$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: aEmcyfuzgE8MWSjlCsoEZ1rGltP6P1kxbXbRknbuwXA= Subject key identifier: 15:86:66:DF:FF:A1:B6:0C:4D:4B:12:EC:36:48:8B:E4:9B:43:79:BD Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 021E Signing time: Sat 19 Jul 2025 05:10:24 +0000 Manifest this update: Sat 19 Jul 2025 05:10:23 +0000 Manifest next update: Sat 26 Jul 2025 05:10:23 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: sfQee8i8sVw2TSuZQA7nillt1T7kK2rYGX+v8oEL6wE=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Jul 19 05:10:23 2025 GMT Not After : Jul 26 05:10:23 2025 GMT Subject: CN=687b28bf-06c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d9:a3:69:73:91:8f:22:17:e1:1f:a5:d6:ce: f1:54:b6:e4:61:eb:b7:bf:93:c6:58:6a:0d:03:3b: 1f:d7:02:62:92:d0:26:2e:65:ee:ce:e3:a3:49:00: 90:c7:b4:8a:c5:0d:80:f7:04:41:14:19:c0:bc:41: 30:5d:3f:ba:e4:6b:db:45:72:39:63:79:a7:57:87: 1a:c1:b8:40:db:38:de:67:16:d8:31:ab:03:a9:3f: 8f:b6:48:d6:22:38:1b:33:aa:f9:d8:09:85:c9:e9: d7:10:4b:9e:94:59:08:75:98:d4:e8:94:09:96:42: 16:8e:d2:8f:b9:07:5a:a1:08:33:91:08:3d:2b:51: f5:57:63:f8:bc:50:03:e7:ec:94:36:70:8c:16:74: 5c:f9:1e:1d:1a:fa:fe:bd:02:30:95:76:ee:8f:40: de:00:25:c2:d0:a2:b2:af:e2:bf:a3:f6:1f:a5:b4: f7:89:43:5e:64:91:92:db:38:33:e1:f2:d2:80:d2: 5f:69:3f:07:cc:fe:ac:94:36:a3:ba:e6:fe:25:35: 12:0c:35:ae:31:e1:a3:2a:d0:12:d3:97:fd:6f:4b: b2:1e:cf:c7:32:e2:a1:c1:93:06:c8:de:57:2e:ea: d4:9a:0c:f4:91:de:36:31:89:c5:f6:d6:dd:92:2b: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:86:66:DF:FF:A1:B6:0C:4D:4B:12:EC:36:48:8B:E4:9B:43:79:BD X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:41:89:04:b5:e5:44:51:4b:1b:71:d1:83:48:13:e7:a7:44: e0:bc:7a:f9:19:84:df:90:81:e6:c0:ca:95:53:b5:74:c7:f8: 1b:88:a5:15:c9:ce:a0:fe:33:ea:18:b5:7e:d0:2c:bc:b9:d4: 67:e6:96:8b:f3:1e:aa:ee:6f:01:03:36:bc:0a:d9:21:02:77: d3:e9:7f:56:b0:c8:b4:59:d9:e4:1e:16:10:27:b7:fa:8e:cd: a3:e8:d9:80:3c:34:f8:97:85:61:08:72:f8:52:6a:91:5a:34: b4:14:a5:76:c8:e0:d0:aa:9b:60:e8:e1:43:75:f2:a8:e6:97: bd:de:bf:a8:29:37:fe:9d:6b:36:7c:6a:03:a1:98:31:b1:ce: ac:e1:1d:ab:03:70:85:75:11:2b:88:ae:43:ed:33:bd:74:07: 9b:cf:09:3f:94:4d:e3:da:3e:f5:61:19:7b:cf:68:78:8d:2a: b4:f5:c6:89:1b:2a:53:58:40:3c:29:48:b0:c5:e6:9a:bd:61: 80:07:36:7d:c6:6e:e9:76:ff:3a:cd:47:22:72:08:30:1f:88: cf:02:85:bc:8c:32:df:b7:ce:bc:92:d6:bb:f2:78:95:9f:3c: a1:fe:55:72:6a:11:46:14:73:85:ed:fb:4c:70:3a:07:47:33: 9e:f1:5a:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwNzE5MDUxMDIzWhcNMjUwNzI2MDUxMDIzWjAYMRYwFAYD VQQDEw02ODdiMjhiZi0wNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29mjaXORjyIX4R+l1s7xVLbkYeu3v5PGWGoNAzsf1wJiktAmLmXuzuOjSQCQ x7SKxQ2A9wRBFBnAvEEwXT+65GvbRXI5Y3mnV4cawbhA2zjeZxbYMasDqT+PtkjW IjgbM6r52AmFyenXEEuelFkIdZjU6JQJlkIWjtKPuQdaoQgzkQg9K1H1V2P4vFAD 5+yUNnCMFnRc+R4dGvr+vQIwlXbuj0DeACXC0KKyr+K/o/YfpbT3iUNeZJGS2zgz 4fLSgNJfaT8HzP6slDajuub+JTUSDDWuMeGjKtAS05f9b0uyHs/HMuKhwZMGyN5X LurUmgz0kd42MYnF9tbdkiuqRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWGZt// obYMTUsS7DZIi+SbQ3m9MB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPQYkEteVEUUsbcdGDSBPnp0TgvHr5GYTfkIHmwMqVU7V0x/gbiKUV yc6g/jPqGLV+0Cy8udRn5paL8x6q7m8BAza8CtkhAnfT6X9WsMi0WdnkHhYQJ7f6 js2j6NmAPDT4l4VhCHL4UmqRWjS0FKV2yODQqptg6OFDdfKo5pe93r+oKTf+nWs2 fGoDoZgxsc6s4R2rA3CFdREriK5D7TO9dAebzwk/lE3j2j71YRl7z2h4jSq09caJ GypTWEA8KUiwxeaavWGABzZ9xm7pdv86zUcicggwH4jPAoW8jDLft868kta78niV nzyh/lVyahFGFHOF7ftMcDoHRzOe8VpW -----END CERTIFICATE-----Generated at Sun Jul 20 18:51:18 2025 by rpki-client