$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: qO8tNMTODKrBZK8i1Uzx2EwtFZYStr8bAeo3IpdIr38= Subject key identifier: 9A:EB:7A:3C:CE:B3:D7:7B:0A:24:0F:79:19:88:75:37:B1:02:F7:8C Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: F9 Signing time: Thu 01 May 2025 04:15:51 +0000 Manifest this update: Thu 01 May 2025 04:15:50 +0000 Manifest next update: Thu 08 May 2025 04:15:50 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: lEDXp6lb8DwzR5oDH80wS0YWPkT9cUv79QUN9zpo5/4=) 2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: May 1 04:15:50 2025 GMT Not After : May 8 04:15:50 2025 GMT Subject: CN=6812f576-6cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:59:b4:9c:15:00:ab:1a:fd:a7:87:49:47: 66:9d:7e:c5:70:58:20:6c:e5:4b:30:cc:cc:8e:2a: 62:e5:29:c3:d5:5b:24:99:20:21:ab:67:ed:20:b9: b5:a7:7f:13:2b:2e:95:9d:4b:fc:23:1c:4b:1c:d2: 43:2b:0c:4a:42:46:84:98:f5:c8:48:11:4f:a3:82: 04:25:17:14:0b:b2:df:98:99:3d:e9:98:de:46:9f: 1d:8a:40:32:2f:4e:9a:ed:83:17:e6:b6:29:58:78: 48:3d:af:16:fd:c1:46:18:c0:ea:04:38:7e:7b:30: 63:29:da:f6:31:08:35:a7:ef:ed:42:7f:95:11:05: f9:16:8a:74:ac:eb:21:dc:bf:db:c0:f3:91:3f:6a: 73:18:87:fb:93:31:4e:b0:7b:60:a4:db:83:d8:95: ec:2f:4a:b4:4c:80:36:4c:7b:2b:b2:7a:eb:00:e9: ee:d7:48:76:dd:9f:d9:a6:31:c5:8f:9f:1b:27:f0: d6:d8:dc:74:c1:12:20:75:5f:ac:81:2e:87:1f:5e: fb:c3:83:7f:ec:26:3f:5e:1e:a6:94:bc:8d:8a:86: a6:fb:1b:e6:a2:32:d4:06:9c:d5:d3:bf:8e:0c:7c: 8d:49:8a:95:c2:98:a5:6a:ce:23:79:a8:18:90:3a: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EB:7A:3C:CE:B3:D7:7B:0A:24:0F:79:19:88:75:37:B1:02:F7:8C X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6d:60:37:76:bf:49:88:4d:4e:ea:e8:d2:9c:31:39:d9:db: 43:cd:e8:f3:82:ae:fa:d8:af:24:87:e4:fd:ee:c0:ea:8e:86: 4f:5e:cb:db:a0:9e:e0:6c:e8:ba:04:09:45:61:1e:c3:e7:4e: a6:ce:ef:a6:eb:cd:39:c1:c1:e6:a5:48:2f:fe:e5:ee:92:4a: 89:86:0b:1d:65:42:3f:87:00:1d:cb:3d:f0:5a:bc:06:9a:00: 9c:87:e7:be:77:5b:7a:e0:7e:da:00:d7:32:fd:a9:4f:d9:c0: 16:4f:5e:1f:61:46:c9:42:35:9d:df:c4:79:32:0e:98:60:48: 4d:49:64:ce:d1:c6:58:ab:bb:4f:1c:2e:56:da:1e:be:b1:51: 5b:01:af:fb:0f:6b:d5:82:ec:ae:da:db:7a:94:45:a9:22:09: 38:01:33:dc:55:14:46:25:12:d5:6b:02:39:15:e7:cf:41:55: 77:39:d2:52:2c:3d:5d:ec:07:2f:68:31:c2:00:ab:54:d9:0a: 8c:c3:de:a7:64:5b:0e:94:ee:77:f9:d8:ac:32:bf:15:c6:7a: 6d:9d:ee:25:d3:cd:b4:39:67:12:52:2d:f3:66:53:77:a3:f0: b0:00:ac:47:7d:b6:78:31:f4:3e:23:8a:c1:bc:5e:cc:30:1c: 2e:4d:9b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF QTY2RTA0RTQwHhcNMjUwNTAxMDQxNTUwWhcNMjUwNTA4MDQxNTUwWjAYMRYwFAYD VQQDEw02ODEyZjU3Ni02Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxJZtJwVAKsa/aeHSUdmnX7FcFggbOVLMMzMjipi5SnD1VskmSAhq2ftILm1 p38TKy6VnUv8IxxLHNJDKwxKQkaEmPXISBFPo4IEJRcUC7LfmJk96ZjeRp8dikAy L06a7YMX5rYpWHhIPa8W/cFGGMDqBDh+ezBjKdr2MQg1p+/tQn+VEQX5Fop0rOsh 3L/bwPORP2pzGIf7kzFOsHtgpNuD2JXsL0q0TIA2THsrsnrrAOnu10h23Z/ZpjHF j58bJ/DW2Nx0wRIgdV+sgS6HH177w4N/7CY/Xh6mlLyNioam+xvmojLUBpzV07+O DHyNSYqVwpilas4jeagYkDqFgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrrejzO s9d7CiQPeRmIdTexAveMMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcbWA3dr9JiE1O6ujSnDE52dtDzejzgq762K8kh+T97sDqjoZPXsvb oJ7gbOi6BAlFYR7D506mzu+m6805wcHmpUgv/uXukkqJhgsdZUI/hwAdyz3wWrwG mgCch+e+d1t64H7aANcy/alP2cAWT14fYUbJQjWd38R5Mg6YYEhNSWTO0cZYq7tP HC5W2h6+sVFbAa/7D2vVguyu2tt6lEWpIgk4ATPcVRRGJRLVawI5FefPQVV3OdJS LD1d7AcvaDHCAKtU2QqMw96nZFsOlO53+disMr8Vxnptne4l0820OWcSUi3zZlN3 o/CwAKxHfbZ4MfQ+I4rBvF7MMBwuTZtT -----END CERTIFICATE-----Generated at Fri May 2 21:46:03 2025 by rpki-client