$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft File: ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json) Hash identifier: Ps7acfNwrdI8AzBIy8cxslu8rJquMTLmP+GazMrhvIo= Subject key identifier: 0B:11:C2:02:BE:E3:B3:5A:CF:29:69:45:92:E8:A6:1D:22:19:E2:EB Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft Manifest number: 8C Signing time: Sun 19 Oct 2025 09:49:48 +0000 Manifest this update: Sun 19 Oct 2025 09:49:47 +0000 Manifest next update: Sun 26 Oct 2025 09:49:47 +0000 Files and hashes: 1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: oYLZwD3KeSlt6q0t/c3lfYrZeFl05wEbJZNtLSneKzc=) 2: 42D62828962711F0B74FEE0CC4F9AE02.roa (hash: 0z7LOagwkk6qGA8xhyY/PPVphtP1S0sI7WQf0daRuRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Validity Not Before: Oct 19 09:49:47 2025 GMT Not After : Oct 26 09:49:47 2025 GMT Subject: CN=68f4b43c-028d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:08:0a:72:35:0e:7a:5f:c0:87:56:a2:e6: 4c:ec:5f:86:21:5c:22:95:d4:7a:72:66:af:cb:87: 76:7c:32:1e:f6:2f:07:ec:89:b1:c3:3c:7d:d2:3d: ee:9b:e1:6e:ee:37:f9:1d:4f:50:d4:b1:df:b0:ed: 93:61:01:40:24:17:b5:66:48:f2:8b:84:4f:17:6b: 3c:fd:d4:ae:8d:63:7f:4d:bd:dd:2b:0f:9d:ed:29: c1:2b:0f:d1:2d:f6:52:8a:85:3d:58:9b:24:8e:f2: a6:b1:52:da:ba:e6:d9:0f:88:55:6a:12:24:26:7c: 25:27:6e:13:5e:0b:3b:29:ea:b5:11:1a:f6:6a:47: c2:b6:63:49:65:78:49:9d:d0:0d:e5:fa:91:39:9d: 02:ab:f0:61:26:2b:16:fb:3e:02:8b:89:bc:28:b4: b1:6f:b8:f6:88:1d:6a:ef:b1:64:a6:1d:d3:ab:39: 62:fd:7b:06:dc:3d:30:9a:37:4e:0d:a6:ef:ef:15: df:92:15:a4:69:eb:98:9f:58:de:8a:7b:54:29:d6: 7f:35:43:ff:0d:05:27:7b:5c:81:e5:e9:ca:13:80: bf:4d:2d:3e:fc:80:3b:e8:d3:23:af:e2:aa:22:13: 6a:b4:89:ef:22:2b:64:22:e9:22:92:e4:34:4d:82: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:11:C2:02:BE:E3:B3:5A:CF:29:69:45:92:E8:A6:1D:22:19:E2:EB X509v3 Authority Key Identifier: keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:65:60:a6:4f:a5:10:3e:71:6e:8c:5d:6d:12:f3:a7:32:7f: d5:f8:31:81:08:23:0f:7f:b8:d9:35:85:99:3f:86:93:07:7f: 05:a5:77:7a:e5:d3:6f:8d:83:56:1e:ec:8f:ba:30:34:2e:74: 23:21:81:07:06:93:cc:f2:d4:1f:08:71:9a:a5:5b:fa:1c:10: 52:6f:c7:74:d9:72:41:eb:7f:0b:6b:1a:54:c6:cf:fd:4a:cf: 64:71:f7:b5:33:54:9b:62:e7:67:7d:31:47:e2:2f:a9:38:a3: 06:f1:66:e4:58:44:e2:e0:99:33:d4:0a:38:4a:24:d2:57:96: 12:d9:10:7f:55:a9:67:7e:f3:d2:d3:74:06:80:61:89:7e:21: 1e:54:89:6f:d4:03:58:a8:e5:9e:64:91:bb:94:a0:c8:3a:81: d0:ca:e0:31:bb:62:c2:90:56:27:55:2d:33:50:e8:5e:59:83: 31:9e:a7:47:ad:39:4d:73:0a:96:5a:03:0b:e4:69:5b:21:69: cc:a8:3a:00:cd:f3:33:5a:8a:04:05:d7:a4:4a:cb:a7:b3:db: 4d:dd:17:83:b1:c5:c1:94:ec:8d:3e:43:fb:eb:c6:31:63:a3: c8:e9:8b:57:3f:34:74:11:a7:ba:ea:65:3e:4b:a0:0f:04:78: b1:e3:9f:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRkYxMTAvBgNVBAUTKDUwQkE2M0I5M0Y4MjkxMjk1RUU0NzAzMUI5NkI0NUNE QTVDMjRCMEQwHhcNMjUxMDE5MDk0OTQ3WhcNMjUxMDI2MDk0OTQ3WjAYMRYwFAYD VQQDEw02OGY0YjQzYy0wMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFYICnI1DnpfwIdWouZM7F+GIVwildR6cmavy4d2fDIe9i8H7Imxwzx90j3u m+Fu7jf5HU9Q1LHfsO2TYQFAJBe1Zkjyi4RPF2s8/dSujWN/Tb3dKw+d7SnBKw/R LfZSioU9WJskjvKmsVLauubZD4hVahIkJnwlJ24TXgs7Keq1ERr2akfCtmNJZXhJ ndAN5fqROZ0Cq/BhJisW+z4Ci4m8KLSxb7j2iB1q77Fkph3Tqzli/XsG3D0wmjdO Dabv7xXfkhWkaeuYn1jeintUKdZ/NUP/DQUne1yB5enKE4C/TS0+/IA76NMjr+Kq IhNqtInvIitkIukikuQ0TYKCWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsRwgK+ 47NazylpRZLoph0iGeLrMB8GA1UdIwQYMBaAFFC6Y7k/gpEpXuRwMblrRc2lwksN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yQUUxNkE1OEQ3 RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9VTHBqdVQtQ2tTbGU1SEF4dVd0RnphWENT dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VMcGp1VC1Da1NsZTVIQXh1V3RGemFYQ1N3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNGRi8yQUUxNkE1OEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9VTHBqdVQtQ2tT bGU1SEF4dVd0RnphWENTdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSZWCmT6UQPnFujF1tEvOnMn/V+DGBCCMPf7jZNYWZP4aTB38FpXd6 5dNvjYNWHuyPujA0LnQjIYEHBpPM8tQfCHGapVv6HBBSb8d02XJB638LaxpUxs/9 Ss9kcfe1M1SbYudnfTFH4i+pOKMG8WbkWETi4Jkz1Ao4SiTSV5YS2RB/ValnfvPS 03QGgGGJfiEeVIlv1ANYqOWeZJG7lKDIOoHQyuAxu2LCkFYnVS0zUOheWYMxnqdH rTlNcwqWWgML5GlbIWnMqDoAzfMzWooEBdekSsuns9tN3ReDscXBlOyNPkP768Yx Y6PI6YtXPzR0Eae66mU+S6APBHix45+V -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:13 2025 by rpki-client