$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: OQom9M4X24gt1zxdjFlvcQLZPQ7KAZQb2F/YD54pgnk= Subject key identifier: A2:48:FF:4B:9F:A5:58:DF:03:AF:E3:D2:C4:6C:3B:B4:F4:89:22:61 Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: 0132 Signing time: Sat 23 Aug 2025 04:47:40 +0000 Manifest this update: Sat 23 Aug 2025 04:47:40 +0000 Manifest next update: Sat 30 Aug 2025 04:47:40 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: RNvDhzOsw/8dBPJCjJHTXuSUCudUQH9PuqqmMToZqxo=) 2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: Aug 23 04:47:40 2025 GMT Not After : Aug 30 04:47:40 2025 GMT Subject: CN=68a947ec-8e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8a:5b:2c:c2:ca:bd:c7:5d:f7:c0:09:7a:de: 0c:a3:55:30:85:48:a5:ca:4d:ce:79:ce:3d:63:79: f8:20:5c:4d:18:1e:7e:84:0d:03:df:04:ec:13:6a: f3:a4:aa:f1:65:c9:66:df:d5:29:87:b8:c7:06:c4: d5:1c:68:40:0c:43:a0:8f:35:b1:4f:01:43:7d:c0: 25:d9:3f:85:19:66:f2:25:83:87:cb:f8:35:69:3f: 5a:2f:1c:74:45:a4:c8:22:d4:73:39:14:14:cd:9a: fa:a4:e7:0e:02:0f:35:2c:de:65:73:bb:1d:cf:b6: 68:88:59:85:bd:18:41:59:d0:bf:6b:a2:c5:7a:63: a1:77:af:3d:2c:b5:df:33:66:19:8b:ae:62:78:89: 6a:a6:c6:df:9b:b5:dc:93:34:4a:be:1b:77:2a:b2: f1:ee:05:67:fe:82:3b:c2:10:68:ad:8f:f8:44:0f: 48:16:6f:fb:14:94:b6:1a:6b:30:61:50:fd:e1:39: 77:5d:9d:3b:d4:61:b5:2f:05:2c:d1:cc:9b:db:45: 98:0d:2a:6b:85:67:c5:87:b8:a5:26:4a:79:e6:df: 74:18:24:4d:63:a8:79:43:62:cf:59:39:22:34:2f: 52:24:e8:fe:40:ce:9a:d5:7a:06:4d:ae:89:e4:5b: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:48:FF:4B:9F:A5:58:DF:03:AF:E3:D2:C4:6C:3B:B4:F4:89:22:61 X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:0c:07:c3:04:85:ff:e4:4b:26:11:5f:58:15:67:4e:f2:65: bf:a9:a7:bd:72:ab:34:c4:17:f5:3d:e3:28:1d:ac:0d:5f:b2: b7:57:09:e0:ac:d9:92:a5:f3:3c:48:e3:f1:02:eb:b9:ab:3d: b1:d7:02:78:51:c1:a3:ff:1a:7a:8d:30:b0:97:f3:50:66:9e: fa:ad:58:04:3d:6c:e7:27:c0:89:d3:1a:1a:35:ef:ca:6f:66: 59:63:77:b2:d8:27:42:ac:99:5e:92:6b:e3:11:9d:a8:b9:d0: 8a:cc:dd:35:ea:33:66:52:80:bf:76:72:4a:1b:1f:f1:ea:01: 4f:f4:b6:04:f0:32:28:a2:a0:36:63:24:8f:bb:47:a7:72:cf: 38:aa:5e:e9:a8:05:1a:ab:1c:39:3e:78:29:5f:a9:f5:6c:21: 8f:95:86:25:fe:dc:32:f4:1b:96:11:14:8b:9e:8e:ec:e8:36: 0f:56:b5:2a:fa:a9:64:1d:e3:fb:6f:72:2f:5d:cb:cf:15:4c: 50:53:c7:5d:9d:60:0a:3e:15:4d:66:92:94:0b:d4:6e:0a:fa: d9:13:09:aa:1d:34:c6:d3:f9:70:80:68:e4:ea:54:88:2e:6a: bc:43:fb:6f:4a:c3:c8:b8:9b:6a:b1:56:16:55:1d:bd:7b:75: d9:75:95:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF QTY2RTA0RTQwHhcNMjUwODIzMDQ0NzQwWhcNMjUwODMwMDQ0NzQwWjAYMRYwFAYD VQQDEw02OGE5NDdlYy04ZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IpbLMLKvcdd98AJet4Mo1UwhUilyk3Oec49Y3n4IFxNGB5+hA0D3wTsE2rz pKrxZclm39Uph7jHBsTVHGhADEOgjzWxTwFDfcAl2T+FGWbyJYOHy/g1aT9aLxx0 RaTIItRzORQUzZr6pOcOAg81LN5lc7sdz7ZoiFmFvRhBWdC/a6LFemOhd689LLXf M2YZi65ieIlqpsbfm7XckzRKvht3KrLx7gVn/oI7whBorY/4RA9IFm/7FJS2Gmsw YVD94Tl3XZ071GG1LwUs0cyb20WYDSprhWfFh7ilJkp55t90GCRNY6h5Q2LPWTki NC9SJOj+QM6a1XoGTa6J5Fvc+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJI/0uf pVjfA6/j0sRsO7T0iSJhMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDDAfDBIX/5EsmEV9YFWdO8mW/qae9cqs0xBf1PeMoHawNX7K3Vwng rNmSpfM8SOPxAuu5qz2x1wJ4UcGj/xp6jTCwl/NQZp76rVgEPWznJ8CJ0xoaNe/K b2ZZY3ey2CdCrJlekmvjEZ2oudCKzN016jNmUoC/dnJKGx/x6gFP9LYE8DIooqA2 YySPu0encs84ql7pqAUaqxw5PngpX6n1bCGPlYYl/twy9BuWERSLno7s6DYPVrUq +qlkHeP7b3IvXcvPFUxQU8ddnWAKPhVNZpKUC9RuCvrZEwmqHTTG0/lwgGjk6lSI Lmq8Q/tvSsPIuJtqsVYWVR29e3XZdZWW -----END CERTIFICATE-----Generated at Sat Aug 23 12:41:55 2025 by rpki-client