$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: oNqc/cMW/Q+2vqtX2mn1xQnVZBNAu7LHeajV4kNHxos= Subject key identifier: A2:D4:73:71:85:C2:80:E0:F6:CE:87:4E:57:D6:E7:42:EA:EE:C7:D3 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 03DA Signing time: Fri 25 Sep 2026 03:27:06 +0000 Manifest this update: Fri 25 Sep 2026 03:27:05 +0000 Manifest next update: Fri 02 Oct 2026 03:27:05 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: +wGpdMd3gbE2j7zB/n6fT+RTW1DzTZr5z1QBPcTdMkM=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: CALB5+ZNaZKqj1fRady94jf/uK+L9bkLRLqb7EfU5a0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Sep 25 03:27:05 2026 GMT Not After : Oct 2 03:27:05 2026 GMT Subject: CN=6ab5ea09-64f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:6f:68:3e:1d:aa:21:b5:8a:fc:c4:88:ec: ae:c4:23:6f:5f:e4:f0:c9:70:3c:c6:fa:76:48:cd: ba:8e:b5:2d:84:b3:cb:e9:cf:1a:2a:c6:a0:2f:80: 3e:c5:c5:d0:3d:26:32:e4:50:24:09:9f:11:0a:79: cc:f6:11:3c:ed:f9:33:ed:26:e3:53:08:b2:b9:9f: e6:14:aa:dc:d9:c8:78:a6:da:c3:8a:0c:ac:58:20: 72:e7:4e:78:a4:4a:60:57:09:a4:35:c2:66:6b:ac: 17:49:89:a0:55:ac:61:7b:1d:a0:47:57:75:46:8b: a5:5a:66:a0:70:15:65:21:17:b1:e6:f2:d2:cf:b9: 75:46:d2:72:4a:51:c7:14:55:5b:24:86:32:31:ac: e5:9d:e3:87:b6:34:c6:a2:d3:aa:d8:e0:04:94:a5: e0:21:84:18:71:a8:e2:47:7a:85:cd:d8:e8:e9:2f: 4f:4a:ab:56:7c:81:21:50:53:ea:41:f8:27:5d:e6: 6d:f7:bd:33:f1:06:e3:d6:7c:96:6b:78:ee:fa:e7: a4:e6:ef:2a:af:1b:fe:9f:a2:ea:ff:db:42:b4:95: 05:48:8f:d3:0b:96:07:25:df:89:eb:72:9a:fb:e0: 3e:6b:7b:b2:bb:79:74:24:5d:65:25:41:95:6f:7e: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D4:73:71:85:C2:80:E0:F6:CE:87:4E:57:D6:E7:42:EA:EE:C7:D3 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:7c:5a:11:f9:3f:04:bf:32:9b:e2:ef:45:ce:31:8c:f3:45: 10:ea:2b:0b:73:de:fe:4e:cd:6b:39:bd:82:2b:c3:01:bc:fb: 49:19:99:b8:83:f7:91:35:d2:e3:f2:04:38:c3:d8:5f:0b:71: 48:c3:d9:9d:28:44:64:a1:09:c3:21:33:69:8d:f7:3f:82:1c: 61:2f:7b:c1:85:a7:fc:08:9f:77:e5:21:12:4b:5b:c9:91:8d: 21:8c:ac:97:bc:73:24:bb:82:af:ee:66:3d:92:4b:85:a5:7e: 33:4d:67:c9:78:c3:04:98:6a:d3:21:87:a7:cc:5f:3c:a5:a1: 0c:a0:aa:fd:44:a0:7c:5a:e4:27:a9:8a:a7:4e:18:38:a5:fd: 9f:f9:7e:67:e8:53:fb:d5:4d:e7:49:6c:06:0b:ec:38:00:9b: 5b:e0:a6:d6:36:49:fd:95:f0:11:5f:9a:3e:b3:2a:a7:27:dc: 0a:10:8e:a0:d6:2b:6f:bc:04:84:5b:1e:4e:4c:e7:7b:70:2a: 11:d3:3f:2f:70:17:55:49:cd:45:a5:76:fc:85:ca:a1:c9:cf: 29:07:e4:da:8c:55:e8:d7:f5:ac:3c:2e:b8:ea:45:05:4c:19: c4:98:37:85:eb:8b:bf:8c:cd:c0:f5:85:82:85:43:7c:fc:96: b9:af:56:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjYwOTI1MDMyNzA1WhcNMjYxMDAyMDMyNzA1WjAYMRYwFAYD VQQDEw02YWI1ZWEwOS02NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkbZvaD4dqiG1ivzEiOyuxCNvX+TwyXA8xvp2SM26jrUthLPL6c8aKsagL4A+ xcXQPSYy5FAkCZ8RCnnM9hE87fkz7SbjUwiyuZ/mFKrc2ch4ptrDigysWCBy5054 pEpgVwmkNcJma6wXSYmgVaxhex2gR1d1RoulWmagcBVlIRex5vLSz7l1RtJySlHH FFVbJIYyMazlneOHtjTGotOq2OAElKXgIYQYcajiR3qFzdjo6S9PSqtWfIEhUFPq QfgnXeZt970z8Qbj1nyWa3ju+uek5u8qrxv+n6Lq/9tCtJUFSI/TC5YHJd+J63Ka ++A+a3uyu3l0JF1lJUGVb35eDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLUc3GF woDg9s6HTlfW50Lq7sfTMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvnxaEfk/BL8ym+LvRc4xjPNFEOorC3Pe/k7Nazm9givDAbz7SRmZuIP3kTXS 4/IEOMPYXwtxSMPZnShEZKEJwyEzaY33P4IcYS97wYWn/Aifd+UhEktbyZGNIYys l7xzJLuCr+5mPZJLhaV+M01nyXjDBJhq0yGHp8xfPKWhDKCq/USgfFrkJ6mKp04Y OKX9n/l+Z+hT+9VN50lsBgvsOACbW+Cm1jZJ/ZXwEV+aPrMqpyfcChCOoNYrb7wE hFseTkzne3AqEdM/L3AXVUnNRaV2/IXKocnPKQfk2oxV6Nf1rDwuuOpFBUwZxJg3 heuLv4zNwPWFgoVDfPyWua9W+Q== -----END CERTIFICATE-----Generated at Fri Sep 25 12:53:00 2026 by rpki-client