$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft File: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json) Hash identifier: ytfi5zTD0t02Hm3C5c7tPSZE0bURkLE/Xv8hJlI6V8I= Subject key identifier: 16:38:8E:8C:D1:FE:A9:30:1A:55:F9:39:EC:C0:FE:E7:69:0E:54:4F Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 Certificate issuer: /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57 Certificate serial: 0DBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft Manifest number: 1598 Signing time: Tue 04 Nov 2025 17:58:27 +0000 Manifest this update: Tue 04 Nov 2025 17:58:26 +0000 Manifest next update: Tue 11 Nov 2025 17:58:26 +0000 Files and hashes: 1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: dJVQc6vqw7oN2mTWcl213exVOh7iVQjTo1M/j4aAWWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3517 (0xdbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137242, serialNumber=50FBB403643473F991273626277A922C0706AC57 Validity Not Before: Nov 4 17:58:26 2025 GMT Not After : Nov 11 17:58:26 2025 GMT Subject: CN=690a3ec2-d41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:9e:97:c6:67:40:69:9d:64:7f:e7:79:53: c9:5d:d8:d6:9a:7d:db:81:64:ff:ff:0b:64:1c:fb: f3:86:d4:a8:35:1c:86:81:6d:2e:b6:92:a9:35:b1: ac:a7:26:07:78:83:05:7c:66:6b:d6:d8:71:2a:80: 84:a5:62:af:3f:54:dd:86:1b:33:fc:bb:0a:c2:59: d1:5d:b5:4f:62:5c:a4:a4:49:63:2f:58:20:ca:1b: b3:6a:94:ca:de:65:e3:38:ca:a0:ca:c3:fb:cf:8f: a8:67:90:1d:87:04:1e:f8:c7:8d:bb:06:19:25:01: 27:b2:3c:27:9c:3d:eb:3a:29:9f:61:56:69:84:7b: 62:ad:23:72:fc:c1:72:6d:e5:a9:b5:04:db:6f:6e: a0:83:bb:59:3b:98:d2:12:ca:37:89:a9:68:cc:15: 82:1d:66:36:29:45:b3:a4:fc:41:92:9e:88:a0:ce: 8f:06:75:b0:ea:99:1e:d9:9c:20:c9:6a:2f:60:86: 20:1d:27:c1:c9:ab:3a:c6:64:ac:5a:be:eb:16:a1: fe:4f:8b:f4:79:31:a3:dd:f8:66:b6:98:c4:f5:a0: cd:a9:e1:49:1b:11:d4:ff:45:37:77:44:f1:90:13: 22:13:cd:28:e1:37:13:83:4b:ba:a6:28:f3:9a:ae: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:38:8E:8C:D1:FE:A9:30:1A:55:F9:39:EC:C0:FE:E7:69:0E:54:4F X509v3 Authority Key Identifier: keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:dc:e4:bc:7e:b1:07:94:57:05:36:71:a7:77:77:01:d5:bf: e4:72:d4:b1:a2:c6:a4:7e:59:ff:f1:7b:9e:15:7d:05:45:53: 29:44:cc:03:69:a4:0e:24:32:2a:3c:50:e3:f9:79:04:38:c7: 1b:5b:70:7c:49:5f:6e:1f:76:6e:66:ed:1a:40:22:20:15:bc: a6:48:ad:d2:41:5f:02:18:03:2e:cd:05:66:f0:aa:b8:9d:8c: d4:41:ee:fe:02:7d:b4:53:10:ce:eb:02:fc:41:81:b4:f5:ac: e6:2e:f0:8c:79:87:ac:2e:79:69:44:c2:a9:fc:87:c5:dd:76: 7a:22:51:62:0b:76:a5:56:61:a2:a7:e0:d6:24:11:09:ba:18: d3:70:c5:2a:3f:02:1f:cb:31:ce:b5:67:49:8a:ba:7f:cf:e8: c7:74:d0:82:b0:78:50:fa:66:d8:88:e8:de:f8:8a:33:56:03: f8:74:a1:ae:48:e5:b8:a9:79:5c:3e:87:eb:b6:d7:55:b9:ef: d2:be:e9:be:e5:c2:2c:b0:d2:79:54:68:54:bd:83:b4:e5:56: 9f:3d:39:17:53:70:fd:a3:80:0f:58:96:68:9f:2c:04:b8:0f: 5b:1d:35:29:e0:4e:c3:71:71:7d:59:fd:79:36:9a:9e:74:b7: 65:41:c6:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyNDIxMTAvBgNVBAUTKDUwRkJCNDAzNjQzNDczRjk5MTI3MzYyNjI3N0E5MjJD MDcwNkFDNTcwHhcNMjUxMTA0MTc1ODI2WhcNMjUxMTExMTc1ODI2WjAYMRYwFAYD VQQDEw02OTBhM2VjMi1kNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2D6el8ZnQGmdZH/neVPJXdjWmn3bgWT//wtkHPvzhtSoNRyGgW0utpKpNbGs pyYHeIMFfGZr1thxKoCEpWKvP1Tdhhsz/LsKwlnRXbVPYlykpEljL1ggyhuzapTK 3mXjOMqgysP7z4+oZ5AdhwQe+MeNuwYZJQEnsjwnnD3rOimfYVZphHtirSNy/MFy beWptQTbb26gg7tZO5jSEso3ialozBWCHWY2KUWzpPxBkp6IoM6PBnWw6pke2Zwg yWovYIYgHSfByas6xmSsWr7rFqH+T4v0eTGj3fhmtpjE9aDNqeFJGxHU/0U3d0Tx kBMiE80o4TcTg0u6pijzmq4UkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBY4jozR /qkwGlX5OezA/udpDlRPMB8GA1UdIwQYMBaAFFD7tANkNHP5kSc2Jid6kiwHBqxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNfbVJKelltSjNxU0xBY0dy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQdTBBMlEwY19tUkp6WW1KM3FTTEFjR3JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNf bVJKelltSjNxU0xBY0dyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV3OS8frEHlFcFNnGnd3cB1b/kctSxosakfln/8XueFX0FRVMpRMwD aaQOJDIqPFDj+XkEOMcbW3B8SV9uH3ZuZu0aQCIgFbymSK3SQV8CGAMuzQVm8Kq4 nYzUQe7+An20UxDO6wL8QYG09azmLvCMeYesLnlpRMKp/IfF3XZ6IlFiC3alVmGi p+DWJBEJuhjTcMUqPwIfyzHOtWdJirp/z+jHdNCCsHhQ+mbYiOje+IozVgP4dKGu SOW4qXlcPofrttdVue/Svum+5cIssNJ5VGhUvYO05VafPTkXU3D9o4APWJZonywE uA9bHTUp4E7DcXF9Wf15NpqedLdlQcYN -----END CERTIFICATE-----Generated at Wed Nov 5 19:26:27 2025 by rpki-client