$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.mft File: UcoMuoR_mJnJz1pXqb5hXPs6WlA.mft (raw, json) Hash identifier: iLMfbyfPR+JFW4Mxg/LSDzOhebWoceleFsslTVhFlZA= Subject key identifier: 99:8C:3B:AA:F5:CD:3C:AB:AD:45:2C:A2:2F:23:CF:D2:54:A2:B5:46 Authority key identifier: 51:CA:0C:BA:84:7F:98:99:C9:CF:5A:57:A9:BE:61:5C:FB:3A:5A:50 Certificate issuer: /CN=A914F5BA/serialNumber=51CA0CBA847F9899C9CF5A57A9BE615CFB3A5A50 Certificate serial: 093C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.mft Manifest number: 0935 Signing time: Sun 02 Nov 2025 20:10:38 +0000 Manifest this update: Sun 02 Nov 2025 20:10:37 +0000 Manifest next update: Sun 09 Nov 2025 20:10:37 +0000 Files and hashes: 1: UcoMuoR_mJnJz1pXqb5hXPs6WlA.crl (hash: 8NvU1gsiZF9R97+fisI4OTevDCP0MvGCMdgvr91PIAc=) 2: E911B9C2AD6211EABEDF046AC4F9AE02.roa (hash: Juq4RnWQk1ea9SqtdvfsyJAtL22bIIF9knCvM77mEwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.crl rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2364 (0x93c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F5BA, serialNumber=51CA0CBA847F9899C9CF5A57A9BE615CFB3A5A50 Validity Not Before: Nov 2 20:10:37 2025 GMT Not After : Nov 9 20:10:37 2025 GMT Subject: CN=6907babe-004d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:74:27:05:90:3d:d1:8a:ee:02:1d:38:c5: 6b:d3:f3:b3:d1:8d:9f:99:25:8c:31:65:19:1a:1f: db:33:69:c3:2b:c0:2a:07:3f:97:c6:11:21:48:ec: 77:2a:9c:e0:e3:12:5e:78:b1:ce:d5:e6:b0:15:e1: 0c:ad:57:6a:54:10:df:4f:20:16:96:9f:01:6f:c9: 24:58:d3:b7:10:c2:c1:ea:b4:4f:89:78:de:62:61: e6:d4:ea:9c:36:52:3b:fe:d4:a1:09:3c:91:9c:b8: a2:66:3b:03:c0:43:ab:67:66:67:7a:e8:02:6c:57: 53:ef:06:4d:93:ca:24:5d:86:e2:77:bb:56:32:c5: 89:f0:7c:64:e2:8e:7c:0a:84:28:94:a3:0c:7e:a9: a9:6f:58:d5:e3:26:03:08:b6:c0:a0:e5:64:6b:db: 2b:8c:8d:0e:f3:be:59:1b:13:44:9f:5b:3e:9c:cb: 84:6a:ca:a8:97:c8:7d:88:5c:07:27:2d:7d:5e:85: bd:2f:32:18:19:21:8f:f8:10:1a:5f:92:fe:83:4a: c1:f0:3e:83:7d:1e:7d:02:da:3c:a4:3f:c6:80:04: 79:6e:6a:08:57:13:4d:f1:99:17:60:7b:77:a1:f2: ba:7e:23:d8:79:9b:cb:35:a8:c3:40:e9:94:99:9a: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8C:3B:AA:F5:CD:3C:AB:AD:45:2C:A2:2F:23:CF:D2:54:A2:B5:46 X509v3 Authority Key Identifier: keyid:51:CA:0C:BA:84:7F:98:99:C9:CF:5A:57:A9:BE:61:5C:FB:3A:5A:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:23:ee:ce:b8:0e:eb:07:77:08:ea:20:5a:b6:88:3a:70:f7: 2d:d2:be:bf:0b:65:f8:59:f7:84:6a:be:14:1c:48:96:8d:8c: 7a:73:63:1d:de:c4:1d:22:9c:f0:76:63:56:f0:d4:7f:52:61: 1d:a6:3e:65:2f:5b:2b:1c:86:66:eb:a8:66:e4:be:0d:d6:ba: 55:ef:8f:bc:a9:78:b3:13:96:f2:a9:61:78:26:57:0a:61:c8: 10:45:5a:53:be:23:61:db:56:ca:6a:b6:11:42:c4:ed:f9:d4: cb:3a:aa:00:58:2a:a5:a6:79:15:e8:b9:38:e2:fb:b4:3c:d7: 4c:3d:d0:f0:06:cb:65:50:25:82:fa:70:47:a4:de:0f:a2:63: e8:f1:13:b7:23:db:b2:2d:3a:14:e8:d1:c0:8f:22:3c:42:61: 11:b0:59:60:3a:d9:7a:1f:c2:99:ef:c1:ec:42:f8:1b:98:16: 65:e4:11:f1:e5:6a:2f:3f:4b:78:2d:c7:ab:4e:0e:c7:05:07: 49:bb:0b:eb:b1:e1:8f:bb:21:64:87:69:67:55:79:a7:7b:dc: 88:e4:e3:f2:36:0c:1b:f8:44:de:9a:1e:c6:b4:41:af:81:fb: d0:82:9f:eb:a6:97:a8:36:e5:d5:8a:87:57:8f:f1:c9:ac:76: 1f:2e:b9:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1QkExMTAvBgNVBAUTKDUxQ0EwQ0JBODQ3Rjk4OTlDOUNGNUE1N0E5QkU2MTVD RkIzQTVBNTAwHhcNMjUxMTAyMjAxMDM3WhcNMjUxMTA5MjAxMDM3WjAYMRYwFAYD VQQDEw02OTA3YmFiZS0wMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/50JwWQPdGK7gIdOMVr0/Oz0Y2fmSWMMWUZGh/bM2nDK8AqBz+XxhEhSOx3 Kpzg4xJeeLHO1eawFeEMrVdqVBDfTyAWlp8Bb8kkWNO3EMLB6rRPiXjeYmHm1Oqc NlI7/tShCTyRnLiiZjsDwEOrZ2ZneugCbFdT7wZNk8okXYbid7tWMsWJ8Hxk4o58 CoQolKMMfqmpb1jV4yYDCLbAoOVka9srjI0O875ZGxNEn1s+nMuEasqol8h9iFwH Jy19XoW9LzIYGSGP+BAaX5L+g0rB8D6DfR59Ato8pD/GgAR5bmoIVxNN8ZkXYHt3 ofK6fiPYeZvLNajDQOmUmZr+ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmMO6r1 zTyrrUUsoi8jz9JUorVGMB8GA1UdIwQYMBaAFFHKDLqEf5iZyc9aV6m+YVz7OlpQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjVCQS9FRTIyRDAxMEFE NjAxMUVBOEYxQThENjNDNEY5QUUwMi9VY29NdW9SX21Kbkp6MXBYcWI1aFhQczZX bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Vjb011b1JfbUpuSnoxcFhxYjVoWFBzNldsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjVCQS9FRTIyRDAxMEFENjAxMUVBOEYxQThENjNDNEY5QUUwMi9VY29NdW9SX21K bkp6MXBYcWI1aFhQczZXbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiI+7OuA7rB3cI6iBatog6cPct0r6/C2X4WfeEar4UHEiWjYx6c2Md 3sQdIpzwdmNW8NR/UmEdpj5lL1srHIZm66hm5L4N1rpV74+8qXizE5byqWF4JlcK YcgQRVpTviNh21bKarYRQsTt+dTLOqoAWCqlpnkV6Lk44vu0PNdMPdDwBstlUCWC +nBHpN4PomPo8RO3I9uyLToU6NHAjyI8QmERsFlgOtl6H8KZ78HsQvgbmBZl5BHx 5WovP0t4LcerTg7HBQdJuwvrseGPuyFkh2lnVXmne9yI5OPyNgwb+ETemh7GtEGv gfvQgp/rppeoNuXViodXj/HJrHYfLrk9 -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:19 2025 by rpki-client