$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: S6+721NNmK3Ycpkxy7FFARSl1d3MDI/EKME/GHGjyC8= Subject key identifier: CC:51:39:0E:DB:13:DB:48:E3:90:99:5B:43:FC:E6:65:DD:28:ED:01 Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: 014F Signing time: Sun 19 Oct 2025 07:04:44 +0000 Manifest this update: Sun 19 Oct 2025 07:04:42 +0000 Manifest next update: Sun 26 Oct 2025 07:04:42 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: 6DWEzbb1UNE/lfZWcsOeu6zzVxbVr0pxBtR06L7PZ8U=) 2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: Oct 19 07:04:42 2025 GMT Not After : Oct 26 07:04:42 2025 GMT Subject: CN=68f48d8b-fe47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8c:9d:9e:4b:ab:9c:75:6d:12:15:c4:67:e2: 1e:07:ea:f4:7b:73:c4:04:bd:06:c2:dd:58:b4:3c: 92:43:af:f3:e5:da:c3:f3:09:f3:89:cc:51:87:13: 3c:e0:20:23:5b:01:d2:33:8c:ad:98:9b:7a:68:43: 5d:ea:4b:b6:ab:f5:85:9f:0d:56:b8:2d:62:9a:2c: d0:26:b2:22:c5:72:cc:b1:08:0e:5a:3d:7e:04:c0: 37:e7:72:4c:fa:b2:ad:d6:86:8e:75:30:d6:21:31: 13:c8:23:b2:3b:bf:87:f1:ff:ad:fc:02:7a:91:9f: fb:f1:da:05:2f:b3:99:22:2f:49:aa:de:79:c8:d1: dc:ad:bd:9b:91:3e:bf:58:43:ea:0c:99:7f:5b:94: 06:53:2a:0e:e3:0c:3d:77:cb:36:ce:67:e7:c8:87: ca:2f:dc:a1:6d:8c:b7:97:5a:54:f2:1a:5b:6c:db: d4:fb:04:9d:ff:65:bf:37:a9:c3:a9:04:d9:09:56: 3c:65:6b:1d:9d:77:67:a1:69:21:19:6c:79:c2:cc: 77:f5:66:b0:9c:96:54:94:9f:9f:9a:dc:68:4f:09: d9:94:3d:6f:4c:70:c8:28:bf:51:66:52:0a:35:55: 99:ac:0f:a2:90:b0:a3:9f:90:92:ee:9a:8d:8a:a9: e5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:51:39:0E:DB:13:DB:48:E3:90:99:5B:43:FC:E6:65:DD:28:ED:01 X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3f:4c:69:5e:73:80:e8:18:ff:81:f7:45:a9:9c:80:6e:44: f6:c1:1e:56:43:87:4f:91:f8:9b:44:57:07:45:a9:1d:f5:df: ba:52:f3:02:e6:f9:83:42:a3:3f:33:b4:fb:ec:b0:30:bc:52: 0f:d3:72:af:c9:0a:5b:8e:8e:fe:a6:2b:5e:90:3d:fd:45:63: 5f:8e:fe:a7:61:6f:44:95:5b:06:58:72:3e:ff:8e:bc:da:38: d6:73:83:53:6b:d9:70:1d:65:f6:f8:8e:72:65:06:5a:ee:03: 61:d7:19:55:36:08:13:34:66:4f:d2:ab:22:69:c9:3b:63:25: ce:50:8a:73:71:a8:28:81:f2:a7:e7:10:4b:87:b6:c7:61:47: 90:d6:c8:54:db:a0:8b:49:e4:ea:da:0e:79:24:f4:26:2d:1d: 58:61:b1:60:01:c8:36:ca:98:29:e2:80:e0:e4:6d:0d:ba:ee: 71:87:34:0a:ad:05:c0:e8:7f:12:bb:03:20:0a:7d:69:d0:e4: 47:32:65:43:35:ab:80:df:f9:71:56:5f:66:0a:20:79:57:be: 57:ff:0d:15:dc:62:4f:12:d5:62:33:c2:90:bd:10:b5:e9:64: 0d:e1:fd:ee:2d:4f:56:bd:28:8a:7d:d8:f7:26:7a:cc:96:2d: 8e:7b:27:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF QTY2RTA0RTQwHhcNMjUxMDE5MDcwNDQyWhcNMjUxMDI2MDcwNDQyWjAYMRYwFAYD VQQDEw02OGY0OGQ4Yi1mZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7YydnkurnHVtEhXEZ+IeB+r0e3PEBL0Gwt1YtDySQ6/z5drD8wnzicxRhxM8 4CAjWwHSM4ytmJt6aENd6ku2q/WFnw1WuC1imizQJrIixXLMsQgOWj1+BMA353JM +rKt1oaOdTDWITETyCOyO7+H8f+t/AJ6kZ/78doFL7OZIi9Jqt55yNHcrb2bkT6/ WEPqDJl/W5QGUyoO4ww9d8s2zmfnyIfKL9yhbYy3l1pU8hpbbNvU+wSd/2W/N6nD qQTZCVY8ZWsdnXdnoWkhGWx5wsx39WawnJZUlJ+fmtxoTwnZlD1vTHDIKL9RZlIK NVWZrA+ikLCjn5CS7pqNiqnlrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxROQ7b E9tI45CZW0P85mXdKO0BMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApP0xpXnOA6Bj/gfdFqZyAbkT2wR5WQ4dPkfibRFcHRakd9d+6UvMC 5vmDQqM/M7T77LAwvFIP03KvyQpbjo7+pitekD39RWNfjv6nYW9ElVsGWHI+/468 2jjWc4NTa9lwHWX2+I5yZQZa7gNh1xlVNggTNGZP0qsiack7YyXOUIpzcagogfKn 5xBLh7bHYUeQ1shU26CLSeTq2g55JPQmLR1YYbFgAcg2ypgp4oDg5G0Nuu5xhzQK rQXA6H8SuwMgCn1p0ORHMmVDNauA3/lxVl9mCiB5V75X/w0V3GJPEtViM8KQvRC1 6WQN4f3uLU9WvSiKfdj3JnrMli2Oeyfn -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:34 2025 by rpki-client