$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json) Hash identifier: RMZRR5SLusN2CbjcP03mlFEGtIxgcxYZ9Fd/ZXuA32k= Subject key identifier: 53:CA:B1:95:2F:82:53:A0:10:C3:57:4B:51:60:01:C1:C4:3D:DD:DB Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft Manifest number: BB Signing time: Sat 23 Aug 2025 06:09:29 +0000 Manifest this update: Sat 23 Aug 2025 06:09:28 +0000 Manifest next update: Sat 30 Aug 2025 06:09:28 +0000 Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: 6Nhxr+RHGRjBl7c/ebu8Yf3r2/LRZunLyMolb2RXoHc=) 2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: DWOCYh9U3Wi0CtHFM/de9pIBC9zRoaOkBAZXQGO2U2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Validity Not Before: Aug 23 06:09:28 2025 GMT Not After : Aug 30 06:09:28 2025 GMT Subject: CN=68a95b18-06b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:25:03:83:26:94:cc:b1:a5:d0:46:67:70: 0a:0a:44:e6:c6:fe:56:90:19:1e:92:d7:b7:c7:72: ec:20:99:e1:b7:ea:9d:c4:b9:31:3f:39:d3:bd:80: 7b:e8:3e:22:dd:07:10:2a:5d:66:6d:91:a8:48:1a: a8:dc:91:24:e5:77:60:ec:8e:ba:75:0d:5c:e3:23: 25:4e:3d:58:b3:48:dd:46:9c:39:5a:e5:c3:2e:13: d8:49:89:e9:97:11:a6:1f:1e:fd:12:23:c4:65:53: e7:c0:13:f7:24:dd:b1:c5:50:21:4c:6c:f1:36:65: 07:ee:8a:39:3d:17:05:0d:6f:2b:80:91:21:91:ef: 3b:cf:5f:36:f5:32:1d:5b:1d:ab:17:d2:76:84:35: ff:c3:92:e1:86:cc:20:97:75:94:b5:b8:d0:9c:56: c7:cf:0d:e5:79:6d:c3:b9:9a:c8:09:5f:a8:d5:67: 28:66:2e:96:2b:a8:43:3d:fc:e5:c2:33:52:02:4a: 97:b1:f2:3a:12:4c:6e:84:ab:0a:d9:4b:f5:f4:dc: 07:47:3d:84:10:b4:6b:3f:ab:8a:9d:89:9c:24:84: b1:99:cd:a7:28:70:cc:36:93:84:70:24:22:78:46: ae:c8:28:a7:6e:9b:a5:f3:dc:3f:d7:fc:c2:9c:ac: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CA:B1:95:2F:82:53:A0:10:C3:57:4B:51:60:01:C1:C4:3D:DD:DB X509v3 Authority Key Identifier: keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:03:37:31:53:97:97:89:77:41:91:3f:84:37:be:98:df:1d: 16:de:3a:1d:ce:06:c8:21:91:df:38:33:3c:16:fb:ae:a3:da: 84:0b:ce:05:57:f1:52:0f:ac:fc:04:dc:bf:3a:1b:67:5d:03: 2c:ab:01:a6:d2:e0:e7:b0:dc:6e:3a:a1:9b:3e:50:e2:cb:17: 60:c3:42:c5:13:30:6d:1a:de:45:9d:4e:f1:07:55:ef:da:21: 60:71:93:f2:d0:cf:d6:5d:8a:08:a7:42:d1:aa:37:d1:ca:46: 54:91:67:ef:08:8c:84:a9:38:fd:36:f9:42:5f:f4:b0:98:9f: 17:ba:58:d1:98:c6:e0:c5:09:06:e9:01:13:0a:11:7a:a8:38: e9:dc:10:1c:03:68:c7:82:b9:f5:c7:52:07:b7:72:16:4f:03: 16:aa:5a:df:2e:28:f0:3e:53:d1:f3:e6:97:a2:29:65:39:98: 25:51:26:c0:7b:34:78:53:12:ed:a3:ed:89:93:d9:56:99:7f: db:b3:62:d6:ed:fa:7e:81:b0:6a:07:7c:12:ae:7b:fb:fa:04: 1a:ea:13:64:6e:c0:8e:ed:a7:99:40:08:3d:f5:11:74:2a:7d: ac:1e:d3:71:10:43:01:ad:b6:93:e5:5f:63:1a:c9:f5:e1:5a: 71:6f:66:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKDUwRDI0MDQyQTRBNjVFRUU2N0E3RUE0RDNGQzQ4OTQ0 M0EzOUFBNzQwHhcNMjUwODIzMDYwOTI4WhcNMjUwODMwMDYwOTI4WjAYMRYwFAYD VQQDEw02OGE5NWIxOC0wNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKwlA4MmlMyxpdBGZ3AKCkTmxv5WkBkekte3x3LsIJnht+qdxLkxPznTvYB7 6D4i3QcQKl1mbZGoSBqo3JEk5Xdg7I66dQ1c4yMlTj1Ys0jdRpw5WuXDLhPYSYnp lxGmHx79EiPEZVPnwBP3JN2xxVAhTGzxNmUH7oo5PRcFDW8rgJEhke87z1829TId Wx2rF9J2hDX/w5Lhhswgl3WUtbjQnFbHzw3leW3DuZrICV+o1WcoZi6WK6hDPfzl wjNSAkqXsfI6EkxuhKsK2Uv19NwHRz2EELRrP6uKnYmcJISxmc2nKHDMNpOEcCQi eEauyCinbpul89w/1/zCnKwQAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPKsZUv glOgEMNXS1FgAcHEPd3bMB8GA1UdIwQYMBaAFFDSQEKkpl7uZ6fqTT/EiUQ6Oap0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9BOTlDMTYyODY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1NW5wLXBOUDhTSlJEbzVx blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VOSkFRcVNtWHU1bnAtcE5QOFNKUkRvNXFuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9BOTlDMTYyODY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1 NW5wLXBOUDhTSlJEbzVxblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJAzcxU5eXiXdBkT+EN76Y3x0W3jodzgbIIZHfODM8Fvuuo9qEC84F V/FSD6z8BNy/OhtnXQMsqwGm0uDnsNxuOqGbPlDiyxdgw0LFEzBtGt5FnU7xB1Xv 2iFgcZPy0M/WXYoIp0LRqjfRykZUkWfvCIyEqTj9NvlCX/SwmJ8XuljRmMbgxQkG 6QETChF6qDjp3BAcA2jHgrn1x1IHt3IWTwMWqlrfLijwPlPR8+aXoillOZglUSbA ezR4UxLto+2Jk9lWmX/bs2LW7fp+gbBqB3wSrnv7+gQa6hNkbsCO7aeZQAg99RF0 Kn2sHtNxEEMBrbaT5V9jGsn14Vpxb2Z4 -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:50 2025 by rpki-client