$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: DO90GFyx7QcRjbOex9fBXkU75dM42yfCRan64j9ADA4= Subject key identifier: D9:6B:2A:01:79:E3:1D:97:E5:97:B1:ED:6B:74:F6:DD:8E:46:83:47 Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: 012B Signing time: Sat 09 Aug 2025 05:07:34 +0000 Manifest this update: Sat 09 Aug 2025 05:07:33 +0000 Manifest next update: Sat 16 Aug 2025 05:07:33 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: sGSWt3O7Bc+JteIy6jPpgtxQUH/IydDpiL4A6kb9+ZY=) 2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: Aug 9 05:07:33 2025 GMT Not After : Aug 16 05:07:33 2025 GMT Subject: CN=6896d795-7438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:d8:51:e9:a2:04:92:19:67:d3:fc:12:1b: 87:4b:85:e0:88:f2:5e:56:c1:d7:69:61:e9:93:6e: d9:ed:a5:de:54:ba:c9:a3:f4:fb:89:7a:57:a4:7c: 8f:bd:ac:d4:fe:9e:26:6f:01:6a:9e:45:6f:bc:a6: 8e:0f:8f:38:75:00:b4:e9:03:6c:63:b5:37:6e:b1: 04:96:85:b2:3a:06:34:9f:0e:d0:93:b1:2d:c0:e9: 4b:09:d7:c7:bc:8e:42:eb:fa:9d:41:02:5a:84:e7: 65:72:f4:66:f9:cc:7f:8f:5a:cc:5d:e0:a8:e0:cd: b0:3a:0f:f6:31:fc:69:5f:e9:f6:36:71:5f:4a:06: a0:51:83:c4:59:40:34:7f:06:31:e4:98:53:49:c6: 29:e8:9f:b2:00:eb:37:5e:d0:ec:e4:e1:74:c2:f7: 35:21:45:61:37:23:d4:6e:b0:e4:10:b1:82:73:11: f1:be:e7:97:0f:21:76:ea:25:76:3a:c9:92:c8:c2: dc:7b:c8:8b:49:9a:b5:90:ed:c4:06:b3:a7:16:d7: 5b:31:dd:90:e2:7a:20:7e:1d:ff:78:00:f3:23:a7: 81:d3:77:76:bc:9e:bf:c1:f6:47:01:b5:4e:99:4a: 69:b5:35:13:73:b2:4e:3a:0a:9f:c8:36:36:d4:c5: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6B:2A:01:79:E3:1D:97:E5:97:B1:ED:6B:74:F6:DD:8E:46:83:47 X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:40:ca:3c:35:32:30:9c:72:84:30:1a:46:7d:3f:d7:6e:93: 69:e1:98:6b:44:9f:ec:4a:9b:bb:c9:5b:7d:8f:10:7e:4a:83: 09:98:78:82:6b:95:43:0f:2b:7e:b1:ca:2b:43:ab:12:25:87: a2:ed:a1:e9:ae:f1:10:86:70:b8:c3:4c:02:61:7e:2e:d9:b3: 04:d6:a8:a9:80:a8:78:cf:a1:88:d5:3b:2e:8e:00:03:e9:8f: 0d:9c:fb:99:4f:ca:44:f4:51:49:a4:c5:35:2e:4d:7f:c4:25: f8:7f:26:21:f0:33:91:79:e9:6f:6d:91:fb:fa:6f:d9:5a:cb: 92:d4:1a:57:93:bf:f7:9f:ab:91:71:3b:09:a5:21:24:6a:2f: fb:12:18:f5:bc:51:c1:aa:71:09:a5:1c:4c:5f:f3:e2:aa:9c: b0:cf:06:a9:06:7f:d5:69:da:b6:ef:84:ef:6f:3a:dc:84:86: 70:49:7e:dd:58:94:13:0f:36:6a:10:cb:8f:10:50:cc:ee:76: 4a:dc:23:8f:7e:18:b7:67:45:ca:d1:48:16:38:b4:93:d8:33: 2a:14:7e:54:f6:d0:f3:c1:16:9b:99:22:9f:7c:04:5f:dd:6b: 00:77:40:b6:22:ff:76:a2:2e:a3:ce:9a:e7:27:ec:be:cf:42: ce:3e:dd:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF QTY2RTA0RTQwHhcNMjUwODA5MDUwNzMzWhcNMjUwODE2MDUwNzMzWjAYMRYwFAYD VQQDEw02ODk2ZDc5NS03NDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVnYUemiBJIZZ9P8EhuHS4XgiPJeVsHXaWHpk27Z7aXeVLrJo/T7iXpXpHyP vazU/p4mbwFqnkVvvKaOD484dQC06QNsY7U3brEEloWyOgY0nw7Qk7EtwOlLCdfH vI5C6/qdQQJahOdlcvRm+cx/j1rMXeCo4M2wOg/2MfxpX+n2NnFfSgagUYPEWUA0 fwYx5JhTScYp6J+yAOs3XtDs5OF0wvc1IUVhNyPUbrDkELGCcxHxvueXDyF26iV2 OsmSyMLce8iLSZq1kO3EBrOnFtdbMd2Q4nogfh3/eADzI6eB03d2vJ6/wfZHAbVO mUpptTUTc7JOOgqfyDY21MX1qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlrKgF5 4x2X5Zex7Wt09t2ORoNHMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNQMo8NTIwnHKEMBpGfT/XbpNp4ZhrRJ/sSpu7yVt9jxB+SoMJmHiC a5VDDyt+scorQ6sSJYei7aHprvEQhnC4w0wCYX4u2bME1qipgKh4z6GI1TsujgAD 6Y8NnPuZT8pE9FFJpMU1Lk1/xCX4fyYh8DOReelvbZH7+m/ZWsuS1BpXk7/3n6uR cTsJpSEkai/7Ehj1vFHBqnEJpRxMX/PiqpywzwapBn/Vadq274TvbzrchIZwSX7d WJQTDzZqEMuPEFDM7nZK3COPfhi3Z0XK0UgWOLST2DMqFH5U9tDzwRabmSKffARf 3WsAd0C2Iv92oi6jzprnJ+y+z0LOPt0x -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:58 2025 by rpki-client