$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: 9XSX2+56Gf4XDEK5WAPiwUUYM1s9PA4VDKIneWUwMB0= Subject key identifier: 20:8E:B6:27:1F:1E:9B:37:C4:0C:6C:35:04:70:8C:3A:EF:E2:E7:15 Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: 011D Signing time: Mon 03 Nov 2025 04:46:45 +0000 Manifest this update: Mon 03 Nov 2025 04:46:45 +0000 Manifest next update: Mon 10 Nov 2025 04:46:45 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: wAy/+8z+tfxSPEVKzxkL0BBGZMRDAxZ6h3VRUVY4e90=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Nov 3 04:46:45 2025 GMT Not After : Nov 10 04:46:45 2025 GMT Subject: CN=690833b5-6011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8f:d3:5f:2b:09:c1:e8:45:9f:02:6f:8e:cc: 88:db:36:4a:44:37:e1:aa:9c:2d:87:bc:0e:87:95: a0:f6:d3:0c:8e:55:6c:1b:02:98:c1:81:96:e5:ac: 61:d0:06:af:de:a7:11:b2:ca:65:a9:7f:b2:62:1e: 7b:a8:99:fa:41:0b:35:70:d3:5d:9c:b7:a2:a3:00: 0a:80:af:ff:db:62:21:e7:a1:46:5f:ea:e8:03:69: 7f:58:92:d9:ab:22:ce:ba:bb:44:28:e8:67:73:2d: 00:6d:b6:4b:bd:1b:4a:9f:2b:72:62:0a:34:3c:49: 7c:72:26:bd:bb:78:95:56:1a:44:e1:ea:0f:45:0b: 66:6c:3a:bf:79:55:81:8c:42:f2:08:44:32:b1:07: 12:97:ea:69:58:92:33:dd:8a:f2:d7:6e:09:1c:bb: 86:43:16:e3:84:0e:e6:e8:d0:4a:ae:49:65:26:2e: 76:f1:e8:ab:6b:7c:e9:58:5c:ec:c6:e7:aa:49:06: 2d:cf:13:8b:a4:3e:5b:0c:2f:c1:48:8b:4d:dc:b2: da:da:e7:64:59:3a:09:10:8f:81:24:ec:01:ab:a6: 80:63:15:64:2d:37:88:b8:43:61:dc:a5:70:6a:f3: 69:94:7e:7e:d1:38:1f:d2:06:01:39:fb:3a:22:b6: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8E:B6:27:1F:1E:9B:37:C4:0C:6C:35:04:70:8C:3A:EF:E2:E7:15 X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:36:e5:f9:b6:60:36:e1:41:80:ff:9c:2a:2a:6e:76:65:66: aa:cc:56:98:65:27:7e:24:79:31:1e:89:8a:a1:04:ca:dc:d5: 5d:c2:08:7f:24:e2:6c:2f:1b:e0:10:7f:f3:79:a9:d8:c2:ab: 2b:6b:fa:e4:ec:fe:d0:1b:1d:ef:d6:2b:cf:10:33:51:1f:87: 39:10:e5:f1:20:a3:a3:17:5c:16:b4:0a:f0:cb:30:2a:ef:fe: 50:34:de:94:86:5b:e0:d3:a2:89:1d:67:de:d5:2e:e4:71:ea: 51:04:39:19:d7:32:37:6e:d0:a9:5f:d0:7c:b3:1f:e5:f4:6a: 68:a4:98:45:72:08:67:b7:15:b7:48:8c:f2:82:e1:ee:d3:71: f7:6b:4b:43:40:ec:bb:9c:a2:7c:8e:d2:95:d2:5e:c2:fc:62: 5e:a3:43:b5:e1:f2:0b:67:d9:d9:5e:34:00:b5:4a:85:e6:82: 8d:18:57:1f:51:ce:77:05:13:92:95:b4:e7:6d:0c:f4:51:bc: f3:16:aa:db:29:54:34:a2:3a:57:78:ab:75:1b:de:07:46:d5: bc:46:ce:f3:16:7e:b7:26:0a:e5:9c:de:e7:86:4a:c7:f7:1d: 56:9b:ab:a9:00:4e:9e:44:33:6b:12:ea:eb:21:8d:22:7a:15: 8a:9b:3c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUxMTAzMDQ0NjQ1WhcNMjUxMTEwMDQ0NjQ1WjAYMRYwFAYD VQQDEw02OTA4MzNiNS02MDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4o/TXysJwehFnwJvjsyI2zZKRDfhqpwth7wOh5Wg9tMMjlVsGwKYwYGW5axh 0Aav3qcRssplqX+yYh57qJn6QQs1cNNdnLeiowAKgK//22Ih56FGX+roA2l/WJLZ qyLOurtEKOhncy0AbbZLvRtKnytyYgo0PEl8cia9u3iVVhpE4eoPRQtmbDq/eVWB jELyCEQysQcSl+ppWJIz3Yry124JHLuGQxbjhA7m6NBKrkllJi528eira3zpWFzs xueqSQYtzxOLpD5bDC/BSItN3LLa2udkWToJEI+BJOwBq6aAYxVkLTeIuENh3KVw avNplH5+0Tgf0gYBOfs6Ira5eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCOticf Hps3xAxsNQRwjDrv4ucVMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvNuX5tmA24UGA/5wqKm52ZWaqzFaYZSd+JHkxHomKoQTK3NVdwgh/ JOJsLxvgEH/zeanYwqsra/rk7P7QGx3v1ivPEDNRH4c5EOXxIKOjF1wWtArwyzAq 7/5QNN6Uhlvg06KJHWfe1S7kcepRBDkZ1zI3btCpX9B8sx/l9GpopJhFcghntxW3 SIzyguHu03H3a0tDQOy7nKJ8jtKV0l7C/GJeo0O14fILZ9nZXjQAtUqF5oKNGFcf Uc53BROSlbTnbQz0UbzzFqrbKVQ0ojpXeKt1G94HRtW8Rs7zFn63JgrlnN7nhkrH 9x1Wm6upAE6eRDNrEurrIY0iehWKmzz9 -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:08 2025 by rpki-client