$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: /4qsXLNDeHrwV99MoEo5dtftESbzMJxMtpnQfgHIVP0= Subject key identifier: 7D:3C:96:CD:72:07:C6:BB:24:33:FF:83:B9:CF:D5:A1:D5:44:E2:2C Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: 014F Signing time: Wed 05 Nov 2025 04:25:18 +0000 Manifest this update: Wed 05 Nov 2025 04:25:18 +0000 Manifest next update: Wed 12 Nov 2025 04:25:18 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: uHl6le/OzPfaP8zJdl96cPqLeujOuQ/uM+Hsh4YVBUc=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995 Validity Not Before: Nov 5 04:25:18 2025 GMT Not After : Nov 12 04:25:18 2025 GMT Subject: CN=690ad1ae-aac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:e5:e6:ad:92:10:0d:f3:34:5a:f1:aa:72: c8:67:7d:07:af:eb:62:89:82:a4:ec:df:e6:08:a1: 82:98:b4:92:f1:1c:06:eb:65:4f:1a:c4:e2:54:04: 57:8c:62:a1:3d:50:ca:42:c4:a5:75:48:62:c4:95: 0d:77:ff:60:9b:26:98:7f:7a:bc:ec:2b:1f:7d:f5: 4a:92:da:64:e7:3f:ae:b1:a0:2d:b4:5f:65:18:5f: 7d:23:3b:24:7f:48:44:4c:c4:59:a4:de:b5:0b:fe: 96:57:e5:41:df:df:95:a8:8b:3b:8b:85:8f:75:e8: c6:11:0e:6e:7a:a4:db:57:b1:4b:fb:ad:df:a3:24: b0:e3:7d:8b:98:6d:88:1f:97:8a:98:62:1a:f0:9c: ac:98:1e:b9:cd:6c:81:0a:cc:ae:78:2a:85:85:64: 52:01:56:18:e3:47:b4:42:58:03:a2:83:c9:98:7c: 95:d3:53:93:fb:f6:28:29:4e:fb:df:ed:27:ff:90: 00:fb:c0:cc:64:65:d2:81:d0:b1:81:be:6d:28:77: d7:13:cf:d2:17:69:ff:8e:a2:d0:a2:bf:09:1d:9f: f1:6a:5a:45:f1:4d:e9:c1:93:40:89:1b:2a:57:19: e3:e5:6e:d9:9f:b3:17:67:47:28:87:3f:d3:c5:7d: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3C:96:CD:72:07:C6:BB:24:33:FF:83:B9:CF:D5:A1:D5:44:E2:2C X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:de:dc:ff:75:03:59:b8:66:f6:f8:13:86:2e:d0:3a:d5:b2: 53:1a:f9:98:54:22:1c:59:e0:b8:4a:56:27:a3:cd:18:42:84: 31:9d:a0:de:dc:4b:6b:a4:4b:03:f9:d1:53:52:1b:b4:18:32: 17:30:70:ed:77:23:96:68:64:6e:4c:e3:75:f6:10:20:56:0c: cc:8e:cb:0e:00:ed:b4:dc:38:b5:40:68:6f:eb:88:58:67:03: ee:da:82:fa:d7:97:21:2e:38:24:35:2c:a3:40:12:e7:f7:46: d5:14:49:20:02:9a:d7:13:5d:09:30:f7:a6:6b:2c:3c:44:76: 1b:0f:42:da:87:5d:a6:69:ff:25:38:fb:33:ef:b3:78:e0:38: 1b:0c:3f:84:c4:8b:f8:6e:35:be:3d:f9:1b:10:30:8b:94:49: 19:68:b2:46:f9:0e:7d:36:92:97:52:7c:4c:41:b1:6a:c2:3f: 1f:6c:8f:56:4d:4a:d2:83:91:79:61:09:82:1e:5e:bb:02:18: 96:d8:f6:46:96:46:43:89:e7:95:c2:b5:a3:30:a1:63:90:40: 52:f7:73:16:6a:6d:86:9a:d0:5c:0c:5a:ea:93:9f:0d:d6:ee: 50:a0:41:ab:18:6f:07:a0:b7:73:40:d5:cc:95:71:95:45:9a: fb:19:04:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwRDQxMTAvBgNVBAUTKEI5N0E3RjAxNUE3MzYwNzRERjM4NDQ1Qzk4MDc0Mzc4 MjE5RDI5OTUwHhcNMjUxMTA1MDQyNTE4WhcNMjUxMTEyMDQyNTE4WjAYMRYwFAYD VQQDEw02OTBhZDFhZS1hYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7fl5q2SEA3zNFrxqnLIZ30Hr+tiiYKk7N/mCKGCmLSS8RwG62VPGsTiVARX jGKhPVDKQsSldUhixJUNd/9gmyaYf3q87CsfffVKktpk5z+usaAttF9lGF99Izsk f0hETMRZpN61C/6WV+VB39+VqIs7i4WPdejGEQ5ueqTbV7FL+63foySw432LmG2I H5eKmGIa8JysmB65zWyBCsyueCqFhWRSAVYY40e0QlgDooPJmHyV01OT+/YoKU77 3+0n/5AA+8DMZGXSgdCxgb5tKHfXE8/SF2n/jqLQor8JHZ/xalpF8U3pwZNAiRsq Vxnj5W7Zn7MXZ0cohz/TxX3gNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH08ls1y B8a7JDP/g7nP1aHVROIsMB8GA1UdIwQYMBaAFLl6fwFac2B03zhEXJgHQ3ghnSmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjBENC8wRTNGMEM2NkJD MTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellIVGZPRVJjbUFkRGVDR2RL WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEtaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjBENC8wRTNGMEM2NkJDMTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellI VGZPRVJjbUFkRGVDR2RLWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl3tz/dQNZuGb2+BOGLtA61bJTGvmYVCIcWeC4SlYno80YQoQxnaDe 3EtrpEsD+dFTUhu0GDIXMHDtdyOWaGRuTON19hAgVgzMjssOAO203Di1QGhv64hY ZwPu2oL615chLjgkNSyjQBLn90bVFEkgAprXE10JMPemayw8RHYbD0Lah12maf8l OPsz77N44DgbDD+ExIv4bjW+PfkbEDCLlEkZaLJG+Q59NpKXUnxMQbFqwj8fbI9W TUrSg5F5YQmCHl67AhiW2PZGlkZDieeVwrWjMKFjkEBS93MWam2GmtBcDFrqk58N 1u5QoEGrGG8HoLdzQNXMlXGVRZr7GQRe -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:50 2025 by rpki-client