$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft File: ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json) Hash identifier: PWCgPOLdcYXqVHWnbayDOjxtrCyEPaR0KUTLTYDq+ys= Subject key identifier: F1:83:3B:E3:9F:F1:AD:1B:7F:7B:82:F0:D0:A9:FC:AF:7A:FE:9A:20 Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft Manifest number: 6E Signing time: Sat 23 Aug 2025 07:08:54 +0000 Manifest this update: Sat 23 Aug 2025 07:08:53 +0000 Manifest next update: Sat 30 Aug 2025 07:08:53 +0000 Files and hashes: 1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: xaELYo7046bHMRP/m4PL1d/DolPB870y02UNcNdzCoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Validity Not Before: Aug 23 07:08:53 2025 GMT Not After : Aug 30 07:08:53 2025 GMT Subject: CN=68a96905-4af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:f7:2d:a8:5b:bf:85:6b:65:e4:16:82:4d: 74:f5:ab:bd:b7:ab:1f:3f:ff:3d:00:d9:22:d2:3a: ff:10:9d:da:c2:5c:ec:a0:95:54:44:f8:c7:70:d0: c8:e6:c7:6f:c3:4d:ec:fb:ba:b7:ab:aa:32:c1:b7: a4:6f:e4:61:fc:8e:3d:e3:da:07:32:36:a5:a1:18: a5:6e:60:2b:5d:55:c1:78:40:95:61:ac:96:c2:55: 94:5a:09:12:94:e0:cf:ed:0c:ef:8a:a0:4d:9f:7e: 1f:9c:e9:ab:f6:cd:ef:cb:79:ce:24:52:14:b8:61: 12:29:aa:bb:57:36:ae:db:32:73:5c:5a:df:e8:e9: 73:76:e6:9f:b7:e1:99:72:7a:4d:49:b3:70:a2:ec: a9:1f:b3:9c:c3:07:8e:c4:bb:f8:94:05:a7:5d:42: 9f:69:8e:98:80:5c:17:f5:7b:5d:bc:9d:4f:27:a9: 44:5e:99:40:9d:b3:27:9c:8c:69:26:ae:7c:8e:ce: 21:a9:60:0c:12:59:68:de:8c:91:e5:fe:fd:71:ad: 90:d5:a4:0e:d1:1b:06:a5:0b:f4:b4:63:d8:28:e9: ca:42:72:08:72:bb:b3:d3:ff:33:5f:4a:47:e2:a9: 87:2e:c3:83:50:94:41:2b:88:2c:c3:72:6f:3b:d5: 56:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:83:3B:E3:9F:F1:AD:1B:7F:7B:82:F0:D0:A9:FC:AF:7A:FE:9A:20 X509v3 Authority Key Identifier: keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0f:5e:65:a3:16:81:07:c8:a9:68:0b:79:4d:d5:6b:db:23: ff:10:a5:74:00:a5:12:d7:8a:2f:b7:3f:e3:1a:98:72:32:9f: e3:b9:57:3f:67:7d:23:49:15:72:f9:75:8a:c0:e9:76:db:00: 1f:5e:07:39:93:dc:12:85:bd:2a:ea:32:35:64:2f:b4:dc:a1: 99:6d:d4:b5:9b:78:73:61:45:b2:fb:e4:85:f9:fc:b4:87:0f: 6f:c2:8a:10:dd:6f:ad:af:13:98:89:cc:62:09:cc:69:41:f1: 17:e9:20:46:be:67:d6:bf:23:ca:37:25:41:48:87:69:7d:dd: 04:8d:53:54:34:06:e8:16:41:91:f1:00:f2:2e:b1:11:3a:cf: f7:1f:9e:c3:a7:7c:64:1a:7f:26:80:60:cf:0c:7f:c4:06:48: 10:12:3d:72:99:a4:4f:38:7c:a6:10:6d:7e:78:a8:a0:64:6b: 11:23:ab:dd:f3:c1:31:92:a1:c1:ee:fb:55:21:ee:ce:e8:e1: 87:c7:0d:b3:16:c9:99:db:b7:ef:f3:62:7c:66:52:67:03:17: 80:53:0a:d9:f8:d1:56:c6:7c:8d:a9:d1:dc:be:39:0f:f3:21: d0:c1:b2:c1:ac:fa:74:a2:1f:f5:1d:21:ce:d4:03:a3:a0:ae: 1e:00:68:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNTBCQTYzQjkzRjgyOTEyOTVFRTQ3MDMxQjk2QjQ1Q0RB NUMyNEIwRDAeFw0yNTA4MjMwNzA4NTNaFw0yNTA4MzAwNzA4NTNaMBgxFjAUBgNV BAMTDTY4YTk2OTA1LTRhZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyA/ctqFu/hWtl5BaCTXT1q723qx8//z0A2SLSOv8QndrCXOyglVRE+Mdw0Mjm x2/DTez7urerqjLBt6Rv5GH8jj3j2gcyNqWhGKVuYCtdVcF4QJVhrJbCVZRaCRKU 4M/tDO+KoE2ffh+c6av2ze/Lec4kUhS4YRIpqrtXNq7bMnNcWt/o6XN25p+34Zly ek1Js3Ci7Kkfs5zDB47Eu/iUBaddQp9pjpiAXBf1e128nU8nqURemUCdsyecjGkm rnyOziGpYAwSWWjejJHl/v1xrZDVpA7RGwalC/S0Y9go6cpCcghyu7PT/zNfSkfi qYcuw4NQlEEriCzDcm871VbbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8YM745/x rRt/e4Lw0Kn8r3r+miAwHwYDVR0jBBgwFoAUULpjuT+CkSle5HAxuWtFzaXCSw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzJBRTE2QTU4RDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1VMcGp1VC1Da1NsZTVIQXh1V3RGemFYQ1N3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUxwanVULUNrU2xlNUhBeHVXdEZ6YVhDU3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzJBRTE2QTU4RDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1VMcGp1VC1Da1Ns ZTVIQXh1V3RGemFYQ1N3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB8PXmWjFoEHyKloC3lN1WvbI/8QpXQApRLXii+3P+MamHIyn+O5Vz9n fSNJFXL5dYrA6XbbAB9eBzmT3BKFvSrqMjVkL7TcoZlt1LWbeHNhRbL75IX5/LSH D2/CihDdb62vE5iJzGIJzGlB8RfpIEa+Z9a/I8o3JUFIh2l93QSNU1Q0BugWQZHx APIusRE6z/cfnsOnfGQafyaAYM8Mf8QGSBASPXKZpE84fKYQbX54qKBkaxEjq93z wTGSocHu+1Uh7s7o4YfHDbMWyZnbt+/zYnxmUmcDF4BTCtn40VbGfI2p0dy+OQ/z IdDBssGs+nSiH/UdIc7UA6Ogrh4AaIk= -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:21 2025 by rpki-client