$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json) Hash identifier: 3LGLJYughwL5MHswGTs+lspaQu9mWQ22XyG60grkmxk= Subject key identifier: 5F:2C:5F:65:54:70:29:A9:EF:57:A6:92:77:BC:87:35:B9:C0:77:78 Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft Manifest number: C2 Signing time: Fri 05 Sep 2025 06:18:25 +0000 Manifest this update: Fri 05 Sep 2025 06:18:24 +0000 Manifest next update: Fri 12 Sep 2025 06:18:24 +0000 Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: tieofkFVe+y7sWba4n3E62I2ec5zbdCvpTF21VIR1ew=) 2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: DWOCYh9U3Wi0CtHFM/de9pIBC9zRoaOkBAZXQGO2U2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Validity Not Before: Sep 5 06:18:24 2025 GMT Not After : Sep 12 06:18:24 2025 GMT Subject: CN=68ba80b0-9b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:e1:fc:49:47:05:db:22:bd:d3:b2:a8:5a: 2b:70:80:4e:ef:bc:b7:9e:3f:6f:b1:17:4d:43:f1: 64:d6:1a:ae:f5:bf:f1:41:0f:14:d2:c0:2b:cb:8c: c9:d4:e6:a5:6d:06:f1:e1:72:b7:97:a2:87:e9:a8: 74:fb:49:1a:55:e9:14:a5:f7:07:73:15:f6:c7:69: aa:47:ff:6c:ca:3b:87:cb:c7:99:e9:d9:14:1e:18: de:5b:a2:d8:7f:26:0d:7a:a2:b3:6d:c6:c1:45:75: df:1f:30:bb:1b:eb:d3:74:dd:b8:77:74:cc:1d:55: 34:2c:62:d7:f8:2e:91:ef:72:23:fc:06:45:67:a3: 9b:e2:82:e3:42:6f:c9:16:a1:92:31:79:89:7e:a6: b4:2f:e5:d6:09:d2:f7:c0:9e:5a:01:01:5d:c4:da: 52:fe:14:11:6b:12:bd:75:73:3b:58:66:c2:09:ff: 1e:fd:57:c0:28:d1:66:b7:fd:e3:a4:e3:ad:f9:0b: 37:d1:d7:00:d7:76:95:cc:ed:2f:08:89:2c:53:77: d5:65:90:6f:8a:86:9a:9f:46:cb:4e:64:28:5a:f7: e7:7c:72:d3:3c:ab:fb:0f:cc:57:02:64:62:86:3f: 7c:b9:c6:be:c8:51:d5:3d:e9:13:a5:8f:52:0b:cd: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2C:5F:65:54:70:29:A9:EF:57:A6:92:77:BC:87:35:B9:C0:77:78 X509v3 Authority Key Identifier: keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f6:c2:af:ce:54:18:02:18:94:75:b6:0e:f3:34:e9:88:b8: d9:18:26:56:77:c4:68:04:3c:0b:03:4c:d1:88:28:9c:1f:7c: 75:5e:61:8d:47:b6:06:6b:7d:c2:46:0c:c3:67:f7:df:70:83: 4d:0e:9d:de:5a:62:fc:2b:f1:89:8b:0c:30:f6:fb:ef:f8:f1: e5:b2:58:d8:db:65:a5:90:8a:75:9b:25:b1:16:7e:c5:8f:64: e0:79:80:27:95:cd:35:37:fc:92:16:6a:a4:f5:05:00:e4:d9: 89:b4:05:86:17:ee:e2:e8:5e:b1:a2:5b:23:2e:a6:3c:66:90: 15:de:db:55:7d:73:7f:a6:bb:d4:ce:90:33:c6:e2:84:8e:f0: 9d:49:24:32:fc:46:c0:2a:c5:12:19:b7:cd:38:a0:0e:e7:53: 39:52:0a:82:da:ef:78:11:6e:96:07:9a:3a:c2:4e:95:3d:90: c1:3d:04:86:6a:26:1e:3e:a3:c3:f7:5a:b5:54:7a:9c:43:1e: 52:57:88:89:7d:12:77:f5:71:03:f2:94:82:b3:c3:6d:b8:da: 16:95:2f:a0:03:24:5c:5b:f9:f4:ee:ea:e9:1f:97:67:66:9c: d3:85:0a:c2:1f:6a:33:f8:bb:48:a4:63:d7:d9:a2:81:6d:6b: 01:a8:08:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKDUwRDI0MDQyQTRBNjVFRUU2N0E3RUE0RDNGQzQ4OTQ0 M0EzOUFBNzQwHhcNMjUwOTA1MDYxODI0WhcNMjUwOTEyMDYxODI0WjAYMRYwFAYD VQQDEw02OGJhODBiMC05Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/7h/ElHBdsivdOyqForcIBO77y3nj9vsRdNQ/Fk1hqu9b/xQQ8U0sAry4zJ 1OalbQbx4XK3l6KH6ah0+0kaVekUpfcHcxX2x2mqR/9syjuHy8eZ6dkUHhjeW6LY fyYNeqKzbcbBRXXfHzC7G+vTdN24d3TMHVU0LGLX+C6R73Ij/AZFZ6Ob4oLjQm/J FqGSMXmJfqa0L+XWCdL3wJ5aAQFdxNpS/hQRaxK9dXM7WGbCCf8e/VfAKNFmt/3j pOOt+Qs30dcA13aVzO0vCIksU3fVZZBvioaan0bLTmQoWvfnfHLTPKv7D8xXAmRi hj98uca+yFHVPekTpY9SC80FIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8sX2VU cCmp71emkne8hzW5wHd4MB8GA1UdIwQYMBaAFFDSQEKkpl7uZ6fqTT/EiUQ6Oap0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9BOTlDMTYyODY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1NW5wLXBOUDhTSlJEbzVx blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VOSkFRcVNtWHU1bnAtcE5QOFNKUkRvNXFuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9BOTlDMTYyODY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1 NW5wLXBOUDhTSlJEbzVxblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt9sKvzlQYAhiUdbYO8zTpiLjZGCZWd8RoBDwLA0zRiCicH3x1XmGN R7YGa33CRgzDZ/ffcINNDp3eWmL8K/GJiwww9vvv+PHlsljY22WlkIp1myWxFn7F j2TgeYAnlc01N/ySFmqk9QUA5NmJtAWGF+7i6F6xolsjLqY8ZpAV3ttVfXN/prvU zpAzxuKEjvCdSSQy/EbAKsUSGbfNOKAO51M5UgqC2u94EW6WB5o6wk6VPZDBPQSG aiYePqPD91q1VHqcQx5SV4iJfRJ39XED8pSCs8NtuNoWlS+gAyRcW/n07urpH5dn ZpzThQrCH2oz+LtIpGPX2aKBbWsBqAho -----END CERTIFICATE-----Generated at Sat Sep 6 21:38:31 2025 by rpki-client