$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: RbEs6ewB2BmoEDY1FmlW/xwDSi3+abQfgxjyUM5xXsE= Subject key identifier: 8D:A1:E4:30:0B:62:D3:25:6C:F8:0E:09:8B:D9:B8:8B:A5:7B:6D:59 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 020C Signing time: Thu 03 Jul 2025 05:14:14 +0000 Manifest this update: Thu 03 Jul 2025 05:14:14 +0000 Manifest next update: Thu 10 Jul 2025 05:14:14 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: k/4LkzLVOnkFqCoVVnEYEXZp49Y6oBOK2W6Cu7pcy8E=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Jul 3 05:14:14 2025 GMT Not After : Jul 10 05:14:14 2025 GMT Subject: CN=686611a6-d5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:91:0d:e7:2d:d6:57:a9:68:e8:b3:76:bf: b8:48:31:ad:2c:2a:f8:d8:4b:3a:9a:13:e1:45:9a: 71:90:42:37:86:60:b8:ba:11:e9:73:95:45:8f:e9: c4:0e:8c:a7:17:ef:60:7e:ea:0e:27:97:a6:27:95: a0:5c:43:58:11:10:89:da:51:4f:ca:38:9a:a5:fd: b7:2a:7d:a6:2d:6b:6f:1f:ca:3b:88:be:0b:34:89: 64:5c:ae:77:cd:18:d3:23:cb:a5:d8:3c:5c:0a:92: e0:bf:4b:13:74:04:81:eb:d9:06:86:1a:a5:35:b7: 3d:cf:4f:df:29:92:4e:ee:7c:73:52:a9:b3:36:36: ec:05:10:27:c1:b8:d1:3d:41:dc:0b:3e:f0:42:5f: 4e:14:ac:97:8c:74:9b:92:84:17:f0:8a:f9:75:5f: e1:d4:78:21:ae:e1:bc:f1:5d:0e:c7:a5:f6:b5:42: 66:a7:d5:67:d3:16:ed:24:c1:46:18:7a:b9:bb:0a: 09:13:3e:37:b6:49:f1:01:55:e5:94:07:e8:1b:c2: 54:1b:37:d8:58:51:95:82:cb:9e:34:4e:60:25:b3: 6f:1f:e4:fd:be:fe:df:89:62:1e:48:6a:e2:fa:92: e2:d4:bb:02:e8:3f:37:6a:2a:4d:55:a1:9e:f2:10: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A1:E4:30:0B:62:D3:25:6C:F8:0E:09:8B:D9:B8:8B:A5:7B:6D:59 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:5e:62:5f:3d:0e:b7:28:50:38:0d:98:9c:25:f5:0c:1a:2d: 8a:de:a6:97:f9:e7:61:8e:e2:39:fe:8d:ba:d7:41:99:67:84: 59:73:2a:c3:87:b2:cd:88:69:7c:54:75:13:23:c4:29:33:c4: ce:c1:d3:27:ed:b0:70:43:76:3b:0c:5f:4b:55:39:2e:5f:40: f0:53:b0:40:3d:dd:c1:77:e7:1c:24:d7:8e:97:0e:38:a6:b4: e1:a4:da:a0:89:34:b2:48:8e:d5:9a:ca:8e:bb:ff:5b:b3:bd: 70:ec:5a:e9:20:a7:da:87:39:ab:97:6e:87:90:1c:34:83:df: a2:04:b1:d3:b9:f6:63:aa:c7:b6:18:3a:f9:bd:65:34:fc:91: e6:4e:00:dd:0e:a7:59:de:40:fa:c2:92:82:3c:bc:d5:ad:84: e4:8f:72:9f:2e:23:e0:1c:90:b4:cc:68:6f:d5:b9:e8:a8:9b: 9a:64:bf:cb:68:46:05:b7:da:6b:a5:e0:0d:c0:c3:be:b1:d6: 88:54:05:4a:51:95:a7:c7:39:e2:28:f4:ad:0d:8d:98:6e:25: 55:6b:37:ab:87:3a:d2:44:05:d3:94:0b:62:e6:26:5c:46:dd: d4:12:4f:ac:24:cc:d4:a6:33:73:82:32:04:c3:2d:d2:46:a6: fe:be:70:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwNzAzMDUxNDE0WhcNMjUwNzEwMDUxNDE0WjAYMRYwFAYD VQQDEw02ODY2MTFhNi1kNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxryRDect1lepaOizdr+4SDGtLCr42Es6mhPhRZpxkEI3hmC4uhHpc5VFj+nE DoynF+9gfuoOJ5emJ5WgXENYERCJ2lFPyjiapf23Kn2mLWtvH8o7iL4LNIlkXK53 zRjTI8ul2DxcCpLgv0sTdASB69kGhhqlNbc9z0/fKZJO7nxzUqmzNjbsBRAnwbjR PUHcCz7wQl9OFKyXjHSbkoQX8Ir5dV/h1HghruG88V0Ox6X2tUJmp9Vn0xbtJMFG GHq5uwoJEz43tknxAVXllAfoG8JUGzfYWFGVgsueNE5gJbNvH+T9vv7fiWIeSGri +pLi1LsC6D83aipNVaGe8hDNVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2h5DAL YtMlbPgOCYvZuIule21ZMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+XmJfPQ63KFA4DZicJfUMGi2K3qaX+edhjuI5/o2610GZZ4RZcyrD h7LNiGl8VHUTI8QpM8TOwdMn7bBwQ3Y7DF9LVTkuX0DwU7BAPd3Bd+ccJNeOlw44 prThpNqgiTSySI7VmsqOu/9bs71w7FrpIKfahzmrl26HkBw0g9+iBLHTufZjqse2 GDr5vWU0/JHmTgDdDqdZ3kD6wpKCPLzVrYTkj3KfLiPgHJC0zGhv1bnoqJuaZL/L aEYFt9prpeANwMO+sdaIVAVKUZWnxzniKPStDY2YbiVVazerhzrSRAXTlAti5iZc Rt3UEk+sJMzUpjNzgjIEwy3SRqb+vnB6 -----END CERTIFICATE-----Generated at Thu Jul 3 23:23:33 2025 by rpki-client