$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft File: ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json) Hash identifier: G2TsLu8NS5KLMrhkPOPcu4YESradPVwcao5NBYjqoxU= Subject key identifier: 69:E4:88:0E:9C:0D:DE:B6:CD:96:68:3F:E6:FB:33:29:3F:7C:A7:32 Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D Certificate issuer: /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft Manifest number: 0A85 Signing time: Fri 22 Aug 2025 19:42:44 +0000 Manifest this update: Fri 22 Aug 2025 19:42:43 +0000 Manifest next update: Fri 29 Aug 2025 19:42:43 +0000 Files and hashes: 1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: lDx562T4q8W03AoK6+0g11/IEfeqH1JwlATr7DbFfyw=) 2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D Validity Not Before: Aug 22 19:42:43 2025 GMT Not After : Aug 29 19:42:43 2025 GMT Subject: CN=68a8c833-f01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:d3:a3:5c:d7:76:d4:65:12:2a:40:ee:1b: 54:c3:ba:55:4b:e8:32:c0:f9:03:ae:8c:96:d3:70: 2a:9f:50:7b:68:13:38:73:48:1a:08:ea:53:e9:57: e6:94:12:bd:d8:a3:85:6d:07:6e:1a:89:8b:a5:73: cb:05:27:71:67:15:18:7a:fe:2e:46:9d:b3:cf:3f: 99:4d:d9:c1:15:2c:ed:8e:d9:54:78:0a:5c:02:95: 0f:14:8c:f9:e5:71:45:db:09:66:a3:c4:c1:87:60: d8:8c:3d:e8:ad:ca:28:d1:df:32:99:c0:50:3f:c9: 0d:42:29:da:10:46:6a:17:3e:20:b1:3e:75:e4:09: 9b:8e:13:38:f9:70:a9:17:c5:95:d8:c0:5e:cf:f2: 4e:18:bd:0b:f9:82:41:dc:32:19:55:10:19:c8:7c: f9:6b:3b:ae:6e:f8:73:4f:92:cc:2f:02:cf:e1:bd: 79:8e:a8:d2:d9:4b:2c:e8:b5:14:e3:2a:5a:c9:d9: 02:73:cd:cd:6d:10:06:5c:1d:f6:d6:97:77:49:7f: 8d:fd:8d:cd:96:ab:f3:ed:b5:2d:84:f3:8c:13:12: be:95:b2:af:55:33:57:4f:f7:19:83:61:30:0f:f4: 04:61:f9:45:a3:ff:96:a9:3b:61:77:d5:94:27:94: fc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E4:88:0E:9C:0D:DE:B6:CD:96:68:3F:E6:FB:33:29:3F:7C:A7:32 X509v3 Authority Key Identifier: keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f3:ae:1a:01:5c:81:89:a2:61:91:ac:5f:e4:67:6d:b5:ed: 26:5e:1d:6a:a4:da:d8:df:a9:ff:f1:d8:1a:a9:1c:0b:bd:12: 49:d7:53:60:0d:68:70:00:5f:02:db:f6:e7:1e:6d:5b:c4:71: ed:ea:50:79:89:cd:c4:c0:86:2e:86:9d:64:de:ff:bd:75:73: b8:8f:2f:78:a8:5e:46:4b:9d:dd:77:f0:f0:17:12:83:c2:98: de:bc:58:f9:b5:55:58:07:4f:7a:59:c0:12:bb:26:08:98:f8: eb:c3:ad:73:33:b5:a6:d9:1b:06:5f:c7:b2:3f:b9:64:ec:45: 4f:59:41:b5:f3:b3:32:47:9c:a1:a3:d4:ab:84:7f:74:7a:ec: a3:90:e2:10:c2:f4:45:13:9c:f7:38:ee:c6:f3:3f:99:1b:11: 5b:65:a8:7e:a0:70:18:91:55:1a:be:ed:e4:7b:2e:67:91:ba: 3f:1d:60:71:1b:d3:39:03:01:e8:74:61:f1:48:c6:2c:fe:6d: e2:12:dd:11:af:7e:cf:ac:96:64:64:01:5c:99:5b:c6:9b:07: b3:c9:ee:59:96:f9:0d:98:69:6a:5e:88:31:93:97:89:54:34: 71:36:49:c3:6c:51:0f:36:f6:e8:b7:ab:d4:e6:84:ed:ad:cb: 02:18:e7:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyRDUxMTAvBgNVBAUTKEJBNUEyMEM0MDY4NThBRkMyNTA2QTkzNTc4NjMxNjQx NDY1MjYwOUQwHhcNMjUwODIyMTk0MjQzWhcNMjUwODI5MTk0MjQzWjAYMRYwFAYD VQQDEw02OGE4YzgzMy1mMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtznTo1zXdtRlEipA7htUw7pVS+gywPkDroyW03Aqn1B7aBM4c0gaCOpT6Vfm lBK92KOFbQduGomLpXPLBSdxZxUYev4uRp2zzz+ZTdnBFSztjtlUeApcApUPFIz5 5XFF2wlmo8TBh2DYjD3orcoo0d8ymcBQP8kNQinaEEZqFz4gsT515AmbjhM4+XCp F8WV2MBez/JOGL0L+YJB3DIZVRAZyHz5azuubvhzT5LMLwLP4b15jqjS2Uss6LUU 4ypaydkCc83NbRAGXB321pd3SX+N/Y3Nlqvz7bUthPOMExK+lbKvVTNXT/cZg2Ew D/QEYflFo/+WqTthd9WUJ5T8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnkiA6c Dd62zZZoP+b7Myk/fKcyMB8GA1UdIwQYMBaAFLpaIMQGhYr8JQapNXhjFkFGUmCd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJENS8zNzdBRjgyNjY0 MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2d2xCcWsxZUdNV1FVWlNZ SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vsb2d4QWFGaXZ3bEJxazFlR01XUVVaU1lKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJENS8zNzdBRjgyNjY0MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2 d2xCcWsxZUdNV1FVWlNZSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4864aAVyBiaJhkaxf5Gdtte0mXh1qpNrY36n/8dgaqRwLvRJJ11Ng DWhwAF8C2/bnHm1bxHHt6lB5ic3EwIYuhp1k3v+9dXO4jy94qF5GS53dd/DwFxKD wpjevFj5tVVYB096WcASuyYImPjrw61zM7Wm2RsGX8eyP7lk7EVPWUG187MyR5yh o9SrhH90euyjkOIQwvRFE5z3OO7G8z+ZGxFbZah+oHAYkVUavu3key5nkbo/HWBx G9M5AwHodGHxSMYs/m3iEt0Rr37PrJZkZAFcmVvGmwezye5ZlvkNmGlqXogxk5eJ VDRxNknDbFEPNvbot6vU5oTtrcsCGOfu -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:07 2025 by rpki-client