$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: V7Q7KZZBevUQmay/As30S5ED33JU+t0UxXTtsLFpTYI= Subject key identifier: E1:9B:80:00:8C:C1:92:EE:D1:71:47:5F:E2:A5:56:AD:15:AF:7C:A1 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 01DA Signing time: Tue 13 May 2025 04:32:38 +0000 Manifest this update: Tue 13 May 2025 04:32:38 +0000 Manifest next update: Tue 20 May 2025 04:32:38 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: UNRC85S/WhrbKXZhAVtNp7CltssRdwOfpQvYedpjPKk=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: May 13 04:32:38 2025 GMT Not After : May 20 04:32:38 2025 GMT Subject: CN=6822cb66-b7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:57:56:9b:0b:fd:56:62:d4:65:5d:ab:dc: fc:f0:db:49:0c:66:8c:6d:60:82:86:40:6f:96:7c: 1c:24:a5:6b:3f:a2:23:bd:31:49:3f:b5:7b:25:14: b9:46:d7:a2:af:5d:0c:65:1d:bf:7c:93:f8:9b:ed: 69:6c:89:13:6f:58:a3:bd:51:9d:28:7e:0c:66:06: bd:15:2b:95:da:c6:63:e7:fc:71:ea:f0:38:a8:c7: ef:e8:49:15:ff:55:74:1c:38:62:f9:bc:94:fc:8d: 86:cf:7f:66:dc:d5:19:a5:54:5d:7a:2e:e0:dd:2d: 73:82:12:f4:b6:05:a4:a1:b9:2c:d4:32:00:09:a9: e8:c0:3f:79:46:53:5d:58:54:d8:56:39:20:da:87: 4d:e3:48:1e:9f:74:0d:1c:64:e5:d3:13:bb:a5:90: d8:8b:44:ae:02:b6:a6:50:88:33:fa:8e:60:13:8d: d1:6f:07:ab:43:85:2b:5a:92:71:bf:ca:29:fa:11: 96:67:6d:83:a6:1f:0d:87:ae:a7:93:0a:30:20:95: 92:35:b0:0b:99:52:a7:02:e7:84:c3:e8:5b:2b:d3: 7b:95:e0:57:80:79:65:56:4d:d8:6f:64:6c:2b:4e: bf:6d:9b:8d:51:12:0b:2d:56:45:0c:68:36:04:0c: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9B:80:00:8C:C1:92:EE:D1:71:47:5F:E2:A5:56:AD:15:AF:7C:A1 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:61:1b:b0:91:08:5f:62:ff:07:21:3a:12:c7:2f:51:28:f5: d5:ad:08:1e:c9:09:2c:59:59:4b:a6:68:cd:3c:25:24:59:09: 26:b5:b7:4c:b8:dd:97:c7:cc:cb:34:fa:b2:e5:37:e7:de:d5: 8f:46:47:2d:06:52:c6:d0:e5:e3:f7:b3:85:d6:82:f9:31:92: 6e:e8:13:79:37:7f:0c:76:c0:ff:02:de:04:71:58:3f:0d:0f: f4:a3:8a:b9:ac:bd:d5:54:e5:4f:c6:2c:97:b8:f0:1d:88:0c: 4e:04:6b:33:4e:a5:ec:83:72:f6:84:87:bc:6e:6f:8a:42:2a: 45:08:86:e8:e5:f9:a2:af:33:e3:5c:a4:ca:8c:48:4d:d3:3f: d0:34:ab:74:9b:5c:ae:77:a6:ba:08:a1:94:ca:d8:e1:35:6c: 1c:41:6a:7b:86:6a:0a:44:ad:c4:11:33:c9:9e:c6:a7:d2:b7: 95:ac:21:11:c4:f4:86:64:bb:c4:a7:5e:9d:d2:e0:a0:32:9f: 3b:c2:25:8d:28:db:ca:3e:bb:3f:a2:c4:72:db:d1:7f:99:21: 0f:81:3f:ae:a3:87:40:be:3e:85:2f:1e:a1:a2:fe:38:a8:b0: a6:c4:da:69:09:59:a7:cb:83:d2:f4:70:3b:29:ed:ab:0b:72: c0:81:6a:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwNTEzMDQzMjM4WhcNMjUwNTIwMDQzMjM4WjAYMRYwFAYD VQQDEw02ODIyY2I2Ni1iN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx05XVpsL/VZi1GVdq9z88NtJDGaMbWCChkBvlnwcJKVrP6IjvTFJP7V7JRS5 Rteir10MZR2/fJP4m+1pbIkTb1ijvVGdKH4MZga9FSuV2sZj5/xx6vA4qMfv6EkV /1V0HDhi+byU/I2Gz39m3NUZpVRdei7g3S1zghL0tgWkobks1DIACanowD95RlNd WFTYVjkg2odN40gen3QNHGTl0xO7pZDYi0SuAramUIgz+o5gE43RbwerQ4UrWpJx v8op+hGWZ22Dph8Nh66nkwowIJWSNbALmVKnAueEw+hbK9N7leBXgHllVk3Yb2Rs K06/bZuNURILLVZFDGg2BAw4SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGbgACM wZLu0XFHX+KlVq0Vr3yhMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0YRuwkQhfYv8HIToSxy9RKPXVrQgeyQksWVlLpmjNPCUkWQkmtbdM uN2Xx8zLNPqy5Tfn3tWPRkctBlLG0OXj97OF1oL5MZJu6BN5N38MdsD/At4EcVg/ DQ/0o4q5rL3VVOVPxiyXuPAdiAxOBGszTqXsg3L2hIe8bm+KQipFCIbo5fmirzPj XKTKjEhN0z/QNKt0m1yud6a6CKGUytjhNWwcQWp7hmoKRK3EETPJnsan0reVrCER xPSGZLvEp16d0uCgMp87wiWNKNvKPrs/osRy29F/mSEPgT+uo4dAvj6FLx6hov44 qLCmxNppCVmny4PS9HA7Ke2rC3LAgWrL -----END CERTIFICATE-----Generated at Tue May 13 08:09:31 2025 by rpki-client