$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: klO+gxHlIaxF2SYW9ZSMkq5kIyrYTdkzAL6xjBXPFV4= Subject key identifier: 91:4D:50:D0:99:7E:0C:E7:6F:D1:CB:02:D6:61:83:CC:82:65:72:4F Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: 0167 Signing time: Wed 25 Mar 2026 04:07:11 +0000 Manifest this update: Wed 25 Mar 2026 04:07:10 +0000 Manifest next update: Wed 01 Apr 2026 04:07:10 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: UUWONquWvIo9mipKtm7203RlL+LaCigVmotKuhqJpE0=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: fPHnV7tC8/TIuQ+hNAsVmv5SckAHXIfMYlrVkbpdH1g=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: 37qLC7pyiEbuaqGlhQg7fW1UKxGUITgv8luCzRuybC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Mar 25 04:07:10 2026 GMT Not After : Apr 1 04:07:10 2026 GMT Subject: CN=69c35f6e-fd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:e8:16:7c:00:21:dc:8c:52:44:e8:34:d3: ff:3b:78:cc:10:ab:de:47:5b:dd:fa:b2:64:04:c9: b1:28:3a:f4:42:a4:c5:80:cd:d3:03:ba:d7:30:90: 0e:81:e1:0a:e1:58:f2:e6:31:67:2f:46:26:75:00: 4c:ec:c1:1b:20:4a:f1:8c:52:f8:5e:d2:95:56:55: be:17:5a:31:5e:30:78:5c:1f:ca:cb:8e:f5:df:a6: 79:7e:29:97:1b:6f:6b:96:62:56:26:27:b4:14:35: c4:b6:92:92:3b:27:cc:26:dd:9b:9b:46:d4:23:79: d4:bf:c7:04:63:ef:84:19:56:13:2a:0a:5c:9b:99: 43:2c:1e:e1:87:d3:cc:75:c0:63:1f:bf:2d:a6:81: 2d:ab:d1:53:c2:42:1d:4e:31:f0:95:99:1a:c9:11: 19:76:0d:d0:1b:45:6e:5c:a4:ad:e7:a4:de:35:2d: 77:e6:df:d9:3f:67:f0:9f:2d:54:7f:f2:1b:f8:9e: c1:56:a0:46:24:53:ff:70:56:8d:fe:3c:44:12:fe: f4:e3:f4:0a:00:5d:36:7b:42:6a:ba:88:2f:5f:31: 1f:46:6a:92:5c:e6:16:ac:91:f8:c2:e5:37:d1:0e: 50:1c:0f:73:c6:15:b4:fa:04:cb:96:6c:2b:fa:52: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4D:50:D0:99:7E:0C:E7:6F:D1:CB:02:D6:61:83:CC:82:65:72:4F X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:45:6f:90:d3:e5:d8:f7:b9:9b:17:03:f4:ed:1b:6b:e9:22: 54:e1:a8:d5:08:4e:1d:c7:ff:e3:57:3a:3f:8f:fc:7c:64:1b: 82:60:28:31:80:1f:32:73:dc:53:da:d3:c4:35:5d:d8:44:c8: 1e:26:c9:56:5d:1d:5b:71:0a:99:aa:6a:02:0a:f0:74:2b:15: 1d:9f:df:22:f2:86:03:01:ba:10:fc:b3:ee:b2:ae:65:aa:87: a9:22:cf:21:74:25:d8:f8:65:bc:b7:3c:74:ab:6a:fa:77:57: 9b:9a:a7:66:bb:b3:62:63:60:1f:6f:7c:78:ce:fa:1c:a1:80: 35:fc:e9:39:ca:ac:d0:5e:a4:06:ca:a2:2c:3e:00:ae:2c:85: e9:78:94:58:bd:64:4e:fe:1b:ff:71:30:4c:28:4f:c4:c3:c4: d8:4f:e6:42:54:37:41:4b:93:fb:77:af:42:ae:3d:7e:9f:c2: d2:dd:6f:48:57:e9:10:08:e2:ee:15:25:91:98:c7:8e:d3:74: af:fb:42:1a:ff:ff:78:9b:4f:28:d7:b7:1c:79:27:b5:fd:db: 4b:1c:c8:64:3d:ff:c1:34:6e:37:a3:0f:32:19:1a:69:63:f6: ab:00:02:94:dd:e0:f4:59:12:38:55:2b:65:b4:86:a4:5d:2b: 72:aa:cf:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjYwMzI1MDQwNzEwWhcNMjYwNDAxMDQwNzEwWjAYMRYwFAYD VQQDEw02OWMzNWY2ZS1mZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hHoFnwAIdyMUkToNNP/O3jMEKveR1vd+rJkBMmxKDr0QqTFgM3TA7rXMJAO geEK4Vjy5jFnL0YmdQBM7MEbIErxjFL4XtKVVlW+F1oxXjB4XB/Ky47136Z5fimX G29rlmJWJie0FDXEtpKSOyfMJt2bm0bUI3nUv8cEY++EGVYTKgpcm5lDLB7hh9PM dcBjH78tpoEtq9FTwkIdTjHwlZkayREZdg3QG0VuXKSt56TeNS135t/ZP2fwny1U f/Ib+J7BVqBGJFP/cFaN/jxEEv704/QKAF02e0JquogvXzEfRmqSXOYWrJH4wuU3 0Q5QHA9zxhW0+gTLlmwr+lILUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFNUNCZ fgznb9HLAtZhg8yCZXJPMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAekVvkNPl2Pe5mxcD9O0ba+kiVOGo1QhOHcf/41c6P4/8fGQbgmAoMYAfMnPc U9rTxDVd2ETIHibJVl0dW3EKmapqAgrwdCsVHZ/fIvKGAwG6EPyz7rKuZaqHqSLP IXQl2PhlvLc8dKtq+ndXm5qnZruzYmNgH298eM76HKGANfzpOcqs0F6kBsqiLD4A riyF6XiUWL1kTv4b/3EwTChPxMPE2E/mQlQ3QUuT+3evQq49fp/C0t1vSFfpEAji 7hUlkZjHjtN0r/tCGv//eJtPKNe3HHkntf3bSxzIZD3/wTRuN6MPMhkaaWP2qwAC lN3g9FkSOFUrZbSGpF0rcqrPdw== -----END CERTIFICATE-----Generated at Thu Mar 26 05:48:58 2026 by rpki-client