$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft File: UNqjonFb7c_nFOVthUH381hubvc.mft (raw, json) Hash identifier: YTPEBhgLGHSrfx/JspCr+69w6qeUITkdmuor7YrBD9w= Subject key identifier: 87:BC:11:FA:88:A9:2E:32:46:59:AD:59:AB:D1:63:7E:14:05:25:91 Authority key identifier: 50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 Certificate issuer: /CN=A91CBBC4/serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Certificate serial: 04EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft Manifest number: 04E3 Signing time: Sat 28 Jun 2025 23:19:07 +0000 Manifest this update: Sat 28 Jun 2025 23:19:07 +0000 Manifest next update: Sat 05 Jul 2025 23:19:07 +0000 Files and hashes: 1: UNqjonFb7c_nFOVthUH381hubvc.crl (hash: bUNRkVjvzPppQagZ6SOhKKzOXE2J3VLcozNKYUfx73s=) 2: 8E8A375A1FA211EC8159E249C4F9AE02.roa (hash: UmJY1BD67VDnKp5rZ226vLsxoH0ZrDVh7W0eseZRq3E=) 3: 2B6A29201FA011ECB867890CC4F9AE02.roa (hash: 4+mLuZV5Nt0cl9Ubgj32YK1pqSi8VCWk8bD6pptyrXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBBC4, serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Validity Not Before: Jun 28 23:19:07 2025 GMT Not After : Jul 5 23:19:07 2025 GMT Subject: CN=6860786b-46d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:d1:77:0b:ca:fd:b4:5e:8c:6c:1c:11:e1: 38:65:46:83:bb:43:7f:04:cf:40:bd:21:19:87:eb: 6a:a0:33:8f:ea:4d:ef:f4:fd:cf:8e:fa:be:81:f2: 1e:3a:e4:42:30:d8:b6:51:6d:e2:c2:5f:c9:94:9a: 55:01:90:a6:da:91:7e:7f:4b:f7:a0:ae:a2:75:b0: 6d:d4:76:2c:85:76:36:53:25:9f:91:f7:cf:10:ef: 21:b4:3e:90:a3:6f:2a:4b:73:6b:8b:19:bd:b1:73: 96:2a:3d:17:b3:31:89:97:e9:c4:6c:3e:2e:04:d3: 5e:c5:2f:34:df:08:72:7c:b7:65:0e:c0:0f:7d:e7: 6f:0c:fa:25:a9:ba:ac:20:62:83:e4:fe:35:7b:57: 82:68:b2:d1:cb:eb:9c:5d:19:be:bc:64:33:5e:ff: d2:0d:06:84:22:37:d9:0f:28:9a:9f:43:8c:48:3a: e3:89:62:4e:9a:3d:04:fb:15:d3:b8:fe:d7:0c:82: 11:9a:3e:02:16:7e:41:fd:0c:d1:65:cc:3a:de:3f: 7c:cd:12:02:6e:c4:a6:50:a0:1f:fd:27:62:4c:a4: 5b:38:1a:84:b5:e3:27:e6:47:c1:79:3e:c8:06:06: 47:d2:02:4e:32:41:1b:14:9a:34:ba:89:7a:19:75: 63:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BC:11:FA:88:A9:2E:32:46:59:AD:59:AB:D1:63:7E:14:05:25:91 X509v3 Authority Key Identifier: keyid:50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:22:3e:63:be:25:74:f2:ff:a4:37:0f:0d:1c:f2:74:2c:3b: 14:89:24:7e:64:5d:b7:ac:9a:f7:f6:5b:7a:6f:35:c7:3b:84: 61:05:ca:d0:ac:f5:ff:c9:ad:89:a0:12:40:50:b8:cc:0e:0d: ad:06:21:2a:71:e1:2c:bf:25:9a:a4:dc:6f:64:17:08:8b:c0: a8:ed:13:a3:5a:f9:94:3f:65:a3:21:e6:46:c9:9a:7c:04:1b: fa:01:37:f4:fb:9c:f6:cd:08:da:a5:44:0a:63:2c:7c:1e:19: 93:cb:cb:9b:aa:a8:03:9d:a2:84:21:99:c1:88:09:93:5c:ce: ac:01:39:9f:24:51:d9:83:f8:30:ac:40:ac:9d:52:ee:7a:3d: ff:29:dd:3a:46:ea:d0:35:b9:1b:d6:2a:bd:88:9a:41:fc:c4: 4a:23:d2:65:2a:45:3d:da:06:a6:99:12:1b:98:45:0c:88:8c: 99:6a:84:ae:9c:6a:4e:05:15:15:21:29:cd:8c:fb:78:60:0c: 0e:cf:01:96:dc:12:ac:3a:1f:c0:df:dd:3a:05:cc:18:8e:fa: e5:81:d1:6b:53:6c:66:1d:bf:04:9d:b2:93:11:13:aa:dd:8a: 7f:2f:21:fd:54:cd:2c:79:57:1d:4d:6c:30:1f:9b:fe:6b:9b: cf:c2:3f:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCQzQxMTAvBgNVBAUTKDUwREFBM0EyNzE1QkVEQ0ZFNzE0RTU2RDg1NDFGN0Yz NTg2RTZFRjcwHhcNMjUwNjI4MjMxOTA3WhcNMjUwNzA1MjMxOTA3WjAYMRYwFAYD VQQDEw02ODYwNzg2Yi00NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzp/RdwvK/bRejGwcEeE4ZUaDu0N/BM9AvSEZh+tqoDOP6k3v9P3Pjvq+gfIe OuRCMNi2UW3iwl/JlJpVAZCm2pF+f0v3oK6idbBt1HYshXY2UyWfkffPEO8htD6Q o28qS3Nrixm9sXOWKj0XszGJl+nEbD4uBNNexS803whyfLdlDsAPfedvDPolqbqs IGKD5P41e1eCaLLRy+ucXRm+vGQzXv/SDQaEIjfZDyian0OMSDrjiWJOmj0E+xXT uP7XDIIRmj4CFn5B/QzRZcw63j98zRICbsSmUKAf/SdiTKRbOBqEteMn5kfBeT7I BgZH0gJOMkEbFJo0uol6GXVjpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe8EfqI qS4yRlmtWavRY34UBSWRMB8GA1UdIwQYMBaAFFDao6JxW+3P5xTlbYVB9/NYbm73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkJDNC8zQzRCMDEzMjFG OUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdjX25GT1Z0aFVIMzgxaHVi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VOcWpvbkZiN2NfbkZPVnRoVUgzODFodWJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkJDNC8zQzRCMDEzMjFGOUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdj X25GT1Z0aFVIMzgxaHVidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZIj5jviV08v+kNw8NHPJ0LDsUiSR+ZF23rJr39lt6bzXHO4RhBcrQ rPX/ya2JoBJAULjMDg2tBiEqceEsvyWapNxvZBcIi8Co7ROjWvmUP2WjIeZGyZp8 BBv6ATf0+5z2zQjapUQKYyx8HhmTy8ubqqgDnaKEIZnBiAmTXM6sATmfJFHZg/gw rECsnVLuej3/Kd06RurQNbkb1iq9iJpB/MRKI9JlKkU92gammRIbmEUMiIyZaoSu nGpOBRUVISnNjPt4YAwOzwGW3BKsOh/A3906BcwYjvrlgdFrU2xmHb8EnbKTEROq 3Yp/LyH9VM0seVcdTWwwH5v+a5vPwj8r -----END CERTIFICATE-----Generated at Sun Jun 29 20:03:49 2025 by rpki-client