$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft File: ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json) Hash identifier: 02NQplcqf3l5K+seMV0OMCKEDWW+tsFhIbALZXkRLiQ= Subject key identifier: 2F:04:7B:FA:8B:B1:73:11:04:35:A9:A2:67:89:AF:A5:96:C8:36:13 Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D Certificate issuer: /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft Manifest number: 0AA2 Signing time: Sat 18 Oct 2025 20:28:21 +0000 Manifest this update: Sat 18 Oct 2025 20:28:20 +0000 Manifest next update: Sat 25 Oct 2025 20:28:20 +0000 Files and hashes: 1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: KwVjBaZaJFF7K0sfw4gIUjDCMMRfrlgiIfFWDftNZCk=) 2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D Validity Not Before: Oct 18 20:28:20 2025 GMT Not After : Oct 25 20:28:20 2025 GMT Subject: CN=68f3f864-07ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:40:83:76:40:f7:95:dc:66:83:aa:ec:64: 1f:a5:75:15:40:3b:e6:c7:6b:8f:38:62:5c:30:41: 74:07:38:56:87:99:1a:92:dc:d6:b9:fb:52:b4:1a: 36:45:1a:7b:6b:cc:4c:38:26:3c:3c:9c:7a:83:2c: 6f:2d:06:cf:cf:e0:9f:0e:12:33:c6:ee:46:87:0f: 0f:85:21:a3:f0:03:96:fa:31:bc:6d:b4:5e:61:53: dc:56:c5:bf:36:97:76:c5:9c:4f:d5:c0:5d:70:0c: b6:c3:6d:6d:f8:aa:18:47:2e:b4:a1:29:18:8a:b4: aa:78:06:fd:17:9c:fb:c8:39:2e:72:47:f1:0b:92: 7d:31:b7:3f:f5:02:de:b4:02:1b:3d:7c:cc:86:70: cf:c7:7d:14:21:f9:b0:31:41:1d:02:02:13:b0:18: 95:ff:72:fa:1b:31:b9:72:19:ab:fd:de:66:b5:e7: 12:95:4f:e4:c0:f0:f8:e7:ab:d3:ab:a7:eb:42:35: ed:72:35:d7:1c:9e:0a:e9:9a:3b:3a:f5:40:3c:02: 1f:77:3d:30:06:c0:f5:7c:ca:13:4b:8c:d1:e9:6d: 36:04:83:a8:86:63:a9:65:5d:7f:27:05:ed:2a:0d: 47:4c:fd:58:93:31:42:11:60:94:18:40:94:9d:5f: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:04:7B:FA:8B:B1:73:11:04:35:A9:A2:67:89:AF:A5:96:C8:36:13 X509v3 Authority Key Identifier: keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:da:ff:8d:7e:4a:ed:b4:fe:ae:fe:28:c4:9c:91:d4:9f:5f: 55:fd:40:51:2c:17:84:37:af:76:aa:e4:27:c8:b5:aa:b3:38: b9:32:cc:c7:aa:a0:47:c0:f8:d4:e5:03:ab:97:ef:89:76:7c: ab:29:e6:b4:6f:ee:a9:c4:f0:af:2f:55:05:df:91:3a:9f:5d: a8:1e:47:95:39:9f:9a:88:f8:2b:73:a4:c1:7c:09:91:1b:e6: ed:20:ad:05:96:78:e3:3b:8d:20:67:0d:61:7f:97:f9:eb:dd: 4b:4e:b1:74:5e:cc:dd:93:47:96:96:07:7e:cd:65:31:f2:b2: fe:22:e8:26:b0:cd:3d:dd:76:bc:ae:99:f8:0c:2d:76:3d:9a: 10:fc:a2:63:08:33:27:aa:64:1f:7d:ac:8b:8c:c8:09:ed:a7: 6c:69:d8:7e:f9:01:5c:e4:9e:b2:e8:33:65:de:3a:df:55:00: 4a:81:0f:48:bc:f5:d6:81:cb:ea:c5:e7:f8:96:ed:62:4a:1a: c4:dd:36:ae:f7:c3:ac:3c:c9:5e:ad:fb:cf:f2:a9:b1:9c:ba: b3:ba:a0:53:66:66:7e:76:fd:2c:64:fc:dd:34:9a:7b:8b:28: 5b:4a:ea:7b:76:4e:7e:8f:cf:ef:f6:88:d1:03:d2:b4:e4:de: e2:e0:65:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyRDUxMTAvBgNVBAUTKEJBNUEyMEM0MDY4NThBRkMyNTA2QTkzNTc4NjMxNjQx NDY1MjYwOUQwHhcNMjUxMDE4MjAyODIwWhcNMjUxMDI1MjAyODIwWjAYMRYwFAYD VQQDEw02OGYzZjg2NC0wN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyJAg3ZA95XcZoOq7GQfpXUVQDvmx2uPOGJcMEF0BzhWh5kaktzWuftStBo2 RRp7a8xMOCY8PJx6gyxvLQbPz+CfDhIzxu5Ghw8PhSGj8AOW+jG8bbReYVPcVsW/ Npd2xZxP1cBdcAy2w21t+KoYRy60oSkYirSqeAb9F5z7yDkuckfxC5J9Mbc/9QLe tAIbPXzMhnDPx30UIfmwMUEdAgITsBiV/3L6GzG5chmr/d5mtecSlU/kwPD456vT q6frQjXtcjXXHJ4K6Zo7OvVAPAIfdz0wBsD1fMoTS4zR6W02BIOohmOpZV1/JwXt Kg1HTP1YkzFCEWCUGECUnV+MxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8Ee/qL sXMRBDWpomeJr6WWyDYTMB8GA1UdIwQYMBaAFLpaIMQGhYr8JQapNXhjFkFGUmCd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJENS8zNzdBRjgyNjY0 MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2d2xCcWsxZUdNV1FVWlNZ SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vsb2d4QWFGaXZ3bEJxazFlR01XUVVaU1lKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJENS8zNzdBRjgyNjY0MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2 d2xCcWsxZUdNV1FVWlNZSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb2v+NfkrttP6u/ijEnJHUn19V/UBRLBeEN692quQnyLWqszi5MszH qqBHwPjU5QOrl++JdnyrKea0b+6pxPCvL1UF35E6n12oHkeVOZ+aiPgrc6TBfAmR G+btIK0FlnjjO40gZw1hf5f5691LTrF0Xszdk0eWlgd+zWUx8rL+IugmsM093Xa8 rpn4DC12PZoQ/KJjCDMnqmQffayLjMgJ7adsadh++QFc5J6y6DNl3jrfVQBKgQ9I vPXWgcvqxef4lu1iShrE3Tau98OsPMlerfvP8qmxnLqzuqBTZmZ+dv0sZPzdNJp7 iyhbSup7dk5+j8/v9ojRA9K05N7i4GXS -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:43 2025 by rpki-client