$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: 1U21qGVGEF9slDcVfQXxkGYd6cvm4e8Y0GMSyfj+E4Q= Subject key identifier: 61:CE:3C:61:9F:59:2D:55:D1:14:31:D6:6A:64:9F:3F:9B:DA:29:EA Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: F2 Signing time: Sat 09 Aug 2025 05:42:07 +0000 Manifest this update: Sat 09 Aug 2025 05:42:06 +0000 Manifest next update: Sat 16 Aug 2025 05:42:06 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: UEbR2rStJyNL1YdiKTxpy7LenfmJwyQeG0GtrfcgYxA=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Aug 9 05:42:06 2025 GMT Not After : Aug 16 05:42:06 2025 GMT Subject: CN=6896dfaf-bf8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:23:68:bb:80:70:19:5a:b8:8a:9e:7c:40: d3:10:e3:59:df:71:9d:12:9f:ab:0a:e9:2a:15:26: 04:11:14:a9:02:a4:db:d2:23:b0:1d:f0:53:68:59: a0:21:19:c6:4d:db:13:93:cd:7f:5b:86:f9:4a:0a: c3:d3:da:8a:74:fd:67:9f:93:73:f7:36:25:33:37: fc:da:34:22:82:1b:37:46:37:4b:6a:d4:4a:5c:a1: d9:a9:f7:23:9b:bf:cf:81:28:a8:15:90:0b:76:03: 94:a9:9c:17:78:b4:52:13:60:5f:ee:93:f3:45:2c: 0f:55:77:d9:c0:39:dd:99:a4:7e:de:7e:87:27:d3: 65:33:f2:cd:22:9a:4a:2c:96:bf:b2:c0:14:e0:77: e3:e4:1e:4d:df:1b:3b:df:af:4f:21:a4:19:2e:7f: dd:f4:fd:56:ed:f0:9e:03:69:dc:bc:50:d2:37:ec: 75:ab:28:51:d8:6c:f8:e1:ef:36:b9:7c:ee:21:30: 26:23:a1:5b:a8:1f:26:b4:cf:9f:b3:62:ca:2f:4d: fe:b1:57:86:b8:28:f5:d1:40:ad:13:da:66:3d:a2: 81:28:b1:12:bf:0a:af:a7:1a:8d:73:09:9f:8c:bd: 38:8e:2b:7e:d4:08:e4:fa:8b:0c:e1:8b:54:78:f8: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CE:3C:61:9F:59:2D:55:D1:14:31:D6:6A:64:9F:3F:9B:DA:29:EA X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:43:1a:b1:39:1f:33:e4:2f:84:1c:90:6b:72:85:cd:01:9b: 90:7c:51:2d:fc:5c:e1:56:59:b8:be:37:98:9f:1b:02:51:f3: 23:e6:6d:e0:77:27:88:54:70:e6:1c:56:86:e4:aa:24:48:93: df:3c:70:a3:16:13:a2:6c:97:40:6b:9b:db:bb:79:6b:49:95: 48:07:41:6a:da:9b:c3:a0:6f:89:d8:7d:da:45:70:23:47:3c: f4:5d:10:fc:7f:71:06:18:8b:2a:6e:24:37:28:04:a3:8b:2c: 9a:ee:83:64:22:50:66:46:15:4e:56:8e:78:13:00:02:a8:17: ed:a6:ed:00:ce:a7:a8:ce:5d:6a:86:14:72:2e:72:14:88:74: be:c1:bc:93:00:7e:ae:a5:0d:69:1e:eb:b7:b7:98:59:30:b2: 60:5f:13:d0:37:bd:21:92:11:e5:d2:01:e7:87:bf:89:5a:c4: a1:f9:21:60:9b:c1:b7:cd:36:81:07:27:be:08:48:d9:ab:1b: 7b:4b:b1:5c:01:60:ac:0a:57:5f:3f:f2:0d:94:45:02:f5:47: ca:a6:68:bb:72:72:64:64:70:c0:ce:e0:1b:f7:59:90:eb:50: 22:27:f8:39:46:89:d1:62:bc:30:97:68:87:f1:d0:00:9a:6e: dd:e5:37:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUwODA5MDU0MjA2WhcNMjUwODE2MDU0MjA2WjAYMRYwFAYD VQQDEw02ODk2ZGZhZi1iZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIQjaLuAcBlauIqefEDTEONZ33GdEp+rCukqFSYEERSpAqTb0iOwHfBTaFmg IRnGTdsTk81/W4b5SgrD09qKdP1nn5Nz9zYlMzf82jQighs3RjdLatRKXKHZqfcj m7/PgSioFZALdgOUqZwXeLRSE2Bf7pPzRSwPVXfZwDndmaR+3n6HJ9NlM/LNIppK LJa/ssAU4Hfj5B5N3xs7369PIaQZLn/d9P1W7fCeA2ncvFDSN+x1qyhR2Gz44e82 uXzuITAmI6FbqB8mtM+fs2LKL03+sVeGuCj10UCtE9pmPaKBKLESvwqvpxqNcwmf jL04jit+1Ajk+osM4YtUePhwyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHOPGGf WS1V0RQx1mpknz+b2inqMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqQxqxOR8z5C+EHJBrcoXNAZuQfFEt/FzhVlm4vjeYnxsCUfMj5m3g dyeIVHDmHFaG5KokSJPfPHCjFhOibJdAa5vbu3lrSZVIB0Fq2pvDoG+J2H3aRXAj Rzz0XRD8f3EGGIsqbiQ3KASjiyya7oNkIlBmRhVOVo54EwACqBftpu0Azqeozl1q hhRyLnIUiHS+wbyTAH6upQ1pHuu3t5hZMLJgXxPQN70hkhHl0gHnh7+JWsSh+SFg m8G3zTaBBye+CEjZqxt7S7FcAWCsCldfP/INlEUC9UfKpmi7cnJkZHDAzuAb91mQ 61AiJ/g5RonRYrwwl2iH8dAAmm7d5TcI -----END CERTIFICATE-----Generated at Sun Aug 10 10:33:01 2025 by rpki-client