$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft File: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json) Hash identifier: lbv1d5IB8q6F4x3oUBA3YEJ34aNmPiBrO3kyPf8SQRc= Subject key identifier: 04:FF:3F:0F:FC:4C:28:D5:0D:02:1B:19:A2:B6:35:15:11:7E:68:22 Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 Certificate issuer: /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57 Certificate serial: 0DBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft Manifest number: 1596 Signing time: Sun 02 Nov 2025 17:54:09 +0000 Manifest this update: Sun 02 Nov 2025 17:54:08 +0000 Manifest next update: Sun 09 Nov 2025 17:54:08 +0000 Files and hashes: 1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: yVp+5kZK8y3LhNerDbxeBfm0kdJs6NMizNgQ5jxrbis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137242, serialNumber=50FBB403643473F991273626277A922C0706AC57 Validity Not Before: Nov 2 17:54:08 2025 GMT Not After : Nov 9 17:54:08 2025 GMT Subject: CN=69079ac0-ec4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:5a:cb:6b:f1:2c:77:2d:f4:48:2c:d3:ad: 16:7c:53:04:72:19:ff:15:75:38:8a:65:37:73:3e: a4:ec:bf:09:67:b7:a0:cb:c9:86:9e:a2:05:23:cb: f0:30:6a:2e:e1:5c:4d:37:ea:cc:16:d0:56:47:c1: a4:7d:a9:c6:2f:13:7c:1b:63:d0:f3:a0:9b:7d:6e: 9c:46:c7:f0:9e:a4:42:38:2e:de:1a:e9:f8:7a:17: b8:f3:1b:0f:02:f0:88:de:5d:09:21:3e:6a:30:49: e9:a5:e4:47:57:dc:48:94:a8:03:59:b6:3a:e6:d0: 72:c2:9f:4f:c9:71:78:46:27:ba:66:54:09:9b:ce: c4:c0:29:05:ea:7b:04:42:24:85:4c:eb:e6:6a:e6: 08:cf:d1:ef:42:a1:bd:16:c1:cb:67:d0:10:da:91: 9d:65:ca:a1:f6:8d:0a:77:a1:3f:c9:0e:bd:50:47: 3a:19:52:39:3e:53:42:f8:10:da:20:52:dc:81:6d: 07:dd:6b:6f:9c:84:d3:81:40:c7:f3:0a:d7:17:3c: f1:35:12:2b:fc:a4:27:7c:c2:5b:fd:4d:0a:82:6f: 32:fd:77:e9:42:71:a0:a2:0d:85:6e:25:14:3f:9d: f4:b9:f9:2b:b4:49:05:5e:f7:2e:73:d3:13:da:1c: 5d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FF:3F:0F:FC:4C:28:D5:0D:02:1B:19:A2:B6:35:15:11:7E:68:22 X509v3 Authority Key Identifier: keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:8b:0c:87:95:4b:e6:43:13:18:27:60:4d:a6:b0:5b:01:16: b4:a3:5f:85:e1:f6:2c:ce:cf:b1:ad:65:2e:c1:fc:4a:d8:58: af:01:0e:9f:27:5d:4d:29:b7:aa:df:82:83:78:50:f1:d2:cd: 2b:3a:f7:f8:6c:5b:72:88:74:f6:54:e6:e3:08:0e:d0:13:2a: 06:8a:38:c5:82:97:14:c3:d2:69:72:08:a9:4f:bc:0d:35:25: 4f:21:2c:be:ee:dd:05:60:8a:00:ee:34:05:15:ff:2d:3e:26: 00:16:87:cb:93:55:99:98:37:bd:1a:6b:62:b5:2e:78:68:55: 79:c1:f3:2d:bb:40:97:58:42:76:03:38:3e:1c:d7:11:8f:4c: 36:dd:ad:70:db:42:f0:a8:b9:83:7a:7d:cc:fb:d6:f3:61:38: df:73:1b:2f:d7:e5:db:d2:db:32:59:00:51:f3:03:03:c7:fe: 98:bf:5a:b2:d6:7a:be:14:ec:df:02:80:f8:f3:1c:0a:2e:16: 1b:0c:d6:86:fb:e4:72:a7:41:8e:11:e9:61:b0:f2:85:ec:fb: e2:e0:c0:25:f5:ab:60:bd:13:6f:f9:e1:9c:58:29:2f:fa:0c: 58:a0:ce:c7:38:f5:3e:56:01:85:f1:de:14:f6:cf:25:66:7f: 19:8a:d0:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyNDIxMTAvBgNVBAUTKDUwRkJCNDAzNjQzNDczRjk5MTI3MzYyNjI3N0E5MjJD MDcwNkFDNTcwHhcNMjUxMTAyMTc1NDA4WhcNMjUxMTA5MTc1NDA4WjAYMRYwFAYD VQQDEw02OTA3OWFjMC1lYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNVay2vxLHct9Egs060WfFMEchn/FXU4imU3cz6k7L8JZ7egy8mGnqIFI8vw MGou4VxNN+rMFtBWR8GkfanGLxN8G2PQ86CbfW6cRsfwnqRCOC7eGun4ehe48xsP AvCI3l0JIT5qMEnppeRHV9xIlKgDWbY65tBywp9PyXF4Rie6ZlQJm87EwCkF6nsE QiSFTOvmauYIz9HvQqG9FsHLZ9AQ2pGdZcqh9o0Kd6E/yQ69UEc6GVI5PlNC+BDa IFLcgW0H3WtvnITTgUDH8wrXFzzxNRIr/KQnfMJb/U0Kgm8y/XfpQnGgog2FbiUU P530ufkrtEkFXvcuc9MT2hxdNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAT/Pw/8 TCjVDQIbGaK2NRURfmgiMB8GA1UdIwQYMBaAFFD7tANkNHP5kSc2Jid6kiwHBqxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNfbVJKelltSjNxU0xBY0dy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQdTBBMlEwY19tUkp6WW1KM3FTTEFjR3JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNf bVJKelltSjNxU0xBY0dyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYiwyHlUvmQxMYJ2BNprBbARa0o1+F4fYszs+xrWUuwfxK2FivAQ6f J11NKbeq34KDeFDx0s0rOvf4bFtyiHT2VObjCA7QEyoGijjFgpcUw9JpcgipT7wN NSVPISy+7t0FYIoA7jQFFf8tPiYAFofLk1WZmDe9GmtitS54aFV5wfMtu0CXWEJ2 Azg+HNcRj0w23a1w20LwqLmDen3M+9bzYTjfcxsv1+Xb0tsyWQBR8wMDx/6Yv1qy 1nq+FOzfAoD48xwKLhYbDNaG++Ryp0GOEelhsPKF7Pvi4MAl9atgvRNv+eGcWCkv +gxYoM7HOPU+VgGF8d4U9s8lZn8ZitAI -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:26 2025 by rpki-client