$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: 9S0/sBnTR48YVVcP2FPEs2ZrY5WtlXtRBkzw+cSHBTo= Subject key identifier: A4:1B:F8:2D:30:B7:FC:3B:83:95:5A:DE:64:04:41:DF:0A:FC:B3:A1 Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: FF Signing time: Tue 13 May 2025 04:26:03 +0000 Manifest this update: Tue 13 May 2025 04:26:02 +0000 Manifest next update: Tue 20 May 2025 04:26:02 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: 3cYnl1VbK2YQKCxmh+cRzmV896/V+Ur7q/rnGB5J2SI=) 2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: May 13 04:26:02 2025 GMT Not After : May 20 04:26:02 2025 GMT Subject: CN=6822c9da-343a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:6d:0f:a2:a9:a7:90:02:f2:dd:c7:ee:e9: 82:55:02:9b:88:0c:f5:d3:2f:3c:71:25:e9:a8:6e: 33:47:71:dc:1d:a2:45:6d:91:de:aa:5a:3a:51:cf: a1:b2:86:16:25:bc:2e:4c:d6:41:87:91:2e:dc:2c: 3e:d7:8c:dc:79:2d:d2:67:d1:21:fd:92:3d:e0:1c: 35:a4:cf:64:e8:8b:eb:14:6a:e6:66:27:72:9f:81: 75:c1:91:43:b8:20:9e:a2:aa:e7:fd:f5:91:4a:d9: 57:a8:33:42:29:74:06:4b:e7:60:b1:a6:ff:62:3c: 9e:56:05:09:46:04:37:61:0b:1b:2a:36:f9:58:cd: 5b:11:bf:71:61:bb:ff:fa:96:31:cc:7d:b5:a4:0a: 84:26:80:ae:73:52:13:e2:3c:02:92:76:53:13:dd: 5e:f0:e4:72:d3:27:04:f6:e6:39:65:8c:b6:83:9a: a9:a4:ec:6e:0e:a7:44:da:39:ee:51:a4:96:da:ad: e0:a9:56:6f:9e:a6:fd:aa:04:28:ca:b3:8a:e0:c7: 01:73:de:b7:d7:24:f7:2c:be:e0:67:11:c3:00:a6: 64:6d:20:26:f7:63:02:9d:26:a0:9b:7a:39:e4:be: 8c:5b:38:8f:6c:c7:d0:58:eb:6e:e2:66:63:20:cf: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1B:F8:2D:30:B7:FC:3B:83:95:5A:DE:64:04:41:DF:0A:FC:B3:A1 X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8c:b2:90:69:ed:4c:99:d3:69:22:3f:9a:b7:f0:a7:64:9a: c9:58:63:f8:26:32:ac:b0:db:0a:ba:03:01:e0:a6:9e:b3:77: 17:de:7e:18:01:c6:04:58:d3:79:48:1f:ff:3e:a9:e2:f7:48: 24:eb:ce:d6:e9:f3:ab:37:6f:7a:73:aa:37:9a:3b:e7:b2:ac: ee:bb:ad:3c:c5:a0:02:66:c2:ee:a7:87:cf:55:a5:f7:22:2c: 51:ae:c1:a1:30:f3:b4:97:bb:e0:af:46:82:01:83:24:f8:b4: bf:80:0b:37:2c:0f:19:18:40:43:d9:03:ed:a9:61:54:ea:9f: 64:9c:6b:ae:92:53:3d:a1:62:93:a5:c6:1b:24:46:3e:39:96: 85:1f:ee:3e:e6:c3:1f:5a:a2:09:d4:39:6b:d2:28:44:9d:e1: 26:25:09:03:3d:ce:a3:f7:1d:3f:6a:91:89:39:ec:6e:d6:cc: 6e:43:c8:57:21:77:90:18:2a:3c:55:59:22:3f:c5:b5:5a:d5: d8:3e:d6:28:63:a3:4a:8c:4f:88:86:7d:1c:bc:b6:bb:2c:b9: c4:c7:74:6c:fb:d1:48:46:9b:54:ea:63:d1:8e:7e:4b:8f:2b: 93:b8:14:14:5a:2b:eb:23:4a:13:90:1f:de:4b:e3:6e:e8:0c: 52:4e:d1:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF QTY2RTA0RTQwHhcNMjUwNTEzMDQyNjAyWhcNMjUwNTIwMDQyNjAyWjAYMRYwFAYD VQQDEw02ODIyYzlkYS0zNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XBtD6Kpp5AC8t3H7umCVQKbiAz10y88cSXpqG4zR3HcHaJFbZHeqlo6Uc+h soYWJbwuTNZBh5Eu3Cw+14zceS3SZ9Eh/ZI94Bw1pM9k6IvrFGrmZidyn4F1wZFD uCCeoqrn/fWRStlXqDNCKXQGS+dgsab/YjyeVgUJRgQ3YQsbKjb5WM1bEb9xYbv/ +pYxzH21pAqEJoCuc1IT4jwCknZTE91e8ORy0ycE9uY5ZYy2g5qppOxuDqdE2jnu UaSW2q3gqVZvnqb9qgQoyrOK4McBc9631yT3LL7gZxHDAKZkbSAm92MCnSagm3o5 5L6MWziPbMfQWOtu4mZjIM+MMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQb+C0w t/w7g5Va3mQEQd8K/LOhMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArjLKQae1MmdNpIj+at/CnZJrJWGP4JjKssNsKugMB4Kaes3cX3n4Y AcYEWNN5SB//Pqni90gk687W6fOrN296c6o3mjvnsqzuu608xaACZsLup4fPVaX3 IixRrsGhMPO0l7vgr0aCAYMk+LS/gAs3LA8ZGEBD2QPtqWFU6p9knGuuklM9oWKT pcYbJEY+OZaFH+4+5sMfWqIJ1Dlr0ihEneEmJQkDPc6j9x0/apGJOexu1sxuQ8hX IXeQGCo8VVkiP8W1WtXYPtYoY6NKjE+Ihn0cvLa7LLnEx3Rs+9FIRptU6mPRjn5L jyuTuBQUWivrI0oTkB/eS+Nu6AxSTtFw -----END CERTIFICATE-----Generated at Wed May 14 13:16:15 2025 by rpki-client