$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json) Hash identifier: JrNYZTYUqwTYflycAH5R6Zkf6CDb7E4aVdm2kof6M0M= Subject key identifier: 1A:F7:76:0B:CB:3F:5C:FA:EB:A2:A0:2F:E1:05:E0:53:CE:6B:D5:5B Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft Manifest number: 91 Signing time: Sun 01 Jun 2025 06:11:48 +0000 Manifest this update: Sun 01 Jun 2025 06:11:48 +0000 Manifest next update: Sun 08 Jun 2025 06:11:48 +0000 Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: G7GmB3GI4dxz+Vn/7mch0WU6ME350RqfGzrhqraHCMY=) 2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: DWOCYh9U3Wi0CtHFM/de9pIBC9zRoaOkBAZXQGO2U2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Validity Not Before: Jun 1 06:11:48 2025 GMT Not After : Jun 8 06:11:48 2025 GMT Subject: CN=683bef24-1c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:b5:be:d6:23:cb:f0:82:9d:c0:76:7d:57: 75:b3:91:6c:ae:60:07:68:84:c0:51:49:d5:98:1d: e9:83:a5:e3:2d:74:96:4b:83:e0:ea:72:0f:de:0b: 6d:13:b2:4d:22:e2:2e:56:46:ee:d9:85:f9:1e:7f: b6:21:b2:ca:64:40:74:52:31:ef:73:f5:33:e5:e6: 66:a5:f0:b5:0c:26:be:75:52:5f:80:6d:9b:15:1e: f5:5c:79:b5:29:aa:ba:f7:6f:46:18:4d:ed:9e:95: da:a7:e0:af:8d:7b:35:95:fa:86:86:11:e6:3b:78: 49:2b:54:b1:47:d1:61:b7:59:14:85:b3:df:b4:ad: 51:58:9f:81:f9:1b:a2:f6:b4:8c:2a:0f:68:4a:66: 0e:76:10:df:19:95:f9:96:30:93:b1:cf:15:91:bf: 6c:b4:6e:aa:47:0b:01:26:6a:70:82:37:f0:11:34: d2:0e:61:6f:35:57:0f:01:1f:a7:be:20:82:76:44: 8b:60:33:55:04:9e:92:e4:7b:75:73:f0:20:84:9e: 36:f1:86:8d:d4:0a:77:6c:2b:c6:a9:11:db:78:9b: 30:b2:db:70:1f:11:16:66:f5:1f:19:e7:6e:f6:4a: b4:b3:1a:fd:6c:e0:bc:54:13:f5:fa:61:de:aa:f6: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F7:76:0B:CB:3F:5C:FA:EB:A2:A0:2F:E1:05:E0:53:CE:6B:D5:5B X509v3 Authority Key Identifier: keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e2:1e:a1:ff:c3:79:b2:3f:ae:37:f0:d9:ee:3e:69:27:83: be:ce:8b:36:d2:95:e0:d0:d4:bf:4c:f1:62:54:58:e8:0e:12: dc:ad:8d:29:34:8a:73:1e:e5:a2:df:76:3b:20:c4:88:24:60: 93:c5:67:92:3c:7e:be:91:1d:e6:3c:f2:c1:a6:29:b9:fd:b7: 84:4d:0c:9f:04:87:90:55:1f:2c:00:4c:5a:8c:73:be:2d:db: 75:37:be:03:cc:5f:7c:d2:2e:a7:28:af:3f:1d:45:9c:7c:80: 46:fd:f0:e9:d9:67:51:e7:e2:60:e4:b8:b4:58:f3:44:c1:de: 31:4d:a6:4c:8d:1a:56:98:0c:59:f1:a6:56:91:a6:f0:95:12: f6:d6:96:b5:cd:db:84:11:06:67:ad:5b:31:44:f8:8e:71:9b: ca:db:1f:9d:cf:b0:a0:20:3e:40:5b:5f:a9:3d:9f:76:bd:f0: 33:10:fc:da:20:b3:98:20:54:92:93:53:ab:0a:46:df:20:11: 41:6a:3a:77:85:7b:2c:d5:2c:91:4c:36:99:13:10:e9:9e:c3: 93:8d:15:b1:6b:d8:73:a9:96:bb:f3:ae:ad:ce:ec:87:d7:9a: bd:d8:9b:4b:87:51:07:5b:17:3a:d8:68:95:2c:83:b9:e4:af: 14:c1:da:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKDUwRDI0MDQyQTRBNjVFRUU2N0E3RUE0RDNGQzQ4OTQ0 M0EzOUFBNzQwHhcNMjUwNjAxMDYxMTQ4WhcNMjUwNjA4MDYxMTQ4WjAYMRYwFAYD VQQDEw02ODNiZWYyNC0xYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TK1vtYjy/CCncB2fVd1s5FsrmAHaITAUUnVmB3pg6XjLXSWS4Pg6nIP3gtt E7JNIuIuVkbu2YX5Hn+2IbLKZEB0UjHvc/Uz5eZmpfC1DCa+dVJfgG2bFR71XHm1 Kaq6929GGE3tnpXap+CvjXs1lfqGhhHmO3hJK1SxR9Fht1kUhbPftK1RWJ+B+Rui 9rSMKg9oSmYOdhDfGZX5ljCTsc8Vkb9stG6qRwsBJmpwgjfwETTSDmFvNVcPAR+n viCCdkSLYDNVBJ6S5Ht1c/AghJ428YaN1Ap3bCvGqRHbeJswsttwHxEWZvUfGedu 9kq0sxr9bOC8VBP1+mHeqvYZvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBr3dgvL P1z666KgL+EF4FPOa9VbMB8GA1UdIwQYMBaAFFDSQEKkpl7uZ6fqTT/EiUQ6Oap0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9BOTlDMTYyODY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1NW5wLXBOUDhTSlJEbzVx blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VOSkFRcVNtWHU1bnAtcE5QOFNKUkRvNXFuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9BOTlDMTYyODY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1 NW5wLXBOUDhTSlJEbzVxblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn4h6h/8N5sj+uN/DZ7j5pJ4O+zos20pXg0NS/TPFiVFjoDhLcrY0p NIpzHuWi33Y7IMSIJGCTxWeSPH6+kR3mPPLBpim5/beETQyfBIeQVR8sAExajHO+ Ldt1N74DzF980i6nKK8/HUWcfIBG/fDp2WdR5+Jg5Li0WPNEwd4xTaZMjRpWmAxZ 8aZWkabwlRL21pa1zduEEQZnrVsxRPiOcZvK2x+dz7CgID5AW1+pPZ92vfAzEPza ILOYIFSSk1OrCkbfIBFBajp3hXss1SyRTDaZExDpnsOTjRWxa9hzqZa7866tzuyH 15q92JtLh1EHWxc62GiVLIO55K8UwdrI -----END CERTIFICATE-----Generated at Mon Jun 2 19:30:35 2025 by rpki-client