$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json) Hash identifier: DztJ9T50Purg/R0EEDnGT2iaDa9HodlRS2AzunM01bM= Subject key identifier: F4:06:34:54:1E:E7:6D:82:F0:19:59:52:5C:49:A5:DE:3D:8A:D4:CB Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft Manifest number: A9 Signing time: Sat 19 Jul 2025 06:23:58 +0000 Manifest this update: Sat 19 Jul 2025 06:23:58 +0000 Manifest next update: Sat 26 Jul 2025 06:23:58 +0000 Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: umfWnFlXPq85RcqxyY4Vrq6+OO8MIjQkVmm4NoVK97o=) 2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: DWOCYh9U3Wi0CtHFM/de9pIBC9zRoaOkBAZXQGO2U2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Validity Not Before: Jul 19 06:23:58 2025 GMT Not After : Jul 26 06:23:58 2025 GMT Subject: CN=687b39fe-14c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:38:f1:6d:18:3d:6f:51:db:c7:15:0e:55: 5e:5c:de:22:d6:82:5e:1c:09:3f:59:64:af:0d:34: bc:6d:1b:91:8f:bf:e3:46:ea:d3:cc:81:d3:49:36: 9e:14:14:a8:42:91:ad:b0:23:64:05:9c:11:05:e6: b5:9f:d8:09:ca:79:f1:4e:c3:ff:60:a5:6f:c4:1a: 8b:ee:ad:a3:31:cd:1a:6d:0f:61:a5:6b:45:3e:30: 0e:39:59:0e:8c:86:17:f2:b1:ca:cb:19:dc:5b:b7: f6:17:9e:1b:e1:35:a8:ea:6f:78:4a:ff:4f:90:b2: ec:f5:1a:c1:39:7f:dd:b3:51:62:70:93:5f:e5:6f: 25:d4:ba:43:35:6d:90:80:34:04:62:b2:11:ac:cc: c9:8e:f0:ce:02:76:23:ec:1b:9e:54:21:13:48:be: ec:f0:ed:01:dd:93:b3:00:f2:11:47:50:99:7a:e6: 8b:ca:df:f1:9f:61:14:3a:26:72:4a:3b:53:66:8c: bc:6f:cc:0d:76:9c:dd:ec:d8:20:a5:4e:c9:3d:be: 80:7c:e9:21:46:08:72:1f:d2:78:bf:c7:44:77:e6: c4:7b:17:ee:1a:13:57:61:3e:f6:8d:93:2c:06:16: f8:3f:20:ff:b3:7e:c3:0f:57:0b:88:e7:ab:93:25: ee:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:06:34:54:1E:E7:6D:82:F0:19:59:52:5C:49:A5:DE:3D:8A:D4:CB X509v3 Authority Key Identifier: keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c0:d4:d9:01:bc:43:38:8e:8a:0a:72:d5:f4:b6:90:70:9b: 97:28:64:ed:2c:7f:ef:e1:24:17:cb:3c:bb:59:0a:40:dd:cf: c5:c2:bc:d3:e3:8a:e6:1b:76:32:2c:cf:70:2d:51:54:c2:9e: 69:7b:d8:da:e9:5e:1d:2e:16:9c:f4:9a:51:a1:6d:00:93:e3: 92:17:2d:14:f4:29:15:6b:95:eb:b5:36:62:66:ea:91:bb:33: b0:54:b9:b7:8b:1f:31:35:e2:ea:53:63:93:cc:5a:a0:8f:1e: cf:99:81:3c:06:45:67:9a:ad:72:48:9c:82:bb:d0:ea:24:8f: 22:9e:33:06:06:2e:52:62:c4:04:ba:9d:00:55:fc:ec:c7:fb: af:0e:93:5b:40:0c:0e:68:4b:ed:71:75:80:74:6f:64:cd:2b: 4b:8e:26:be:83:2e:0a:5b:b2:de:d9:fd:34:d3:79:70:52:b9: ba:d1:0f:42:24:db:9c:01:0c:b6:46:07:5a:af:89:8a:26:52: 08:94:58:4b:94:c5:08:7f:a5:b2:87:d8:a7:5d:21:76:de:1a: 89:15:da:1d:d9:d3:e7:53:f8:79:9a:1d:27:d1:5d:47:6c:57: 6a:d5:ea:43:25:94:0d:5e:11:42:5a:3d:ff:df:c3:4d:5b:dd: 67:31:d0:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKDUwRDI0MDQyQTRBNjVFRUU2N0E3RUE0RDNGQzQ4OTQ0 M0EzOUFBNzQwHhcNMjUwNzE5MDYyMzU4WhcNMjUwNzI2MDYyMzU4WjAYMRYwFAYD VQQDEw02ODdiMzlmZS0xNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtU48W0YPW9R28cVDlVeXN4i1oJeHAk/WWSvDTS8bRuRj7/jRurTzIHTSTae FBSoQpGtsCNkBZwRBea1n9gJynnxTsP/YKVvxBqL7q2jMc0abQ9hpWtFPjAOOVkO jIYX8rHKyxncW7f2F54b4TWo6m94Sv9PkLLs9RrBOX/ds1FicJNf5W8l1LpDNW2Q gDQEYrIRrMzJjvDOAnYj7BueVCETSL7s8O0B3ZOzAPIRR1CZeuaLyt/xn2EUOiZy SjtTZoy8b8wNdpzd7NggpU7JPb6AfOkhRghyH9J4v8dEd+bEexfuGhNXYT72jZMs Bhb4PyD/s37DD1cLiOerkyXuMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQGNFQe 522C8BlZUlxJpd49itTLMB8GA1UdIwQYMBaAFFDSQEKkpl7uZ6fqTT/EiUQ6Oap0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9BOTlDMTYyODY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1NW5wLXBOUDhTSlJEbzVx blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VOSkFRcVNtWHU1bnAtcE5QOFNKUkRvNXFuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9BOTlDMTYyODY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1 NW5wLXBOUDhTSlJEbzVxblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbwNTZAbxDOI6KCnLV9LaQcJuXKGTtLH/v4SQXyzy7WQpA3c/FwrzT 44rmG3YyLM9wLVFUwp5pe9ja6V4dLhac9JpRoW0Ak+OSFy0U9CkVa5XrtTZiZuqR uzOwVLm3ix8xNeLqU2OTzFqgjx7PmYE8BkVnmq1ySJyCu9DqJI8injMGBi5SYsQE up0AVfzsx/uvDpNbQAwOaEvtcXWAdG9kzStLjia+gy4KW7Le2f0003lwUrm60Q9C JNucAQy2Rgdar4mKJlIIlFhLlMUIf6Wyh9inXSF23hqJFdod2dPnU/h5mh0n0V1H bFdq1epDJZQNXhFCWj3/38NNW91nMdDZ -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:41 2025 by rpki-client