$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: XlrujVnqAMYPonvUI1wxJHFD3ke1UYqLa1v6ibL9S2M= Subject key identifier: 07:53:B1:35:5A:3F:30:6D:B6:64:71:A4:34:7E:B1:E9:70:17:58:CC Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 0214 Signing time: Wed 09 Jul 2025 05:47:39 +0000 Manifest this update: Wed 09 Jul 2025 05:47:38 +0000 Manifest next update: Wed 16 Jul 2025 05:47:38 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: rhdzKmkUjsph9bLll4rTqcB2G7XG9dqHIZV14rOR/EI=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Jul 2025 05:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Jul 9 05:47:38 2025 GMT Not After : Jul 16 05:47:38 2025 GMT Subject: CN=686e027b-78a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:66:6c:70:18:83:c6:11:57:fc:63:bb:76: f5:40:67:de:63:0b:70:6b:ae:21:8a:82:01:d6:56: 4a:da:91:cc:a4:7a:b8:b4:46:ea:49:18:e5:28:bf: f3:8f:8c:8e:ac:44:88:c7:5d:de:04:56:3a:ce:b3: c6:b4:05:54:0f:7b:a9:7f:11:5d:be:a6:bc:eb:00: 31:fa:21:2a:35:94:5d:10:c3:e6:43:28:4e:b5:ce: a2:1d:84:16:56:37:34:82:89:72:40:91:29:f0:83: 8c:2c:ff:76:8b:54:8a:d6:3d:69:93:87:a2:20:f0: 8c:58:48:65:21:40:a0:f7:77:a3:3d:a8:58:7b:2a: 9a:4f:fb:4d:df:ca:6a:e0:ed:3e:db:08:63:f3:d8: 63:f1:ca:e5:a5:aa:61:90:ae:2e:75:09:79:aa:46: 8d:2c:88:03:1e:29:4b:c5:33:c2:0e:17:0b:b4:0f: fd:1c:40:1e:db:82:5d:91:7d:bd:26:2e:cf:e1:7e: 18:ca:6c:21:30:8a:ad:ec:cf:7c:13:ab:d6:23:1b: 96:d3:e3:c8:ae:02:2e:63:ce:9d:8b:23:48:26:16: f6:41:2b:16:3b:5c:56:eb:e7:be:eb:0e:1c:4d:c3: f5:08:76:f3:01:bd:96:df:81:d4:b9:2b:d2:cf:c6: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:53:B1:35:5A:3F:30:6D:B6:64:71:A4:34:7E:B1:E9:70:17:58:CC X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:17:21:d7:de:93:c8:08:4c:58:cd:e1:26:46:b7:57:87:4b: 55:fa:d1:82:89:e7:08:bd:e8:64:42:bd:91:43:c8:df:6b:79: e8:bf:4f:94:66:24:85:3c:14:f5:06:8a:17:4d:1f:de:70:d1: 52:61:7e:1f:b8:34:39:d0:b8:53:59:aa:ea:4f:f4:97:1a:00: c4:eb:13:23:cd:9e:d6:d6:17:b2:b8:fa:77:df:07:e0:0b:34: 62:35:b1:7c:95:8c:b0:6a:95:77:72:12:37:aa:c5:75:ea:54: 26:20:ab:fd:43:b3:ca:b9:cb:11:2f:b7:49:e3:02:56:d0:f9: 56:4f:40:d4:76:87:38:61:7c:b3:cc:3a:2c:fd:2b:df:0b:b2: d9:e8:fd:20:ab:d5:12:4b:87:85:00:a8:02:2d:07:de:dd:06: 98:30:a6:63:3c:2d:9e:7d:25:1e:86:98:0f:43:58:f0:d9:58: ba:77:10:60:3a:08:09:df:25:a4:eb:ef:f7:ea:e3:62:93:bf: 7f:bf:95:43:8b:4e:84:60:d6:61:98:cb:63:a5:d7:32:ec:af: 2c:77:ac:84:a6:0a:fd:d8:c4:15:01:0c:a3:88:91:3b:5b:14: c5:f0:72:79:ec:d8:8a:c2:39:f5:a1:2e:a9:2b:e9:ee:ab:ea: 71:4f:8c:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwNzA5MDU0NzM4WhcNMjUwNzE2MDU0NzM4WjAYMRYwFAYD VQQDEw02ODZlMDI3Yi03OGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3B9mbHAYg8YRV/xju3b1QGfeYwtwa64hioIB1lZK2pHMpHq4tEbqSRjlKL/z j4yOrESIx13eBFY6zrPGtAVUD3upfxFdvqa86wAx+iEqNZRdEMPmQyhOtc6iHYQW Vjc0golyQJEp8IOMLP92i1SK1j1pk4eiIPCMWEhlIUCg93ejPahYeyqaT/tN38pq 4O0+2whj89hj8crlpaphkK4udQl5qkaNLIgDHilLxTPCDhcLtA/9HEAe24JdkX29 Ji7P4X4YymwhMIqt7M98E6vWIxuW0+PIrgIuY86diyNIJhb2QSsWO1xW6+e+6w4c TcP1CHbzAb2W34HUuSvSz8Y4iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdTsTVa PzBttmRxpDR+selwF1jMMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaFyHX3pPICExYzeEmRrdXh0tV+tGCiecIvehkQr2RQ8jfa3nov0+U ZiSFPBT1BooXTR/ecNFSYX4fuDQ50LhTWarqT/SXGgDE6xMjzZ7W1heyuPp33wfg CzRiNbF8lYywapV3chI3qsV16lQmIKv9Q7PKucsRL7dJ4wJW0PlWT0DUdoc4YXyz zDos/SvfC7LZ6P0gq9USS4eFAKgCLQfe3QaYMKZjPC2efSUehpgPQ1jw2Vi6dxBg OggJ3yWk6+/36uNik79/v5VDi06EYNZhmMtjpdcy7K8sd6yEpgr92MQVAQyjiJE7 WxTF8HJ57NiKwjn1oS6pK+nuq+pxT4yk -----END CERTIFICATE-----Generated at Wed Jul 9 09:41:41 2025 by rpki-client