$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json) Hash identifier: /BIK1seyXCqEHsDyVhle1J0p7sxQv0heBrtPvqaXRg0= Subject key identifier: C1:CD:9A:23:8C:13:67:47:5E:2A:59:8B:CF:12:DF:F8:80:DE:18:A4 Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft Manifest number: 01AA Signing time: Tue 01 Jul 2025 03:44:11 +0000 Manifest this update: Tue 01 Jul 2025 03:44:11 +0000 Manifest next update: Tue 08 Jul 2025 03:44:11 +0000 Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: UDOF2oBPTsKQMygf3SgVtOQHG9fvbHG6xfKjvfZ8sNs=) 2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: w60npFN7Kaoau14A8nUumKIk6Z7FI9jzoRmBuAraQgw=) 3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: xNw6lqRZVzml6zGHz7sRyZFWQnA5LMwPw8PJ9UjVWeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256 Validity Not Before: Jul 1 03:44:11 2025 GMT Not After : Jul 8 03:44:11 2025 GMT Subject: CN=6863598b-fb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:62:ce:9b:64:85:63:2d:0c:0c:f6:58:00: b0:8a:e2:a9:62:5f:a7:59:1a:89:4a:ef:ce:b8:62: 20:39:74:5a:1d:a8:3e:e4:37:32:66:0b:59:26:06: ca:6b:4f:04:5b:f0:17:ad:06:39:06:a8:47:a2:05: 4a:37:15:7c:9b:5e:58:bc:a0:7a:26:da:b6:70:e9: f7:a2:76:25:c9:b2:50:d7:db:50:39:72:f3:a4:7d: d4:0a:50:b4:2d:d2:ba:be:5d:0f:50:8f:b8:ad:5f: ba:75:eb:c3:9f:b5:be:81:fe:83:94:eb:4a:69:57: 8f:3b:84:4f:e6:72:d0:be:f0:ba:37:b5:77:88:0c: ef:78:f3:e5:76:d6:2d:3b:1f:7e:d2:96:2e:38:7f: cf:18:05:11:d0:8f:db:be:66:f8:e1:a2:e2:2a:d0: 05:ab:37:81:0e:83:cf:ad:b5:02:63:35:41:b7:95: cd:bd:f1:41:87:53:7d:64:11:f8:71:3e:d5:f8:ac: e5:25:04:f9:3d:c1:6e:6c:b2:ac:60:97:d0:56:af: 0c:bf:18:7a:1f:66:84:82:6a:2e:3d:f1:76:da:b3: e7:50:f7:2a:ee:1e:35:f2:01:57:46:85:02:4b:2d: 95:04:53:c4:4c:b9:0f:19:eb:f1:1d:d8:38:fe:bb: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CD:9A:23:8C:13:67:47:5E:2A:59:8B:CF:12:DF:F8:80:DE:18:A4 X509v3 Authority Key Identifier: keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a3:5e:73:ff:25:39:16:a6:03:67:bd:b0:bb:dd:33:15:da: 53:8b:02:3a:a2:2d:ee:13:b8:7a:e4:c8:f1:a1:7c:50:f9:fa: 10:ec:b7:99:e7:ab:f9:df:e8:ff:73:01:80:30:19:23:6b:00: 8f:61:05:e4:d6:b6:a8:92:49:4c:a8:b3:61:da:16:4d:8d:3d: 7f:88:d1:19:b0:78:f1:f3:88:e1:19:a5:0b:c2:f7:5b:cb:ef: 14:9b:69:68:0f:c9:6d:50:86:c3:61:9a:64:95:60:c2:fc:73: 19:2a:fe:a9:45:41:aa:5d:fa:1e:e9:3b:78:90:29:85:0f:71: 4c:93:82:ce:1d:96:c6:17:9a:42:bd:1d:35:10:1e:40:1e:5a: 44:14:ea:ab:2b:44:b0:0a:e3:9a:14:12:5a:65:27:18:d9:27: 4d:42:0f:81:69:3f:ff:52:bb:77:a7:3f:5f:02:74:21:88:29: dd:8a:d5:bd:7b:fa:e6:1d:39:e0:b8:31:b5:a2:46:43:9c:93: 8a:d0:ec:b2:36:56:b7:32:58:1a:45:2c:43:8e:d7:3c:d0:22: 7d:60:19:38:6b:c1:50:d0:53:0a:5a:22:b7:c8:85:55:2a:b9: 09:59:71:06:b3:93:62:f8:e7:3e:6a:71:9e:3d:6f:1c:ae:50: d3:1a:7a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM0REUxMTAvBgNVBAUTKEZENDlDMDY0RkNBM0U5MkRFQ0MxOEE4RjUwNDk0QjIx RkMwMUYyNTYwHhcNMjUwNzAxMDM0NDExWhcNMjUwNzA4MDM0NDExWjAYMRYwFAYD VQQDEw02ODYzNTk4Yi1mYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzVizptkhWMtDAz2WACwiuKpYl+nWRqJSu/OuGIgOXRaHag+5DcyZgtZJgbK a08EW/AXrQY5BqhHogVKNxV8m15YvKB6Jtq2cOn3onYlybJQ19tQOXLzpH3UClC0 LdK6vl0PUI+4rV+6devDn7W+gf6DlOtKaVePO4RP5nLQvvC6N7V3iAzvePPldtYt Ox9+0pYuOH/PGAUR0I/bvmb44aLiKtAFqzeBDoPPrbUCYzVBt5XNvfFBh1N9ZBH4 cT7V+KzlJQT5PcFubLKsYJfQVq8Mvxh6H2aEgmouPfF22rPnUPcq7h418gFXRoUC Sy2VBFPETLkPGevxHdg4/rvx5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHNmiOM E2dHXipZi88S3/iA3hikMB8GA1UdIwQYMBaAFP1JwGT8o+kt7MGKj1BJSyH8AfJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzRERS9BOTQxRDVFMkQ4 RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZTM3N3WXFQVUVsTElmd0I4 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VbkFaUHlqNlMzc3dZcVBVRWxMSWZ3QjhsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzRERS9BOTQxRDVFMkQ4RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZT M3N3WXFQVUVsTElmd0I4bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3o15z/yU5FqYDZ72wu90zFdpTiwI6oi3uE7h65MjxoXxQ+foQ7LeZ 56v53+j/cwGAMBkjawCPYQXk1raokklMqLNh2hZNjT1/iNEZsHjx84jhGaULwvdb y+8Um2loD8ltUIbDYZpklWDC/HMZKv6pRUGqXfoe6Tt4kCmFD3FMk4LOHZbGF5pC vR01EB5AHlpEFOqrK0SwCuOaFBJaZScY2SdNQg+BaT//Urt3pz9fAnQhiCnditW9 e/rmHTnguDG1okZDnJOK0OyyNla3MlgaRSxDjtc80CJ9YBk4a8FQ0FMKWiK3yIVV KrkJWXEGs5Ni+Oc+anGePW8crlDTGnrl -----END CERTIFICATE-----Generated at Wed Jul 2 16:38:45 2025 by rpki-client