$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: pMGeAlK540jNEvBTX5f1RVMAHkLGV8HAe7wH2J0R7dM= Subject key identifier: 5B:2A:3C:B3:C7:18:4D:13:7F:AD:C1:8E:4A:3D:67:C4:F1:4A:FE:7F Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 0250 Signing time: Fri 05 Sep 2025 05:03:22 +0000 Manifest this update: Fri 05 Sep 2025 05:03:22 +0000 Manifest next update: Fri 12 Sep 2025 05:03:22 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: bt0e7cT2vnsMfEVXUmDcuLLfEGLdGZkkDn8Kq/iPoeM=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Sep 5 05:03:22 2025 GMT Not After : Sep 12 05:03:22 2025 GMT Subject: CN=68ba6f1a-0f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:df:fe:f9:9e:39:0f:75:61:f7:97:a0:6e: bf:51:db:2d:4d:2d:55:09:2e:53:10:4a:06:cc:26: 25:6b:df:13:82:19:a0:8b:13:06:f0:01:a6:8b:1c: ab:78:33:fb:03:56:0c:8f:89:aa:45:c5:b8:05:d8: 6e:57:9d:7a:29:1e:4f:96:a2:08:a4:2e:f5:83:f7: 9f:5e:59:b5:64:ec:09:62:53:f5:6c:56:71:73:59: 8a:33:aa:be:74:6a:05:a2:5b:b1:e4:1e:a6:11:28: 26:e2:38:c9:dd:a3:29:4a:03:27:a8:51:74:86:e5: ac:27:b1:f4:4a:44:17:f9:15:ce:39:ba:bb:b7:6b: 0f:cf:d2:12:0c:63:9d:cc:d2:c9:5a:a4:96:6a:2e: e5:db:35:eb:a7:ee:10:14:56:40:e2:7f:fd:8d:ab: e9:fa:f1:11:7a:45:43:36:62:25:cb:b4:b2:84:2c: 2e:c4:9a:a8:bb:69:4f:fd:f9:12:56:7a:b8:7d:40: 41:bf:d3:5e:80:63:13:a0:b2:d7:44:29:4b:af:00: d1:16:6b:75:60:be:30:f5:f7:c8:99:30:f9:e1:be: ff:8f:ed:26:1d:49:4f:df:74:33:97:f3:9d:1a:ed: 90:2f:2a:1c:48:b8:60:93:b9:11:4a:ae:82:42:10: 03:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2A:3C:B3:C7:18:4D:13:7F:AD:C1:8E:4A:3D:67:C4:F1:4A:FE:7F X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:dd:9c:8d:a0:f4:a7:99:b5:d5:5a:17:26:6f:d4:d1:10:74: e8:72:4a:86:03:3e:d6:1a:7c:60:19:a7:41:96:08:c3:38:41: d4:a0:b7:83:66:b4:37:f0:99:c1:d6:7d:56:70:cb:c6:7c:e1: 35:bc:27:da:b4:e2:df:f9:f2:f4:43:47:f5:42:36:f9:56:1a: cd:9c:df:c3:4d:2d:19:2c:bb:ed:9a:8b:74:85:3c:57:c9:ae: ca:ac:83:1c:62:53:8e:e5:fb:2d:a8:c5:6c:f1:d5:48:38:37: 11:46:8a:80:0f:7b:93:79:7d:93:f6:99:be:41:4f:6b:bb:c1: ed:dd:67:99:ee:7a:3b:f0:16:fd:bd:07:29:75:e9:f0:3c:2e: 79:fb:ae:de:5f:a3:24:a9:34:fc:b6:fc:3c:5c:aa:1b:25:0c: fc:2f:35:ab:d3:fb:6f:60:13:6e:d5:34:31:d2:b8:1a:45:7a: 73:49:c7:00:50:e2:29:40:9b:4f:c8:98:3f:91:18:1b:24:30: c1:cb:12:71:94:bb:bb:34:65:a4:3a:49:41:ab:aa:aa:d4:09: cc:57:b9:8b:3b:21:12:d9:9a:0f:3c:5c:61:b4:75:f5:bd:8c: 3d:12:d4:e6:24:98:15:ee:44:70:6f:d8:8b:70:20:95:2c:82: c7:6a:3d:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwOTA1MDUwMzIyWhcNMjUwOTEyMDUwMzIyWjAYMRYwFAYD VQQDEw02OGJhNmYxYS0wZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqvf/vmeOQ91YfeXoG6/UdstTS1VCS5TEEoGzCYla98TghmgixMG8AGmixyr eDP7A1YMj4mqRcW4BdhuV516KR5PlqIIpC71g/efXlm1ZOwJYlP1bFZxc1mKM6q+ dGoFolux5B6mESgm4jjJ3aMpSgMnqFF0huWsJ7H0SkQX+RXOObq7t2sPz9ISDGOd zNLJWqSWai7l2zXrp+4QFFZA4n/9javp+vERekVDNmIly7SyhCwuxJqou2lP/fkS Vnq4fUBBv9NegGMToLLXRClLrwDRFmt1YL4w9ffImTD54b7/j+0mHUlP33Qzl/Od Gu2QLyocSLhgk7kRSq6CQhAD+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsqPLPH GE0Tf63Bjko9Z8TxSv5/MB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg3ZyNoPSnmbXVWhcmb9TREHTockqGAz7WGnxgGadBlgjDOEHUoLeD ZrQ38JnB1n1WcMvGfOE1vCfatOLf+fL0Q0f1Qjb5VhrNnN/DTS0ZLLvtmot0hTxX ya7KrIMcYlOO5fstqMVs8dVIODcRRoqAD3uTeX2T9pm+QU9ru8Ht3WeZ7no78Bb9 vQcpdenwPC55+67eX6MkqTT8tvw8XKobJQz8LzWr0/tvYBNu1TQx0rgaRXpzSccA UOIpQJtPyJg/kRgbJDDByxJxlLu7NGWkOklBq6qq1AnMV7mLOyES2ZoPPFxhtHX1 vYw9EtTmJJgV7kRwb9iLcCCVLILHaj2S -----END CERTIFICATE-----Generated at Sat Sep 6 20:51:58 2025 by rpki-client