$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: buVd78gbhZY21tvx2BVEs0xyTSD6YKvUR4YpZXKPV94= Subject key identifier: 37:6A:64:6C:E7:87:D1:E9:FB:E4:98:B6:F6:0E:4D:72:C8:AA:9D:7B Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: 0120 Signing time: Sat 19 Jul 2025 05:03:45 +0000 Manifest this update: Sat 19 Jul 2025 05:03:45 +0000 Manifest next update: Sat 26 Jul 2025 05:03:45 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: WLiueppfP76kRIJCSVD901CBZqhtPvoGByAg5lflgME=) 2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: Jul 19 05:03:45 2025 GMT Not After : Jul 26 05:03:45 2025 GMT Subject: CN=687b2731-35f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:f0:d5:ae:27:ba:00:2f:cd:1c:fe:a5:d7: fc:a6:c1:e9:bc:a0:54:53:ea:82:19:7e:1c:9e:9a: 89:5c:71:ad:b8:c8:2e:92:78:e1:20:d1:f0:8d:d1: 43:ab:6f:27:a6:0a:cb:20:27:19:e7:9e:cb:57:3f: 9a:32:8f:c0:ac:5e:d9:7d:96:3f:1e:23:09:be:22: 41:56:3c:38:fe:f6:93:57:66:e2:84:88:af:62:dc: ab:48:69:87:ab:34:c5:93:b5:b7:ac:b4:44:08:17: 9c:62:f6:f3:f0:ca:d7:2c:7a:77:bf:a7:46:56:c1: 3a:6f:59:d1:ba:88:12:76:0b:8f:80:31:a8:a3:ef: 65:66:b0:8d:94:6a:68:2a:d6:d4:d5:94:39:48:82: 72:53:ac:2e:77:16:50:57:03:98:8f:08:39:6b:5a: 6b:0a:e9:68:6d:1a:2c:41:80:4b:93:c2:f2:be:51: 73:12:00:39:44:a5:b4:07:a8:9f:6b:9f:ca:45:b7: e3:bf:1a:2a:06:9c:d2:0a:1b:b0:c1:b8:25:21:c6: e3:f8:85:91:e0:ce:b3:ec:22:6e:c2:97:85:77:90: 77:64:15:3e:16:9d:1d:bf:b4:62:27:24:63:46:f9: 78:4d:ff:0c:6e:cf:1b:91:f8:49:07:04:79:87:8b: 28:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6A:64:6C:E7:87:D1:E9:FB:E4:98:B6:F6:0E:4D:72:C8:AA:9D:7B X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:c9:0e:ea:f2:35:f5:f9:56:76:81:50:f8:93:7e:fa:2d:ee: 53:88:b5:a6:f7:ac:19:7a:85:dd:8c:bc:50:a1:4f:0d:17:18: 80:f6:06:9d:42:3f:7c:c0:fb:f3:f1:9c:e4:2a:ab:af:38:8e: db:57:a6:78:88:49:60:dd:70:ea:fa:8f:f1:6e:4e:e1:46:79: 3a:aa:20:13:f8:4e:ea:6f:a9:3c:3c:b7:07:e1:e8:9b:fc:fc: d3:89:94:0e:f9:3e:7f:79:86:e2:a9:8c:7a:b0:48:f5:b0:03: bc:c0:dd:73:3b:6a:b2:2c:09:b8:6a:12:14:bb:da:79:18:a9: d4:92:2b:ce:da:08:46:78:d7:d3:53:25:f4:cb:84:7b:b3:02: 8e:47:09:c7:13:03:1a:57:e2:6f:c6:54:e3:6f:7d:b3:1a:3a: 7f:14:b4:ba:74:68:bd:79:70:fb:85:ae:84:da:00:ad:84:6a: 2f:a3:0f:ee:98:d8:ac:5c:be:ed:d2:2c:4e:b3:ae:25:2e:8c: cf:5b:fd:2a:e8:29:de:a4:5e:57:e0:3c:6b:f9:6c:9e:fc:31: be:9a:26:52:2e:5d:0f:eb:8c:6d:8d:da:90:c8:e1:dc:fd:c2: 67:34:b1:42:c3:d8:04:cb:73:cb:96:c0:96:de:30:fb:34:35: 02:e9:49:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF QTY2RTA0RTQwHhcNMjUwNzE5MDUwMzQ1WhcNMjUwNzI2MDUwMzQ1WjAYMRYwFAYD VQQDEw02ODdiMjczMS0zNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUPw1a4nugAvzRz+pdf8psHpvKBUU+qCGX4cnpqJXHGtuMguknjhINHwjdFD q28npgrLICcZ557LVz+aMo/ArF7ZfZY/HiMJviJBVjw4/vaTV2bihIivYtyrSGmH qzTFk7W3rLRECBecYvbz8MrXLHp3v6dGVsE6b1nRuogSdguPgDGoo+9lZrCNlGpo KtbU1ZQ5SIJyU6wudxZQVwOYjwg5a1prCulobRosQYBLk8LyvlFzEgA5RKW0B6if a5/KRbfjvxoqBpzSChuwwbglIcbj+IWR4M6z7CJuwpeFd5B3ZBU+Fp0dv7RiJyRj Rvl4Tf8Mbs8bkfhJBwR5h4so2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdqZGzn h9Hp++SYtvYOTXLIqp17MB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbyQ7q8jX1+VZ2gVD4k376Le5TiLWm96wZeoXdjLxQoU8NFxiA9gad Qj98wPvz8ZzkKquvOI7bV6Z4iElg3XDq+o/xbk7hRnk6qiAT+E7qb6k8PLcH4eib /PzTiZQO+T5/eYbiqYx6sEj1sAO8wN1zO2qyLAm4ahIUu9p5GKnUkivO2ghGeNfT UyX0y4R7swKORwnHEwMaV+JvxlTjb32zGjp/FLS6dGi9eXD7ha6E2gCthGovow/u mNisXL7t0ixOs64lLozPW/0q6CnepF5X4Dxr+Wye/DG+miZSLl0P64xtjdqQyOHc /cJnNLFCw9gEy3PLlsCW3jD7NDUC6Uk2 -----END CERTIFICATE-----Generated at Sun Jul 20 20:40:49 2025 by rpki-client