$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: sZ/fVQJCzkl0c1Dc8+AZrz2a+Vs/shIW9uVmsX0v6JQ= Subject key identifier: BE:5B:57:9F:B8:87:B9:07:8B:B1:7B:BA:B4:17:4D:CF:46:C8:69:F0 Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: 0157 Signing time: Wed 05 Nov 2025 04:23:43 +0000 Manifest this update: Wed 05 Nov 2025 04:23:42 +0000 Manifest next update: Wed 12 Nov 2025 04:23:42 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: WVf2R06AFFshzA2KZ5yOKLmsLr8zCpvbwlZPjivqKa8=) 2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: Nov 5 04:23:42 2025 GMT Not After : Nov 12 04:23:42 2025 GMT Subject: CN=690ad14e-0ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:7d:ca:71:4f:00:fb:55:63:ad:7d:94:a6: 67:23:b4:49:fd:3d:4a:18:fb:67:53:ec:0a:0a:32: 32:af:2b:65:ba:d7:dc:00:c9:39:be:a6:fe:21:6c: d3:59:76:b5:b6:26:c4:76:e7:b1:7a:fd:c5:e8:d4: 52:95:66:63:87:68:92:eb:51:9e:8f:35:9d:7e:78: c9:9a:23:9e:e8:cb:2e:e8:7b:d2:5e:18:2e:13:2f: 01:f5:cd:de:af:e8:97:e1:08:aa:41:5d:f0:8e:88: 96:1f:a6:eb:e6:fb:33:a3:68:29:9e:a7:20:06:25: b0:8c:74:da:97:3e:c2:23:b3:91:a2:e6:5c:7f:49: f9:74:bd:f3:8b:61:5d:05:b7:8a:a6:76:bc:c3:ca: a7:35:bb:34:e9:c9:51:4d:0c:dd:4c:d5:23:cf:a8: 71:5a:59:b9:18:09:48:c2:6a:8f:41:e3:0b:76:12: c8:05:53:a4:d0:41:df:87:4a:00:c5:c5:fd:dc:8d: 80:87:8f:c5:28:68:22:83:0e:7d:6b:3b:1f:8a:6c: 81:09:24:a4:8b:ef:f0:65:53:9c:34:2c:75:b2:fd: d9:bc:ee:e8:da:27:7c:99:d2:e9:51:70:37:08:eb: 9b:74:7f:1f:5a:c4:a4:66:78:6e:eb:03:f0:e4:04: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5B:57:9F:B8:87:B9:07:8B:B1:7B:BA:B4:17:4D:CF:46:C8:69:F0 X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ec:68:ae:fb:58:7e:fd:a4:47:85:b8:c8:c4:83:31:48:a8: 8d:e5:90:a5:5c:24:b6:4c:c6:18:83:76:f2:8d:50:a7:65:01: 74:98:fe:3c:7a:8c:2c:6b:ba:fd:a2:90:54:f4:8b:c5:c1:75: 29:3a:49:a8:2c:b5:93:22:65:a1:b0:c0:2d:a4:e3:4e:4d:0b: f2:0a:02:35:0d:f3:ee:a8:22:be:e4:37:4b:22:a2:3e:9f:c0: e5:08:dc:a1:00:c4:fa:ce:42:2a:34:3d:b7:df:c6:4d:7c:c2: 44:ce:61:93:e4:47:3b:2b:33:e6:29:fe:ea:77:3e:fc:67:61: c3:41:27:6d:31:6e:4f:57:a9:13:22:a6:38:4f:ce:70:d9:76: d1:ca:03:52:e3:ca:8b:16:cf:6e:f2:29:72:b7:09:3b:70:56: 9c:e7:11:39:1d:c3:23:e9:e9:b3:70:87:12:ac:75:d4:93:1e: 24:a0:0b:70:e9:66:dd:e0:b4:10:65:6c:09:a2:5e:90:64:99: ad:34:42:99:f7:9e:8a:be:ac:8b:f6:93:21:a9:75:ad:31:22: ee:72:72:5e:b0:b7:af:92:cc:e4:fe:52:25:1b:f6:2c:91:c7: 94:2a:11:1e:7d:a5:ec:82:a3:80:ea:07:10:26:47:fd:c8:56: 8e:b9:3e:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF QTY2RTA0RTQwHhcNMjUxMTA1MDQyMzQyWhcNMjUxMTEyMDQyMzQyWjAYMRYwFAYD VQQDEw02OTBhZDE0ZS0wZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/R9ynFPAPtVY619lKZnI7RJ/T1KGPtnU+wKCjIyrytlutfcAMk5vqb+IWzT WXa1tibEduexev3F6NRSlWZjh2iS61GejzWdfnjJmiOe6Msu6HvSXhguEy8B9c3e r+iX4QiqQV3wjoiWH6br5vszo2gpnqcgBiWwjHTalz7CI7ORouZcf0n5dL3zi2Fd BbeKpna8w8qnNbs06clRTQzdTNUjz6hxWlm5GAlIwmqPQeMLdhLIBVOk0EHfh0oA xcX93I2Ah4/FKGgigw59azsfimyBCSSki+/wZVOcNCx1sv3ZvO7o2id8mdLpUXA3 COubdH8fWsSkZnhu6wPw5AQYXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5bV5+4 h7kHi7F7urQXTc9GyGnwMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB77Giu+1h+/aRHhbjIxIMxSKiN5ZClXCS2TMYYg3byjVCnZQF0mP48 eowsa7r9opBU9IvFwXUpOkmoLLWTImWhsMAtpONOTQvyCgI1DfPuqCK+5DdLIqI+ n8DlCNyhAMT6zkIqND2338ZNfMJEzmGT5Ec7KzPmKf7qdz78Z2HDQSdtMW5PV6kT IqY4T85w2XbRygNS48qLFs9u8ilytwk7cFac5xE5HcMj6emzcIcSrHXUkx4koAtw 6Wbd4LQQZWwJol6QZJmtNEKZ956KvqyL9pMhqXWtMSLucnJesLevkszk/lIlG/Ys kceUKhEefaXsgqOA6gcQJkf9yFaOuT4F -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:06 2025 by rpki-client