$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: p5ax2CIbPwfIyi79VXDpDkDEFgMwD0yooJDHavKVV/g= Subject key identifier: 56:D5:04:C2:47:10:CC:C7:35:5A:8E:67:B1:7F:5D:51:E4:F3:9B:27 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 0234 Signing time: Sat 09 Aug 2025 05:14:23 +0000 Manifest this update: Sat 09 Aug 2025 05:14:23 +0000 Manifest next update: Sat 16 Aug 2025 05:14:23 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: 1ePo0j06mk+W44a52MB8jZT2lEwOOyl7ljgQ18zoZGE=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Aug 9 05:14:23 2025 GMT Not After : Aug 16 05:14:23 2025 GMT Subject: CN=6896d92f-48c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:19:a4:55:d4:43:06:de:0b:a8:d3:65:d3:50: c1:c5:8a:33:c3:06:e1:89:70:ec:96:68:ba:56:3c: 70:66:5e:20:5b:71:89:04:af:87:40:0e:54:b0:b1: a2:9a:6f:c7:24:aa:a6:8e:46:02:6e:44:ac:90:83: 24:38:96:9d:76:bb:d4:15:c7:74:7c:9c:8d:55:ad: 22:b2:c7:34:f9:8c:d8:99:55:0c:79:61:00:ad:6a: 08:64:5c:f2:25:1e:20:e5:3d:2f:48:3c:4d:8e:b0: ff:87:3d:6c:bc:46:98:53:2a:ab:46:f6:ba:e3:72: 87:d4:79:cd:af:28:12:ac:a0:65:4f:96:7a:ed:a5: 1d:94:2c:4f:58:62:7c:47:3e:f5:51:a6:fb:4b:7d: 81:5a:f7:f3:e7:a0:d8:fc:84:ad:fa:4b:0f:b2:2c: e9:10:20:c7:c6:8e:e1:93:29:33:57:88:fd:6b:3c: a9:17:02:14:8b:b3:e2:3e:c5:05:cd:ac:69:62:72: e3:8a:65:17:20:7a:21:84:94:64:06:db:40:78:2d: ec:e1:22:08:61:d3:7d:d4:8d:18:9e:f2:c2:81:e1: f4:9e:49:e1:1f:2e:ba:bb:59:06:8d:3a:dc:a0:67: 13:aa:65:f1:7b:09:02:c8:72:9e:e2:88:20:f5:f5: 3d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D5:04:C2:47:10:CC:C7:35:5A:8E:67:B1:7F:5D:51:E4:F3:9B:27 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:a7:b3:69:90:dd:d0:61:dd:e9:2f:6a:13:7c:fc:ca:23:9a: 5a:f0:3e:fa:a1:75:48:6d:97:d2:5f:b7:8a:65:bc:f4:f5:2a: 30:94:f7:5b:2c:70:ed:59:b8:bf:d8:1f:f4:4a:0d:f1:04:72: 0f:0d:c7:d2:74:92:46:63:69:f6:3e:a3:ef:c0:c5:46:83:98: 27:b3:37:ba:fa:1f:7b:1d:72:0f:2c:0f:26:3f:78:26:12:f5: 69:52:81:cb:d2:04:1e:5b:24:ba:e2:bf:c8:e1:7d:6a:1f:80: d1:3f:ff:b8:da:4b:25:23:bc:ce:0f:c7:cf:05:da:46:f8:2b: 37:62:a5:dd:3f:53:81:6d:41:78:2e:56:66:fa:67:a8:dc:d1: 8f:aa:cd:ab:00:fe:49:25:d9:6e:29:ed:45:d1:1f:97:b7:0c: 4a:b5:3d:cd:f8:76:c9:15:ff:05:1a:c2:78:a5:f1:fe:eb:9b: b1:fe:f8:e9:6a:5f:c4:59:dd:76:b3:12:28:e9:6b:07:6d:9e: 7b:da:56:59:1f:75:ab:29:69:d8:6f:31:7c:67:a5:ed:68:7b: 77:4e:ee:f7:b3:5b:5c:d3:8a:53:14:39:55:5c:40:e7:b0:3d: a3:14:8e:c0:a8:08:db:81:f3:3f:7c:47:88:f2:de:61:ce:63: 45:ad:a5:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwODA5MDUxNDIzWhcNMjUwODE2MDUxNDIzWjAYMRYwFAYD VQQDEw02ODk2ZDkyZi00OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RmkVdRDBt4LqNNl01DBxYozwwbhiXDslmi6VjxwZl4gW3GJBK+HQA5UsLGi mm/HJKqmjkYCbkSskIMkOJaddrvUFcd0fJyNVa0issc0+YzYmVUMeWEArWoIZFzy JR4g5T0vSDxNjrD/hz1svEaYUyqrRva643KH1HnNrygSrKBlT5Z67aUdlCxPWGJ8 Rz71Uab7S32BWvfz56DY/ISt+ksPsizpECDHxo7hkykzV4j9azypFwIUi7PiPsUF zaxpYnLjimUXIHohhJRkBttAeC3s4SIIYdN91I0YnvLCgeH0nknhHy66u1kGjTrc oGcTqmXxewkCyHKe4ogg9fU9NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbVBMJH EMzHNVqOZ7F/XVHk85snMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvp7NpkN3QYd3pL2oTfPzKI5pa8D76oXVIbZfSX7eKZbz09SowlPdb LHDtWbi/2B/0Sg3xBHIPDcfSdJJGY2n2PqPvwMVGg5gnsze6+h97HXIPLA8mP3gm EvVpUoHL0gQeWyS64r/I4X1qH4DRP/+42kslI7zOD8fPBdpG+Cs3YqXdP1OBbUF4 LlZm+meo3NGPqs2rAP5JJdluKe1F0R+XtwxKtT3N+HbJFf8FGsJ4pfH+65ux/vjp al/EWd12sxIo6WsHbZ572lZZH3WrKWnYbzF8Z6XtaHt3Tu73s1tc04pTFDlVXEDn sD2jFI7AqAjbgfM/fEeI8t5hzmNFraUI -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:21 2025 by rpki-client