MDUzNjhCQTdGOTc2NzRFOUJCMUExNDAw OTVCNEZGOUIwHhcNMjUxMTA1MDYwMzI1WhcNMjUxMTEyMDYwMzI1WjAYMRYwFAYD VQQDEw02OTBhZThhZC0zZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg8sxDkBI2hqa4GwWY5udNNp1TEV/8PUtScMtH+1/tgSEVJ0L15IfbpvCZPX flTVkA2M6kDHDqC80HH7vDQwKGN8Zxvzfl2wGIPb/qmK3IKbieeAiT9FZ0M8KdUI PFjbeIyhbSh3a8oNnZ9OCt/SJCwn0YBECQo1f1f+hLPQiddUSQL5cJFNYasntlxB DT0JdZHkWN8hxA1/HBLX/5keNnje8kXR2jsuUZHkABrfa7nmoL/bU+odrMpbCcYY p12oXf0LxleK1n4Ojg3HJ3w/6VmWuAewsnq57GoT+xV3+GfZDYt3AC8nsP4avfKX d6rgwOxKLS39spKB7SFFtJwk4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnYlGHW WcDFcOCFInJpfIE1+ygnMB8GA1UdIwQYMBaAFLgVz4UFNoun+XZ06bsaFACVtP+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri83QkI2RjIxMDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi91QlhQaFFVMmk2ZjVkblRwdXhvVUFKVzBf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VCWFBoUVUyaTZmNWRuVHB1eG9VQUpXMF81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDg4Ri83QkI2RjIxMDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi91QlhQaFFVMmk2 ZjVkblRwdXhvVUFKVzBfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD4bVObym6Q02BBUPWpRBH6O5nE+E4dG2YE9L4tS/8idorqa/n6bUr SWqhGZAWyqlfRYuuB1NTGgFgWIZQhsP4ThTWMHhqUPEZN2DBJS3Luw38MhOLTWqm QmSpxHT+fb+mEoeev0zHgrZU6CenU/dtXs5VCrvjc1VLfR3HGYVNhOrH8MxAq6Iy 3SEhFCa8JE54DshPLqk/OzbFixM/6pMTSSuYiGzV/oiMXigIUseHjbD+TcIDvPkM KRSpTGqTNGrGWx7jgrFzDJFxKRG30p3lURYh9yd+4fqk8aPTxE0I28fuXNQt5K4x FfeEUqULsCRVpxf+oAZ12MNg+a2tXsp6 -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:44 2025 by rpki-client