$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: COO+6PLOaD+S8qZ8dzPyqzevOZlGOiQHxmfArcUXR2A= Subject key identifier: A7:2E:D3:14:F7:DF:17:C0:E8:AD:92:9E:C2:5C:9A:28:C4:65:D3:35 Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: 0139 Signing time: Fri 05 Sep 2025 04:56:37 +0000 Manifest this update: Fri 05 Sep 2025 04:56:36 +0000 Manifest next update: Fri 12 Sep 2025 04:56:36 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: XC2jJKsyu8n19N3X2H9N1RNYTmysmDGKG2NCBcxrvTA=) 2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: Sep 5 04:56:36 2025 GMT Not After : Sep 12 04:56:36 2025 GMT Subject: CN=68ba6d85-b523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:49:ff:dd:de:b8:d8:f8:11:ec:a3:52:9a: 21:fd:af:f2:8b:c8:47:1e:53:11:27:c4:01:ae:49: 01:05:93:9a:0c:08:cc:67:af:42:32:e2:8c:b5:9f: 8e:29:b5:4a:82:4b:b4:d4:ef:c7:a7:a8:f5:9f:05: fc:2c:e2:9f:95:34:2f:2a:c9:79:c9:44:34:8f:5e: 19:77:89:5a:e3:28:8b:ef:d4:4e:e3:a1:db:f4:07: ff:14:e1:83:07:a7:56:e5:f2:c4:f5:b8:3b:d2:f9: 73:84:49:3d:9e:d8:e0:b3:c1:d8:a0:07:fa:b2:6c: 6e:fa:a3:e5:6e:a3:5e:51:e5:34:6f:be:bd:81:0a: 52:26:08:05:68:bc:4b:f6:70:5d:18:72:76:41:ff: 7a:40:7a:50:29:b1:a9:e0:b5:11:3f:0e:55:be:d3: c5:67:ad:69:29:7f:55:85:d0:2e:7b:58:6a:7b:04: 93:64:f2:d0:c8:2d:ea:a1:bd:28:76:56:28:64:3a: 13:bf:46:e7:3a:93:61:2b:e7:e5:55:69:27:82:ec: 37:7f:ee:ea:5d:ad:e8:13:76:d3:25:56:c6:9c:9d: c1:e4:02:2d:03:cf:80:ca:d8:9f:14:83:03:60:77: e9:2b:69:7d:ff:40:1e:e1:5e:6d:5e:b8:f6:6c:95: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2E:D3:14:F7:DF:17:C0:E8:AD:92:9E:C2:5C:9A:28:C4:65:D3:35 X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ff:17:bf:51:2d:74:44:e9:08:b9:7d:ba:ac:ae:08:7f:7b: b7:0d:ed:bf:37:cb:02:55:49:b2:75:33:21:49:8c:07:4c:87: 9d:e5:ac:4e:6c:6b:91:6e:ce:40:5a:2d:31:d1:6b:90:04:b7: 28:85:32:5f:06:9f:c8:9e:f5:1b:14:da:06:7a:c2:ee:d7:1a: 98:14:2b:8c:7e:d2:6e:31:41:bb:fe:ea:7b:10:59:b8:4c:f8: 06:c4:fd:b0:54:ef:5c:7e:ee:7c:2c:14:b6:01:aa:ca:b8:8c: 9e:5a:87:fa:d7:2f:c5:ec:48:a6:7a:0c:2e:cf:b5:00:5e:c1: a2:da:ac:e7:3b:8d:ec:29:85:d3:97:01:91:c8:5a:61:92:78: 9e:07:c6:60:01:6b:f9:1b:91:74:24:7a:fa:fc:5e:d0:8c:51: d9:76:2e:7a:17:8b:e6:9a:76:98:59:98:bb:06:50:90:ac:c7: 85:e0:ee:a0:2c:43:0a:5a:94:a6:12:89:65:5e:38:48:9d:7c: 71:f0:24:49:6b:20:0b:c2:32:d6:f1:20:6c:3c:45:f4:0d:50: 65:e6:46:86:20:cf:e7:47:02:c4:da:f4:01:fc:5e:80:45:3f: 51:0e:59:4b:a8:f7:d3:c2:05:53:7a:84:b4:60:d7:4f:e3:fa: a3:74:c6:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF QTY2RTA0RTQwHhcNMjUwOTA1MDQ1NjM2WhcNMjUwOTEyMDQ1NjM2WjAYMRYwFAYD VQQDEw02OGJhNmQ4NS1iNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs35J/93euNj4EeyjUpoh/a/yi8hHHlMRJ8QBrkkBBZOaDAjMZ69CMuKMtZ+O KbVKgku01O/Hp6j1nwX8LOKflTQvKsl5yUQ0j14Zd4la4yiL79RO46Hb9Af/FOGD B6dW5fLE9bg70vlzhEk9ntjgs8HYoAf6smxu+qPlbqNeUeU0b769gQpSJggFaLxL 9nBdGHJ2Qf96QHpQKbGp4LURPw5VvtPFZ61pKX9VhdAue1hqewSTZPLQyC3qob0o dlYoZDoTv0bnOpNhK+flVWknguw3f+7qXa3oE3bTJVbGnJ3B5AItA8+AytifFIMD YHfpK2l9/0Ae4V5tXrj2bJUOfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcu0xT3 3xfA6K2SnsJcmijEZdM1MB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR/xe/US10ROkIuX26rK4If3u3De2/N8sCVUmydTMhSYwHTIed5axO bGuRbs5AWi0x0WuQBLcohTJfBp/InvUbFNoGesLu1xqYFCuMftJuMUG7/up7EFm4 TPgGxP2wVO9cfu58LBS2AarKuIyeWof61y/F7Eimegwuz7UAXsGi2qznO43sKYXT lwGRyFphknieB8ZgAWv5G5F0JHr6/F7QjFHZdi56F4vmmnaYWZi7BlCQrMeF4O6g LEMKWpSmEollXjhInXxx8CRJayALwjLW8SBsPEX0DVBl5kaGIM/nRwLE2vQB/F6A RT9RDllLqPfTwgVTeoS0YNdP4/qjdMas -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:14 2025 by rpki-client