$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: J6Di3J7ACfLTn3TyE11NpsnDwWq/QU2hsLviYWbsG/w= Subject key identifier: 63:96:24:4D:0B:83:09:EE:F0:AC:98:07:9E:91:A1:2C:46:19:7B:2A Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: DE Signing time: Tue 01 Jul 2025 06:05:45 +0000 Manifest this update: Tue 01 Jul 2025 06:05:44 +0000 Manifest next update: Tue 08 Jul 2025 06:05:44 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: m9ffcO8gWmYKkxLCNXYO6bbmEfuZWJxsRftIV4SxN48=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Jul 1 06:05:44 2025 GMT Not After : Jul 8 06:05:44 2025 GMT Subject: CN=68637ab9-e486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:d3:31:df:cd:ab:5e:86:6f:c6:71:4f:3c: 54:64:45:c6:45:80:7e:96:17:b2:fb:2d:0c:cc:ea: 3b:46:bb:28:ad:8a:85:d6:64:9a:9e:29:39:1b:c3: 97:94:ab:7c:e5:87:ba:f3:24:c9:26:33:ca:0f:11: 35:e7:10:5c:dc:12:33:b7:72:2e:4f:65:ee:7f:8e: 62:49:37:65:d0:b7:af:17:f3:aa:ba:d8:97:7c:a9: 25:0c:4e:27:2d:63:bc:8d:56:68:0e:e5:03:ea:5a: 03:8c:b5:60:a9:58:a4:2d:86:8d:48:a9:5f:56:32: c1:f1:f1:99:8c:46:e5:4b:4a:80:10:74:8b:99:25: 95:29:c0:04:cb:ee:22:d6:21:3d:59:84:62:e8:a6: 50:48:c0:a2:1a:20:09:92:e9:60:38:d3:9f:9f:96: 03:9f:83:25:94:3c:63:30:a3:28:56:62:73:59:67: c6:b3:19:2e:0d:15:b1:3e:1b:70:26:96:19:c5:a2: 7e:f5:10:0c:bb:2d:95:f6:3b:43:43:7e:2c:5c:1b: 1f:21:42:31:2a:05:45:86:85:8d:1d:b7:cd:e2:c1: 59:12:34:53:a6:62:b9:f5:4a:e6:d2:5e:56:c2:42: 6d:ee:67:15:c0:84:b3:43:94:d5:ee:9f:54:e9:d9: d1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:96:24:4D:0B:83:09:EE:F0:AC:98:07:9E:91:A1:2C:46:19:7B:2A X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ef:fc:16:a4:2c:8f:9f:c0:56:c8:0e:9e:d4:a5:19:57:dc: 21:67:ff:ad:f2:54:a7:c5:c3:3c:3d:55:e7:c1:b2:b8:ed:4c: e1:c4:70:5e:10:8c:06:77:50:f2:ff:29:d2:e7:3b:52:a2:8a: cf:97:4a:e1:07:cc:ce:63:09:a8:80:3b:2e:cd:32:ea:3b:34: db:4e:41:a0:5a:f9:78:af:3d:c2:47:90:c2:89:15:97:b4:f5: f9:24:35:f4:93:f2:a6:59:7b:ee:09:4a:94:ca:55:99:bc:b8: 40:3b:b4:1d:d8:e6:48:c0:e5:c2:19:bd:dd:74:f9:49:e2:49: 52:87:3d:93:23:fd:d6:66:5b:b2:b6:f1:96:98:6d:74:a0:1f: e2:be:c7:4e:50:91:9a:79:be:a2:0f:d6:06:b9:cc:2d:4e:2a: 5c:30:60:d4:cc:09:50:fc:9a:ff:92:1d:13:02:ad:13:09:57: ef:ed:c9:5c:73:61:ef:de:fe:d2:11:d9:90:98:c8:fa:11:7f: c3:5f:17:21:16:97:4c:cf:56:ae:1a:ec:9c:66:ba:54:38:76: 66:7a:64:f4:e9:4f:30:d8:1f:f5:58:27:5e:15:e1:fd:94:65: 06:49:f6:21:46:39:6f:48:4e:ff:8c:aa:63:db:37:ca:29:25: 9b:ff:3a:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUwNzAxMDYwNTQ0WhcNMjUwNzA4MDYwNTQ0WjAYMRYwFAYD VQQDEw02ODYzN2FiOS1lNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh7TMd/Nq16Gb8ZxTzxUZEXGRYB+lhey+y0MzOo7RrsorYqF1mSanik5G8OX lKt85Ye68yTJJjPKDxE15xBc3BIzt3IuT2Xuf45iSTdl0LevF/OqutiXfKklDE4n LWO8jVZoDuUD6loDjLVgqVikLYaNSKlfVjLB8fGZjEblS0qAEHSLmSWVKcAEy+4i 1iE9WYRi6KZQSMCiGiAJkulgONOfn5YDn4MllDxjMKMoVmJzWWfGsxkuDRWxPhtw JpYZxaJ+9RAMuy2V9jtDQ34sXBsfIUIxKgVFhoWNHbfN4sFZEjRTpmK59Urm0l5W wkJt7mcVwISzQ5TV7p9U6dnRfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOWJE0L gwnu8KyYB56RoSxGGXsqMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ7/wWpCyPn8BWyA6e1KUZV9whZ/+t8lSnxcM8PVXnwbK47UzhxHBe EIwGd1Dy/ynS5ztSoorPl0rhB8zOYwmogDsuzTLqOzTbTkGgWvl4rz3CR5DCiRWX tPX5JDX0k/KmWXvuCUqUylWZvLhAO7Qd2OZIwOXCGb3ddPlJ4klShz2TI/3WZluy tvGWmG10oB/ivsdOUJGaeb6iD9YGucwtTipcMGDUzAlQ/Jr/kh0TAq0TCVfv7clc c2Hv3v7SEdmQmMj6EX/DXxchFpdMz1auGuycZrpUOHZmemT06U8w2B/1WCdeFeH9 lGUGSfYhRjlvSE7/jKpj2zfKKSWb/zoJ -----END CERTIFICATE-----Generated at Wed Jul 2 21:53:13 2025 by rpki-client