$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft File: ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json) Hash identifier: vSpzpqcL2pbp78AJArWHmScfi3PTKIpAfSL6POPbSt4= Subject key identifier: 53:53:A0:D8:FC:59:1E:CA:03:39:6F:26:37:C4:EC:3C:8F:77:88:4B Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D Certificate issuer: /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D Certificate serial: 0A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft Manifest number: 0A86 Signing time: Sun 24 Aug 2025 19:34:43 +0000 Manifest this update: Sun 24 Aug 2025 19:34:43 +0000 Manifest next update: Sun 31 Aug 2025 19:34:43 +0000 Files and hashes: 1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: F50BpfJ9eCVagOyqu/5Yf6wylGNVsvqslTqZuhVhfG4=) 2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D Validity Not Before: Aug 24 19:34:43 2025 GMT Not After : Aug 31 19:34:43 2025 GMT Subject: CN=68ab6953-5d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:e2:3f:7d:79:f2:45:ee:20:91:6d:29:e7: 6c:05:67:eb:a5:5f:46:ed:9b:e7:3d:e4:9a:d2:45: 51:d4:1c:f4:2c:d1:dc:30:87:ad:4d:75:b4:0a:0a: ae:13:21:c3:24:b0:85:86:ff:35:33:62:bc:37:03: 15:a4:7b:7c:e9:22:07:5b:71:a6:6f:89:42:54:77: 64:2b:79:da:3b:37:8b:e7:28:3f:ae:50:b0:0e:97: e9:ed:6a:7b:5f:65:47:d0:6f:95:09:b5:49:ea:ed: 91:42:94:a5:d3:69:98:a4:a1:e9:af:a2:9f:5c:98: 2b:07:18:e7:2a:44:fb:31:81:cf:1b:e0:89:69:c7: 3f:b0:b0:c3:65:cc:0b:eb:b4:85:ed:f4:16:fc:d5: de:f0:28:93:12:0c:d4:db:85:19:2d:c7:10:5f:d6: 60:2d:6f:80:83:f0:e4:fd:ad:9d:82:86:bb:4c:98: 60:0f:5a:0b:ba:43:53:ea:78:8a:e1:b1:ca:a0:82: e6:81:6f:b1:31:0c:e8:8a:6b:8e:76:2b:b5:9f:90: 22:ba:1a:63:2e:75:93:3d:03:49:8e:9b:b9:1e:48: f1:73:ef:3e:41:5c:12:18:0a:2e:4b:0b:ac:bb:ac: 9a:a0:44:25:ef:03:35:3e:69:38:9e:46:0a:c4:20: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:A0:D8:FC:59:1E:CA:03:39:6F:26:37:C4:EC:3C:8F:77:88:4B X509v3 Authority Key Identifier: keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:33:c6:d3:07:ab:0e:fc:f1:57:35:c3:3e:3e:b1:ae:be:14: 39:3b:c1:dd:84:27:31:3e:56:21:15:a9:05:81:25:37:92:f4: 96:c6:11:3c:a4:2d:37:8a:e7:38:2d:a2:03:fa:89:d9:dc:1d: d6:4b:fe:a2:8a:1d:2c:85:53:48:1e:53:da:0f:f7:83:5f:8f: eb:f9:e8:3e:dd:50:fe:d9:d0:9b:3d:86:dd:e0:59:91:3e:cb: eb:c1:4b:13:0f:98:d0:67:b4:67:64:26:18:cf:d1:c8:d9:09: 61:a4:d3:01:4e:c8:57:8c:d9:6b:63:e7:a7:ce:80:e6:f8:01: 24:da:de:b3:94:1f:fb:66:08:a6:c1:a2:06:aa:fc:f5:46:14: ba:e6:2b:b0:51:c1:cc:82:cf:52:4f:7a:98:fa:79:02:a9:3c: a7:3f:e4:04:db:fc:b3:6b:c0:7a:aa:6b:d4:63:7c:79:a6:aa: 72:70:2a:55:97:9e:7a:85:0f:01:31:4a:38:75:45:8c:47:18: b2:46:47:9c:e0:58:4d:c6:7b:b7:37:66:13:43:d3:48:e2:dd: 65:1d:df:37:67:24:4d:55:31:15:cc:3f:24:19:40:8f:c7:26: 7a:6b:ae:fd:75:99:b7:28:2a:57:48:56:c5:84:55:6f:51:75: 1c:9f:73:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyRDUxMTAvBgNVBAUTKEJBNUEyMEM0MDY4NThBRkMyNTA2QTkzNTc4NjMxNjQx NDY1MjYwOUQwHhcNMjUwODI0MTkzNDQzWhcNMjUwODMxMTkzNDQzWjAYMRYwFAYD VQQDEw02OGFiNjk1My01ZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25niP3158kXuIJFtKedsBWfrpV9G7ZvnPeSa0kVR1Bz0LNHcMIetTXW0Cgqu EyHDJLCFhv81M2K8NwMVpHt86SIHW3Gmb4lCVHdkK3naOzeL5yg/rlCwDpfp7Wp7 X2VH0G+VCbVJ6u2RQpSl02mYpKHpr6KfXJgrBxjnKkT7MYHPG+CJacc/sLDDZcwL 67SF7fQW/NXe8CiTEgzU24UZLccQX9ZgLW+Ag/Dk/a2dgoa7TJhgD1oLukNT6niK 4bHKoILmgW+xMQzoimuOdiu1n5AiuhpjLnWTPQNJjpu5Hkjxc+8+QVwSGAouSwus u6yaoEQl7wM1Pmk4nkYKxCBbawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNToNj8 WR7KAzlvJjfE7DyPd4hLMB8GA1UdIwQYMBaAFLpaIMQGhYr8JQapNXhjFkFGUmCd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJENS8zNzdBRjgyNjY0 MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2d2xCcWsxZUdNV1FVWlNZ SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vsb2d4QWFGaXZ3bEJxazFlR01XUVVaU1lKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJENS8zNzdBRjgyNjY0MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2 d2xCcWsxZUdNV1FVWlNZSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/M8bTB6sO/PFXNcM+PrGuvhQ5O8HdhCcxPlYhFakFgSU3kvSWxhE8 pC03iuc4LaID+onZ3B3WS/6iih0shVNIHlPaD/eDX4/r+eg+3VD+2dCbPYbd4FmR PsvrwUsTD5jQZ7RnZCYYz9HI2QlhpNMBTshXjNlrY+enzoDm+AEk2t6zlB/7Zgim waIGqvz1RhS65iuwUcHMgs9ST3qY+nkCqTynP+QE2/yza8B6qmvUY3x5pqpycCpV l556hQ8BMUo4dUWMRxiyRkec4FhNxnu3N2YTQ9NI4t1lHd83ZyRNVTEVzD8kGUCP xyZ6a679dZm3KCpXSFbFhFVvUXUcn3MK -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:33 2025 by rpki-client