$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft File: _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json) Hash identifier: aiQwcWof08rm9W5MLPHFXPR8doTXMZret1KOjcgIdbI= Subject key identifier: BB:94:6D:83:8C:AD:29:5C:64:55:01:25:19:61:21:82:58:72:A6:2F Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 Certificate issuer: /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft Manifest number: 0673 Signing time: Wed 02 Jul 2025 22:40:35 +0000 Manifest this update: Wed 02 Jul 2025 22:40:35 +0000 Manifest next update: Wed 09 Jul 2025 22:40:35 +0000 Files and hashes: 1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: iDFWUo6auAj1jViLy4Vy9ZhMO5vaS5HTV58ISoGslf8=) 2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: NgLitwn58Hzqdz8jFqI6KtHUu7WwdEhFCnvHC3Qm5IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C673, serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Validity Not Before: Jul 2 22:40:35 2025 GMT Not After : Jul 9 22:40:35 2025 GMT Subject: CN=6865b563-43cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:c3:cf:f6:8a:90:b7:58:6e:66:50:2b:ba: 5a:f3:d0:a8:04:f3:fe:c9:5b:27:ba:94:ec:f0:d5: 39:d4:0a:00:27:a5:b3:0e:cd:23:bd:68:98:8f:84: db:c1:89:5a:12:17:ec:79:b3:43:1f:79:ea:de:b3: 80:27:08:c7:70:d2:a3:ca:5c:58:b0:a0:30:8e:fe: 6c:93:21:3e:7a:2a:c1:e1:34:0d:6d:2a:84:48:40: b3:89:d2:39:a5:45:29:1a:7e:dd:24:94:8a:06:13: 76:25:bb:38:e8:fa:32:16:b7:4f:82:de:1d:b3:38: e9:fc:26:8f:c6:38:4e:b7:b4:a6:03:e2:e0:73:d9: ed:ec:fa:fd:19:7e:e9:b3:2e:ec:cc:08:7e:f4:85: 7d:e1:9d:a5:00:7f:3c:74:ce:81:f3:69:6f:99:a4: ec:bf:c8:75:84:6e:88:84:56:64:13:f2:8c:18:46: 74:8d:b0:b2:5f:ab:8a:63:6c:57:3a:c4:57:d4:81: 72:b2:48:fd:1b:6f:1b:58:60:64:fe:7a:b7:44:df: ee:08:8f:3d:8a:de:3e:55:f8:17:cc:4b:9e:7c:1a: b6:1e:5f:23:b8:8a:92:b0:7a:66:c1:14:cd:92:2d: 31:2e:ec:0f:52:06:f7:a8:c0:63:6e:72:eb:77:a9: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:94:6D:83:8C:AD:29:5C:64:55:01:25:19:61:21:82:58:72:A6:2F X509v3 Authority Key Identifier: keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:5f:0a:9f:7d:49:8e:30:9f:ff:bf:d5:40:28:0e:2a:84:96: 87:1b:7b:64:3b:98:e2:38:95:6b:0d:88:65:49:71:cd:8c:52: 1e:89:48:22:21:dc:c6:fa:ee:48:85:8c:d6:aa:b3:1f:87:ef: 40:a8:6a:44:8b:be:7f:68:9e:6d:7a:2e:4e:82:36:93:19:10: 23:9a:e5:1a:a0:f7:63:0f:4c:ba:dd:02:c4:91:d5:83:40:b4: 05:b7:61:3c:1d:e8:36:aa:d7:22:2f:96:cb:17:00:db:65:66: ae:fa:46:44:ee:ce:b1:66:82:d8:18:86:8a:6a:57:f1:b3:05: b9:5d:59:e2:43:53:98:fd:2b:1c:bc:fa:ce:ba:d6:1b:6f:14: 42:d4:b2:ab:cc:2c:ca:1d:f8:79:e5:2d:37:5b:88:b1:3f:db: 7c:df:5a:46:73:16:e7:ab:d7:5e:4e:12:f0:65:cd:62:6e:57: 47:51:a6:6e:2d:02:c6:5c:11:ba:cc:9a:f3:14:bf:d8:f2:bd: 17:d1:cc:e7:e1:24:e9:95:8c:4a:17:33:a1:ca:45:11:83:dd: 39:7c:25:be:a4:ab:16:0a:22:48:fd:4e:ca:9f:a0:7b:e1:68: 1b:e2:76:86:52:89:e2:da:84:bd:3a:6b:4f:a4:c4:26:6b:d7: 2a:c9:7c:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NzMxMTAvBgNVBAUTKEZFRTlGREQ0QjBFODMxMzE4OEEwODlGN0E4N0ZCN0Qw MTUzMjUzODgwHhcNMjUwNzAyMjI0MDM1WhcNMjUwNzA5MjI0MDM1WjAYMRYwFAYD VQQDEw02ODY1YjU2My00M2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDDDz/aKkLdYbmZQK7pa89CoBPP+yVsnupTs8NU51AoAJ6WzDs0jvWiYj4Tb wYlaEhfsebNDH3nq3rOAJwjHcNKjylxYsKAwjv5skyE+eirB4TQNbSqESECzidI5 pUUpGn7dJJSKBhN2Jbs46PoyFrdPgt4dszjp/CaPxjhOt7SmA+Lgc9nt7Pr9GX7p sy7szAh+9IV94Z2lAH88dM6B82lvmaTsv8h1hG6IhFZkE/KMGEZ0jbCyX6uKY2xX OsRX1IFyskj9G28bWGBk/nq3RN/uCI89it4+VfgXzEuefBq2Hl8juIqSsHpmwRTN ki0xLuwPUgb3qMBjbnLrd6nrBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuUbYOM rSlcZFUBJRlhIYJYcqYvMB8GA1UdIwQYMBaAFP7p/dSw6DExiKCJ96h/t9AVMlOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY3My9BRTVGQjEwMjgw Q0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01UR0lvSW4zcUgtMzBCVXlV NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191bjkxTERvTVRHSW9JbjNxSC0zMEJVeVU0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY3My9BRTVGQjEwMjgwQ0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01U R0lvSW4zcUgtMzBCVXlVNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHXwqffUmOMJ//v9VAKA4qhJaHG3tkO5jiOJVrDYhlSXHNjFIeiUgi IdzG+u5IhYzWqrMfh+9AqGpEi75/aJ5tei5OgjaTGRAjmuUaoPdjD0y63QLEkdWD QLQFt2E8Heg2qtciL5bLFwDbZWau+kZE7s6xZoLYGIaKalfxswW5XVniQ1OY/Ssc vPrOutYbbxRC1LKrzCzKHfh55S03W4ixP9t831pGcxbnq9deThLwZc1ibldHUaZu LQLGXBG6zJrzFL/Y8r0X0czn4STplYxKFzOhykURg905fCW+pKsWCiJI/U7Kn6B7 4Wgb4naGUoni2oS9OmtPpMQma9cqyXyx -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:30 2025 by rpki-client