$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft File: UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft (raw, json) Hash identifier: FagBRx1qpl2NH6Pm1xffX0JHhlit7kQXN3yg1L3m1PE= Subject key identifier: E8:1E:A4:F4:54:F0:AD:CE:20:55:DE:DA:58:59:EB:AC:54:E2:9A:EB Authority key identifier: 52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 Certificate issuer: /CN=A91A3277/serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft Manifest number: 037C Signing time: Mon 03 Nov 2025 00:49:01 +0000 Manifest this update: Mon 03 Nov 2025 00:49:01 +0000 Manifest next update: Mon 10 Nov 2025 00:49:01 +0000 Files and hashes: 1: UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl (hash: 2iwJiLUu13MZ/mhcGvaFCKnTLDYBHu6ldboU6IE0WGs=) 2: F52D264EC6C211EC87251528C4F9AE02.roa (hash: o082/qE7KnRTR5fE6jGL87EK8Un5n2KKqzOv1p2PmKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3277, serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64 Validity Not Before: Nov 3 00:49:01 2025 GMT Not After : Nov 10 00:49:01 2025 GMT Subject: CN=6907fbfd-a697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:58:d0:86:0b:16:74:6d:65:1f:d3:54:74: 25:8b:a8:78:44:d1:eb:fa:7b:af:6e:80:c3:38:a9: 6b:f0:60:cc:9d:6e:f5:7a:8c:ce:16:2c:11:4c:13: 24:10:91:b7:a8:71:29:b1:df:54:48:0c:4f:fc:36: 50:d9:cf:18:48:78:66:9a:85:df:53:61:91:e4:85: 86:cd:83:98:a5:51:18:94:b7:87:f7:c2:54:fd:76: 9e:d7:c8:aa:d5:56:36:27:b6:e2:f9:41:a4:6f:bb: bb:21:88:c8:6d:e5:c9:d6:30:6e:50:10:04:2a:26: ae:4e:92:08:80:d6:76:58:6e:3b:b7:e5:f7:2d:80: 87:7a:6d:d1:a8:c4:20:f1:86:3b:96:db:28:12:28: 67:e1:7b:7a:17:42:ba:4d:8c:c9:91:d2:8d:68:23: 79:ab:e1:68:30:45:df:c6:24:e5:46:cb:1e:36:f0: 17:bc:b1:47:20:c4:50:b5:ce:cc:2b:cf:55:66:b0: ce:03:19:75:a3:4c:82:ad:b1:36:f9:88:ac:24:07: 97:0b:d4:9f:92:33:cd:f4:29:82:4f:7d:79:94:d9: c1:60:3d:19:6d:32:12:5a:81:01:95:71:43:cf:3c: f7:3f:0b:3a:bd:e6:4f:ec:7b:22:59:dd:a9:b3:67: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1E:A4:F4:54:F0:AD:CE:20:55:DE:DA:58:59:EB:AC:54:E2:9A:EB X509v3 Authority Key Identifier: keyid:52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:3f:e4:fb:5a:ff:ca:93:ed:00:52:ca:5c:a5:2a:00:66:34: 64:c6:51:4c:7c:1f:50:c2:31:1b:33:67:4d:74:e3:8e:52:d3: 31:b1:de:32:0e:08:22:64:dc:20:87:3f:43:bc:f0:99:99:e5: 27:e7:3a:3a:57:99:5f:ef:56:0d:20:ef:9c:0d:01:e1:36:63: 60:bc:b6:fb:bf:f1:65:90:a6:db:ff:ac:4b:00:24:a7:e3:3c: 0f:62:5e:57:2e:35:b7:b3:b6:6f:07:de:63:f9:41:ee:cb:d7: ec:ba:45:8d:d7:75:26:d9:76:12:e6:7b:01:02:9b:47:90:6b: d9:bf:cd:7a:da:2b:b9:8f:d0:d9:0b:57:fe:06:50:15:35:12: d0:de:36:71:2a:87:63:d0:45:d1:6e:22:7e:e6:84:e2:64:f1: f7:5d:64:89:80:90:4f:4e:48:e6:25:4c:a4:38:4c:8d:8e:da: 8a:d3:a6:78:60:48:36:7b:d4:88:bd:52:65:47:54:b1:e3:89: cb:6e:2a:89:f0:33:35:4e:c9:13:d8:19:8d:93:3f:b3:ba:2d: 5e:38:3e:8c:6e:14:26:b3:ef:61:47:44:74:01:6d:79:94:28: 9f:c7:d3:2f:07:bc:34:54:28:c2:df:07:77:29:27:c5:1f:91: bb:db:78:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMyNzcxMTAvBgNVBAUTKDUyRjNFN0ZCNUVEODUzMzdGN0UxOUUxMDczM0Q0OTBD MkIxQzBCNjQwHhcNMjUxMTAzMDA0OTAxWhcNMjUxMTEwMDA0OTAxWjAYMRYwFAYD VQQDEw02OTA3ZmJmZC1hNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMVY0IYLFnRtZR/TVHQli6h4RNHr+nuvboDDOKlr8GDMnW71eozOFiwRTBMk EJG3qHEpsd9USAxP/DZQ2c8YSHhmmoXfU2GR5IWGzYOYpVEYlLeH98JU/Xae18iq 1VY2J7bi+UGkb7u7IYjIbeXJ1jBuUBAEKiauTpIIgNZ2WG47t+X3LYCHem3RqMQg 8YY7ltsoEihn4Xt6F0K6TYzJkdKNaCN5q+FoMEXfxiTlRsseNvAXvLFHIMRQtc7M K89VZrDOAxl1o0yCrbE2+YisJAeXC9SfkjPN9CmCT315lNnBYD0ZbTISWoEBlXFD zzz3Pws6veZP7HsiWd2ps2cvlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgepPRU 8K3OIFXe2lhZ66xU4prrMB8GA1UdIwQYMBaAFFLz5/te2FM39+GeEHM9SQwrHAtk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzI3Ny9DMUIwMjI5NkM2 QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6ZjM0WjRRY3oxSkRDc2ND MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2UG4tMTdZVXpmMzRaNFFjejFKRENzY0MyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzI3Ny9DMUIwMjI5NkM2QzAxMUVDQTg1NEQ2MjdDNEY5QUUwMi9VdlBuLTE3WVV6 ZjM0WjRRY3oxSkRDc2NDMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4P+T7Wv/Kk+0AUspcpSoAZjRkxlFMfB9QwjEbM2dNdOOOUtMxsd4y DggiZNwghz9DvPCZmeUn5zo6V5lf71YNIO+cDQHhNmNgvLb7v/FlkKbb/6xLACSn 4zwPYl5XLjW3s7ZvB95j+UHuy9fsukWN13Um2XYS5nsBAptHkGvZv8162iu5j9DZ C1f+BlAVNRLQ3jZxKodj0EXRbiJ+5oTiZPH3XWSJgJBPTkjmJUykOEyNjtqK06Z4 YEg2e9SIvVJlR1Sx44nLbiqJ8DM1TskT2BmNkz+zui1eOD6MbhQms+9hR0R0AW15 lCifx9MvB7w0VCjC3wd3KSfFH5G723gU -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:37 2025 by rpki-client