$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: J6/caAFQJ6ZZDjUX+vWcpuFkGtlwyGwmCztXFZVYmqc= Subject key identifier: 53:E9:49:B3:0B:CF:9B:2E:4F:7A:61:DD:53:4B:7A:4A:5E:A3:71:A2 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 0242 Signing time: Sat 23 Aug 2025 04:54:13 +0000 Manifest this update: Sat 23 Aug 2025 04:54:13 +0000 Manifest next update: Sat 30 Aug 2025 04:54:13 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: GzVuIl7C6/fTD0uc5Ivc5NlmtoVVneIHfHxbaHjsXSU=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: VpoPBPOkKhmfp0KuQ0D/3XZTCkKsIKJM+KUjxtq2Y8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Aug 23 04:54:13 2025 GMT Not After : Aug 30 04:54:13 2025 GMT Subject: CN=68a94975-96f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:90:f2:77:d7:3e:a1:e3:29:32:b4:57:1b: e2:23:4a:34:7d:ba:b6:aa:78:56:96:e4:8e:7f:1a: cc:12:1e:67:5c:86:3e:95:fb:d4:1c:58:6c:f4:9c: f4:cc:6e:99:6d:d6:f6:0d:a1:af:61:d6:bf:c6:43: ee:bf:65:1d:aa:87:36:8c:b4:8d:81:f8:6d:37:4f: 4e:b7:bf:52:df:a7:48:b2:ca:97:6d:27:4e:d6:07: 10:11:8e:2c:f2:86:d2:02:73:31:03:cf:6e:dc:1e: d3:b4:f3:6a:79:1a:c1:85:b3:bd:b0:21:87:69:0a: c9:46:69:3a:dd:b9:f7:bd:2f:21:f8:d8:83:4c:44: 34:fc:1d:61:ce:67:84:1c:be:78:aa:1d:c5:33:a2: 76:f5:72:4a:dc:23:e4:d7:42:a5:c4:d4:d0:2c:ae: 25:bd:08:2c:eb:d4:0d:2a:61:39:18:88:04:81:85: 34:c2:70:00:68:c7:f8:0b:67:f4:7a:5f:a5:5f:8e: b8:3d:cf:b2:27:fa:72:e4:8b:1d:3f:bb:3b:54:c1: 31:45:79:c8:92:7d:a1:e7:53:e1:7a:0a:50:4f:00: e7:1a:06:34:49:14:99:47:74:19:f1:b9:28:06:84: 2c:77:51:84:17:15:bd:25:f9:43:5a:71:47:c1:45: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E9:49:B3:0B:CF:9B:2E:4F:7A:61:DD:53:4B:7A:4A:5E:A3:71:A2 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a5:ed:70:56:6f:60:cf:a5:93:03:77:59:ad:91:7c:56:36: dd:dd:06:3d:8c:80:4c:b5:eb:7c:59:f9:d0:ab:b6:cf:aa:1d: a8:cf:04:b3:32:08:cc:bc:53:55:c2:cf:f1:83:8c:a0:e9:e2: c7:81:13:dd:ab:d8:12:26:dd:d3:68:90:09:5f:a0:fe:bf:90: 63:68:b9:bd:41:a7:39:34:27:ca:c4:d4:1a:45:4a:38:78:af: 2a:10:50:74:0c:e5:2e:27:be:d3:28:ed:ee:98:b6:2b:02:68: d3:d7:63:29:92:12:8f:55:97:20:39:8d:fa:56:2e:9d:0d:34: 29:59:e0:bd:a3:9b:c2:8c:63:b2:c3:d4:da:1e:f4:56:41:c3: 3a:37:b7:93:ec:8b:d4:18:87:69:35:7b:27:ce:a8:8a:a7:e5: 54:22:ab:10:6d:af:f9:47:88:19:81:e6:2f:57:9a:3a:8b:1a: 62:d7:0f:d5:3d:b8:83:bb:f5:26:e1:d1:4c:c0:3c:b3:20:84: 54:2a:40:eb:87:1b:0a:64:80:4b:5f:02:9b:0e:df:10:6f:f2: 67:55:9f:19:f6:83:de:45:15:a5:f9:af:32:30:cb:12:e6:4e: f2:7f:63:50:e9:a8:93:e1:c1:0a:2f:a6:a3:3a:ee:c9:c8:6d: 73:2e:dc:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjUwODIzMDQ1NDEzWhcNMjUwODMwMDQ1NDEzWjAYMRYwFAYD VQQDEw02OGE5NDk3NS05NmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxw+Q8nfXPqHjKTK0VxviI0o0fbq2qnhWluSOfxrMEh5nXIY+lfvUHFhs9Jz0 zG6Zbdb2DaGvYda/xkPuv2Udqoc2jLSNgfhtN09Ot79S36dIssqXbSdO1gcQEY4s 8obSAnMxA89u3B7TtPNqeRrBhbO9sCGHaQrJRmk63bn3vS8h+NiDTEQ0/B1hzmeE HL54qh3FM6J29XJK3CPk10KlxNTQLK4lvQgs69QNKmE5GIgEgYU0wnAAaMf4C2f0 el+lX464Pc+yJ/py5IsdP7s7VMExRXnIkn2h51PhegpQTwDnGgY0SRSZR3QZ8bko BoQsd1GEFxW9JflDWnFHwUV3uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPpSbML z5suT3ph3VNLekpeo3GiMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACpe1wVm9gz6WTA3dZrZF8Vjbd3QY9jIBMtet8WfnQq7bPqh2ozwSz MgjMvFNVws/xg4yg6eLHgRPdq9gSJt3TaJAJX6D+v5BjaLm9Qac5NCfKxNQaRUo4 eK8qEFB0DOUuJ77TKO3umLYrAmjT12MpkhKPVZcgOY36Vi6dDTQpWeC9o5vCjGOy w9TaHvRWQcM6N7eT7IvUGIdpNXsnzqiKp+VUIqsQba/5R4gZgeYvV5o6ixpi1w/V PbiDu/Um4dFMwDyzIIRUKkDrhxsKZIBLXwKbDt8Qb/JnVZ8Z9oPeRRWl+a8yMMsS 5k7yf2NQ6aiT4cEKL6ajOu7JyG1zLtwe -----END CERTIFICATE-----Generated at Sat Aug 23 19:57:41 2025 by rpki-client