$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: PY7trx/2CjNWzy3OriRd1Ewt1uXd/s9jFwnjyIdOExY= Subject key identifier: DD:0F:BD:1D:FF:E4:2B:49:BC:55:C2:D2:CF:49:87:DC:14:A2:D3:58 Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: F9 Signing time: Sat 23 Aug 2025 05:21:28 +0000 Manifest this update: Sat 23 Aug 2025 05:21:28 +0000 Manifest next update: Sat 30 Aug 2025 05:21:28 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: 8vBxraED8UsijcLdNs34qhGtmTSf0l2hZ4PngAfjRno=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Aug 23 05:21:28 2025 GMT Not After : Aug 30 05:21:28 2025 GMT Subject: CN=68a94fd8-70f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:a9:7a:34:bb:0d:d8:fd:72:d3:a5:7f:66: d5:ef:81:9c:2a:68:e9:d1:0e:38:4c:ff:f0:97:18: 2b:65:d2:9f:9b:80:e1:36:04:c3:9d:2f:7c:81:20: f4:75:f0:f4:0d:d1:c4:19:e6:94:e3:54:f4:7c:8d: 55:30:2b:83:7b:d5:c8:1b:2b:26:bc:75:dd:5d:bf: 60:3b:22:10:f7:f3:18:04:ef:a7:47:66:b5:5f:2e: 52:cc:58:6e:20:c9:9d:9c:3d:e4:fd:99:44:c6:0b: 54:08:44:05:9e:bc:00:cf:eb:8a:8c:63:69:af:26: de:b9:71:21:a1:92:56:a5:0e:06:2f:5f:95:2c:47: 1f:58:63:75:ed:65:4e:4e:52:19:d6:85:3d:1b:64: 22:ea:24:7e:15:59:2f:7d:8a:b6:8f:1f:2b:62:54: 7a:04:d3:d9:20:58:8b:5b:c7:e8:3b:17:0e:c3:70: c7:19:c9:18:9a:3a:34:2a:5d:f5:ce:ed:1d:8e:ca: 60:3d:57:97:51:35:95:a5:7b:47:7f:35:1a:1e:d5: a1:a6:e7:bb:1e:fe:17:04:b8:f2:ad:98:f1:b9:2d: 70:6a:6f:75:38:58:75:a8:fd:97:a2:50:f5:33:e9: b2:10:15:d4:ff:76:16:08:f9:d0:1e:bf:bf:d8:3d: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0F:BD:1D:FF:E4:2B:49:BC:55:C2:D2:CF:49:87:DC:14:A2:D3:58 X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b6:db:e9:47:1f:e6:fa:b8:84:de:6b:33:61:c5:4f:f1:92: e2:c4:2c:1d:67:3b:ec:65:90:f8:38:0a:22:da:4a:46:f4:60: b8:cb:89:36:27:ce:e7:77:f6:96:7e:1c:db:b9:8b:de:c8:95: 78:c5:cc:ef:71:e5:8f:3e:e3:19:fc:cf:55:d9:1f:a6:05:cc: cf:49:68:8a:11:54:84:49:13:32:ee:c9:1b:68:db:6e:f3:b6: 1f:15:aa:b3:b4:ab:25:5d:a6:d7:6e:18:3d:df:da:53:05:d0: 77:7e:1c:59:cd:0d:13:45:b8:71:84:dd:fa:40:88:d8:4b:f2: a1:92:35:61:32:17:d6:c1:44:ad:2d:94:33:34:cb:5b:a9:96: 89:2a:00:a8:b2:9c:20:7f:e0:9e:9e:74:f9:aa:8d:b3:9b:0a: 0b:bb:80:ab:d6:ba:d3:43:72:63:2e:4f:48:e8:ed:ca:2c:cf: ed:d0:aa:f8:d2:e8:e1:67:5d:bc:54:d4:88:fe:80:d6:80:03: 2f:17:41:27:25:3e:c2:2f:0b:73:09:bb:65:d3:b6:0f:39:a0: b3:44:4d:78:ee:6e:8e:75:40:84:17:c1:85:45:88:9d:21:1a: d1:32:0a:0e:0d:c9:a6:81:38:3e:63:3b:48:27:39:b7:c4:15: 84:58:5d:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUwODIzMDUyMTI4WhcNMjUwODMwMDUyMTI4WjAYMRYwFAYD VQQDEw02OGE5NGZkOC03MGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFGpejS7Ddj9ctOlf2bV74GcKmjp0Q44TP/wlxgrZdKfm4DhNgTDnS98gSD0 dfD0DdHEGeaU41T0fI1VMCuDe9XIGysmvHXdXb9gOyIQ9/MYBO+nR2a1Xy5SzFhu IMmdnD3k/ZlExgtUCEQFnrwAz+uKjGNprybeuXEhoZJWpQ4GL1+VLEcfWGN17WVO TlIZ1oU9G2Qi6iR+FVkvfYq2jx8rYlR6BNPZIFiLW8foOxcOw3DHGckYmjo0Kl31 zu0djspgPVeXUTWVpXtHfzUaHtWhpue7Hv4XBLjyrZjxuS1wam91OFh1qP2XolD1 M+myEBXU/3YWCPnQHr+/2D3VKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0PvR3/ 5CtJvFXC0s9Jh9wUotNYMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKttvpRx/m+riE3mszYcVP8ZLixCwdZzvsZZD4OAoi2kpG9GC4y4k2 J87nd/aWfhzbuYveyJV4xczvceWPPuMZ/M9V2R+mBczPSWiKEVSESRMy7skbaNtu 87YfFaqztKslXabXbhg939pTBdB3fhxZzQ0TRbhxhN36QIjYS/KhkjVhMhfWwUSt LZQzNMtbqZaJKgCospwgf+CennT5qo2zmwoLu4Cr1rrTQ3JjLk9I6O3KLM/t0Kr4 0ujhZ128VNSI/oDWgAMvF0EnJT7CLwtzCbtl07YPOaCzRE147m6OdUCEF8GFRYid IRrRMgoODcmmgTg+YztIJzm3xBWEWF3G -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:11 2025 by rpki-client