$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: DmhvDhN38KAfoWxYqRLeKLwdlsaawWAMPJD4MDN1FYY= Subject key identifier: ED:63:37:7F:38:30:8B:F6:5A:37:89:08:E1:93:E0:DF:88:EC:0B:06 Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: 01B3 Signing time: Wed 19 Aug 2026 04:38:27 +0000 Manifest this update: Wed 19 Aug 2026 04:38:27 +0000 Manifest next update: Wed 26 Aug 2026 04:38:27 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: ZKuIeiaX/cd9amozjopd2R6/tgDe7SpwewCQErG0z9E=) 2: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: QctUwaISCCsjTsg8d6+OCTF1bXP6fQ+c0E+PJuOqkfE=) 3: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: MmWFM1dURxQD1o2oF69cp1HxMUdsdeEfUuFqXRdwgSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Aug 19 04:38:27 2026 GMT Not After : Aug 26 04:38:27 2026 GMT Subject: CN=6a853343-d210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:6e:88:cf:b5:2d:af:d3:a9:15:ac:2b:ec: 1a:7e:dc:e7:0c:0f:05:57:75:28:f6:6d:8a:02:3b: aa:10:09:ce:22:85:ff:55:07:08:05:67:20:cf:d6: 98:43:8a:9e:a8:1b:ce:b4:e8:83:c1:0a:3c:d5:62: 96:d3:40:c0:5b:b6:0d:6e:a2:4f:a5:e0:cc:c5:6a: 37:72:6b:c0:63:75:e1:2f:4d:dd:34:8e:3e:85:9a: a3:ad:54:07:8e:d4:c9:c3:73:f9:c6:39:8c:8a:61: bd:d3:c8:8b:53:02:e1:0d:cb:40:a5:c3:64:ae:2a: 5d:61:6f:b4:cb:b1:62:cc:c6:b0:60:8c:fa:44:da: a5:8c:67:36:8c:f4:15:4e:ea:18:c9:ed:32:f7:29: 46:a2:ef:8b:ef:80:8b:e7:08:b2:ef:da:85:92:ad: fd:80:b8:80:15:fe:ef:ec:0d:a7:c3:a9:69:9a:3f: d5:1f:15:e9:2b:6f:55:e0:ed:86:90:a5:2d:75:89: 6f:79:30:58:b9:78:b3:ba:3b:76:e5:b7:54:1d:7e: ba:d9:3b:59:ac:99:a9:69:1e:ea:d1:6e:46:9d:c0: ba:da:0f:c3:5c:75:9e:6c:53:45:fe:b1:6f:1d:d7: 4a:00:16:c2:49:78:04:09:7b:cb:29:7f:4a:d6:87: f0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:63:37:7F:38:30:8B:F6:5A:37:89:08:E1:93:E0:DF:88:EC:0B:06 X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:23:cb:b6:8c:27:ba:57:41:43:fb:94:b5:98:23:ee:6f:db: f9:b2:67:d8:04:9f:53:df:89:b1:4a:89:90:69:ce:c3:7b:17: e5:c5:90:df:1c:79:f7:52:4f:b1:f7:8b:26:41:37:ae:c5:d5: 1a:d1:b0:9b:14:66:12:28:53:77:5b:8c:77:58:0b:70:82:bb: 12:65:fd:34:10:41:2a:29:f5:ae:91:06:22:ed:84:68:0b:92: a8:de:e3:1c:2d:74:4e:f5:cc:45:5f:20:4e:2d:2a:81:6e:35: 72:ce:a4:e9:62:7b:51:b2:e1:7e:bb:a5:36:f4:03:a7:42:71: e9:0d:ad:03:f4:1b:8a:ee:34:07:69:aa:e1:de:2b:6c:ad:87: 46:a9:c0:39:15:7c:5c:8d:18:91:6d:1f:02:d1:5e:be:86:cd: 55:24:66:07:a4:cd:05:cb:4d:81:cf:08:d4:56:0c:70:c0:ec: b6:40:b4:35:48:ec:3d:82:e7:96:aa:a4:ba:11:43:02:a9:e4: 3b:a2:6d:85:6b:31:fb:9a:05:3c:fb:a0:2f:7d:21:bd:86:05: 05:60:dc:e3:8e:5f:61:7a:e3:c7:8d:9b:7d:dd:cd:be:49:89: d9:19:48:11:f5:16:40:6c:87:f9:5f:d4:3f:95:97:c1:74:d0: ef:08:72:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjYwODE5MDQzODI3WhcNMjYwODI2MDQzODI3WjAYMRYwFAYD VQQDEw02YTg1MzM0My1kMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NZuiM+1La/TqRWsK+waftznDA8FV3Uo9m2KAjuqEAnOIoX/VQcIBWcgz9aY Q4qeqBvOtOiDwQo81WKW00DAW7YNbqJPpeDMxWo3cmvAY3XhL03dNI4+hZqjrVQH jtTJw3P5xjmMimG908iLUwLhDctApcNkripdYW+0y7FizMawYIz6RNqljGc2jPQV TuoYye0y9ylGou+L74CL5wiy79qFkq39gLiAFf7v7A2nw6lpmj/VHxXpK29V4O2G kKUtdYlveTBYuXizujt25bdUHX662TtZrJmpaR7q0W5GncC62g/DXHWebFNF/rFv HddKABbCSXgECXvLKX9K1ofwzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1jN384 MIv2WjeJCOGT4N+I7AsGMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSPLtownuldBQ/uUtZgj7m/b+bJn2ASfU9+JsUqJkGnOw3sX5cWQ3xx591JP sfeLJkE3rsXVGtGwmxRmEihTd1uMd1gLcIK7EmX9NBBBKin1rpEGIu2EaAuSqN7j HC10TvXMRV8gTi0qgW41cs6k6WJ7UbLhfrulNvQDp0Jx6Q2tA/Qbiu40B2mq4d4r bK2HRqnAORV8XI0YkW0fAtFevobNVSRmB6TNBctNgc8I1FYMcMDstkC0NUjsPYLn lqqkuhFDAqnkO6JthWsx+5oFPPugL30hvYYFBWDc445fYXrjx42bfd3NvkmJ2RlI EfUWQGyH+V/UP5WXwXTQ7whylg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:51 2026 by rpki-client