$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: ahlxE5o89lBfcxCQUt04U5OgwCCSx1RxXv0jMttVUG4= Subject key identifier: 68:E1:1A:3D:E6:7F:28:E3:A3:D7:12:58:63:AC:A3:36:C9:6D:05:BB Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 01EE Signing time: Tue 03 Jun 2025 04:57:44 +0000 Manifest this update: Tue 03 Jun 2025 04:57:43 +0000 Manifest next update: Tue 10 Jun 2025 04:57:43 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: IcN5ecGOuz00Q33hbAhwWe8BLvghqi1S1T1ND/X9d10=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Jun 3 04:57:43 2025 GMT Not After : Jun 10 04:57:43 2025 GMT Subject: CN=683e80c8-c084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:13:6c:1c:6b:fb:f8:b7:5a:25:da:0e:26:18: b4:2b:69:f4:48:78:03:34:64:c7:d1:e0:96:b9:8f: a9:eb:e8:ab:e4:a1:5d:a7:b1:54:10:0c:c0:1f:02: 1f:74:ba:eb:04:ce:79:26:4d:35:ca:1f:45:21:ec: 75:1e:e4:60:33:c0:a0:1d:0c:10:c0:c9:83:d3:e5: 05:f4:b0:a9:8b:ea:41:d2:56:66:5b:33:32:0a:42: 98:f2:0d:91:ab:40:49:cf:70:3e:32:9a:53:63:66: 60:60:0f:31:a2:82:af:15:38:1d:5e:78:7e:bd:82: 3c:28:76:c4:c4:2e:64:c4:eb:e8:01:72:0e:fe:90: 33:84:1f:68:7a:28:cd:fa:e1:47:e8:22:b4:01:1c: 0e:11:02:9a:fb:6b:1b:2c:c3:2e:37:81:0f:01:9c: d6:03:94:22:1b:20:19:81:7b:af:20:33:cd:4c:45: fb:1d:6d:98:47:5d:f4:a3:f6:6c:c5:a6:ab:e7:99: 58:88:c2:db:90:ce:1b:34:ae:7e:72:2a:90:76:67: 3a:e9:11:9a:85:49:71:cd:4e:f9:ee:d2:7a:70:33: 8c:ea:c6:58:11:b7:6c:50:28:3a:6a:16:74:d9:8a: 6c:25:19:d6:3b:23:d6:40:1d:cd:77:24:a5:20:bf: af:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E1:1A:3D:E6:7F:28:E3:A3:D7:12:58:63:AC:A3:36:C9:6D:05:BB X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d6:d3:4f:b7:e6:e8:e6:33:27:2e:07:a9:20:8e:35:bc:f7: b5:8d:5d:2c:c6:24:7e:4e:a7:f4:a6:2c:a7:85:89:25:f1:fb: 89:86:10:88:59:59:14:fa:f9:e3:12:b9:e8:d4:13:26:6f:2e: 97:ea:23:75:11:c2:5a:60:cf:42:c2:5b:93:3e:8e:f5:22:df: 2d:ea:c7:3a:33:cd:2d:c1:b5:36:1f:63:54:e2:75:53:bf:a6: 2a:55:a0:72:a5:12:53:f9:e4:6c:18:04:42:18:2f:a6:bc:96: 3e:04:34:8d:31:16:cf:93:e7:eb:7a:56:b7:f5:e6:50:9b:cd: 17:87:34:c6:be:04:7a:6d:be:8f:f8:ca:d1:d3:c2:60:87:83: ae:b8:7d:1f:66:1f:6b:a0:3d:19:e8:a1:e3:01:51:b5:f0:63: 5d:b1:cd:e4:be:4a:ca:49:ce:b6:f8:ba:2a:a3:11:54:4d:86: 8e:c9:81:69:eb:46:62:6a:a4:10:ad:3e:b2:01:9f:28:b4:35: 40:f5:fb:75:b8:4e:cd:52:19:9a:ab:38:4b:39:9b:c6:a9:67: 96:04:62:7b:bd:67:d2:a4:25:78:9c:07:71:c0:92:4b:35:64: 2f:26:79:31:c7:ca:25:27:a2:42:df:97:fc:25:bc:94:a6:ac: 5b:2a:f5:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwNjAzMDQ1NzQzWhcNMjUwNjEwMDQ1NzQzWjAYMRYwFAYD VQQDEw02ODNlODBjOC1jMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BNsHGv7+LdaJdoOJhi0K2n0SHgDNGTH0eCWuY+p6+ir5KFdp7FUEAzAHwIf dLrrBM55Jk01yh9FIex1HuRgM8CgHQwQwMmD0+UF9LCpi+pB0lZmWzMyCkKY8g2R q0BJz3A+MppTY2ZgYA8xooKvFTgdXnh+vYI8KHbExC5kxOvoAXIO/pAzhB9oeijN +uFH6CK0ARwOEQKa+2sbLMMuN4EPAZzWA5QiGyAZgXuvIDPNTEX7HW2YR130o/Zs xaar55lYiMLbkM4bNK5+ciqQdmc66RGahUlxzU757tJ6cDOM6sZYEbdsUCg6ahZ0 2YpsJRnWOyPWQB3NdySlIL+vaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjhGj3m fyjjo9cSWGOsozbJbQW7MB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd1tNPt+bo5jMnLgepII41vPe1jV0sxiR+Tqf0piynhYkl8fuJhhCI WVkU+vnjErno1BMmby6X6iN1EcJaYM9CwluTPo71It8t6sc6M80twbU2H2NU4nVT v6YqVaBypRJT+eRsGARCGC+mvJY+BDSNMRbPk+frela39eZQm80XhzTGvgR6bb6P +MrR08Jgh4OuuH0fZh9roD0Z6KHjAVG18GNdsc3kvkrKSc62+LoqoxFUTYaOyYFp 60ZiaqQQrT6yAZ8otDVA9ft1uE7NUhmaqzhLOZvGqWeWBGJ7vWfSpCV4nAdxwJJL NWQvJnkxx8olJ6JC35f8JbyUpqxbKvUV -----END CERTIFICATE-----Generated at Tue Jun 3 23:56:27 2025 by rpki-client