$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft File: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft (raw, json) Hash identifier: U6YCsDwS1KWXoqFsb/57ssy0AQblURgsUk1fwU851bI= Subject key identifier: FF:C2:09:B3:2E:74:7E:9F:69:4D:36:B3:08:8D:F1:53:10:0E:FE:3B Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C Certificate issuer: /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft Manifest number: 021F Signing time: Mon 03 Nov 2025 02:07:25 +0000 Manifest this update: Mon 03 Nov 2025 02:07:24 +0000 Manifest next update: Mon 10 Nov 2025 02:07:24 +0000 Files and hashes: 1: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl (hash: AImSMr46A0XsXTcE9xEnKzqYkYItiEnuFztqeJPs+1Q=) 2: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (hash: FNFbf5sb9V0I6f51NgIRl7bd8+WZE2kCB/02TRMhw6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3D65, serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C Validity Not Before: Nov 3 02:07:24 2025 GMT Not After : Nov 10 02:07:24 2025 GMT Subject: CN=69080e5c-056b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:df:f3:29:74:3b:2f:3e:05:35:ab:78:e0: 93:51:ea:3f:98:3f:db:a7:16:72:9d:fc:78:0e:1a: 73:d1:00:d0:dd:cb:11:70:e3:e2:f3:72:c6:cc:86: a0:dd:ad:50:27:ba:15:ae:0f:c1:c0:5b:86:9b:ff: 65:31:f7:c2:3c:15:3c:4d:e8:44:30:b0:86:3e:78: 48:d0:5e:9b:c6:15:81:2d:24:25:1a:46:4e:e2:a2: a0:41:e3:51:bd:41:cf:81:c4:25:4c:e1:61:ac:31: 34:13:da:18:3d:9a:f4:f2:18:3f:97:37:16:bc:ac: f8:96:36:ec:c4:61:24:c9:2e:0e:b8:d3:1e:21:9f: 0e:1d:f0:88:ae:1a:e6:09:e3:7d:ea:dc:8c:80:8c: f3:9a:be:ee:7d:60:1a:96:9f:da:c2:e1:a8:ff:e8: 20:e9:5a:74:67:3f:0e:74:24:b2:e5:87:90:f5:22: 60:8d:d2:28:27:29:e7:ee:af:1e:ab:3b:9d:b4:68: c0:74:70:fa:ca:50:3d:61:b4:17:7f:09:74:72:de: 83:0e:11:5f:9f:00:d4:a7:9b:15:41:c8:f8:1e:66: e6:67:01:08:3d:ae:0d:c1:5f:bf:a7:e5:96:9c:cb: d7:59:28:7e:34:70:f2:a8:72:0e:40:3b:a1:d0:d8: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C2:09:B3:2E:74:7E:9F:69:4D:36:B3:08:8D:F1:53:10:0E:FE:3B X509v3 Authority Key Identifier: keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:0b:6d:af:20:25:2d:2c:92:0b:a6:ea:3b:45:bd:ae:cd:4c: ba:29:2d:de:9f:68:45:f6:12:bd:0c:69:f2:c9:62:6b:e1:e2: 93:9b:1e:3d:ea:43:ea:08:95:f4:2e:ad:1e:02:a7:03:fb:b8: 86:f1:46:e9:79:36:15:fa:57:b3:67:2a:1d:2f:aa:2f:2f:f5: 9c:22:82:e9:d7:7b:b9:5e:e8:a9:9d:94:89:de:5c:16:fd:65: 4e:ba:07:5d:ba:11:22:28:f3:f8:ae:3d:d0:6d:43:98:84:46: c7:42:8b:75:b7:96:78:f3:3c:e3:7a:6b:ac:e6:6d:37:77:5f: 50:86:c5:c1:dc:12:8c:f2:9d:b6:93:62:63:8d:ff:45:b7:65: d2:26:2b:be:11:26:20:d8:d8:62:87:1c:ed:d7:d1:13:76:1b: 7a:5f:a3:9b:85:ef:45:c2:66:55:bf:c2:d6:8b:8a:d4:e2:60: f7:49:f8:0d:8e:eb:22:80:86:3a:bc:8a:dd:2a:52:be:36:e8: f1:5d:64:c4:b5:bc:22:4d:15:3b:6c:7d:23:2d:33:4a:dd:dd: 76:66:e9:70:3f:ed:13:64:b8:e5:f7:ec:22:99:ae:11:0b:53: a2:6f:37:14:44:23:d2:28:3e:d5:63:55:2e:7b:14:b1:ae:0f: 8d:6c:7a:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNENjUxMTAvBgNVBAUTKDUwMDhCRTA0MUY5OTk3QjI1OUQyNTg0NDgzQTUzQTBE RkYwQjE3OEMwHhcNMjUxMTAzMDIwNzI0WhcNMjUxMTEwMDIwNzI0WjAYMRYwFAYD VQQDEw02OTA4MGU1Yy0wNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1rf8yl0Oy8+BTWreOCTUeo/mD/bpxZynfx4Dhpz0QDQ3csRcOPi83LGzIag 3a1QJ7oVrg/BwFuGm/9lMffCPBU8TehEMLCGPnhI0F6bxhWBLSQlGkZO4qKgQeNR vUHPgcQlTOFhrDE0E9oYPZr08hg/lzcWvKz4ljbsxGEkyS4OuNMeIZ8OHfCIrhrm CeN96tyMgIzzmr7ufWAalp/awuGo/+gg6Vp0Zz8OdCSy5YeQ9SJgjdIoJynn7q8e qzudtGjAdHD6ylA9YbQXfwl0ct6DDhFfnwDUp5sVQcj4HmbmZwEIPa4NwV+/p+WW nMvXWSh+NHDyqHIOQDuh0NgrdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/CCbMu dH6faU02swiN8VMQDv47MB8GA1UdIwQYMBaAFFAIvgQfmZeyWdJYRIOlOg3/CxeM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Q2NS9FQTFFNjJENjdD NzUxMUVEOEJFNjVCMzhDNEY5QUUwMi9VQWktQkItWmw3SlowbGhFZzZVNkRmOExG NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VBaS1CQi1abDdKWjBsaEVnNlU2RGY4TEY0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Q2NS9FQTFFNjJENjdDNzUxMUVEOEJFNjVCMzhDNEY5QUUwMi9VQWktQkItWmw3 SlowbGhFZzZVNkRmOExGNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZC22vICUtLJILpuo7Rb2uzUy6KS3en2hF9hK9DGnyyWJr4eKTmx49 6kPqCJX0Lq0eAqcD+7iG8UbpeTYV+lezZyodL6ovL/WcIoLp13u5XuipnZSJ3lwW /WVOugdduhEiKPP4rj3QbUOYhEbHQot1t5Z48zzjemus5m03d19QhsXB3BKM8p22 k2Jjjf9Ft2XSJiu+ESYg2Nhihxzt19ETdht6X6Obhe9FwmZVv8LWi4rU4mD3SfgN jusigIY6vIrdKlK+NujxXWTEtbwiTRU7bH0jLTNK3d12ZulwP+0TZLjl9+wima4R C1OibzcURCPSKD7VY1UuexSxrg+NbHp0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:54 2025 by rpki-client