$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft File: uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft (raw, json) Hash identifier: Za8UQ7vgzIMFvwnWPc5nOrGLjUTXxjXykuAqbkd4GZk= Subject key identifier: 96:8F:92:9A:F5:96:AD:85:3D:E7:24:A9:78:84:28:C6:26:F5:A3:6E Authority key identifier: BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44 Certificate issuer: /CN=A9154388/serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft Manifest number: C5 Signing time: Wed 05 Nov 2025 05:59:43 +0000 Manifest this update: Wed 05 Nov 2025 05:59:42 +0000 Manifest next update: Wed 12 Nov 2025 05:59:42 +0000 Files and hashes: 1: uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl (hash: BuhYa789LYvlxMUpNKC/Na4M5ec0X254Ufh166wlJ30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154388, serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044 Validity Not Before: Nov 5 05:59:42 2025 GMT Not After : Nov 12 05:59:42 2025 GMT Subject: CN=690ae7ce-1955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:67:7f:99:30:b0:e9:41:64:fc:db:a1:14: 78:c4:60:bf:e0:2b:96:3d:a9:3b:02:4a:e1:e7:a2: 1b:38:74:08:c7:90:24:76:c6:bf:4b:15:82:14:61: 7c:62:9c:30:02:35:a8:22:be:f0:d6:ea:c1:50:ad: be:b6:7b:53:96:bd:b2:02:99:c5:e6:7f:7b:d2:60: 87:52:d2:b3:42:b1:cd:d7:87:7d:14:6c:a5:26:2b: dd:f8:1e:bb:fe:62:53:41:c7:55:b5:8c:de:20:a4: 2d:5b:99:ec:f9:0e:2a:92:c4:ee:ae:a9:6e:7c:96: ec:e6:a0:3e:fb:ac:21:8c:47:be:c3:19:c5:39:c0: da:f8:a2:b1:48:c2:1d:0c:16:5b:90:32:66:c7:52: 79:06:87:c1:01:c7:94:2d:0d:87:3b:50:4e:84:03: e5:5c:c5:38:8e:47:16:ed:f5:f4:ab:7d:73:d8:06: 98:8f:bd:77:1d:69:dc:65:d3:14:e0:19:56:68:b1: c9:f9:78:d8:22:51:d8:3e:f6:56:97:13:f8:cc:09: 9c:b9:8b:99:5c:6e:4d:07:9a:bb:89:6c:7d:8d:2c: b9:30:46:8f:40:29:86:2b:9a:3a:a1:c4:69:75:18: 1a:44:d7:52:30:56:d3:ca:27:a6:8d:f4:3b:45:86: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8F:92:9A:F5:96:AD:85:3D:E7:24:A9:78:84:28:C6:26:F5:A3:6E X509v3 Authority Key Identifier: keyid:BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:80:f3:1b:ce:bb:ef:82:48:fe:06:d0:7e:72:a9:b7:de:ba: 68:b9:1a:b5:a5:c9:ad:a5:ca:bd:7a:7a:a3:1b:79:db:9c:c7: dd:b3:a3:e8:38:ad:9e:24:f5:ba:05:3c:a1:d8:ff:9f:63:b4: 8d:22:54:5f:48:fb:d0:64:dd:9f:05:39:53:46:fc:c1:aa:54: fb:41:14:1d:97:96:fc:32:23:04:29:a0:62:c8:f3:15:03:31: d2:7e:ef:8f:9d:21:94:80:d7:a2:eb:be:3b:15:fd:bf:0c:dc: 70:4f:9f:fa:8a:fc:ce:36:86:39:df:1b:e4:b1:b4:cf:93:b9: 0a:9e:5e:0c:e5:27:da:ce:dd:36:a3:9f:a4:f1:ce:54:f6:68: b6:25:73:ac:70:f1:82:14:ac:50:91:44:75:b2:27:3c:ec:57: bf:1f:24:7b:f8:d8:43:64:c8:5f:42:22:e4:0f:5c:5e:43:31: 0a:82:94:3d:8f:fb:33:1e:6c:c9:85:14:8b:6c:eb:af:94:e2: cd:cc:f7:9e:5c:09:06:90:2f:b7:3d:76:6b:59:70:2a:e9:b4: 6c:c3:4b:38:24:f3:72:c7:44:33:25:b6:06:6b:33:cb:7b:4d: f5:36:ce:cd:5e:57:f4:76:42:4d:b9:4d:03:66:c7:74:37:e2: 6f:30:c8:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzODgxMTAvBgNVBAUTKEJCMkEwRjQ5MzIxRTA4MEIyMjcwQkQwQzhEOUI4RDRC NzkzQjEwNDQwHhcNMjUxMTA1MDU1OTQyWhcNMjUxMTEyMDU1OTQyWjAYMRYwFAYD VQQDEw02OTBhZTdjZS0xOTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPdnf5kwsOlBZPzboRR4xGC/4CuWPak7Akrh56IbOHQIx5Akdsa/SxWCFGF8 YpwwAjWoIr7w1urBUK2+tntTlr2yApnF5n970mCHUtKzQrHN14d9FGylJivd+B67 /mJTQcdVtYzeIKQtW5ns+Q4qksTurqlufJbs5qA++6whjEe+wxnFOcDa+KKxSMId DBZbkDJmx1J5BofBAceULQ2HO1BOhAPlXMU4jkcW7fX0q31z2AaYj713HWncZdMU 4BlWaLHJ+XjYIlHYPvZWlxP4zAmcuYuZXG5NB5q7iWx9jSy5MEaPQCmGK5o6ocRp dRgaRNdSMFbTyiemjfQ7RYY2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaPkpr1 lq2FPeckqXiEKMYm9aNuMB8GA1UdIwQYMBaAFLsqD0kyHggLInC9DI2bjUt5OxBE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM4OC8zODQ1N0NGNjhD MzcxMUVGODA5MDFDMkVDNEY5QUUwMi91eW9QU1RJZUNBc2ljTDBNalp1TlMzazdF RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3V5b1BTVEllQ0FzaWNMME1qWnVOUzNrN0VFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM4OC8zODQ1N0NGNjhDMzcxMUVGODA5MDFDMkVDNEY5QUUwMi91eW9QU1RJZUNB c2ljTDBNalp1TlMzazdFRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPgPMbzrvvgkj+BtB+cqm33rpouRq1pcmtpcq9enqjG3nbnMfds6Po OK2eJPW6BTyh2P+fY7SNIlRfSPvQZN2fBTlTRvzBqlT7QRQdl5b8MiMEKaBiyPMV AzHSfu+PnSGUgNei6747Ff2/DNxwT5/6ivzONoY53xvksbTPk7kKnl4M5Sfazt02 o5+k8c5U9mi2JXOscPGCFKxQkUR1sic87Fe/HyR7+NhDZMhfQiLkD1xeQzEKgpQ9 j/szHmzJhRSLbOuvlOLNzPeeXAkGkC+3PXZrWXAq6bRsw0s4JPNyx0QzJbYGazPL e031Ns7NXlf0dkJNuU0DZsd0N+JvMMgL -----END CERTIFICATE-----Generated at Wed Nov 5 16:48:46 2025 by rpki-client