$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: qlEJH01ayEsVT9xYJWoiO6Gta/jGVEJ55rDy1Aw8PZA= Subject key identifier: 30:DF:7C:B6:83:EF:B1:A5:71:6B:09:D1:57:C8:75:E1:38:6E:58:69 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: 015A Signing time: Wed 05 Nov 2025 04:19:33 +0000 Manifest this update: Wed 05 Nov 2025 04:19:32 +0000 Manifest next update: Wed 12 Nov 2025 04:19:32 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: ZHF/R/mYvfPYnJCke6XEpBxA053Io5yyq/27YqjLGao=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: s22fNuehfcR8cdi3cFR8Z1yPLk8LwMQLolDpdzgZgc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Nov 5 04:19:32 2025 GMT Not After : Nov 12 04:19:32 2025 GMT Subject: CN=690ad054-323e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:b7:1a:d3:f2:36:e0:28:e6:e7:14:e3:a0: a7:d0:e1:1a:ef:ce:48:7c:73:33:9a:51:8b:8a:71: b1:2d:80:00:1a:bb:0e:9e:8a:a0:ea:46:2f:86:27: 51:b1:47:61:1c:76:4c:f7:85:06:02:96:c0:9f:e2: 36:ff:9a:c6:ff:b8:60:1b:48:7d:d0:35:83:61:26: c8:7f:cb:ae:2a:76:79:d3:f9:a5:34:bd:db:b4:c5: 85:44:a9:dc:4f:09:97:f6:ff:8f:55:39:9e:99:9e: ac:3d:f5:1f:7a:43:d1:3b:40:7a:72:57:51:f7:e3: b5:f1:8c:43:4b:21:41:0d:43:a0:23:e8:fa:ae:e3: 4d:2f:19:d3:62:c4:da:e0:5c:6e:60:1c:16:3c:e4: 08:a8:ec:87:77:d1:0e:29:41:bd:d0:03:0c:1c:9b: fc:31:1b:ca:ff:de:9c:0f:05:e2:83:7a:61:11:eb: 37:27:4f:65:59:3d:1c:03:07:f5:61:1d:8f:c4:80: 12:d1:ac:e9:47:26:b9:9a:da:c1:2b:f8:05:d4:65: 71:a9:39:7b:df:21:61:23:83:f9:1f:a1:9b:3b:5b: be:b9:7d:ee:66:3d:fc:a3:6e:78:fc:64:6c:51:6d: 06:67:ee:0c:92:64:8e:87:57:58:22:ad:b3:54:5c: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DF:7C:B6:83:EF:B1:A5:71:6B:09:D1:57:C8:75:E1:38:6E:58:69 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1f:12:5b:31:a9:22:b9:8a:1e:3f:93:56:15:25:6c:50:14: a4:13:e4:42:af:f7:de:77:cc:bd:59:86:28:6f:fb:ae:be:b1: e5:7c:71:4f:e4:65:5c:40:c7:9b:bd:18:6e:c0:1e:80:24:68: ee:5e:5e:5b:1d:83:3d:e6:7d:65:b4:ad:ed:62:db:b1:e3:b9: 2e:9e:7f:0e:d0:9e:79:4c:0e:18:e2:26:f8:87:a0:0e:06:63: 6c:99:96:51:14:c2:ec:fa:19:32:80:ec:98:76:3f:68:c8:d6: a1:46:2d:9a:be:d8:55:95:0d:05:de:c3:a4:37:4e:6c:b4:75: 6c:99:bb:dd:e1:70:a8:20:2f:e4:3d:e4:72:bb:5f:e8:99:72: 6c:97:78:51:f5:ae:56:0c:d2:c8:28:66:d7:6c:1c:25:71:b1: b4:00:50:db:a3:31:5e:12:78:8f:a7:0e:63:0d:c3:e0:e4:e5: ab:ed:fd:83:e9:65:cd:67:fa:6b:b0:69:ec:72:fb:84:96:36: 8f:3f:f4:6b:4a:71:75:8c:ed:f9:e5:af:3a:0e:83:be:4a:6f: 2c:06:dd:1a:16:2a:4a:52:1c:25:2b:53:f8:5f:32:e5:61:36: 31:46:70:65:75:ae:cc:5a:d5:50:6f:5c:cf:66:c6:a2:ea:dc: de:52:df:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUxMTA1MDQxOTMyWhcNMjUxMTEyMDQxOTMyWjAYMRYwFAYD VQQDEw02OTBhZDA1NC0zMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbO3GtPyNuAo5ucU46Cn0OEa785IfHMzmlGLinGxLYAAGrsOnoqg6kYvhidR sUdhHHZM94UGApbAn+I2/5rG/7hgG0h90DWDYSbIf8uuKnZ50/mlNL3btMWFRKnc TwmX9v+PVTmemZ6sPfUfekPRO0B6cldR9+O18YxDSyFBDUOgI+j6ruNNLxnTYsTa 4FxuYBwWPOQIqOyHd9EOKUG90AMMHJv8MRvK/96cDwXig3phEes3J09lWT0cAwf1 YR2PxIAS0azpRya5mtrBK/gF1GVxqTl73yFhI4P5H6GbO1u+uX3uZj38o254/GRs UW0GZ+4MkmSOh1dYIq2zVFxz3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDffLaD 77GlcWsJ0VfIdeE4blhpMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjHxJbMakiuYoeP5NWFSVsUBSkE+RCr/fed8y9WYYob/uuvrHlfHFP 5GVcQMebvRhuwB6AJGjuXl5bHYM95n1ltK3tYtux47kunn8O0J55TA4Y4ib4h6AO BmNsmZZRFMLs+hkygOyYdj9oyNahRi2avthVlQ0F3sOkN05stHVsmbvd4XCoIC/k PeRyu1/omXJsl3hR9a5WDNLIKGbXbBwlcbG0AFDbozFeEniPpw5jDcPg5OWr7f2D 6WXNZ/prsGnscvuEljaPP/RrSnF1jO355a86DoO+Sm8sBt0aFipKUhwlK1P4XzLl YTYxRnBlda7MWtVQb1zPZsai6tzeUt8j -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:55 2025 by rpki-client