$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: AIPTBsLaH67ZzxkdR/zFCasff+spbR2nPUMtXMBuGmo= Subject key identifier: 00:96:2F:D5:C9:75:4E:D5:5D:7B:70:6F:70:45:71:72:6C:83:FD:86 Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: 0108 Signing time: Sun 01 Jun 2025 04:48:56 +0000 Manifest this update: Sun 01 Jun 2025 04:48:55 +0000 Manifest next update: Sun 08 Jun 2025 04:48:55 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: nggmnGGB9X+/3+DF5jtLpqmvLQesonuh+NcGEDYx83E=) 2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: Jun 1 04:48:55 2025 GMT Not After : Jun 8 04:48:55 2025 GMT Subject: CN=683bdbb7-2f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:b9:da:f7:88:c7:e8:b4:4d:06:bc:d9:0d: 0b:f0:34:95:3c:1a:b8:a0:00:e5:df:c7:e0:50:31: a5:33:d4:e8:b2:7c:9b:b0:f4:04:cf:af:a1:30:58: 25:e9:6b:e1:46:a5:06:1d:29:c1:84:14:7d:ee:98: a6:1f:50:9f:45:e6:d1:f1:a9:34:53:ce:55:4a:4e: fb:52:db:44:05:dd:e4:2f:3b:ac:69:19:c5:96:2e: 68:3b:58:5b:69:0f:55:cc:6b:8b:78:39:75:c3:4b: e2:0f:a3:ae:59:4e:99:f7:07:2b:41:53:35:f2:21: 78:6f:b5:41:be:1b:a6:ba:18:00:5b:f8:49:81:d8: 69:ae:21:39:8f:98:0d:f6:d3:f2:50:65:74:83:89: fa:bb:c5:5c:2b:de:a7:05:dd:93:96:2c:4d:7a:5c: a7:39:dc:c3:d8:f9:c3:81:76:9b:58:2f:2c:b7:3b: f6:c0:d1:19:e0:7a:6c:c6:1e:0c:22:47:52:39:f6: 38:87:44:5b:3d:2f:a2:8d:8a:0e:6c:29:46:5b:51: a7:7c:b6:dd:81:b2:e0:0f:a3:c3:89:f0:de:68:44: c6:1a:a2:44:48:bc:4d:52:b0:98:44:6c:0c:a1:3c: 62:37:38:73:85:8d:c4:5c:ef:78:22:87:ca:6c:45: bb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:96:2F:D5:C9:75:4E:D5:5D:7B:70:6F:70:45:71:72:6C:83:FD:86 X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:72:61:03:46:e1:63:62:ac:04:d6:15:52:c5:67:63:27:fc: 4b:c6:13:9b:6f:7b:83:b1:a8:d0:ac:f0:85:04:f2:6a:89:b0: 8f:72:ab:0d:4e:57:17:32:c2:01:5a:0c:2e:91:7d:29:d2:1b: b4:88:5b:08:c4:05:f9:6d:2d:5d:a8:8e:35:68:26:52:e9:bc: ff:cc:42:a5:c5:22:ec:c0:b1:de:6a:4c:75:12:51:23:83:cc: 0e:ba:12:e0:2c:d2:a9:d3:fa:f9:a9:6a:a6:07:8f:bb:c2:af: 6b:41:bd:8a:52:f9:2a:16:96:c9:93:11:b2:89:6c:c3:b8:03: a0:e6:0b:ff:3a:0e:4f:56:60:9c:61:ea:6f:6a:b6:4f:8d:14: 29:4f:a0:ed:44:3c:40:32:b5:f9:30:c7:48:89:df:1b:95:b9: b2:d6:2d:74:46:85:46:03:b4:0e:aa:94:c7:37:ed:52:c5:c6: 14:d0:25:e9:6f:e8:36:81:10:e2:85:61:a2:3e:c7:a2:3c:bb: 23:22:49:bd:51:c3:71:26:42:f4:2a:28:b4:22:06:a2:97:79: 81:23:2d:a9:af:06:09:a4:53:e2:5d:ac:96:bc:c5:f5:70:b5: 83:9e:50:e1:55:5d:62:f3:ba:63:72:74:a2:72:f6:1d:8d:fd: bf:ce:65:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF QTY2RTA0RTQwHhcNMjUwNjAxMDQ0ODU1WhcNMjUwNjA4MDQ0ODU1WjAYMRYwFAYD VQQDEw02ODNiZGJiNy0yZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykW52veIx+i0TQa82Q0L8DSVPBq4oADl38fgUDGlM9TosnybsPQEz6+hMFgl 6WvhRqUGHSnBhBR97pimH1CfRebR8ak0U85VSk77UttEBd3kLzusaRnFli5oO1hb aQ9VzGuLeDl1w0viD6OuWU6Z9wcrQVM18iF4b7VBvhumuhgAW/hJgdhpriE5j5gN 9tPyUGV0g4n6u8VcK96nBd2TlixNelynOdzD2PnDgXabWC8stzv2wNEZ4Hpsxh4M IkdSOfY4h0RbPS+ijYoObClGW1GnfLbdgbLgD6PDifDeaETGGqJESLxNUrCYRGwM oTxiNzhzhY3EXO94IofKbEW7qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACWL9XJ dU7VXXtwb3BFcXJsg/2GMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcmEDRuFjYqwE1hVSxWdjJ/xLxhObb3uDsajQrPCFBPJqibCPcqsN TlcXMsIBWgwukX0p0hu0iFsIxAX5bS1dqI41aCZS6bz/zEKlxSLswLHeakx1ElEj g8wOuhLgLNKp0/r5qWqmB4+7wq9rQb2KUvkqFpbJkxGyiWzDuAOg5gv/Og5PVmCc YepvarZPjRQpT6DtRDxAMrX5MMdIid8blbmy1i10RoVGA7QOqpTHN+1SxcYU0CXp b+g2gRDihWGiPseiPLsjIkm9UcNxJkL0Kii0Igail3mBIy2prwYJpFPiXayWvMX1 cLWDnlDhVV1i87pjcnSicvYdjf2/zmUO -----END CERTIFICATE-----Generated at Mon Jun 2 20:18:05 2025 by rpki-client