$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: XanIVx8tr77fk7LsbjCrRpZXPcSHGrmCIJrddWGA8tM= Subject key identifier: 46:E6:C0:49:19:54:8C:95:30:8E:B3:D3:49:69:9B:2C:6E:1F:FB:7A Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 0398 Signing time: Thu 23 Jul 2026 05:06:01 +0000 Manifest this update: Thu 23 Jul 2026 05:06:00 +0000 Manifest next update: Thu 30 Jul 2026 05:06:00 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: khYLUKUzh4df3O2oV58NvHenyswkVSj+KWKQW36hb0U=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: CALB5+ZNaZKqj1fRady94jf/uK+L9bkLRLqb7EfU5a0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Jul 23 05:06:00 2026 GMT Not After : Jul 30 05:06:00 2026 GMT Subject: CN=6a61a139-adbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:59:0d:67:db:24:07:f7:d0:c3:3a:ec:33: 26:f6:b2:d7:48:58:2d:f8:e0:fd:88:03:65:f3:01: 2a:ca:84:f0:d8:52:f8:9c:a8:e8:00:28:cb:7c:a2: ec:80:5c:27:ec:9f:93:7a:66:b9:81:62:f0:a5:36: 5a:55:8a:9e:7f:67:01:f6:b4:b0:26:01:79:62:46: 66:02:81:06:4b:05:31:c6:bc:c2:c2:7c:f8:41:94: 80:05:4e:96:57:c7:49:30:fb:ff:ae:d6:e8:8f:90: ae:2d:91:7d:d5:a2:af:bb:b5:b7:e1:41:e0:e6:86: 42:d5:98:fe:c2:0f:2e:0d:4b:79:c2:fc:2a:11:d6: 97:40:d6:67:ad:11:83:e4:84:fd:8e:e7:19:38:a1: 87:b9:66:73:20:7f:b6:95:5f:4c:e4:68:4a:a6:f5: 75:38:1c:a4:44:b3:00:40:b1:43:33:fd:3c:d3:99: cd:02:ab:ec:45:80:7b:4f:3c:21:4e:d8:c1:32:8f: 02:cf:2f:e4:e8:0e:cc:1b:a8:f6:b9:2f:68:e2:ef: f4:cb:8c:ba:a9:29:4a:d8:9e:2e:df:38:39:e3:06: f0:ce:31:55:da:b7:28:ca:36:34:91:6e:99:75:7c: f7:aa:fb:d2:63:e5:f5:9a:e1:be:77:9c:f6:25:ee: 31:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E6:C0:49:19:54:8C:95:30:8E:B3:D3:49:69:9B:2C:6E:1F:FB:7A X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:62:06:9b:5f:20:72:c4:24:16:34:70:dc:ca:ae:91:36:c4: 00:b9:2b:98:2d:8d:36:30:1a:0b:1f:74:a0:f8:42:b6:3e:91: 80:1b:2c:c9:7e:c1:a0:07:79:31:87:2c:b1:0b:f4:2a:fe:e9: 1f:24:ab:c3:19:84:2e:26:14:8f:e1:cf:ce:d4:c9:20:2e:8c: 10:f8:e1:62:51:5d:15:08:6c:f7:27:7a:7c:08:ae:9c:d3:c8: 8b:10:2d:f5:63:f0:77:3b:2a:a3:82:3f:c4:2e:cd:18:c9:ec: fc:85:e6:d5:d8:a7:ba:1e:ad:cf:b4:3b:c8:2d:96:35:d1:b5: 07:4f:33:d2:9b:91:3b:ea:ad:39:30:01:53:0f:5e:b5:80:11: a0:d7:9f:a6:b2:d1:e6:f2:e6:b7:a5:9a:b1:63:4d:a0:40:08: bf:22:20:67:68:d9:c2:e0:62:23:6b:c6:52:44:ed:8f:40:09: 29:e5:f1:5d:95:0a:1d:01:25:ff:7b:00:03:2f:3d:d8:35:85: 84:56:b8:5d:0f:e7:a8:2a:2c:d3:39:f6:2c:ec:61:83:c7:33: 1a:5e:80:b7:9e:19:21:d8:39:a3:d8:c9:b8:5d:fc:0f:7d:ba: b6:e6:e7:b2:37:78:d0:73:81:58:20:bd:ad:23:aa:2d:f1:b2: 8e:d4:3a:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjYwNzIzMDUwNjAwWhcNMjYwNzMwMDUwNjAwWjAYMRYwFAYD VQQDEw02YTYxYTEzOS1hZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5l5ZDWfbJAf30MM67DMm9rLXSFgt+OD9iANl8wEqyoTw2FL4nKjoACjLfKLs gFwn7J+Tema5gWLwpTZaVYqef2cB9rSwJgF5YkZmAoEGSwUxxrzCwnz4QZSABU6W V8dJMPv/rtboj5CuLZF91aKvu7W34UHg5oZC1Zj+wg8uDUt5wvwqEdaXQNZnrRGD 5IT9jucZOKGHuWZzIH+2lV9M5GhKpvV1OBykRLMAQLFDM/0805nNAqvsRYB7Tzwh TtjBMo8Czy/k6A7MG6j2uS9o4u/0y4y6qSlK2J4u3zg54wbwzjFV2rcoyjY0kW6Z dXz3qvvSY+X1muG+d5z2Je4xqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbmwEkZ VIyVMI6z00lpmyxuH/t6MB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKWIGm18gcsQkFjRw3MqukTbEALkrmC2NNjAaCx90oPhCtj6RgBssyX7BoAd5 MYcssQv0Kv7pHySrwxmELiYUj+HPztTJIC6MEPjhYlFdFQhs9yd6fAiunNPIixAt 9WPwdzsqo4I/xC7NGMns/IXm1dinuh6tz7Q7yC2WNdG1B08z0puRO+qtOTABUw9e tYARoNefprLR5vLmt6WasWNNoEAIvyIgZ2jZwuBiI2vGUkTtj0AJKeXxXZUKHQEl /3sAAy892DWFhFa4XQ/nqCos0zn2LOxhg8czGl6At54ZIdg5o9jJuF38D326tubn sjd40HOBWCC9rSOqLfGyjtQ6Kw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:01:41 2026 by rpki-client