$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft File: UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json) Hash identifier: fk6FET+DsBvyBQCOla4LHLrYI3nbqzfR7de9Zs6QVLY= Subject key identifier: D4:8A:D9:A2:C4:47:D0:27:9E:EA:6D:E8:15:F1:94:8E:A6:55:B9:71 Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 0A80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft Manifest number: 0A77 Signing time: Sun 02 Nov 2025 19:35:48 +0000 Manifest this update: Sun 02 Nov 2025 19:35:47 +0000 Manifest next update: Sun 09 Nov 2025 19:35:47 +0000 Files and hashes: 1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: ws882DSG1SrdMl8KDcaxzspo4u4ExlHDjGWSC8kIZNo=) 2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: qgPwBHuJNODFhkIhrJVb9VAEuenY+/fH1u9JlBx0mT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2688 (0xa80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: Nov 2 19:35:47 2025 GMT Not After : Nov 9 19:35:47 2025 GMT Subject: CN=6907b293-651e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:a2:01:3f:dc:74:7c:ac:f5:57:21:7f:ec: d5:7f:38:f3:35:3b:62:99:09:01:4c:03:21:62:1f: 36:0f:47:8d:ed:ab:e4:34:8f:a2:72:22:e6:b4:fc: 75:67:67:21:3e:69:6f:b1:38:2f:7b:09:50:80:63: 7a:86:9b:55:6b:52:ed:d8:56:37:57:d2:94:63:c0: 9a:10:5e:dd:5c:15:44:47:cd:a1:ec:ed:cc:11:9c: ad:38:d4:99:d6:cd:80:b7:84:12:4c:19:41:9c:9c: 34:d7:6d:e8:b4:d4:ab:03:85:96:2c:18:01:ae:ba: 0e:6c:a7:15:f8:02:78:ae:dc:c4:11:15:8e:10:d3: 3d:2e:97:8a:5d:08:18:0b:62:5c:95:84:dd:44:3e: 1d:73:d8:9f:b6:7e:0c:1b:fc:1f:f3:b1:bf:28:f2: 4c:86:b3:f7:10:f6:81:ca:e2:51:21:46:d9:4e:2f: 1a:b6:f2:05:7e:5d:86:b6:4d:3a:e3:4b:01:ac:12: 89:39:7c:10:1b:bd:67:a4:2f:5f:bc:3c:c4:a1:30: ab:c2:ac:1c:89:52:de:23:ed:de:d6:d4:ac:c7:bf: eb:10:6b:2e:b8:a4:07:8c:10:00:5a:1a:61:1a:66: 5f:43:4d:f6:af:39:81:17:77:57:b1:22:17:e8:ea: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8A:D9:A2:C4:47:D0:27:9E:EA:6D:E8:15:F1:94:8E:A6:55:B9:71 X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:72:67:6a:2d:d2:ab:c8:1b:40:2c:97:74:0f:bf:96:af:cb: f5:9f:a0:b9:3c:d7:f0:a0:6a:7e:d7:20:84:1b:a0:25:fc:55: dc:bd:c5:30:c3:28:55:7f:d8:bb:2d:fd:c8:33:02:b2:66:33: 16:7d:2a:77:7d:ef:35:42:31:77:4a:11:82:e8:ca:57:07:90: 53:5e:8f:cf:6f:85:6e:b9:48:7b:39:85:94:a2:99:29:73:6a: 00:72:ad:8a:8a:a0:0c:0f:23:05:85:5f:1b:b3:bb:13:4c:45: 3a:ce:f5:8e:7a:c2:bc:a3:51:89:97:ba:75:c9:8a:0d:55:56: e4:7c:26:43:a4:2f:cd:1b:2e:12:7f:97:97:4f:bb:80:87:83: 86:6a:f0:9d:30:6e:98:d2:ad:6b:e4:e0:2c:94:99:59:e5:52: 95:89:0a:3e:7f:4c:7f:6c:ec:d1:b6:a4:09:af:38:38:28:8a: e6:8a:0f:54:8d:ac:d7:43:1c:5a:3c:d5:5d:40:f9:c1:eb:c0: 66:c7:b3:c5:35:c6:3d:f5:7d:90:e3:86:46:96:81:5e:c9:35: 93:03:9a:3c:86:f9:30:2f:5a:9b:42:90:ac:90:b1:77:c0:33: e7:ca:fd:75:81:96:7b:92:c0:76:b8:6c:38:f3:11:b1:bd:61: 4c:9c:42:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjUxMTAyMTkzNTQ3WhcNMjUxMTA5MTkzNTQ3WjAYMRYwFAYD VQQDEw02OTA3YjI5My02NTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxWiAT/cdHys9Vchf+zVfzjzNTtimQkBTAMhYh82D0eN7avkNI+iciLmtPx1 Z2chPmlvsTgvewlQgGN6hptVa1Lt2FY3V9KUY8CaEF7dXBVER82h7O3MEZytONSZ 1s2At4QSTBlBnJw0123otNSrA4WWLBgBrroObKcV+AJ4rtzEERWOENM9LpeKXQgY C2JclYTdRD4dc9iftn4MG/wf87G/KPJMhrP3EPaByuJRIUbZTi8atvIFfl2Gtk06 40sBrBKJOXwQG71npC9fvDzEoTCrwqwciVLeI+3e1tSsx7/rEGsuuKQHjBAAWhph GmZfQ032rzmBF3dXsSIX6OpoQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSK2aLE R9Annupt6BXxlI6mVblxMB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0JBRC8zNjU5RTdBRTcwOTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8x VkxsQWNEODNUOE5Ya2lqREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0cmdqLdKryBtALJd0D7+Wr8v1n6C5PNfwoGp+1yCEG6Al/FXcvcUw wyhVf9i7Lf3IMwKyZjMWfSp3fe81QjF3ShGC6MpXB5BTXo/Pb4VuuUh7OYWUopkp c2oAcq2KiqAMDyMFhV8bs7sTTEU6zvWOesK8o1GJl7p1yYoNVVbkfCZDpC/NGy4S f5eXT7uAh4OGavCdMG6Y0q1r5OAslJlZ5VKViQo+f0x/bOzRtqQJrzg4KIrmig9U jazXQxxaPNVdQPnB68Bmx7PFNcY99X2Q44ZGloFeyTWTA5o8hvkwL1qbQpCskLF3 wDPnyv11gZZ7ksB2uGw48xGxvWFMnEJR -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:27 2025 by rpki-client