$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: B5uLziit/q7w8TZcULlfX121mBsb3kiDMhV6BD6L7gE= Subject key identifier: F4:D7:69:D1:08:68:01:F5:83:74:B0:FD:5B:A2:C9:86:5A:A6:AC:A8 Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: CE Signing time: Sat 31 May 2025 05:18:36 +0000 Manifest this update: Sat 31 May 2025 05:18:35 +0000 Manifest next update: Sat 07 Jun 2025 05:18:35 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: YvPefi5R7yjyAQvIe+YerAhO6Fq2dsfQ7wlPs/E3D3g=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: May 31 05:18:35 2025 GMT Not After : Jun 7 05:18:35 2025 GMT Subject: CN=683a912c-5372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:ed:9f:43:57:15:52:ce:f2:e3:3f:dc:27: 36:cf:3e:03:f5:4b:75:05:5d:10:43:69:67:87:88: 53:9f:8e:49:69:66:4b:fe:d2:95:3a:c8:fd:ff:d7: 5f:d1:2f:89:5e:b4:26:82:7f:4e:22:ae:39:37:aa: 8a:2f:19:d2:d8:ef:cb:8a:9b:01:af:20:43:77:a3: f8:29:2d:72:4f:d1:bc:a3:2b:84:f8:3f:e0:ce:17: 30:05:3c:76:50:87:7c:78:4f:27:bb:e4:1e:32:e2: 8d:c9:ca:78:51:a9:9a:5a:df:17:38:90:9d:fa:d8: 49:c2:fb:66:8b:b3:ed:51:32:b1:34:76:2b:63:49: d8:bb:e3:6e:aa:29:9d:63:32:03:b6:2e:9a:76:4e: 71:fb:07:5f:62:fe:15:26:de:a4:85:93:47:b4:e9: aa:19:c9:3d:b5:c4:44:23:fe:b3:33:21:5a:07:f1: ba:59:2d:16:fd:05:e2:a9:b8:37:3d:c1:00:f9:f5: 0d:eb:0f:9e:30:36:c4:9a:44:4f:92:75:f0:8c:dd: b4:c2:11:df:3f:48:ed:3d:7e:12:2b:ad:4e:9e:1c: c3:0d:9f:e5:7f:56:6d:5c:f2:c1:0a:08:07:f1:e4: 1d:fc:3a:1c:7a:da:0e:3a:c3:5a:5b:af:c6:5f:56: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D7:69:D1:08:68:01:F5:83:74:B0:FD:5B:A2:C9:86:5A:A6:AC:A8 X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:f3:ae:c7:c6:2b:8b:e4:52:fb:21:16:7c:8d:44:56:90:e2: fb:4c:27:d7:ed:7d:64:15:bd:aa:64:d5:22:57:30:26:98:e2: 27:e0:9d:17:0f:4d:52:8a:a9:25:64:1e:4d:fb:39:35:8b:1b: 89:90:d1:88:75:70:3f:e5:b4:59:9f:f9:b2:06:8e:4e:f4:9f: 6a:e1:86:7f:f2:4c:80:fd:92:31:56:dc:cd:81:92:97:e2:18: 17:61:27:2f:5b:1f:13:dc:91:ee:28:70:6c:9f:a1:ea:66:37: b6:c3:35:3a:45:86:18:c3:ac:57:82:2e:08:41:22:a0:a3:dc: 32:74:68:7c:4c:f3:f4:d3:fd:be:76:ee:8a:19:7d:8d:22:51: 8e:14:4d:cf:26:fe:d2:38:9c:31:58:a5:67:00:7f:0c:2d:10: 8c:14:c3:a1:62:3e:d5:ef:56:9c:33:86:14:be:dc:f6:d7:d2: e4:46:2b:f5:91:fa:d6:66:48:29:0d:ff:b4:be:d9:45:b5:66: 31:f0:87:62:fc:de:97:f8:8d:9c:7d:b0:7c:85:ca:2b:3d:90: fe:18:5b:b2:f5:c4:0f:97:c4:3f:f5:d7:e0:fe:45:66:c1:67: 9d:2f:5f:92:dc:46:8f:77:c3:fd:5d:e7:4f:d6:53:8c:32:7a: ae:4f:db:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUwNTMxMDUxODM1WhcNMjUwNjA3MDUxODM1WjAYMRYwFAYD VQQDEw02ODNhOTEyYy01MzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6/tn0NXFVLO8uM/3Cc2zz4D9Ut1BV0QQ2lnh4hTn45JaWZL/tKVOsj9/9df 0S+JXrQmgn9OIq45N6qKLxnS2O/LipsBryBDd6P4KS1yT9G8oyuE+D/gzhcwBTx2 UId8eE8nu+QeMuKNycp4UamaWt8XOJCd+thJwvtmi7PtUTKxNHYrY0nYu+Nuqimd YzIDti6adk5x+wdfYv4VJt6khZNHtOmqGck9tcREI/6zMyFaB/G6WS0W/QXiqbg3 PcEA+fUN6w+eMDbEmkRPknXwjN20whHfP0jtPX4SK61OnhzDDZ/lf1ZtXPLBCggH 8eQd/DocetoOOsNaW6/GX1YK1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTXadEI aAH1g3Sw/VuiyYZapqyoMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz867HxiuL5FL7IRZ8jURWkOL7TCfX7X1kFb2qZNUiVzAmmOIn4J0X D01SiqklZB5N+zk1ixuJkNGIdXA/5bRZn/myBo5O9J9q4YZ/8kyA/ZIxVtzNgZKX 4hgXYScvWx8T3JHuKHBsn6HqZje2wzU6RYYYw6xXgi4IQSKgo9wydGh8TPP00/2+ du6KGX2NIlGOFE3PJv7SOJwxWKVnAH8MLRCMFMOhYj7V71acM4YUvtz219LkRiv1 kfrWZkgpDf+0vtlFtWYx8Idi/N6X+I2cfbB8hcorPZD+GFuy9cQPl8Q/9dfg/kVm wWedL1+S3EaPd8P9XedP1lOMMnquT9tG -----END CERTIFICATE-----Generated at Sat May 31 17:07:39 2025 by rpki-client