$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft File: UNWU1Rjx1sCstQCbVwd49vEG1d4.mft (raw, json) Hash identifier: mISzwxxv4DfOpiLsGcDTrkcKJ2/U0ru9zH/faRUXcR0= Subject key identifier: 53:6A:FE:80:44:78:6A:BA:A2:B8:D5:A1:D4:0A:86:90:1B:2D:F1:56 Authority key identifier: 50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE Certificate issuer: /CN=A918F0F7/serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft Manifest number: 0670 Signing time: Fri 30 May 2025 22:36:01 +0000 Manifest this update: Fri 30 May 2025 22:36:00 +0000 Manifest next update: Fri 06 Jun 2025 22:36:00 +0000 Files and hashes: 1: UNWU1Rjx1sCstQCbVwd49vEG1d4.crl (hash: mTSeTIEwI1F0QQGDWH5SG++Ei7TMayS5VyWbeHzAg9E=) 2: 365255DA7F1C11EB9D057A0EC4F9AE02.roa (hash: MXijTQWHDrYzBdPCM/Z7x+devsNZ2syPknC61NPh7rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.crl rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0F7, serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE Validity Not Before: May 30 22:36:00 2025 GMT Not After : Jun 6 22:36:00 2025 GMT Subject: CN=683a32d0-3663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:85:e6:10:60:e4:bf:8b:c9:1f:53:08:df: d3:6e:2f:af:aa:b1:55:ab:64:14:de:05:8b:d1:83: 2a:df:49:2f:cc:35:0d:eb:f0:5c:08:07:d4:4b:af: c5:c2:d4:71:f6:7a:f7:cb:cb:fb:0d:73:44:3f:53: b8:dc:c7:7b:11:6a:2c:6d:21:13:64:49:7f:34:26: 78:97:11:3d:56:0a:e6:8a:0e:77:77:ae:58:c6:24: 95:1b:20:c9:f5:24:50:05:0c:e4:50:fd:e2:ad:71: f3:66:a5:c1:56:81:a7:ac:f4:8b:3b:54:6c:c7:62: b7:16:de:b3:3b:78:6c:df:dd:7c:fd:e7:26:be:b6: c0:8e:c6:10:87:9d:51:e1:e6:0b:53:8d:30:f8:4c: c8:44:2d:44:8f:db:c4:cb:42:b7:3b:87:3f:08:70: 7f:a6:f6:74:49:78:af:d4:b5:01:60:ba:b1:ae:11: 67:38:fd:99:aa:ab:de:26:8d:6c:f1:a3:be:e5:0f: 47:7f:ee:66:ed:fc:92:0e:8b:e2:8b:01:c6:e6:b9: 79:5a:82:15:9a:69:f1:c6:d3:ce:12:a3:91:ab:3f: d4:19:9d:16:07:79:2f:1b:e7:37:b3:da:7e:c2:ae: 0e:7f:d4:65:22:c0:ec:e5:61:99:4e:9f:25:f6:5e: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6A:FE:80:44:78:6A:BA:A2:B8:D5:A1:D4:0A:86:90:1B:2D:F1:56 X509v3 Authority Key Identifier: keyid:50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:62:ad:9a:34:fc:0a:ef:e9:89:67:da:c8:4d:1a:9f:57:de: 93:10:5d:2e:9e:85:5b:2f:c7:37:9a:91:a8:15:35:8c:3a:73: 76:fe:fb:d7:ec:e2:a3:32:f4:5f:47:f0:95:91:2a:61:e7:c7: 9f:cf:e9:de:af:5b:85:7f:71:30:3f:8a:fe:14:a0:02:de:93: 7a:dc:6c:18:38:74:df:cb:d3:60:e8:6f:b5:cf:6e:7f:09:0e: 2b:40:27:18:e5:25:e6:9c:98:0d:0f:44:4a:eb:9f:44:ed:14: 24:06:c8:56:65:5f:ee:1d:36:73:c9:fd:ca:06:22:1d:b8:8f: ea:99:21:0c:91:52:ec:03:41:12:41:f3:5a:91:25:3b:ec:50: ef:86:5e:b3:f9:1c:ee:14:ea:10:a3:22:cb:04:d8:1c:f0:f9: e2:53:23:c7:47:13:e3:25:9c:18:74:62:c7:04:9c:39:4c:30: c8:3b:c6:27:cb:2e:96:a9:5b:31:88:2e:86:8b:02:61:4e:ce: 6a:c6:fa:06:a4:6f:7b:bd:26:a3:4f:6a:95:08:8b:87:76:e3: fa:70:3e:48:74:1e:a6:3a:f5:cf:85:35:c0:f4:42:e2:12:ca: ea:1e:1c:a6:d0:5c:84:c7:51:9d:7e:74:f4:32:1a:e6:3f:56: 6b:ab:14:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwRjcxMTAvBgNVBAUTKDUwRDU5NEQ1MThGMUQ2QzBBQ0I1MDA5QjU3MDc3OEY2 RjEwNkQ1REUwHhcNMjUwNTMwMjIzNjAwWhcNMjUwNjA2MjIzNjAwWjAYMRYwFAYD VQQDEw02ODNhMzJkMC0zNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7mF5hBg5L+LyR9TCN/Tbi+vqrFVq2QU3gWL0YMq30kvzDUN6/BcCAfUS6/F wtRx9nr3y8v7DXNEP1O43Md7EWosbSETZEl/NCZ4lxE9Vgrmig53d65YxiSVGyDJ 9SRQBQzkUP3irXHzZqXBVoGnrPSLO1Rsx2K3Ft6zO3hs3918/ecmvrbAjsYQh51R 4eYLU40w+EzIRC1Ej9vEy0K3O4c/CHB/pvZ0SXiv1LUBYLqxrhFnOP2ZqqveJo1s 8aO+5Q9Hf+5m7fySDoviiwHG5rl5WoIVmmnxxtPOEqORqz/UGZ0WB3kvG+c3s9p+ wq4Of9RlIsDs5WGZTp8l9l69nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNq/oBE eGq6orjVodQKhpAbLfFWMB8GA1UdIwQYMBaAFFDVlNUY8dbArLUAm1cHePbxBtXe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjBGNy9DQjc4QjdDODdG MUExMUVCOTJGRTk4MERDNEY5QUUwMi9VTldVMVJqeDFzQ3N0UUNiVndkNDl2RUcx ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VOV1UxUmp4MXNDc3RRQ2JWd2Q0OXZFRzFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjBGNy9DQjc4QjdDODdGMUExMUVCOTJGRTk4MERDNEY5QUUwMi9VTldVMVJqeDFz Q3N0UUNiVndkNDl2RUcxZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIYq2aNPwK7+mJZ9rITRqfV96TEF0unoVbL8c3mpGoFTWMOnN2/vvX 7OKjMvRfR/CVkSph58efz+ner1uFf3EwP4r+FKAC3pN63GwYOHTfy9Ng6G+1z25/ CQ4rQCcY5SXmnJgND0RK659E7RQkBshWZV/uHTZzyf3KBiIduI/qmSEMkVLsA0ES QfNakSU77FDvhl6z+RzuFOoQoyLLBNgc8PniUyPHRxPjJZwYdGLHBJw5TDDIO8Yn yy6WqVsxiC6GiwJhTs5qxvoGpG97vSajT2qVCIuHduP6cD5IdB6mOvXPhTXA9ELi EsrqHhym0FyEx1GdfnT0MhrmP1ZrqxRG -----END CERTIFICATE-----Generated at Sat May 31 17:27:59 2025 by rpki-client