$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: ZGRn+BbR73ph/hq+clbK19cuCmZsd/6E1cs9DMtHxBg= Subject key identifier: 16:6E:38:AE:E6:65:06:8E:8A:A3:3C:ED:8D:3A:4A:99:F4:CE:AE:99 Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: 0186 Signing time: Thu 21 May 2026 04:34:44 +0000 Manifest this update: Thu 21 May 2026 04:34:43 +0000 Manifest next update: Thu 28 May 2026 04:34:43 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: TPcyb9JikPFTCkAXsgQBvtNrXWEjYroJOWnjcBoJ32I=) 2: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: QctUwaISCCsjTsg8d6+OCTF1bXP6fQ+c0E+PJuOqkfE=) 3: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: MmWFM1dURxQD1o2oF69cp1HxMUdsdeEfUuFqXRdwgSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: May 21 04:34:43 2026 GMT Not After : May 28 04:34:43 2026 GMT Subject: CN=6a0e8b63-1e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:c2:af:b0:34:8d:ef:b9:5b:59:f2:0d:40: de:ec:24:01:fc:fc:01:2f:54:d6:14:11:81:a1:00: fc:6f:98:98:d9:7b:18:df:15:e7:80:10:80:8f:1e: d2:12:1d:ac:0c:85:d9:54:cf:cf:57:e0:a5:95:c3: 9d:bf:9e:64:7f:3a:3f:91:7c:42:2a:35:15:69:f5: c2:2f:9d:99:fd:68:f8:92:56:94:e9:83:fb:9f:79: 23:a2:c3:68:4a:1a:f4:68:d9:e3:19:a4:56:a3:23: 3a:83:8a:5b:a5:af:70:79:ef:73:a3:eb:91:f2:29: 10:c9:b8:52:6f:91:06:32:a5:ce:76:da:71:dc:1e: ed:79:4b:fc:bf:78:88:08:2a:05:2c:df:35:15:0e: a3:19:e1:b3:76:ed:96:2c:31:95:28:22:56:fc:e3: 52:65:d6:19:4d:03:8b:76:ea:cc:30:4f:a8:01:51: d5:8f:4a:e7:42:57:e2:48:40:5b:7b:a5:46:e2:2d: 8a:a3:36:32:ad:b3:7c:8e:02:be:16:0c:81:ee:25: c2:5e:e0:f5:94:50:7f:a4:27:4e:7c:11:3b:39:a4: c5:79:77:ee:bf:a6:43:f4:3d:9a:ca:9c:e3:03:78: e4:5a:0b:e3:87:9b:3a:b1:87:da:54:b0:6a:44:af: ce:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6E:38:AE:E6:65:06:8E:8A:A3:3C:ED:8D:3A:4A:99:F4:CE:AE:99 X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:74:9e:8e:a3:12:b4:bf:18:02:46:e9:0c:cc:27:33:ea:12: f3:bf:46:f8:c0:6e:cf:24:a0:ca:16:27:c4:be:58:a7:68:3f: a3:71:c7:c5:0e:87:39:2b:10:98:a4:44:6c:f7:50:11:f0:44: c7:48:f8:d3:3b:29:96:73:32:a9:7a:61:b4:90:7d:af:75:1c: 88:a7:8a:ed:70:be:13:dc:81:10:03:bf:32:91:56:cc:4f:c2: 3e:3f:1b:f5:5a:43:21:a6:2a:0b:b5:89:38:55:d8:23:37:ba: 2d:75:18:17:03:53:6e:2d:7d:3c:ef:42:87:e8:03:ec:98:fd: d0:58:54:7c:07:6e:74:6a:04:f5:49:d0:69:53:9e:14:58:d0: 5c:5f:5b:69:81:aa:67:1d:35:a5:55:ac:4f:f3:68:c8:32:e1: 65:3d:7e:c7:0f:3c:6b:3f:f3:57:da:09:f9:11:55:80:d6:84: a2:14:c7:9f:6a:e2:b1:31:a3:aa:d2:b3:0f:9c:61:36:ee:91: 55:dd:94:66:a4:f5:c4:b3:e1:9c:8d:3a:2d:5d:39:99:4a:6a: 16:fe:f8:04:98:b3:12:7e:6d:96:31:3f:a6:fb:e7:71:3f:a1: 9a:14:42:91:7c:a8:32:cf:e5:02:7b:ed:f4:2f:8c:7f:a0:2a: b3:c6:cb:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjYwNTIxMDQzNDQzWhcNMjYwNTI4MDQzNDQzWjAYMRYwFAYD VQQDEw02YTBlOGI2My0xZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaLCr7A0je+5W1nyDUDe7CQB/PwBL1TWFBGBoQD8b5iY2XsY3xXngBCAjx7S Eh2sDIXZVM/PV+CllcOdv55kfzo/kXxCKjUVafXCL52Z/Wj4klaU6YP7n3kjosNo Shr0aNnjGaRWoyM6g4pbpa9wee9zo+uR8ikQybhSb5EGMqXOdtpx3B7teUv8v3iI CCoFLN81FQ6jGeGzdu2WLDGVKCJW/ONSZdYZTQOLdurMME+oAVHVj0rnQlfiSEBb e6VG4i2KozYyrbN8jgK+FgyB7iXCXuD1lFB/pCdOfBE7OaTFeXfuv6ZD9D2aypzj A3jkWgvjh5s6sYfaVLBqRK/OBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZuOK7m ZQaOiqM87Y06Spn0zq6ZMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASXSejqMStL8YAkbpDMwnM+oS879G+MBuzySgyhYnxL5Yp2g/o3HHxQ6HOSsQ mKREbPdQEfBEx0j40zsplnMyqXphtJB9r3UciKeK7XC+E9yBEAO/MpFWzE/CPj8b 9VpDIaYqC7WJOFXYIze6LXUYFwNTbi19PO9Ch+gD7Jj90FhUfAdudGoE9UnQaVOe FFjQXF9baYGqZx01pVWsT/NoyDLhZT1+xw88az/zV9oJ+RFVgNaEohTHn2risTGj qtKzD5xhNu6RVd2UZqT1xLPhnI06LV05mUpqFv74BJizEn5tljE/pvvncT+hmhRC kXyoMs/lAnvt9C+Mf6Aqs8bLoA== -----END CERTIFICATE-----Generated at Thu May 21 11:03:46 2026 by rpki-client