$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: 4IEVepF0MQPIPrEPlRiplfjGzJ4eRRRWn1ePMu5uaVA= Subject key identifier: 14:14:FF:FC:87:92:8B:E4:98:D5:16:BF:FB:E1:F1:95:84:58:8C:A1 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 01C8 Signing time: Fri 25 Apr 2025 04:30:54 +0000 Manifest this update: Fri 25 Apr 2025 04:30:54 +0000 Manifest next update: Fri 02 May 2025 04:30:53 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: 8IjRHyEg3Hg6tIeNk35BhnmdouuZyGgxRfpva3psBsM=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Apr 25 04:30:54 2025 GMT Not After : May 2 04:30:53 2025 GMT Subject: CN=680b0ffe-b9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:c9:53:04:08:f8:41:02:d9:f2:89:cc:82: 41:16:7b:c1:54:13:d2:d7:02:1e:8a:f0:5a:87:61: 6b:1a:ff:50:ad:33:73:76:1a:51:69:2c:1b:8d:29: e0:8a:cf:12:9d:ae:7f:f9:c1:14:5f:c9:1f:0c:4c: 8d:f1:52:78:17:9d:31:5c:60:ae:c0:3e:f4:82:d9: a2:41:cf:bb:4d:64:ab:eb:a9:41:14:44:1c:5b:6e: c2:cb:d9:6f:15:7e:72:5a:6c:b8:06:7f:ab:9f:3f: 07:29:46:89:7f:b0:ba:af:61:26:66:ac:d1:57:64: ec:0a:fb:9c:5e:db:b9:b9:09:bb:69:f8:2b:ee:d2: 30:22:d1:c8:d1:b1:8a:10:4a:37:79:1a:3e:2c:31: 38:5d:38:30:c4:0c:56:82:98:ee:9b:94:2d:72:27: 46:63:93:c7:a8:b1:e3:d2:62:22:11:08:c3:d9:86: 6a:cd:86:10:5d:db:f6:df:0e:f1:a7:84:b5:5f:47: a3:91:af:71:f0:3a:5d:d7:cc:7c:c9:18:4e:6d:2c: d6:16:9f:09:36:0b:16:27:29:2d:99:c6:87:44:8a: a6:7c:40:a3:53:45:61:72:69:ea:74:bb:fd:cd:33: 60:18:d1:3f:1a:38:50:da:8a:2b:1e:e8:67:8f:0a: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:14:FF:FC:87:92:8B:E4:98:D5:16:BF:FB:E1:F1:95:84:58:8C:A1 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ce:40:5a:2e:17:ec:0e:1b:e0:b2:ad:98:63:d6:40:4e:40: ad:76:b4:e9:a6:3c:44:0c:c1:a1:2a:45:f5:af:0c:19:5f:b0: 86:a0:10:eb:62:23:63:a3:a8:63:53:62:34:b3:38:dc:31:6b: 88:07:b0:76:24:23:49:ba:66:89:7c:94:f0:5c:bf:2c:ff:49: c9:41:b6:d5:0e:d1:49:98:ad:69:fd:4d:e4:c9:2a:31:38:93: fc:08:a4:6d:fa:d3:4b:8d:0e:31:fb:d0:71:44:ef:14:54:c4: b6:45:96:a0:e6:f0:6e:0c:23:20:6e:f7:8b:da:76:d3:6b:07: 28:66:3a:d9:1f:c6:c3:5b:f0:66:85:e7:c0:cc:f7:1d:68:8b: 4d:a9:51:79:da:0f:cb:65:64:ab:fc:c5:89:ba:51:f2:bd:22: c1:bb:63:6f:92:1a:1f:ab:78:39:02:d5:62:55:c2:62:8e:1a: e1:d1:d2:19:c6:52:ef:6c:8c:45:f3:88:a3:43:63:93:ce:7f: e5:48:7a:56:3a:c0:4b:74:4d:91:73:10:21:e5:86:c7:55:22: 55:e9:2c:1c:ab:ce:9e:ee:f2:55:a2:e5:2a:2e:2d:a2:62:91: 81:08:51:65:eb:0d:cf:54:93:ea:ad:dd:5e:26:48:50:90:e1: 15:73:9c:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwNDI1MDQzMDU0WhcNMjUwNTAyMDQzMDUzWjAYMRYwFAYD VQQDEw02ODBiMGZmZS1iOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgDJUwQI+EEC2fKJzIJBFnvBVBPS1wIeivBah2FrGv9QrTNzdhpRaSwbjSng is8Sna5/+cEUX8kfDEyN8VJ4F50xXGCuwD70gtmiQc+7TWSr66lBFEQcW27Cy9lv FX5yWmy4Bn+rnz8HKUaJf7C6r2EmZqzRV2TsCvucXtu5uQm7afgr7tIwItHI0bGK EEo3eRo+LDE4XTgwxAxWgpjum5QtcidGY5PHqLHj0mIiEQjD2YZqzYYQXdv23w7x p4S1X0ejka9x8Dpd18x8yRhObSzWFp8JNgsWJyktmcaHRIqmfECjU0VhcmnqdLv9 zTNgGNE/GjhQ2oorHuhnjwpqLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQU//yH kovkmNUWv/vh8ZWEWIyhMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArzkBaLhfsDhvgsq2YY9ZATkCtdrTppjxEDMGhKkX1rwwZX7CGoBDr YiNjo6hjU2I0szjcMWuIB7B2JCNJumaJfJTwXL8s/0nJQbbVDtFJmK1p/U3kySox OJP8CKRt+tNLjQ4x+9BxRO8UVMS2RZag5vBuDCMgbveL2nbTawcoZjrZH8bDW/Bm hefAzPcdaItNqVF52g/LZWSr/MWJulHyvSLBu2Nvkhofq3g5AtViVcJijhrh0dIZ xlLvbIxF84ijQ2OTzn/lSHpWOsBLdE2RcxAh5YbHVSJV6Swcq86e7vJVouUqLi2i YpGBCFFl6w3PVJPqrd1eJkhQkOEVc5x2 -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:05 2025 by rpki-client