$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft File: uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json) Hash identifier: ipKP+4G7ak4re5mT2cw5ML8wEX98hrkhDouimgK5TRU= Subject key identifier: F0:EC:6F:E1:6C:FA:21:4E:8B:94:84:11:58:B0:0F:C8:2C:5B:CF:48 Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 Certificate issuer: /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft Manifest number: 0336 Signing time: Wed 05 Nov 2025 01:08:17 +0000 Manifest this update: Wed 05 Nov 2025 01:08:16 +0000 Manifest next update: Wed 12 Nov 2025 01:08:16 +0000 Files and hashes: 1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: Kt1xSsWnBkHGGQLdF5Gh5zGb9rkLAnj3fcZZR0HBVXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Validity Not Before: Nov 5 01:08:16 2025 GMT Not After : Nov 12 01:08:16 2025 GMT Subject: CN=690aa380-8878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:67:e4:e4:b5:44:f1:a1:58:a9:a2:fb:30: 27:9b:d2:19:e6:02:de:ce:aa:47:b0:4c:48:ff:4d: f6:eb:31:ba:69:a0:d4:41:05:9f:92:34:01:34:e0: 33:db:68:a8:4f:28:aa:a4:4a:be:7c:3e:82:38:0d: 08:a0:d6:ea:e2:91:36:82:b7:a1:82:3b:55:6c:bb: 9a:5e:02:89:16:ce:02:1a:ac:86:eb:7b:dc:a5:75: 51:42:96:41:6c:08:3a:80:89:0b:f7:e4:43:94:e4: ee:ce:9e:2a:ac:2c:b5:73:8b:4d:28:1b:0a:37:c8: 2d:62:1c:53:c1:cb:bc:17:91:4a:ee:9b:4b:83:4d: e8:ff:42:50:7f:f7:46:d5:6d:c2:7e:f7:97:99:bd: 3b:59:cc:6d:d1:85:8b:4f:94:26:4a:b5:ab:55:a3: 40:68:b6:7e:06:bc:14:24:ef:9a:65:01:6b:7a:27: cb:3f:11:32:24:78:d1:32:6e:cb:8b:df:30:39:3f: 81:dd:7b:e6:58:ef:6a:1a:f4:57:46:43:d0:75:7b: df:10:f0:38:6d:0d:53:e7:0a:8d:d6:56:fa:c3:90: cc:d4:31:32:b3:53:ca:b3:e2:74:f9:17:5a:8e:b6: 74:51:06:5d:d0:07:83:0e:cf:2d:71:3f:cb:e6:a4: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EC:6F:E1:6C:FA:21:4E:8B:94:84:11:58:B0:0F:C8:2C:5B:CF:48 X509v3 Authority Key Identifier: keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7b:63:09:2e:3f:ff:80:e9:2d:cb:ce:4e:79:0d:4d:44:b9: b6:35:3f:07:d2:47:7f:6e:7b:0b:e4:14:44:b0:ee:13:18:93: d5:66:a0:cd:13:f6:46:c3:67:3e:ad:ce:cf:7d:34:72:61:1e: 1a:91:1e:c4:08:51:01:7c:5b:f5:1d:dd:a8:59:39:d4:3a:49: 6e:07:5d:f8:c6:13:0f:20:37:af:73:b6:d8:c6:41:4d:87:af: 2e:df:77:e2:5f:15:46:5d:5e:02:71:ef:06:c7:ac:ec:49:c7: 3f:21:10:09:c0:fe:b7:e1:46:8b:bf:00:81:7c:fb:e3:09:fe: e4:5d:4b:73:ab:45:0b:5c:20:6d:c4:56:77:8c:b9:15:96:1a: f0:1b:98:e5:bc:3b:a5:7f:65:4e:bc:21:8b:37:69:14:12:3f: f7:88:d9:0a:06:d3:f1:31:d9:97:10:a2:8a:2a:e0:24:b6:29: 77:25:6d:68:70:28:c9:e0:71:3d:d4:4a:c7:57:da:8d:38:78: 27:c4:8b:71:32:39:16:25:2f:62:af:f8:ab:1d:07:39:7d:bb: c9:1c:00:c7:c2:0d:0c:05:91:90:61:8b:38:67:36:6b:41:af: 0d:58:63:13:10:fd:73:bf:90:ad:0e:0a:da:40:a7:c8:36:84: ec:d1:8b:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNDMxMTAvBgNVBAUTKEJCMTg3QjlCNTA3NjdCQjdCQkMyMjg3NzIwQkQzNkMw QjhEMDY4OTYwHhcNMjUxMTA1MDEwODE2WhcNMjUxMTEyMDEwODE2WjAYMRYwFAYD VQQDEw02OTBhYTM4MC04ODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWtn5OS1RPGhWKmi+zAnm9IZ5gLezqpHsExI/0326zG6aaDUQQWfkjQBNOAz 22ioTyiqpEq+fD6COA0IoNbq4pE2grehgjtVbLuaXgKJFs4CGqyG63vcpXVRQpZB bAg6gIkL9+RDlOTuzp4qrCy1c4tNKBsKN8gtYhxTwcu8F5FK7ptLg03o/0JQf/dG 1W3CfveXmb07Wcxt0YWLT5QmSrWrVaNAaLZ+BrwUJO+aZQFreifLPxEyJHjRMm7L i98wOT+B3XvmWO9qGvRXRkPQdXvfEPA4bQ1T5wqN1lb6w5DM1DEys1PKs+J0+Rda jrZ0UQZd0AeDDs8tcT/L5qS1EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDsb+Fs +iFOi5SEEViwD8gsW89IMB8GA1UdIwQYMBaAFLsYe5tQdnu3u8IodyC9NsC40GiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU0My81MDhEQTExOEUy MDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3ZTd3aWgzSUwwMndMalFh SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4aDdtMUIyZTdlN3dpaDNJTDAyd0xqUWFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU0My81MDhEQTExOEUyMDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3 ZTd3aWgzSUwwMndMalFhSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLe2MJLj//gOkty85OeQ1NRLm2NT8H0kd/bnsL5BREsO4TGJPVZqDN E/ZGw2c+rc7PfTRyYR4akR7ECFEBfFv1Hd2oWTnUOkluB134xhMPIDevc7bYxkFN h68u33fiXxVGXV4Cce8Gx6zsScc/IRAJwP634UaLvwCBfPvjCf7kXUtzq0ULXCBt xFZ3jLkVlhrwG5jlvDulf2VOvCGLN2kUEj/3iNkKBtPxMdmXEKKKKuAktil3JW1o cCjJ4HE91ErHV9qNOHgnxItxMjkWJS9ir/irHQc5fbvJHADHwg0MBZGQYYs4ZzZr Qa8NWGMTEP1zv5CtDgraQKfINoTs0YsM -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:35 2025 by rpki-client