$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: VVYHIXOYjaP1HMkpttQPcprhdgLAdM/dy3ihpmhI3vU= Subject key identifier: 6E:9E:88:15:BD:33:55:DC:6A:BB:1A:76:C9:2E:46:B9:A0:6E:29:4B Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: B1 Signing time: Sat 05 Apr 2025 05:21:28 +0000 Manifest this update: Sat 05 Apr 2025 05:21:28 +0000 Manifest next update: Sat 12 Apr 2025 05:21:28 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: TY4uc4OSQqllIw+EWpi2HL0VTcyJMYfFpFtF7OYZPxQ=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: 182eUUJuaALloc84A+J3D6Vh35fJGaKCB5vaP7hNlQ8=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: uIjAF+/dfGNLo9aioNmk6DqLMsLqzamlKuhlvMcc2h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213 Validity Not Before: Apr 5 05:21:28 2025 GMT Not After : Apr 12 05:21:28 2025 GMT Subject: CN=67f0bdd8-8d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f4:7f:36:fe:3b:b0:c2:aa:41:0f:c8:f9:12: 66:c2:7e:cb:c2:aa:03:25:fa:54:1b:83:a5:99:15: 98:1c:ba:f8:58:de:aa:2f:32:ac:f6:a7:2e:85:62: f6:2c:ed:8a:cc:ea:b1:93:a5:09:b0:a1:a7:34:b5: d5:9e:59:33:c5:0a:04:7b:d2:e0:bf:82:c0:7d:8f: 28:1e:d3:10:60:76:c3:d5:68:e4:0d:c6:a8:05:f7: c4:0f:55:84:f9:ba:a0:0e:88:5d:2a:cf:c2:ca:1b: fe:d0:be:94:44:3b:95:3e:21:48:04:c3:44:68:33: 84:2a:e2:61:a9:8d:b8:89:e8:75:13:cd:14:64:88: 64:35:2f:b7:42:97:98:16:a7:cf:e1:ee:7b:76:ba: 43:06:b4:1d:76:b4:ff:c7:9f:c3:0c:f6:52:e6:18: f8:fd:eb:af:e1:2c:a4:98:6d:c0:8d:ab:97:4e:73: 93:17:48:b1:3c:9d:4e:78:12:df:e8:a5:2f:f1:2e: 5e:0b:70:9f:54:68:94:89:89:c6:20:00:44:9f:68: c8:67:01:48:37:67:14:65:a7:f5:bd:6a:cc:56:c5: f5:d4:c0:bc:08:28:84:6c:03:18:90:b8:28:08:c5: 08:25:68:68:69:3e:0e:9d:93:2e:a6:b6:7d:c3:72: a0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9E:88:15:BD:33:55:DC:6A:BB:1A:76:C9:2E:46:B9:A0:6E:29:4B X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:82:ff:14:1e:3c:f8:6c:a9:52:09:fa:11:23:2b:b5:c2:9e: 5d:31:10:e8:50:fb:a5:d6:cf:5e:ca:c4:82:12:86:ff:31:f9: d1:c5:44:b6:40:81:cb:7e:5b:36:26:61:3a:36:98:cf:a9:1f: a9:52:1e:51:86:11:9c:d4:61:ee:0c:a1:4f:da:82:ca:b5:e3: 67:98:14:5f:5a:5d:31:a8:d1:84:79:57:59:cd:c9:58:aa:da: 0c:0b:a0:76:11:66:a3:ec:b1:b5:f7:07:ee:91:3b:e7:e9:15: db:60:91:cb:2b:aa:f9:bb:0b:7e:72:5a:6e:fc:22:ef:c9:c2: 6e:6b:00:bc:a4:5d:33:a5:a7:cc:97:d2:47:bb:ec:e9:ba:49: b1:16:24:7a:58:ea:e7:1e:1b:9e:b2:f5:72:dd:1d:7c:c3:b9: 56:18:02:34:14:28:4a:7e:34:c6:7b:a9:3b:9e:1f:08:10:ee: f0:45:0a:fb:98:73:d7:16:92:2a:75:f0:fc:e0:a6:60:56:3c: ad:f6:fe:eb:3b:05:43:e4:44:7b:9d:3c:db:67:9e:b3:84:80: f3:18:a3:1c:f4:a9:df:45:04:21:ad:8e:b2:a5:83:5d:29:34: 00:cb:f1:a9:43:b7:fb:91:b2:48:27:36:0c:12:6c:39:e7:db: 41:23:88:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUwNDA1MDUyMTI4WhcNMjUwNDEyMDUyMTI4WjAYMRYwFAYD VQQDEw02N2YwYmRkOC04ZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/R/Nv47sMKqQQ/I+RJmwn7LwqoDJfpUG4OlmRWYHLr4WN6qLzKs9qcuhWL2 LO2KzOqxk6UJsKGnNLXVnlkzxQoEe9Lgv4LAfY8oHtMQYHbD1WjkDcaoBffED1WE +bqgDohdKs/Cyhv+0L6URDuVPiFIBMNEaDOEKuJhqY24ieh1E80UZIhkNS+3QpeY FqfP4e57drpDBrQddrT/x5/DDPZS5hj4/euv4SykmG3AjauXTnOTF0ixPJ1OeBLf 6KUv8S5eC3CfVGiUiYnGIABEn2jIZwFIN2cUZaf1vWrMVsX11MC8CCiEbAMYkLgo CMUIJWhoaT4OnZMuprZ9w3KgJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6eiBW9 M1XcarsadskuRrmgbilLMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFgv8UHjz4bKlSCfoRIyu1wp5dMRDoUPul1s9eysSCEob/MfnRxUS2 QIHLfls2JmE6NpjPqR+pUh5RhhGc1GHuDKFP2oLKteNnmBRfWl0xqNGEeVdZzclY qtoMC6B2EWaj7LG19wfukTvn6RXbYJHLK6r5uwt+clpu/CLvycJuawC8pF0zpafM l9JHu+zpukmxFiR6WOrnHhuesvVy3R18w7lWGAI0FChKfjTGe6k7nh8IEO7wRQr7 mHPXFpIqdfD84KZgVjyt9v7rOwVD5ER7nTzbZ56zhIDzGKMc9KnfRQQhrY6ypYNd KTQAy/GpQ7f7kbJIJzYMEmw559tBI4iV -----END CERTIFICATE-----Generated at Sat Apr 5 12:51:23 2025 by rpki-client