$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: 8sIr6ZYHWZ97u81anf7fIVRpnmA46x/9NJPYTDV4yX0= Subject key identifier: FC:54:FA:6E:A0:FA:FC:07:E4:ED:A2:E4:6B:9F:EF:83:3D:78:F4:C7 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 028C Signing time: Wed 05 Nov 2025 04:30:01 +0000 Manifest this update: Wed 05 Nov 2025 04:30:00 +0000 Manifest next update: Wed 12 Nov 2025 04:30:00 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: gwBnZ24VZzqCGq3SOmMK067ZwOQTNVXtZ4b8XXNHVP8=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Nov 5 04:30:00 2025 GMT Not After : Nov 12 04:30:00 2025 GMT Subject: CN=690ad2c9-6a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:09:47:79:75:ae:84:94:1d:b3:17:8a:33: 14:6a:50:8f:9e:d9:6a:7a:1c:21:89:eb:0f:64:b2: 1c:e2:de:88:d4:03:5f:eb:42:ad:76:ba:c7:bb:4c: dc:fa:9b:94:8c:54:06:cc:d2:76:8a:aa:38:a8:24: e2:8f:37:3a:7f:c5:0e:6f:27:f8:c7:b3:7d:3d:08: 29:6f:f3:db:a2:e0:82:be:04:9b:09:f4:a4:55:17: 62:79:03:5c:ad:c2:24:56:18:0e:ac:63:d9:e3:5a: 07:f9:33:53:e7:36:f3:ed:24:27:45:be:29:54:03: bb:d5:ab:33:72:e2:77:a3:87:d0:c0:b1:d2:c5:fc: 16:9f:ae:b3:0d:c7:df:d4:1e:ee:87:68:97:5c:c3: d6:54:a1:88:98:cc:e6:5b:7c:2c:59:6b:4e:41:6f: 9b:5b:4a:66:d3:16:9d:77:bd:05:d0:d1:93:b9:cf: 7b:f9:c3:06:e5:b2:b9:71:e3:f6:93:a2:10:7e:be: 01:61:c7:48:4e:b3:2f:6a:0f:ae:a4:18:ba:c4:18: a4:26:36:48:96:9d:a7:62:03:5d:7f:8f:9f:db:3b: 04:63:a4:25:8f:96:7a:88:8e:ed:97:16:13:56:6f: 4f:c8:e8:32:ef:0c:ac:8a:4c:79:45:af:22:af:5d: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:54:FA:6E:A0:FA:FC:07:E4:ED:A2:E4:6B:9F:EF:83:3D:78:F4:C7 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:58:6f:56:d0:64:a9:ee:61:c9:1e:87:fa:de:93:4e:f8:b1: 23:4f:15:8a:9c:a8:a7:8b:92:00:53:4d:6f:d6:38:22:38:6e: c4:60:3c:42:5b:2e:04:a6:a8:4e:dc:7f:36:7b:25:01:6d:e7: a2:0d:e9:43:6e:67:04:ba:2d:32:fe:a2:08:9d:09:49:4f:45: 18:c4:c5:51:a2:ee:71:ed:55:3e:d7:06:c8:2b:e5:45:a6:55: 4e:a1:c9:d8:cf:11:4e:7d:a9:e7:ce:b1:ae:16:21:f9:97:11: 7e:05:7b:f0:ed:df:65:0c:35:c5:40:18:a3:44:b7:bb:ce:ef: b0:0b:4c:3d:df:e0:93:01:d1:d5:60:a9:91:a8:d5:63:bf:42: d0:a0:21:40:c9:f0:06:45:9f:68:af:96:4c:e3:be:3c:7e:3d: e7:22:98:4f:d6:4a:21:6c:28:72:c9:f4:01:32:29:0a:4b:26: 83:75:9f:78:20:ed:b3:cf:37:75:49:c7:ea:88:22:6b:75:d2: 17:67:86:27:87:b8:21:68:84:a0:7b:2b:12:62:fd:cc:e0:6f: c7:f4:dc:ef:ba:72:7f:84:8d:b2:7f:f5:89:bb:71:8e:f0:11: 17:e6:2d:f2:e9:9e:75:3b:49:68:4b:26:f3:01:25:53:3a:9c: 28:12:d8:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUxMTA1MDQzMDAwWhcNMjUxMTEyMDQzMDAwWjAYMRYwFAYD VQQDEw02OTBhZDJjOS02YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcsJR3l1roSUHbMXijMUalCPntlqehwhiesPZLIc4t6I1ANf60KtdrrHu0zc +puUjFQGzNJ2iqo4qCTijzc6f8UObyf4x7N9PQgpb/PbouCCvgSbCfSkVRdieQNc rcIkVhgOrGPZ41oH+TNT5zbz7SQnRb4pVAO71aszcuJ3o4fQwLHSxfwWn66zDcff 1B7uh2iXXMPWVKGImMzmW3wsWWtOQW+bW0pm0xadd70F0NGTuc97+cMG5bK5ceP2 k6IQfr4BYcdITrMvag+upBi6xBikJjZIlp2nYgNdf4+f2zsEY6Qlj5Z6iI7tlxYT Vm9PyOgy7wysikx5Ra8ir13jxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxU+m6g +vwH5O2i5Guf74M9ePTHMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzWG9W0GSp7mHJHof63pNO+LEjTxWKnKini5IAU01v1jgiOG7EYDxC Wy4EpqhO3H82eyUBbeeiDelDbmcEui0y/qIInQlJT0UYxMVRou5x7VU+1wbIK+VF plVOocnYzxFOfannzrGuFiH5lxF+BXvw7d9lDDXFQBijRLe7zu+wC0w93+CTAdHV YKmRqNVjv0LQoCFAyfAGRZ9or5ZM4748fj3nIphP1kohbChyyfQBMikKSyaDdZ94 IO2zzzd1ScfqiCJrddIXZ4Ynh7ghaISgeysSYv3M4G/H9NzvunJ/hI2yf/WJu3GO 8BEX5i3y6Z51O0loSybzASVTOpwoEthi -----END CERTIFICATE-----Generated at Wed Nov 5 23:53:10 2025 by rpki-client