$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: Sr8gTSiXb6Vnq3AprzNyHMe+GjX44y7Vaego0s5y13k= Subject key identifier: 67:85:E0:F3:2A:EB:6B:E7:7B:47:1D:B1:01:75:DA:5F:ED:9E:E5:02 Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: D7 Signing time: Tue 17 Jun 2025 04:34:42 +0000 Manifest this update: Tue 17 Jun 2025 04:34:41 +0000 Manifest next update: Tue 24 Jun 2025 04:34:41 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: 0Uo89jE33ng6d1OdabnlwUdE7txNLAgBalLUMGI0tsk=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Jun 17 04:34:41 2025 GMT Not After : Jun 24 04:34:41 2025 GMT Subject: CN=6850f061-4c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:1f:41:2c:21:69:73:ad:7e:9a:bf:f2:e6: 49:39:df:f1:09:55:63:95:ad:b7:ff:b0:d7:02:35: 10:4e:b9:e5:88:d7:f8:a7:60:6a:71:43:42:dc:25: 40:35:01:8b:bf:f6:7e:69:d6:7b:28:5f:5f:82:6d: 07:36:b0:0d:b4:74:22:12:32:86:90:0b:3f:d4:a2: 83:d4:52:b5:d6:a1:49:2d:0f:e4:c1:c2:13:03:48: 46:2f:cb:ef:3d:e6:df:a4:b5:52:95:46:69:4b:c2: 0a:85:bd:c9:67:91:69:aa:c7:49:69:34:bb:08:ec: 04:d1:6f:bd:f9:84:00:5c:a3:ac:b4:2f:e5:a8:91: e4:ad:b9:1b:40:0f:f0:90:82:ff:2d:5b:31:63:48: ff:68:7b:c5:59:9f:3b:1b:d8:49:d7:87:12:48:04: 2e:4a:bd:64:3d:73:be:43:5c:32:a7:de:f6:e8:61: 1a:f1:99:c6:3d:36:ef:0e:1e:4b:00:ee:1a:dc:f2: 71:7a:6f:97:4c:c4:42:64:df:3d:a8:75:13:6c:0e: fe:cf:25:c3:be:45:b2:f8:60:3d:35:29:2c:39:02: 12:39:45:5f:1f:9b:2c:7c:45:77:68:20:28:e2:d5: d4:45:a1:66:ef:9e:5b:de:39:e4:94:d4:72:92:18: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:85:E0:F3:2A:EB:6B:E7:7B:47:1D:B1:01:75:DA:5F:ED:9E:E5:02 X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ab:00:ba:9d:f7:ec:34:b7:7d:d6:ba:97:e3:32:1b:cc:07: d4:f4:c5:89:8b:b4:c3:77:83:3e:2c:db:27:e2:18:0b:c0:b7: 53:20:b0:6b:33:8c:aa:bb:f7:c2:ab:a5:99:f9:df:6e:3d:f3: 28:61:25:f2:69:e2:e0:9d:43:07:26:30:aa:1c:5a:62:dd:b6: 76:83:6b:8e:6c:9f:18:88:c3:f5:21:4f:8c:08:1c:11:0a:14: 24:38:27:59:e4:2b:9f:40:85:7b:3a:b2:f4:1d:7d:8b:e6:2b: f2:ac:aa:65:2f:87:ab:ca:89:a3:a1:aa:49:0a:ff:c5:3c:30: ac:5b:97:01:29:1a:7f:a5:cc:9e:06:58:bd:b8:1b:be:82:cd: 9a:4b:8d:98:7e:03:44:22:73:0e:2a:38:ef:62:2d:60:31:52: 52:09:99:3f:8d:0e:06:73:a9:c9:a4:a3:53:ca:32:41:30:62: 24:26:69:56:02:64:01:6e:00:23:88:e7:e2:8f:5f:b5:e8:17: 9f:8f:8f:e8:03:c1:b6:cf:8c:42:77:2f:a2:48:49:15:bf:50: 84:49:80:5e:68:c7:87:bf:7c:bd:6f:d2:4d:23:08:c8:d8:ed: a4:d8:c1:33:64:e4:1e:b9:fd:6f:ca:f7:a8:fc:cc:ff:f0:94: b7:05:14:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUwNjE3MDQzNDQxWhcNMjUwNjI0MDQzNDQxWjAYMRYwFAYD VQQDEw02ODUwZjA2MS00YzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EYfQSwhaXOtfpq/8uZJOd/xCVVjla23/7DXAjUQTrnliNf4p2BqcUNC3CVA NQGLv/Z+adZ7KF9fgm0HNrANtHQiEjKGkAs/1KKD1FK11qFJLQ/kwcITA0hGL8vv PebfpLVSlUZpS8IKhb3JZ5FpqsdJaTS7COwE0W+9+YQAXKOstC/lqJHkrbkbQA/w kIL/LVsxY0j/aHvFWZ87G9hJ14cSSAQuSr1kPXO+Q1wyp9726GEa8ZnGPTbvDh5L AO4a3PJxem+XTMRCZN89qHUTbA7+zyXDvkWy+GA9NSksOQISOUVfH5ssfEV3aCAo 4tXURaFm755b3jnklNRykhgBlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeF4PMq 62vne0cdsQF12l/tnuUCMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOqwC6nffsNLd91rqX4zIbzAfU9MWJi7TDd4M+LNsn4hgLwLdTILBr M4yqu/fCq6WZ+d9uPfMoYSXyaeLgnUMHJjCqHFpi3bZ2g2uObJ8YiMP1IU+MCBwR ChQkOCdZ5CufQIV7OrL0HX2L5ivyrKplL4eryomjoapJCv/FPDCsW5cBKRp/pcye Bli9uBu+gs2aS42YfgNEInMOKjjvYi1gMVJSCZk/jQ4Gc6nJpKNTyjJBMGIkJmlW AmQBbgAjiOfij1+16Befj4/oA8G2z4xCdy+iSEkVv1CESYBeaMeHv3y9b9JNIwjI 2O2k2MEzZOQeuf1vyveo/Mz/8JS3BRT6 -----END CERTIFICATE-----Generated at Thu Jun 19 00:29:00 2025 by rpki-client