$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: m9LCVmenfbMJqv40UDTMa6BaRaeOSyBZUBfUhNZxnMo= Subject key identifier: AB:8A:70:4B:28:7C:85:E1:0E:95:6D:CB:4E:6A:98:61:1A:0C:BD:30 Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: 014E Signing time: Mon 03 Nov 2025 04:16:23 +0000 Manifest this update: Mon 03 Nov 2025 04:16:23 +0000 Manifest next update: Mon 10 Nov 2025 04:16:23 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: MeslQXPvyg4Zju2CQbJFnhJC4YCi1wld9a3G5z0FJic=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995 Validity Not Before: Nov 3 04:16:23 2025 GMT Not After : Nov 10 04:16:23 2025 GMT Subject: CN=69082c97-91f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:dd:1d:d6:ba:9a:f9:46:73:11:93:18:88: df:87:f0:81:c1:71:1e:ee:f2:28:cb:32:b7:2f:bd: 26:c0:27:0e:db:85:0c:46:7b:ac:80:82:22:45:99: 26:88:8e:3d:0d:3d:0e:91:77:dd:9c:2a:35:0d:ad: ad:5d:ce:69:ad:74:19:25:b5:6e:15:60:6d:90:ac: f9:02:fe:24:6b:7d:c5:ff:2c:d6:ac:84:fe:d0:bf: 51:78:3c:60:d7:4a:e8:65:99:92:db:45:99:74:b5: ef:e9:9d:c9:03:29:dc:4a:bd:0c:b1:6f:d0:bd:95: 87:74:27:33:ed:8e:a0:7e:48:1e:90:97:ac:11:71: 38:49:2b:66:73:2a:f3:a3:05:05:e1:52:5c:bb:07: 31:10:ec:1c:7b:6f:7c:2d:e5:ec:5b:ad:84:42:54: 6f:81:41:29:c2:85:4a:3a:88:d5:a6:ff:3b:b4:01: 6b:6a:84:63:ea:d1:02:b3:b3:e6:40:a0:84:58:af: 4c:32:22:3a:bf:e9:72:d7:4a:69:93:23:8e:6a:f0: 0c:ee:16:a9:73:38:09:16:1a:e7:ed:f0:95:56:35: e7:1a:c5:e2:18:ef:c9:64:07:08:a6:82:19:df:e3: 77:a3:0f:c1:5a:6a:cf:64:ec:d3:3e:96:e3:a0:f4: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8A:70:4B:28:7C:85:E1:0E:95:6D:CB:4E:6A:98:61:1A:0C:BD:30 X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f3:ec:96:ff:ff:82:54:38:8b:c7:3e:1e:63:11:d5:f9:cf: 33:33:bb:1e:c6:3d:7e:7d:24:cc:44:f9:b7:30:98:52:f1:fb: c2:19:3e:eb:86:0a:c0:d5:52:d9:60:ea:df:fa:f7:cb:f4:0c: 1c:75:ac:55:a2:a5:ec:9e:da:4d:b9:d3:2b:7c:97:92:43:bf: 3f:5e:10:6a:67:33:1b:bb:a0:40:e6:44:d6:f8:34:a5:41:f0: ed:00:09:c4:d0:a2:d1:37:3d:84:da:b4:e2:7e:8b:ba:89:1e: 09:aa:80:86:dd:1d:62:48:fc:02:88:81:75:4a:91:f2:1a:ef: f1:50:fe:d6:ed:97:e0:66:3e:75:32:bc:d0:22:e1:4d:72:d8: d7:d2:36:16:14:28:3b:46:1e:86:0e:06:05:59:04:e1:d7:68: a3:32:dc:4c:ab:b5:80:a9:a8:89:e7:1b:23:ad:fd:9d:fc:c9: 2a:82:78:8c:2e:8e:93:64:0b:0e:cd:b9:67:28:dc:d0:8a:4a: 4d:c9:f6:7e:1f:3b:74:69:d2:44:84:0f:76:fc:79:2d:7e:8d: cb:dc:d2:10:6f:e2:41:88:da:7e:da:74:29:5a:9c:11:a1:33: 5c:7b:00:cf:03:75:ee:56:f3:4a:8a:8f:75:93:7b:da:9d:e8: dc:c5:93:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwRDQxMTAvBgNVBAUTKEI5N0E3RjAxNUE3MzYwNzRERjM4NDQ1Qzk4MDc0Mzc4 MjE5RDI5OTUwHhcNMjUxMTAzMDQxNjIzWhcNMjUxMTEwMDQxNjIzWjAYMRYwFAYD VQQDEw02OTA4MmM5Ny05MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/ndHda6mvlGcxGTGIjfh/CBwXEe7vIoyzK3L70mwCcO24UMRnusgIIiRZkm iI49DT0OkXfdnCo1Da2tXc5prXQZJbVuFWBtkKz5Av4ka33F/yzWrIT+0L9ReDxg 10roZZmS20WZdLXv6Z3JAyncSr0MsW/QvZWHdCcz7Y6gfkgekJesEXE4SStmcyrz owUF4VJcuwcxEOwce298LeXsW62EQlRvgUEpwoVKOojVpv87tAFraoRj6tECs7Pm QKCEWK9MMiI6v+ly10ppkyOOavAM7hapczgJFhrn7fCVVjXnGsXiGO/JZAcIpoIZ 3+N3ow/BWmrPZOzTPpbjoPShXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuKcEso fIXhDpVty05qmGEaDL0wMB8GA1UdIwQYMBaAFLl6fwFac2B03zhEXJgHQ3ghnSmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjBENC8wRTNGMEM2NkJD MTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellIVGZPRVJjbUFkRGVDR2RL WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEtaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjBENC8wRTNGMEM2NkJDMTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellI VGZPRVJjbUFkRGVDR2RLWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA68+yW//+CVDiLxz4eYxHV+c8zM7sexj1+fSTMRPm3MJhS8fvCGT7r hgrA1VLZYOrf+vfL9AwcdaxVoqXsntpNudMrfJeSQ78/XhBqZzMbu6BA5kTW+DSl QfDtAAnE0KLRNz2E2rTifou6iR4JqoCG3R1iSPwCiIF1SpHyGu/xUP7W7ZfgZj51 MrzQIuFNctjX0jYWFCg7Rh6GDgYFWQTh12ijMtxMq7WAqaiJ5xsjrf2d/MkqgniM Lo6TZAsOzblnKNzQikpNyfZ+Hzt0adJEhA92/Hktfo3L3NIQb+JBiNp+2nQpWpwR oTNcewDPA3XuVvNKio91k3vanejcxZOD -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:12 2025 by rpki-client