$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft File: _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json) Hash identifier: kG7vIgI22mN0Papy28hXW740/ENh4PmyaAV/TQGu5To= Subject key identifier: AF:8F:B2:EE:12:B3:BC:2D:5E:16:83:96:B7:4B:E2:31:7A:C6:C1:06 Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 Certificate issuer: /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft Manifest number: 0662 Signing time: Fri 30 May 2025 22:38:38 +0000 Manifest this update: Fri 30 May 2025 22:38:38 +0000 Manifest next update: Fri 06 Jun 2025 22:38:38 +0000 Files and hashes: 1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: dCmgBEpkp0bq8VU6FZGmyNwr8B7MEimpxLNMQumkUxI=) 2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: NgLitwn58Hzqdz8jFqI6KtHUu7WwdEhFCnvHC3Qm5IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C673, serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Validity Not Before: May 30 22:38:38 2025 GMT Not After : Jun 6 22:38:38 2025 GMT Subject: CN=683a336e-dea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:7d:06:f5:80:f3:1e:30:17:cd:20:56:78: 43:80:4b:af:a0:5c:e9:e1:1f:1c:94:59:2b:ea:ae: 37:8e:50:8b:45:cf:5c:79:d7:59:4f:49:d3:a3:97: 70:96:a8:b2:63:a5:53:61:b4:d6:c1:fc:7c:cb:07: 41:2c:a7:1a:24:1b:bb:74:98:08:00:6b:29:f6:72: 0c:da:54:d8:3a:70:6c:d7:53:3c:04:fa:8b:92:21: 57:eb:f5:dd:ae:31:82:c7:bb:f6:e9:3f:23:a9:31: 26:2e:78:9f:37:5b:8d:a8:a6:42:eb:c0:05:3e:24: 15:0a:ab:ba:8b:ed:fb:a0:2d:a9:62:10:cf:6b:c5: 5e:a6:a2:ee:83:ca:18:62:f2:e1:8d:97:2e:af:ef: 19:e1:47:01:a4:41:c5:af:90:7b:84:d6:6b:61:3c: 10:a2:8b:00:14:58:b7:31:aa:bd:2b:61:f9:56:4f: 6d:ff:53:a9:f8:d6:49:48:43:9f:f4:94:a8:61:e7: a6:c5:0f:a8:d3:d6:5a:f4:d2:c5:67:bf:97:14:d4: 2c:10:42:04:92:eb:65:e5:f0:58:5e:12:16:de:92: cc:c9:e8:fa:b1:31:e9:48:dd:06:4b:90:b5:dc:bc: 59:e4:96:50:9d:27:dc:61:18:e6:18:5c:ca:eb:da: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8F:B2:EE:12:B3:BC:2D:5E:16:83:96:B7:4B:E2:31:7A:C6:C1:06 X509v3 Authority Key Identifier: keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:a0:47:95:94:3c:4f:a6:43:d2:93:24:2d:0e:a3:fa:5c: 38:8a:28:d2:bb:fc:f7:d6:b1:2f:31:09:07:f3:1a:e8:b5:dd: ca:e1:65:b5:11:7b:59:21:69:99:86:3e:b3:90:d1:4c:e3:b5: d5:76:f7:4f:a5:8b:ec:7a:58:81:11:dc:46:58:63:48:85:0c: 40:d5:38:41:68:50:1b:35:0c:f1:08:e2:41:d3:66:06:d9:00: 00:ac:69:7e:30:2c:50:6b:ea:af:e3:67:08:2f:4d:a1:ed:42: d2:94:ad:fb:25:65:cb:41:99:1e:70:b9:41:3c:1a:4c:1b:2f: d3:9b:ce:51:6f:fb:ae:5d:6e:43:d3:c5:6d:13:a6:23:30:47: ee:50:6f:79:15:41:f3:42:39:5b:db:eb:ee:69:23:28:9a:bb: 75:10:8c:b3:a2:eb:15:fb:a4:66:ce:04:c1:a8:aa:81:22:23: 5f:57:26:ea:1a:93:56:16:89:5b:3b:04:96:5d:e6:f7:12:b6: ab:ca:f4:dc:ff:f6:6c:7c:99:83:9c:a3:72:50:3e:2e:fd:f2: fc:8a:e7:94:d2:65:65:3a:ff:60:ad:e8:58:a2:47:21:87:a9: da:95:bb:84:24:d4:82:57:37:de:96:2e:61:a0:ef:e3:3f:36: 5e:97:37:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NzMxMTAvBgNVBAUTKEZFRTlGREQ0QjBFODMxMzE4OEEwODlGN0E4N0ZCN0Qw MTUzMjUzODgwHhcNMjUwNTMwMjIzODM4WhcNMjUwNjA2MjIzODM4WjAYMRYwFAYD VQQDEw02ODNhMzM2ZS1kZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKZ9BvWA8x4wF80gVnhDgEuvoFzp4R8clFkr6q43jlCLRc9ceddZT0nTo5dw lqiyY6VTYbTWwfx8ywdBLKcaJBu7dJgIAGsp9nIM2lTYOnBs11M8BPqLkiFX6/Xd rjGCx7v26T8jqTEmLnifN1uNqKZC68AFPiQVCqu6i+37oC2pYhDPa8VepqLug8oY YvLhjZcur+8Z4UcBpEHFr5B7hNZrYTwQoosAFFi3Maq9K2H5Vk9t/1Op+NZJSEOf 9JSoYeemxQ+o09Za9NLFZ7+XFNQsEEIEkutl5fBYXhIW3pLMyej6sTHpSN0GS5C1 3LxZ5JZQnSfcYRjmGFzK69q9HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+Psu4S s7wtXhaDlrdL4jF6xsEGMB8GA1UdIwQYMBaAFP7p/dSw6DExiKCJ96h/t9AVMlOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY3My9BRTVGQjEwMjgw Q0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01UR0lvSW4zcUgtMzBCVXlV NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191bjkxTERvTVRHSW9JbjNxSC0zMEJVeVU0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY3My9BRTVGQjEwMjgwQ0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01U R0lvSW4zcUgtMzBCVXlVNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwSqBHlZQ8T6ZD0pMkLQ6j+lw4iijSu/z31rEvMQkH8xrotd3K4WW1 EXtZIWmZhj6zkNFM47XVdvdPpYvseliBEdxGWGNIhQxA1ThBaFAbNQzxCOJB02YG 2QAArGl+MCxQa+qv42cIL02h7ULSlK37JWXLQZkecLlBPBpMGy/Tm85Rb/uuXW5D 08VtE6YjMEfuUG95FUHzQjlb2+vuaSMomrt1EIyzousV+6RmzgTBqKqBIiNfVybq GpNWFolbOwSWXeb3EraryvTc//ZsfJmDnKNyUD4u/fL8iueU0mVlOv9grehYokch h6nalbuEJNSCVzfeli5hoO/jPzZelzfJ -----END CERTIFICATE-----Generated at Sat May 31 17:30:17 2025 by rpki-client