$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft File: ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json) Hash identifier: L5prxwIqwTyvoaG/3lPwz5kDJRsE3eqx2Rxwk2xqMrY= Subject key identifier: C2:33:2D:ED:5E:7E:7D:76:63:03:3D:FE:87:85:18:69:1C:4C:CD:BD Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D Certificate issuer: /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D Certificate serial: 0A60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft Manifest number: 0A5A Signing time: Fri 30 May 2025 19:51:09 +0000 Manifest this update: Fri 30 May 2025 19:51:08 +0000 Manifest next update: Fri 06 Jun 2025 19:51:08 +0000 Files and hashes: 1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: TrB8XsWuwbc8Q+ZGEEL/8WJRn/Bn6AVey2yCNmsAxa0=) 2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2656 (0xa60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D Validity Not Before: May 30 19:51:08 2025 GMT Not After : Jun 6 19:51:08 2025 GMT Subject: CN=683a0c2c-7e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:95:6e:e9:47:f4:0c:3d:08:37:89:9c:06: 64:0d:3d:26:ff:80:38:6c:c9:3c:ea:b0:e9:fa:38: 63:0d:3c:81:5f:0e:20:75:c2:3c:b2:e0:10:b9:4d: f0:3a:61:1b:67:3c:14:cd:15:fe:d3:23:35:91:a7: f1:60:ee:e7:90:b9:09:43:ac:b7:c5:79:46:11:88: 7f:94:5f:38:44:6b:79:c5:00:2d:2a:bf:b4:b4:56: df:b8:46:a9:1a:a5:75:54:5e:23:d6:d4:49:1b:38: 07:34:f7:b7:c9:cf:32:68:11:f4:e4:e2:a7:ab:a7: e4:32:90:cd:27:6a:b4:d4:38:ad:61:d8:ff:f4:40: 07:d4:66:70:df:cb:3e:38:31:4d:20:53:93:74:10: 2d:5f:3c:d4:3e:6f:2e:55:3f:84:52:9f:5a:1c:8a: 1e:66:68:fc:c2:9a:6d:05:d9:1c:58:27:0f:ae:ff: 04:9c:eb:00:23:da:f7:92:e8:11:02:38:ee:3e:f2: 69:03:7b:55:85:80:b3:1e:56:8d:42:66:85:da:99: ff:33:10:fe:de:34:6b:f8:28:45:2a:75:ea:76:73: be:86:91:3e:31:4f:fd:33:0b:5b:e1:6a:1b:96:55: ec:2d:5d:a4:b0:36:6f:96:4c:4b:e9:62:0b:49:82: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:33:2D:ED:5E:7E:7D:76:63:03:3D:FE:87:85:18:69:1C:4C:CD:BD X509v3 Authority Key Identifier: keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:13:b9:f6:0a:b3:e3:79:2c:6a:69:df:cc:be:30:a0:62:4e: 3c:3f:6a:bd:0d:61:bf:26:ec:0e:df:78:76:52:5e:b7:e5:1e: 3a:53:02:01:1f:ea:c4:94:28:d8:01:15:e4:49:c0:28:97:ee: ee:0c:95:31:6a:be:08:05:48:a2:20:97:fb:1b:ae:57:76:48: aa:6f:06:b0:69:ca:69:69:00:c7:1b:f3:68:9e:30:c5:94:73: 93:8f:58:01:c6:d0:5c:11:60:ee:3c:a8:5a:c0:44:47:43:92: ab:15:31:83:85:33:54:6d:6d:07:d3:17:e1:96:ec:9b:88:dc: 19:5c:59:fa:c3:5d:30:4e:dc:8a:a6:38:6e:24:53:c6:51:aa: 99:85:fa:97:90:2e:7d:74:71:83:23:f3:45:d3:2d:88:b4:65: 27:44:aa:be:73:70:74:79:06:4f:05:19:a2:4c:32:38:8e:c3: f7:e5:72:3b:14:5b:bf:63:36:36:48:35:6b:e3:f2:7f:fb:91: de:05:65:ce:0b:cd:2f:ad:04:48:e2:f4:b1:25:15:75:b3:62: 28:be:36:b6:ca:59:62:f2:5e:6f:b6:81:e2:73:a1:bf:43:09: 8b:a3:92:e6:41:d3:86:13:3f:01:ed:2a:1c:49:53:bf:1b:f9: e2:fb:85:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyRDUxMTAvBgNVBAUTKEJBNUEyMEM0MDY4NThBRkMyNTA2QTkzNTc4NjMxNjQx NDY1MjYwOUQwHhcNMjUwNTMwMTk1MTA4WhcNMjUwNjA2MTk1MTA4WjAYMRYwFAYD VQQDEw02ODNhMGMyYy03ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2GVbulH9Aw9CDeJnAZkDT0m/4A4bMk86rDp+jhjDTyBXw4gdcI8suAQuU3w OmEbZzwUzRX+0yM1kafxYO7nkLkJQ6y3xXlGEYh/lF84RGt5xQAtKr+0tFbfuEap GqV1VF4j1tRJGzgHNPe3yc8yaBH05OKnq6fkMpDNJ2q01DitYdj/9EAH1GZw38s+ ODFNIFOTdBAtXzzUPm8uVT+EUp9aHIoeZmj8wpptBdkcWCcPrv8EnOsAI9r3kugR AjjuPvJpA3tVhYCzHlaNQmaF2pn/MxD+3jRr+ChFKnXqdnO+hpE+MU/9Mwtb4Wob llXsLV2ksDZvlkxL6WILSYL9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIzLe1e fn12YwM9/oeFGGkcTM29MB8GA1UdIwQYMBaAFLpaIMQGhYr8JQapNXhjFkFGUmCd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJENS8zNzdBRjgyNjY0 MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2d2xCcWsxZUdNV1FVWlNZ SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vsb2d4QWFGaXZ3bEJxazFlR01XUVVaU1lKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJENS8zNzdBRjgyNjY0MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2 d2xCcWsxZUdNV1FVWlNZSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOE7n2CrPjeSxqad/MvjCgYk48P2q9DWG/JuwO33h2Ul635R46UwIB H+rElCjYARXkScAol+7uDJUxar4IBUiiIJf7G65XdkiqbwawacppaQDHG/NonjDF lHOTj1gBxtBcEWDuPKhawERHQ5KrFTGDhTNUbW0H0xfhluybiNwZXFn6w10wTtyK pjhuJFPGUaqZhfqXkC59dHGDI/NF0y2ItGUnRKq+c3B0eQZPBRmiTDI4jsP35XI7 FFu/YzY2SDVr4/J/+5HeBWXOC80vrQRI4vSxJRV1s2Iovja2ylli8l5vtoHic6G/ QwmLo5LmQdOGEz8B7SocSVO/G/ni+4Vl -----END CERTIFICATE-----Generated at Sat May 31 17:22:08 2025 by rpki-client