$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: Pax9xuo7WdlbmczcvL4CLnruMO8De7ju9VzK8CNz0uo= Subject key identifier: D2:FD:F9:5F:00:6D:56:F0:A2:35:5A:D9:B5:A5:E0:40:68:D3:0B:D9 Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: C0 Signing time: Thu 01 May 2025 04:52:22 +0000 Manifest this update: Thu 01 May 2025 04:52:22 +0000 Manifest next update: Thu 08 May 2025 04:52:22 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: ia6faa+qedxOiZ131B4rSXYso150Gt+s4MnFoRvoYZ0=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: May 1 04:52:22 2025 GMT Not After : May 8 04:52:22 2025 GMT Subject: CN=6812fe06-8955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d3:2a:a0:18:34:be:50:d5:aa:c5:3d:b7:f1: a7:50:2c:e7:bc:1e:15:79:c2:e7:8c:b7:e0:90:45: ca:72:5e:9f:3b:3d:fb:d6:a6:ca:b8:62:d3:50:48: d7:5e:0c:fa:26:36:33:59:95:57:ab:66:b7:e4:ad: 2c:9e:b3:12:40:fa:32:ca:1b:89:60:67:96:bd:7d: b1:b4:a7:5e:72:fa:36:c8:8e:15:4c:23:96:8d:00: c4:10:ce:e8:60:d8:51:c9:20:da:68:9e:13:3e:f9: 8e:71:72:af:f0:28:9d:09:64:8f:d7:0c:1b:42:ad: 25:55:9b:9c:ea:56:9c:6c:9a:79:1e:5f:8e:47:f3: 99:0c:26:f8:1d:b1:fc:77:3b:2b:de:a6:48:76:4a: 93:37:be:2e:67:1a:20:61:f2:bd:9f:d3:8f:df:02: 74:2f:5f:b5:a2:64:f3:55:8d:15:10:4c:1d:d8:c2: 99:fa:b3:1a:d2:48:6d:58:15:83:62:1a:b6:52:0c: cb:76:a6:39:34:b0:b3:16:25:e2:f2:36:49:8a:1b: 80:82:94:e2:6d:4b:22:17:fd:4d:f0:07:9a:d0:19: bd:54:68:5a:29:74:42:82:6c:1a:66:99:c4:81:53: 87:0e:b3:78:62:26:c1:96:05:96:b3:74:eb:f2:24: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FD:F9:5F:00:6D:56:F0:A2:35:5A:D9:B5:A5:E0:40:68:D3:0B:D9 X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5b:3d:c5:82:9f:71:92:5a:45:3a:ad:25:05:59:c5:1b:61: b9:ad:ea:52:d7:d0:8b:e8:11:33:ca:2c:00:3f:45:60:35:bb: bb:a8:d6:c0:ac:0b:a3:2f:37:86:c0:a5:7b:d1:81:eb:a0:eb: fc:41:bd:14:01:51:e3:d5:3b:ae:ef:f2:14:7e:ed:0b:25:bf: 9c:ac:4e:7e:17:12:09:e3:da:26:12:95:46:5e:83:36:09:df: ad:42:f6:07:8b:33:e0:8a:a7:cb:82:b8:87:01:72:a7:87:72: 05:91:b2:a0:8a:ab:b2:13:e3:74:66:f8:8e:8e:bd:2e:1b:43: 3a:c5:96:53:eb:51:54:ef:2a:4f:60:ae:2b:79:87:fa:65:d7: 72:9b:e7:d6:87:12:ad:ba:0f:1b:95:46:22:83:7d:ef:94:0c: 60:06:4d:11:98:d4:78:f1:4c:b4:06:24:49:01:d5:69:d6:63: ab:25:ba:e4:45:82:2a:ac:96:83:28:60:4c:c1:af:b4:ae:e1: 7f:9f:3a:8d:11:96:75:ed:23:9a:b4:4f:a7:24:35:2c:5f:49: ea:66:49:7f:ad:4a:1c:ab:d8:7b:c7:4c:81:12:13:4e:f0:38: 56:a8:45:3b:af:a3:92:97:b5:26:8b:c7:19:9e:7e:5d:c8:ab: c6:15:89:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUwNTAxMDQ1MjIyWhcNMjUwNTA4MDQ1MjIyWjAYMRYwFAYD VQQDEw02ODEyZmUwNi04OTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59MqoBg0vlDVqsU9t/GnUCznvB4VecLnjLfgkEXKcl6fOz371qbKuGLTUEjX Xgz6JjYzWZVXq2a35K0snrMSQPoyyhuJYGeWvX2xtKdecvo2yI4VTCOWjQDEEM7o YNhRySDaaJ4TPvmOcXKv8CidCWSP1wwbQq0lVZuc6lacbJp5Hl+OR/OZDCb4HbH8 dzsr3qZIdkqTN74uZxogYfK9n9OP3wJ0L1+1omTzVY0VEEwd2MKZ+rMa0khtWBWD Yhq2UgzLdqY5NLCzFiXi8jZJihuAgpTibUsiF/1N8Aea0Bm9VGhaKXRCgmwaZpnE gVOHDrN4YibBlgWWs3Tr8iTs2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL9+V8A bVbwojVa2bWl4EBo0wvZMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIxMy81NTQzQkNDNDA1RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERF VUtUa1RXX0Q0N3g3NkdWQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzWz3Fgp9xklpFOq0lBVnFG2G5repS19CL6BEzyiwAP0VgNbu7qNbA rAujLzeGwKV70YHroOv8Qb0UAVHj1Tuu7/IUfu0LJb+crE5+FxIJ49omEpVGXoM2 Cd+tQvYHizPgiqfLgriHAXKnh3IFkbKgiquyE+N0ZviOjr0uG0M6xZZT61FU7ypP YK4reYf6Zddym+fWhxKtug8blUYig33vlAxgBk0RmNR48Uy0BiRJAdVp1mOrJbrk RYIqrJaDKGBMwa+0ruF/nzqNEZZ17SOatE+nJDUsX0nqZkl/rUocq9h7x0yBEhNO 8DhWqEU7r6OSl7Umi8cZnn5dyKvGFYkr -----END CERTIFICATE-----Generated at Fri May 2 07:10:12 2025 by rpki-client