$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft File: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json) Hash identifier: 0iZRnwjrOigzCPMtr5nkRzk/wYH8YAAkEkXmtBjp+kM= Subject key identifier: 4E:5F:22:7B:29:FF:78:2E:C9:F6:0E:9B:DE:99:A4:86:52:04:22:F4 Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 Certificate issuer: /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57 Certificate serial: 0D96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft Manifest number: 1549 Signing time: Fri 22 Aug 2025 18:02:45 +0000 Manifest this update: Fri 22 Aug 2025 18:02:44 +0000 Manifest next update: Fri 29 Aug 2025 18:02:44 +0000 Files and hashes: 1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: U91+ulin9JouPwzxc6U+mh4wkzxoNgfUXqrfsu6BhN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3478 (0xd96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137242, serialNumber=50FBB403643473F991273626277A922C0706AC57 Validity Not Before: Aug 22 18:02:44 2025 GMT Not After : Aug 29 18:02:44 2025 GMT Subject: CN=68a8b0c5-7bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:99:94:15:92:1e:35:bd:08:aa:26:6d:4f: e2:fc:96:43:3e:07:19:cd:51:19:08:e9:62:55:e4: dc:1a:10:a9:1a:ac:87:09:cf:f5:94:d7:f6:d5:f9: d0:ab:31:33:67:b5:20:bc:5b:c6:6c:11:6c:5c:20: d2:3a:f4:0e:54:23:14:f1:cf:c5:dc:52:90:f7:0d: 20:67:2d:ac:08:e8:73:52:bb:94:2d:2e:50:cc:c7: 10:89:dc:8d:e9:c1:dc:e4:fa:a2:ec:ea:f2:f8:44: 84:96:55:c5:38:78:8d:8b:82:3b:0f:15:d7:a7:d6: 94:62:60:56:38:73:e0:46:30:08:40:69:11:36:d6: 0d:29:0d:b1:ea:dd:cd:6b:ce:73:2f:d3:c2:2c:ba: 65:1a:60:5b:e5:fa:86:a1:aa:69:5d:1f:99:60:ff: 78:b9:da:1b:f4:d3:b0:27:71:ce:90:10:ae:7c:db: 13:60:46:03:09:f0:c8:94:2d:ab:04:94:43:93:16: 38:a1:57:29:9e:b1:ce:b1:7a:50:01:41:14:95:79: 44:59:7c:4b:2d:39:b2:18:7c:d7:92:bb:2b:26:bf: e4:7d:dd:11:4c:74:70:f8:97:35:5e:8d:87:ec:69: 8f:1d:16:96:76:06:cb:f5:59:b3:23:12:95:f2:a8: f7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5F:22:7B:29:FF:78:2E:C9:F6:0E:9B:DE:99:A4:86:52:04:22:F4 X509v3 Authority Key Identifier: keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f4:b2:c6:1e:d6:4c:1a:81:05:db:7f:31:1d:ce:cf:ba:af: 2e:97:86:1d:ca:1e:44:ea:e1:51:84:7a:6b:44:37:00:99:47: 79:b0:f6:dd:9e:be:aa:b9:02:22:f5:b9:1c:f5:de:d3:ea:f4: db:6f:2c:fb:06:94:10:46:38:48:fe:a6:96:64:ce:8e:9c:9b: 48:8b:58:e5:45:c1:26:4c:0e:cc:14:8f:d8:5f:e3:ef:cf:8c: bf:04:ef:d2:a0:3c:ae:26:0c:96:ea:64:ac:47:fb:b9:3e:a8: 01:f7:5b:a8:45:6d:23:0d:b9:db:4b:65:b6:f3:48:99:78:64: 18:e8:b7:6e:bd:b4:ac:17:eb:5a:68:5a:4e:c8:e7:23:8b:3f: 99:3b:34:84:72:9c:65:9d:55:0d:90:5f:0d:da:89:16:e5:22: 3e:67:d4:18:40:a4:fc:26:c6:cd:6c:90:0f:ad:b7:32:04:bf: 13:c3:bd:25:3b:f7:14:b3:bd:24:92:a7:79:c3:11:20:22:18: c7:f8:99:41:3e:56:4d:0c:b8:de:ec:eb:e3:ea:2e:d1:f8:84: df:8f:4d:84:56:ac:bd:63:3f:51:ba:07:6d:8d:60:9f:d8:c8: ca:b0:a2:bf:a4:2f:59:56:6c:a0:eb:a3:e3:0f:23:b9:2e:9a: d5:70:a7:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyNDIxMTAvBgNVBAUTKDUwRkJCNDAzNjQzNDczRjk5MTI3MzYyNjI3N0E5MjJD MDcwNkFDNTcwHhcNMjUwODIyMTgwMjQ0WhcNMjUwODI5MTgwMjQ0WjAYMRYwFAYD VQQDEw02OGE4YjBjNS03YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeCZlBWSHjW9CKombU/i/JZDPgcZzVEZCOliVeTcGhCpGqyHCc/1lNf21fnQ qzEzZ7UgvFvGbBFsXCDSOvQOVCMU8c/F3FKQ9w0gZy2sCOhzUruULS5QzMcQidyN 6cHc5Pqi7Ory+ESEllXFOHiNi4I7DxXXp9aUYmBWOHPgRjAIQGkRNtYNKQ2x6t3N a85zL9PCLLplGmBb5fqGoappXR+ZYP94udob9NOwJ3HOkBCufNsTYEYDCfDIlC2r BJRDkxY4oVcpnrHOsXpQAUEUlXlEWXxLLTmyGHzXkrsrJr/kfd0RTHRw+Jc1Xo2H 7GmPHRaWdgbL9VmzIxKV8qj3GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5fInsp /3guyfYOm96ZpIZSBCL0MB8GA1UdIwQYMBaAFFD7tANkNHP5kSc2Jid6kiwHBqxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNfbVJKelltSjNxU0xBY0dy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQdTBBMlEwY19tUkp6WW1KM3FTTEFjR3JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNf bVJKelltSjNxU0xBY0dyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi9LLGHtZMGoEF238xHc7Puq8ul4Ydyh5E6uFRhHprRDcAmUd5sPbd nr6quQIi9bkc9d7T6vTbbyz7BpQQRjhI/qaWZM6OnJtIi1jlRcEmTA7MFI/YX+Pv z4y/BO/SoDyuJgyW6mSsR/u5PqgB91uoRW0jDbnbS2W280iZeGQY6LduvbSsF+ta aFpOyOcjiz+ZOzSEcpxlnVUNkF8N2okW5SI+Z9QYQKT8JsbNbJAPrbcyBL8Tw70l O/cUs70kkqd5wxEgIhjH+JlBPlZNDLje7Ovj6i7R+ITfj02EVqy9Yz9RugdtjWCf 2MjKsKK/pC9ZVmyg66PjDyO5LprVcKeG -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:57 2025 by rpki-client