$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: XOM8nvykavT9jJZ24Niayr87QCPM9aZ+zKykbnKWLj8= Subject key identifier: A5:10:38:C8:00:39:F9:80:80:D3:DC:B6:C2:92:C5:E1:DD:25:5F:93 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0BC8 Signing time: Sun 02 Nov 2025 18:53:34 +0000 Manifest this update: Sun 02 Nov 2025 18:53:33 +0000 Manifest next update: Sun 09 Nov 2025 18:53:33 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: 97dhcZ9b+UK9K3OHH7CYiN++2d43rcYM0DEDs6UHPL8=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: VE/5lNULYXEEuWID4sAqexSIpx9InEaDo4uE/0apCfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Nov 2 18:53:33 2025 GMT Not After : Nov 9 18:53:33 2025 GMT Subject: CN=6907a8ae-1849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:8a:5d:0e:8d:22:31:7c:3a:b2:13:21:e2: ae:b7:0c:6c:f0:e4:35:d6:7e:ae:57:ce:38:c7:29: d7:3c:7b:9c:00:e7:47:ac:09:f6:7d:d4:46:94:28: 52:22:34:41:e2:5d:08:05:5f:68:2b:96:fe:38:9f: 0d:e3:ed:a5:64:b8:0a:dc:31:33:ac:d9:0c:e8:5c: 06:b9:78:fc:c6:54:83:e9:08:95:c9:cd:85:1f:13: 97:d3:83:c0:67:a4:02:a8:b9:a1:bb:87:fc:16:60: 08:49:77:b8:e9:15:4c:d3:9b:27:b7:38:24:dd:39: 38:b0:97:bc:52:ec:28:c8:26:3a:c7:59:3e:85:34: 5e:10:d6:c9:16:9a:f7:df:4f:19:b5:06:d0:23:40: 87:c5:38:99:81:38:5c:d5:bf:bc:29:70:75:f9:28: 7b:8d:90:fb:50:54:f1:98:28:3e:38:d8:3f:25:3d: 8d:16:21:18:f9:f6:ab:69:02:09:fc:b4:fb:43:c4: a4:5f:d8:e7:08:16:60:ca:d7:45:12:f4:8e:87:c1: 26:6e:09:e8:99:a7:29:ae:e3:10:85:56:bf:fa:a4: d1:6c:be:09:a9:14:09:82:16:c3:0c:99:42:6b:70: 2e:8e:56:20:9d:64:56:a4:a2:4f:1f:14:77:c7:67: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:10:38:C8:00:39:F9:80:80:D3:DC:B6:C2:92:C5:E1:DD:25:5F:93 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f2:2e:8b:b2:d3:ea:29:9c:3d:be:58:df:32:3b:33:58:d5: 13:36:3a:60:28:a1:37:53:98:e2:bb:3d:65:e2:cb:6c:d7:30: a0:e8:b5:f0:36:74:b4:90:f1:a9:d3:da:9a:87:8a:db:d5:08: 44:59:cc:a5:1f:30:5a:17:6b:9b:4a:5c:20:06:43:5c:04:79: 75:65:c0:42:d8:4f:87:71:a9:0d:d4:6b:1b:fb:0a:91:88:59: 57:ab:48:55:78:3c:a6:c1:2a:f1:2c:f1:62:4f:46:4c:94:71: 5a:42:12:0a:41:96:74:db:3a:6c:53:c5:f6:d0:e5:e8:4d:29: cc:02:f3:98:59:2b:99:25:00:39:a5:5e:b1:16:4b:1a:5b:5d: 4a:b7:1d:6e:19:fd:49:0f:1c:ad:d7:e7:56:a6:4f:0f:fe:18: 60:63:42:ce:ad:6b:ef:1e:69:f0:38:d7:bd:07:a5:40:a7:9a: f1:48:72:5b:bc:c7:1d:ea:4d:19:c4:4e:73:4d:a6:24:77:86: b4:62:ad:21:5d:a0:8c:28:b1:5a:df:75:d4:74:ef:b5:37:46: 0c:66:bf:7e:a3:56:8f:da:f8:c9:37:97:bc:89:07:bc:6a:76: 6b:2b:69:54:39:0d:b7:1e:e0:6f:7a:4d:2a:e2:f7:4b:59:a4: eb:f3:2a:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUxMTAyMTg1MzMzWhcNMjUxMTA5MTg1MzMzWjAYMRYwFAYD VQQDEw02OTA3YThhZS0xODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gOKXQ6NIjF8OrITIeKutwxs8OQ11n6uV844xynXPHucAOdHrAn2fdRGlChS IjRB4l0IBV9oK5b+OJ8N4+2lZLgK3DEzrNkM6FwGuXj8xlSD6QiVyc2FHxOX04PA Z6QCqLmhu4f8FmAISXe46RVM05sntzgk3Tk4sJe8UuwoyCY6x1k+hTReENbJFpr3 308ZtQbQI0CHxTiZgThc1b+8KXB1+Sh7jZD7UFTxmCg+ONg/JT2NFiEY+faraQIJ /LT7Q8SkX9jnCBZgytdFEvSOh8EmbgnomacpruMQhVa/+qTRbL4JqRQJghbDDJlC a3AujlYgnWRWpKJPHxR3x2e+KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUQOMgA OfmAgNPctsKSxeHdJV+TMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg8i6LstPqKZw9vljfMjszWNUTNjpgKKE3U5jiuz1l4sts1zCg6LXw NnS0kPGp09qah4rb1QhEWcylHzBaF2ubSlwgBkNcBHl1ZcBC2E+HcakN1Gsb+wqR iFlXq0hVeDymwSrxLPFiT0ZMlHFaQhIKQZZ02zpsU8X20OXoTSnMAvOYWSuZJQA5 pV6xFksaW11Ktx1uGf1JDxyt1+dWpk8P/hhgY0LOrWvvHmnwONe9B6VAp5rxSHJb vMcd6k0ZxE5zTaYkd4a0Yq0hXaCMKLFa33XUdO+1N0YMZr9+o1aP2vjJN5e8iQe8 anZrK2lUOQ23HuBvek0q4vdLWaTr8yr8 -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:56 2025 by rpki-client