$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft File: UAxgp_acBL6E_PPGVyPAeXDloSg.mft (raw, json) Hash identifier: 6X2pvQKoii8dK09mrKuHnzEev89LTKO95xaeqF9wvgo= Subject key identifier: 98:8C:0C:0B:1F:72:43:4F:ED:0A:ED:CB:4B:CD:D1:A9:8D:4E:D6:B9 Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28 Certificate issuer: /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft Manifest number: 8B Signing time: Mon 03 Nov 2025 06:37:13 +0000 Manifest this update: Mon 03 Nov 2025 06:37:12 +0000 Manifest next update: Mon 10 Nov 2025 06:37:12 +0000 Files and hashes: 1: UAxgp_acBL6E_PPGVyPAeXDloSg.crl (hash: FxnqrmBqsaJsgFljStCX/V6tQFCtfStCrw+mUPDTV0w=) 2: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (hash: lILeGFy8FkS3op8pqtEQAN5f/QrMhRlzhtxTRP45JV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128 Validity Not Before: Nov 3 06:37:12 2025 GMT Not After : Nov 10 06:37:12 2025 GMT Subject: CN=69084d98-c2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d8:f0:0a:e6:f1:5b:71:a9:3d:61:b3:24:77: d9:0e:5b:b6:39:a1:aa:62:94:cb:93:61:5d:23:53: 66:b9:29:e9:09:fd:84:a0:20:37:58:54:a9:13:1b: c8:5a:ca:07:43:d4:b6:67:8a:d4:08:ce:57:96:87: 3e:55:be:20:fb:9f:67:37:ed:e1:ab:2a:c7:81:2d: ec:19:c5:5b:70:95:8c:96:cd:a4:c5:dc:cc:85:4f: 36:69:42:e5:3f:c2:5a:60:5a:05:4a:68:34:3a:5d: 56:34:b7:66:5b:50:ad:d2:be:c4:d0:c1:a5:8c:38: a8:ab:e4:13:67:d4:09:fb:07:7e:3e:35:b4:64:71: f4:61:b1:88:a3:c7:dc:6a:07:83:7c:dc:e0:fa:d9: 7b:9d:c4:ab:f8:5d:cf:13:65:9f:60:23:7c:7e:fa: e8:e4:3c:f0:2d:5e:2f:28:29:44:48:64:b7:bd:3e: 15:d7:4d:8e:79:ee:bf:47:34:86:57:7c:be:35:db: f9:8d:1d:ca:c8:84:88:d2:c3:4b:2f:f4:46:8a:ca: 6a:3c:db:05:c0:aa:d8:52:79:ea:11:a3:05:04:5d: e0:af:18:06:3b:c0:b0:48:89:cf:36:63:af:d3:72: 1a:6a:54:56:93:e4:60:6a:08:01:e1:1a:cd:e7:51: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8C:0C:0B:1F:72:43:4F:ED:0A:ED:CB:4B:CD:D1:A9:8D:4E:D6:B9 X509v3 Authority Key Identifier: keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9f:27:38:9b:ec:21:cd:fa:5c:a2:40:77:60:b7:b8:ac:1a: 5a:c3:92:73:e6:95:87:79:6e:57:9b:eb:b8:a2:3a:55:0b:c0: 3e:e8:95:2d:dc:5f:1e:b5:1d:f1:54:b8:1e:37:88:3f:e4:69: 63:31:c5:b7:21:b3:68:b8:a0:a6:4f:82:5c:d6:4d:44:1e:94: 5b:72:fa:83:b7:d9:fd:24:8a:f2:1d:d8:69:a3:5d:57:9b:d2: 6b:d5:09:59:f5:a7:6a:ff:16:1e:4d:b8:df:30:21:69:a3:be: 90:5d:72:95:3a:9c:d6:0a:92:77:8d:6a:df:67:bb:3d:c5:ca: f1:cb:f4:3e:14:0a:7d:25:2c:58:71:c3:be:0c:64:5a:14:ae: 0d:e0:77:06:17:20:2f:c9:e5:41:0d:f1:0f:00:75:c6:af:67: 53:95:f7:5c:81:d4:25:09:03:55:36:cd:64:fb:8a:04:0c:95: 06:ab:88:e6:43:79:b6:14:60:75:b3:13:2f:f9:9a:26:0a:ff: f5:c0:cd:23:2e:11:8a:48:98:e8:34:ea:68:e8:46:d9:1b:97: 9a:68:cc:1a:f5:4f:1c:2d:33:21:a7:c6:2c:b9:42:e3:ec:d4: 36:d2:16:71:72:ac:02:a1:c2:d4:cc:db:02:68:fd:3f:22:8d: 58:23:f9:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5NzgxMTAvBgNVBAUTKDUwMEM2MEE3RjY5QzA0QkU4NEZDRjNDNjU3MjNDMDc5 NzBFNUExMjgwHhcNMjUxMTAzMDYzNzEyWhcNMjUxMTEwMDYzNzEyWjAYMRYwFAYD VQQDEw02OTA4NGQ5OC1jMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotjwCubxW3GpPWGzJHfZDlu2OaGqYpTLk2FdI1NmuSnpCf2EoCA3WFSpExvI WsoHQ9S2Z4rUCM5Xloc+Vb4g+59nN+3hqyrHgS3sGcVbcJWMls2kxdzMhU82aULl P8JaYFoFSmg0Ol1WNLdmW1Ct0r7E0MGljDioq+QTZ9QJ+wd+PjW0ZHH0YbGIo8fc ageDfNzg+tl7ncSr+F3PE2WfYCN8fvro5DzwLV4vKClESGS3vT4V102Oee6/RzSG V3y+Ndv5jR3KyISI0sNLL/RGispqPNsFwKrYUnnqEaMFBF3grxgGO8CwSInPNmOv 03IaalRWk+RgaggB4RrN51EkswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiMDAsf ckNP7Qrty0vN0amNTta5MB8GA1UdIwQYMBaAFFAMYKf2nAS+hPzzxlcjwHlw5aEo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk3OC81NjJCREIyMkVB NjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JMNkVfUFBHVnlQQWVYRGxv U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VBeGdwX2FjQkw2RV9QUEdWeVBBZVhEbG9TZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzk3OC81NjJCREIyMkVBNjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JM NkVfUFBHVnlQQWVYRGxvU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7nyc4m+whzfpcokB3YLe4rBpaw5Jz5pWHeW5Xm+u4ojpVC8A+6JUt 3F8etR3xVLgeN4g/5GljMcW3IbNouKCmT4Jc1k1EHpRbcvqDt9n9JIryHdhpo11X m9Jr1QlZ9adq/xYeTbjfMCFpo76QXXKVOpzWCpJ3jWrfZ7s9xcrxy/Q+FAp9JSxY ccO+DGRaFK4N4HcGFyAvyeVBDfEPAHXGr2dTlfdcgdQlCQNVNs1k+4oEDJUGq4jm Q3m2FGB1sxMv+ZomCv/1wM0jLhGKSJjoNOpo6EbZG5eaaMwa9U8cLTMhp8YsuULj 7NQ20hZxcqwCocLUzNsCaP0/Io1YI/lb -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:40 2025 by rpki-client