$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: uev0Mi1pcennYzW4xiJwWGmX1Ki78L63XFjeBVL0uyc= Subject key identifier: 41:CE:17:10:A3:C6:C1:34:51:C6:75:3A:64:2E:3E:99:03:6D:CE:70 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 01B8 Signing time: Wed 09 Apr 2025 04:27:14 +0000 Manifest this update: Wed 09 Apr 2025 04:27:14 +0000 Manifest next update: Wed 16 Apr 2025 04:27:14 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: Mqjq5lJeEeDRz8wyf43BNl20GQaoucUoXw4nrC/J0xs=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 04:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500 Validity Not Before: Apr 9 04:27:14 2025 GMT Not After : Apr 16 04:27:14 2025 GMT Subject: CN=67f5f722-bcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:04:a5:02:f0:53:95:c8:ee:9d:ac:5c:97:e4: fc:7f:e8:7d:00:4f:81:99:c2:82:bb:f4:8d:78:2a: 43:eb:67:6a:0d:87:d8:06:4c:e9:b3:b2:a9:05:04: e9:f5:2a:77:5b:51:58:03:0a:f7:91:08:eb:c3:4a: a1:65:c5:55:75:3e:b4:be:6b:76:ed:b4:6f:d5:ad: a6:16:98:d0:7a:cb:38:1b:ef:1b:96:f3:58:eb:34: 76:21:e8:94:ae:5d:74:01:9f:cc:de:30:c4:ad:81: a0:94:bd:09:ae:75:52:19:40:91:02:87:bb:ee:5c: 55:a8:a6:c9:b6:91:9f:45:1b:d0:ca:8e:6f:44:b1: cc:27:29:28:fe:ee:9f:75:78:97:1d:a8:6c:da:7d: 55:29:27:03:66:d2:39:42:dc:28:cc:6c:fd:6d:f3: 7b:d3:cb:46:49:03:a2:18:bd:19:24:d4:f8:f0:3d: f1:89:a4:c7:81:e5:65:33:e1:40:32:00:72:67:64: 48:9a:4f:3a:a4:31:69:9b:31:1a:7c:ed:9b:8b:b8: 20:97:64:86:d8:34:0b:5f:bb:a9:fe:a0:e7:f5:cd: f3:0c:44:9f:c5:c5:f0:72:a2:c5:3b:a0:74:22:5b: dc:2d:3c:d7:f3:5c:ab:ce:31:02:7a:0f:77:c9:18: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CE:17:10:A3:C6:C1:34:51:C6:75:3A:64:2E:3E:99:03:6D:CE:70 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7b:40:fc:c0:8e:ab:07:3a:b7:2a:9b:0e:12:d2:c8:2d:2a: dd:ac:07:d4:32:91:ac:4f:d9:65:51:4d:21:1d:d3:f6:d5:2e: 51:8f:ee:45:2d:0d:52:c7:71:a5:3b:71:89:c9:9d:58:3e:a3: 64:75:3d:ce:a7:9f:57:e0:e1:4c:9b:e9:a6:5c:45:b9:b0:7e: 63:77:29:fa:54:57:f3:5b:3e:29:d6:1a:e7:8a:33:72:2b:9c: 21:34:03:c6:e4:da:c0:86:d1:dc:71:98:ed:a5:c3:81:da:32: 9d:b2:50:cd:79:62:65:1b:9a:b4:de:8b:1a:06:25:f7:2b:8c: 03:6b:94:91:50:d5:88:03:53:da:de:3c:ce:d8:06:c8:62:47: bb:e4:0e:43:64:c9:4c:cb:76:6f:27:2a:bb:33:81:f7:0d:9f: 34:a7:2c:ce:06:9c:61:3a:42:b3:1c:80:b0:a7:ac:32:e7:d6: bf:03:8d:f3:d8:62:46:e1:4b:40:1c:2b:e7:77:66:d8:93:2d: 65:ed:52:3c:6c:02:28:11:a0:2b:2c:99:48:0d:be:84:1f:83: 09:7d:d0:7b:81:2a:fa:c1:ff:1a:2e:e3:49:ff:26:f8:b0:2b: 2f:59:5e:6c:4d:5c:18:f8:98:71:7e:a5:f3:ab:d4:a2:b2:f5: 1d:9e:e5:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwNDA5MDQyNzE0WhcNMjUwNDE2MDQyNzE0WjAYMRYwFAYD VQQDEw02N2Y1ZjcyMi1iY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gSlAvBTlcjunaxcl+T8f+h9AE+BmcKCu/SNeCpD62dqDYfYBkzps7KpBQTp 9Sp3W1FYAwr3kQjrw0qhZcVVdT60vmt27bRv1a2mFpjQess4G+8blvNY6zR2IeiU rl10AZ/M3jDErYGglL0JrnVSGUCRAoe77lxVqKbJtpGfRRvQyo5vRLHMJyko/u6f dXiXHahs2n1VKScDZtI5QtwozGz9bfN708tGSQOiGL0ZJNT48D3xiaTHgeVlM+FA MgByZ2RImk86pDFpmzEafO2bi7ggl2SG2DQLX7up/qDn9c3zDESfxcXwcqLFO6B0 IlvcLTzX81yrzjECeg93yRgP9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHOFxCj xsE0UcZ1OmQuPpkDbc5wMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8e0D8wI6rBzq3KpsOEtLILSrdrAfUMpGsT9llUU0hHdP21S5Rj+5F LQ1Sx3GlO3GJyZ1YPqNkdT3Op59X4OFMm+mmXEW5sH5jdyn6VFfzWz4p1hrnijNy K5whNAPG5NrAhtHccZjtpcOB2jKdslDNeWJlG5q03osaBiX3K4wDa5SRUNWIA1Pa 3jzO2AbIYke75A5DZMlMy3ZvJyq7M4H3DZ80pyzOBpxhOkKzHICwp6wy59a/A43z 2GJG4UtAHCvnd2bYky1l7VI8bAIoEaArLJlIDb6EH4MJfdB7gSr6wf8aLuNJ/yb4 sCsvWV5sTVwY+JhxfqXzq9SisvUdnuXl -----END CERTIFICATE-----Generated at Thu Apr 10 23:21:08 2025 by rpki-client