$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json) Hash identifier: Zb347lD7gFFrhg0Oog6dYyXL/CzZS/B2BH7Ddav5jgY= Subject key identifier: 93:58:94:67:13:B8:19:1D:8F:45:2E:22:02:63:77:13:E9:F1:3F:33 Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft Manifest number: A1 Signing time: Thu 03 Jul 2025 06:28:16 +0000 Manifest this update: Thu 03 Jul 2025 06:28:16 +0000 Manifest next update: Thu 10 Jul 2025 06:28:16 +0000 Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: 0p1Wqc2AwlktTFgtusFiPfNiPrmReR5wjMc6dX1AIr0=) 2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: DWOCYh9U3Wi0CtHFM/de9pIBC9zRoaOkBAZXQGO2U2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Validity Not Before: Jul 3 06:28:16 2025 GMT Not After : Jul 10 06:28:16 2025 GMT Subject: CN=68662300-01ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cb:ce:ec:8a:ab:80:0f:ff:3b:f8:5a:1a:d6: 94:ba:8a:49:c4:08:39:e3:98:fb:68:5b:23:92:bb: 44:a1:56:75:f5:69:48:3d:e0:05:21:77:37:4b:f4: dc:c1:3f:83:f4:72:0f:5e:de:bf:a8:cf:28:41:4d: 3e:e1:6b:8e:b5:fd:73:9b:30:6e:e5:fc:02:32:3b: f1:08:c8:be:41:5a:71:81:be:67:4f:6f:03:69:51: e8:30:c3:eb:86:0d:40:5d:ea:3b:97:25:eb:e8:d2: 95:bc:4e:0c:9c:18:38:d7:ca:ec:8f:85:64:7a:c0: 6a:5e:47:e4:98:3b:ad:7f:d3:3c:96:5d:57:d6:c1: 7f:e4:6d:d2:e2:7e:d0:3a:eb:fc:61:ea:54:81:e4: cd:a4:c8:7f:f8:37:88:d2:e3:ba:b4:85:6c:76:ed: 4b:f4:b2:43:6a:e5:40:05:05:52:35:b1:ef:c7:af: a6:c8:ce:df:77:f6:35:ea:9f:56:54:f8:39:80:df: d5:db:b7:a7:a0:e7:34:b6:33:77:ce:dd:c6:dc:90: 41:be:0e:c8:77:81:93:fc:aa:6d:5b:ae:2a:f0:97: 26:e6:a5:a6:32:4a:f4:1c:7e:34:1d:3d:c4:8d:6b: d7:1b:4e:b6:17:d8:e2:2f:9d:aa:de:9f:41:04:03: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:58:94:67:13:B8:19:1D:8F:45:2E:22:02:63:77:13:E9:F1:3F:33 X509v3 Authority Key Identifier: keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:88:43:93:18:0e:a9:46:5c:35:fd:5b:d0:c4:3d:f9:0c:4c: 7c:83:01:61:cf:73:06:91:8b:05:c3:5d:6d:90:4c:ed:e8:77: bd:8d:ff:00:e8:9a:26:ad:2b:85:7f:f9:9c:23:6a:7a:b0:a1: 5c:e0:a5:95:9b:94:ad:15:b2:13:91:10:ac:aa:05:40:ad:7b: e6:ce:de:cc:85:ce:5e:46:ea:21:09:84:0a:23:f1:be:94:3e: 03:f7:a1:0c:6f:8f:c6:46:52:90:dd:71:5d:85:9c:f6:9a:8b: 9c:b1:10:0f:ac:b5:3e:09:6e:2d:77:1e:dd:6b:58:52:82:8e: e3:03:77:46:23:c0:a4:17:e2:cf:9d:75:1c:62:0c:cc:a5:95: ed:6d:28:d3:d3:95:72:00:a8:6c:89:05:d7:96:6c:87:e5:d1: 38:70:b5:ed:70:cd:c6:5b:c1:5c:66:7d:b5:c3:b3:28:77:9a: 01:2c:aa:7e:e8:36:92:f4:c2:b4:8b:8f:a4:6a:16:d8:78:69: 06:fa:29:9f:33:cd:e7:b9:be:cd:3e:ba:26:dd:32:ec:f9:1f: 71:09:ab:f0:77:2b:9a:34:8e:de:50:c2:e4:9f:50:c5:a1:21: 75:c0:72:87:f9:51:b3:3c:1a:66:bd:02:07:79:84:08:f9:e8: 8d:95:1e:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKDUwRDI0MDQyQTRBNjVFRUU2N0E3RUE0RDNGQzQ4OTQ0 M0EzOUFBNzQwHhcNMjUwNzAzMDYyODE2WhcNMjUwNzEwMDYyODE2WjAYMRYwFAYD VQQDEw02ODY2MjMwMC0wMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cvO7IqrgA//O/haGtaUuopJxAg545j7aFsjkrtEoVZ19WlIPeAFIXc3S/Tc wT+D9HIPXt6/qM8oQU0+4WuOtf1zmzBu5fwCMjvxCMi+QVpxgb5nT28DaVHoMMPr hg1AXeo7lyXr6NKVvE4MnBg418rsj4VkesBqXkfkmDutf9M8ll1X1sF/5G3S4n7Q Ouv8YepUgeTNpMh/+DeI0uO6tIVsdu1L9LJDauVABQVSNbHvx6+myM7fd/Y16p9W VPg5gN/V27enoOc0tjN3zt3G3JBBvg7Id4GT/KptW64q8Jcm5qWmMkr0HH40HT3E jWvXG062F9jiL52q3p9BBAP0mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNYlGcT uBkdj0UuIgJjdxPp8T8zMB8GA1UdIwQYMBaAFFDSQEKkpl7uZ6fqTT/EiUQ6Oap0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9BOTlDMTYyODY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1NW5wLXBOUDhTSlJEbzVx blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VOSkFRcVNtWHU1bnAtcE5QOFNKUkRvNXFuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9BOTlDMTYyODY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1 NW5wLXBOUDhTSlJEbzVxblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsiEOTGA6pRlw1/VvQxD35DEx8gwFhz3MGkYsFw11tkEzt6He9jf8A 6JomrSuFf/mcI2p6sKFc4KWVm5StFbITkRCsqgVArXvmzt7Mhc5eRuohCYQKI/G+ lD4D96EMb4/GRlKQ3XFdhZz2moucsRAPrLU+CW4tdx7da1hSgo7jA3dGI8CkF+LP nXUcYgzMpZXtbSjT05VyAKhsiQXXlmyH5dE4cLXtcM3GW8FcZn21w7Mod5oBLKp+ 6DaS9MK0i4+kahbYeGkG+imfM83nub7NProm3TLs+R9xCavwdyuaNI7eUMLkn1DF oSF1wHKH+VGzPBpmvQIHeYQI+eiNlR5Y -----END CERTIFICATE-----Generated at Thu Jul 3 19:46:33 2025 by rpki-client