$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: WyPUFN7YdA+leUIwO/Zft3+9rCllrIc5OBSqGKsTYi8= Subject key identifier: D7:A7:52:23:B3:B0:2C:E3:00:C2:6B:7B:3A:B5:65:7B:4E:11:FA:6A Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: 0116 Signing time: Sun 19 Oct 2025 07:44:41 +0000 Manifest this update: Sun 19 Oct 2025 07:44:41 +0000 Manifest next update: Sun 26 Oct 2025 07:44:40 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: VAMbEud52n74UhaaiAF+U1gVsvIAbUVgkvK6Zm5Uw30=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Oct 19 07:44:41 2025 GMT Not After : Oct 26 07:44:40 2025 GMT Subject: CN=68f496e9-7e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:43:40:31:15:d6:ed:b2:e3:d7:f7:11:62: fd:44:a3:23:1f:31:52:e8:ce:9f:54:82:52:ec:e6: 03:ca:86:44:5f:b9:9b:2a:01:20:11:5d:e8:c6:01: c2:7c:18:17:b7:98:4a:a4:c8:37:62:82:95:d3:97: 26:32:bd:d5:75:17:65:db:ff:87:47:70:89:2c:ba: ef:51:81:4c:d7:40:53:c1:d7:28:0b:4e:bd:62:a0: 26:f6:9d:f0:c2:d3:f1:5c:77:1b:d6:dc:b4:91:ba: 30:83:b0:4e:8a:a2:6d:7b:69:a7:e5:aa:f3:2f:6d: e5:92:ab:8e:99:e6:16:fc:57:2e:0b:a7:16:ca:d5: dd:a5:4d:02:b5:f9:d7:7f:3c:8e:b7:4f:fc:d1:b8: 73:44:18:00:58:2c:a8:46:85:2d:6a:0c:3d:63:a6: 93:ee:9f:ab:6a:43:41:f4:1b:d8:de:2f:08:e7:68: 8f:f6:49:a6:3e:d3:71:67:0e:ac:58:0d:b7:13:29: 2f:4e:13:b4:0c:36:d0:56:db:f9:a9:fe:de:4b:06: 64:35:a3:d1:df:70:37:90:9e:35:9b:cf:8c:e7:10: 41:d6:72:3a:91:3c:08:25:fd:6b:24:81:fe:40:a7: ee:33:33:93:ae:2c:b2:e2:69:f4:d9:a4:0b:2d:62: a3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A7:52:23:B3:B0:2C:E3:00:C2:6B:7B:3A:B5:65:7B:4E:11:FA:6A X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:65:f5:36:03:f7:4a:bd:16:ef:77:b1:c8:f9:3f:65:c1:73: 36:ac:a7:d7:9b:7b:7d:9e:c0:10:39:d8:36:50:09:d3:0c:ba: d1:ff:f0:e1:71:6b:7b:60:01:9d:6f:35:17:42:d3:f3:18:7b: 53:3a:e5:a2:b9:52:00:3f:36:a2:4d:c4:34:a4:c4:99:a1:bb: 33:9c:e6:4b:82:47:3d:af:15:aa:60:c7:fd:12:f1:83:3f:4c: da:0d:76:58:9a:d1:fa:39:ef:9b:65:f0:26:e1:59:6b:7b:2b: b4:50:b9:0d:66:5b:e6:4d:1b:68:51:3e:b6:07:2c:7a:e6:66: f0:23:4e:82:ac:59:51:e4:f6:eb:83:ac:e3:b7:fc:73:23:82: 6f:c1:17:cc:6d:79:52:68:99:44:bb:9b:0d:69:a2:14:ce:a6: f6:78:1b:d3:ea:e7:53:4c:40:11:17:24:f5:ba:7e:40:b9:ed: eb:63:82:a0:7e:1c:0d:7c:a9:eb:70:a1:ff:35:be:24:c0:ac: db:84:e9:5c:eb:0b:05:03:ae:d9:f6:e0:a0:2c:08:1b:ee:dc: e2:f0:65:a3:6f:e6:92:5d:3f:de:98:a9:57:6a:95:2e:99:a0: a1:d1:80:02:fc:2e:55:00:6a:ac:69:87:66:9a:3c:09:22:5a: 0c:0e:59:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUxMDE5MDc0NDQxWhcNMjUxMDI2MDc0NDQwWjAYMRYwFAYD VQQDEw02OGY0OTZlOS03ZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtodDQDEV1u2y49f3EWL9RKMjHzFS6M6fVIJS7OYDyoZEX7mbKgEgEV3oxgHC fBgXt5hKpMg3YoKV05cmMr3VdRdl2/+HR3CJLLrvUYFM10BTwdcoC069YqAm9p3w wtPxXHcb1ty0kbowg7BOiqJte2mn5arzL23lkquOmeYW/FcuC6cWytXdpU0CtfnX fzyOt0/80bhzRBgAWCyoRoUtagw9Y6aT7p+rakNB9BvY3i8I52iP9kmmPtNxZw6s WA23EykvThO0DDbQVtv5qf7eSwZkNaPR33A3kJ41m8+M5xBB1nI6kTwIJf1rJIH+ QKfuMzOTriyy4mn02aQLLWKjRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNenUiOz sCzjAMJrezq1ZXtOEfpqMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEZfU2A/dKvRbvd7HI+T9lwXM2rKfXm3t9nsAQOdg2UAnTDLrR//Dh cWt7YAGdbzUXQtPzGHtTOuWiuVIAPzaiTcQ0pMSZobsznOZLgkc9rxWqYMf9EvGD P0zaDXZYmtH6Oe+bZfAm4Vlreyu0ULkNZlvmTRtoUT62Byx65mbwI06CrFlR5Pbr g6zjt/xzI4JvwRfMbXlSaJlEu5sNaaIUzqb2eBvT6udTTEARFyT1un5Aue3rY4Kg fhwNfKnrcKH/Nb4kwKzbhOlc6wsFA67Z9uCgLAgb7tzi8GWjb+aSXT/emKlXapUu maCh0YAC/C5VAGqsaYdmmjwJIloMDlnX -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:37 2025 by rpki-client