$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft File: ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json) Hash identifier: MSvAW50JY2bhBWd6vmc89qDcK6BJQ+ITk/SJ4stBZ3E= Subject key identifier: 96:2B:08:55:1A:47:A1:84:2D:A7:2E:6A:0C:58:22:B2:B7:F1:8E:D3 Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D Certificate issuer: /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D Certificate serial: 0AB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft Manifest number: 0AAB Signing time: Tue 04 Nov 2025 19:35:57 +0000 Manifest this update: Tue 04 Nov 2025 19:35:56 +0000 Manifest next update: Tue 11 Nov 2025 19:35:56 +0000 Files and hashes: 1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: aHNOljz/1V943ZIVgD28VktqP6A93bLxL+djJo2EmB8=) 2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2737 (0xab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D Validity Not Before: Nov 4 19:35:56 2025 GMT Not After : Nov 11 19:35:56 2025 GMT Subject: CN=690a559d-f21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:66:bf:3f:34:e6:fc:fc:21:3d:d0:45:73:b5: 24:a5:83:f5:8a:d0:01:47:c8:0b:c3:da:28:df:e9: 0e:26:4c:c9:1c:fe:e9:df:41:d2:e5:42:25:9a:f4: ce:ce:7a:dd:21:fe:4e:71:2a:3f:27:6d:4d:37:7f: 39:51:7e:c9:a1:78:16:22:5b:9a:61:f1:03:26:e1: 00:06:19:df:34:61:d3:36:b8:90:10:d9:ff:ca:bd: 33:89:e8:7e:70:e0:b5:da:a7:d7:5a:e0:c0:7d:aa: 38:ed:89:80:40:ee:f6:dc:d2:38:40:eb:06:f1:53: 12:d5:ee:6f:cf:89:87:93:49:e3:a8:6f:8b:53:33: 21:a8:eb:cd:26:3c:f4:50:ad:c6:5c:b5:4c:e6:d5: f9:b4:35:31:0f:66:ca:0a:f2:c3:c6:73:28:3e:b2: a1:e8:03:36:a7:56:33:72:3f:00:20:8f:33:be:09: a8:aa:c3:7c:7e:ea:0f:18:b3:18:c3:81:8d:da:a7: 70:5c:76:dc:cd:ec:fe:66:ce:d5:a1:f6:cf:d3:2a: f3:e1:43:ac:4e:47:e0:86:91:6b:1e:e3:12:79:9a: be:fa:e7:12:64:16:77:11:21:9d:1a:6f:83:aa:b5: cd:2f:0d:da:2e:2b:41:d1:8f:46:a7:e2:80:55:4e: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2B:08:55:1A:47:A1:84:2D:A7:2E:6A:0C:58:22:B2:B7:F1:8E:D3 X509v3 Authority Key Identifier: keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:13:17:58:0f:f7:60:02:8a:4c:31:b4:9c:4e:d8:0f:d7:fb: 79:e8:e8:14:d4:08:46:e3:b7:d7:be:7e:b5:e0:67:82:86:25: 9b:48:28:d6:fe:14:c5:f8:6b:ae:e7:cb:f5:fd:7f:5b:85:00: f3:a9:3c:b6:3f:06:0b:d9:6f:8c:29:96:22:a1:a0:fa:03:0f: b1:e2:9e:5c:3c:ac:18:ee:ca:ef:a2:35:5e:23:12:d8:76:46: 4c:6f:7a:35:db:97:bf:15:f7:1e:db:e5:62:42:88:aa:2f:14: 24:19:26:88:30:28:dc:d3:2e:a2:6f:4c:2f:94:cc:70:4e:27: e5:3e:a3:a2:bd:e1:fd:94:e9:79:4c:79:b3:65:65:58:4d:16: d1:67:9b:68:29:09:d9:6b:87:9a:00:b3:66:03:e2:44:41:19: de:e0:99:48:3a:5d:4b:42:90:70:3b:4b:63:1d:63:1f:74:7a: 90:c0:16:b2:ac:16:9a:bd:52:37:b5:ab:cd:a0:fe:ec:f0:8b: 4a:03:1a:e1:73:f6:c1:d6:d9:01:f9:07:cd:92:46:fa:ea:d5: a6:47:16:37:ab:d2:29:85:6a:af:b5:3f:eb:e8:00:1a:8b:88: 20:f2:ab:0c:58:7c:bf:d9:27:54:cc:a6:b1:e3:b8:52:42:65: e5:7d:ee:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyRDUxMTAvBgNVBAUTKEJBNUEyMEM0MDY4NThBRkMyNTA2QTkzNTc4NjMxNjQx NDY1MjYwOUQwHhcNMjUxMTA0MTkzNTU2WhcNMjUxMTExMTkzNTU2WjAYMRYwFAYD VQQDEw02OTBhNTU5ZC1mMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Wa/PzTm/PwhPdBFc7UkpYP1itABR8gLw9oo3+kOJkzJHP7p30HS5UIlmvTO znrdIf5OcSo/J21NN385UX7JoXgWIluaYfEDJuEABhnfNGHTNriQENn/yr0zieh+ cOC12qfXWuDAfao47YmAQO723NI4QOsG8VMS1e5vz4mHk0njqG+LUzMhqOvNJjz0 UK3GXLVM5tX5tDUxD2bKCvLDxnMoPrKh6AM2p1Yzcj8AII8zvgmoqsN8fuoPGLMY w4GN2qdwXHbczez+Zs7VofbP0yrz4UOsTkfghpFrHuMSeZq++ucSZBZ3ESGdGm+D qrXNLw3aLitB0Y9Gp+KAVU5ZPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYrCFUa R6GELacuagxYIrK38Y7TMB8GA1UdIwQYMBaAFLpaIMQGhYr8JQapNXhjFkFGUmCd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJENS8zNzdBRjgyNjY0 MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2d2xCcWsxZUdNV1FVWlNZ SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vsb2d4QWFGaXZ3bEJxazFlR01XUVVaU1lKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJENS8zNzdBRjgyNjY0MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2 d2xCcWsxZUdNV1FVWlNZSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaExdYD/dgAopMMbScTtgP1/t56OgU1AhG47fXvn614GeChiWbSCjW /hTF+Guu58v1/X9bhQDzqTy2PwYL2W+MKZYioaD6Aw+x4p5cPKwY7srvojVeIxLY dkZMb3o125e/Ffce2+ViQoiqLxQkGSaIMCjc0y6ib0wvlMxwTiflPqOiveH9lOl5 THmzZWVYTRbRZ5toKQnZa4eaALNmA+JEQRne4JlIOl1LQpBwO0tjHWMfdHqQwBay rBaavVI3tavNoP7s8ItKAxrhc/bB1tkB+QfNkkb66tWmRxY3q9IphWqvtT/r6AAa i4gg8qsMWHy/2SdUzKax47hSQmXlfe6f -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:15 2025 by rpki-client