$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft File: N_UNneVOb9butTKnYVzzDtJC72E.mft (raw, json) Hash identifier: k3LQq/k4FVoUAYLeJ+KxkorhOGfGM2+8bBoUjceBTGU= Subject key identifier: 35:99:4F:4C:3E:84:18:8F:CD:77:4A:A7:63:57:79:00:D4:4F:A5:C4 Authority key identifier: 37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 Certificate issuer: /CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Certificate serial: 1792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft Manifest number: 52F4 Signing time: Tue 12 Aug 2025 15:06:36 +0000 Manifest this update: Tue 12 Aug 2025 15:06:36 +0000 Manifest next update: Tue 19 Aug 2025 15:06:36 +0000 Files and hashes: 1: N_UNneVOb9butTKnYVzzDtJC72E.crl (hash: UYqSX+5AXnOVhElXjjnni7YLBL54qEgkM+C9l2FnWEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6034 (0x1792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Validity Not Before: Aug 12 15:06:36 2025 GMT Not After : Aug 19 15:06:36 2025 GMT Subject: CN=689b587c-6954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0e:51:27:8d:d6:ae:24:5e:11:5f:94:ec:55: 41:60:37:4f:0c:29:99:74:e7:23:ba:5a:d9:00:9b: be:08:18:7a:e3:97:e3:da:46:4c:1e:c9:79:14:f2: 9c:34:c0:06:1e:9e:47:39:06:a6:c4:80:78:71:89: 53:48:36:75:fa:c9:36:94:26:3c:16:29:2f:51:a6: 93:d2:05:b5:e9:24:08:90:c2:41:44:ab:47:ed:92: 9a:21:c4:2b:8e:e3:12:93:c4:94:3d:c6:61:41:d9: ea:e8:d4:fe:7e:65:43:0b:97:ef:c0:4c:8a:a2:6d: ce:bd:b2:7c:49:53:4d:31:f6:fb:f0:16:8c:54:6d: 27:14:c8:5e:10:2e:e3:eb:a4:53:0f:3e:07:1c:93: 0c:9b:ac:63:bc:71:7c:d7:92:f1:c1:3d:2e:1e:57: 0e:4f:0d:09:3a:38:7b:54:d5:1d:53:a2:7b:5f:b2: c0:c9:87:59:47:20:04:bb:34:a4:01:75:d4:48:f2: d0:6c:0a:7a:d5:f1:39:78:64:21:17:24:8c:61:f0: be:49:bb:ac:39:98:88:64:e4:27:2b:db:6c:60:17: 3e:6c:34:b6:7b:5b:f7:07:a2:a7:43:25:18:66:47: 09:9f:1a:eb:fa:6b:11:23:0c:0a:17:ee:e5:91:af: 49:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:99:4F:4C:3E:84:18:8F:CD:77:4A:A7:63:57:79:00:D4:4F:A5:C4 X509v3 Authority Key Identifier: keyid:37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:c6:28:7f:d0:64:9e:a9:4a:ee:e9:0c:f1:a7:c2:a6:78:64: f3:57:d5:30:62:86:d1:42:b0:be:85:24:44:b2:67:76:bc:26: ec:95:4f:b8:0e:de:16:40:77:3d:15:33:b8:c6:cc:e1:c4:d1: 2f:91:68:15:31:d1:59:b0:bf:b6:56:8e:d6:46:29:db:a3:86: 37:3e:4d:9c:f8:d6:5b:4a:4d:39:80:70:92:b4:e4:17:73:2b: 20:2a:3d:46:48:65:61:88:0b:95:43:b5:6c:a1:cc:17:f7:e4: 91:eb:c9:b8:c8:53:95:52:93:ad:f7:85:4a:b2:95:5f:fb:41: 3d:7f:6b:43:01:0f:45:92:d7:18:e2:fa:cb:fd:64:f9:7f:68: d1:44:87:30:4d:70:ba:b6:89:92:ef:ab:f6:a0:4c:f2:c9:14: 1d:77:45:5a:d8:80:0c:75:16:61:81:eb:2a:13:b8:b8:9a:ad: 8d:32:de:dd:e4:60:41:a4:e3:e3:8b:dd:e0:36:76:06:92:79: 8e:8c:15:79:11:54:46:f8:a0:c9:f4:6d:e7:50:0a:23:3a:ca: a8:bc:73:e5:88:10:18:e7:f6:92:6b:5b:47:35:16:45:f4:0c: 6e:42:da:09:1a:ae:07:23:5e:42:35:24:cd:f9:f8:cc:ae:83: 40:bd:a1:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDM3RjUwRDlERTU0RTZGRDZFRUI1MzJBNzYxNUNGMzBF RDI0MkVGNjEwHhcNMjUwODEyMTUwNjM2WhcNMjUwODE5MTUwNjM2WjAYMRYwFAYD VQQDEw02ODliNTg3Yy02OTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4A5RJ43WriReEV+U7FVBYDdPDCmZdOcjulrZAJu+CBh645fj2kZMHsl5FPKc NMAGHp5HOQamxIB4cYlTSDZ1+sk2lCY8FikvUaaT0gW16SQIkMJBRKtH7ZKaIcQr juMSk8SUPcZhQdnq6NT+fmVDC5fvwEyKom3OvbJ8SVNNMfb78BaMVG0nFMheEC7j 66RTDz4HHJMMm6xjvHF815LxwT0uHlcOTw0JOjh7VNUdU6J7X7LAyYdZRyAEuzSk AXXUSPLQbAp61fE5eGQhFySMYfC+SbusOZiIZOQnK9tsYBc+bDS2e1v3B6KnQyUY ZkcJnxrr+msRIwwKF+7lka9J2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWZT0w+ hBiPzXdKp2NXeQDUT6XEMB8GA1UdIwQYMBaAFDf1DZ3lTm/W7rUyp2Fc8w7SQu9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5YnV0VEtuWVZ6ekR0SkM3 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05fVU5uZVZPYjlidXRUS25ZVnp6RHRKQzcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5 YnV0VEtuWVZ6ekR0SkM3MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyxih/0GSeqUru6Qzxp8KmeGTzV9UwYobRQrC+hSREsmd2vCbslU+4 Dt4WQHc9FTO4xszhxNEvkWgVMdFZsL+2Vo7WRinbo4Y3Pk2c+NZbSk05gHCStOQX cysgKj1GSGVhiAuVQ7VsocwX9+SR68m4yFOVUpOt94VKspVf+0E9f2tDAQ9FktcY 4vrL/WT5f2jRRIcwTXC6tomS76v2oEzyyRQdd0Va2IAMdRZhgesqE7i4mq2NMt7d 5GBBpOPji93gNnYGknmOjBV5EVRG+KDJ9G3nUAojOsqovHPliBAY5/aSa1tHNRZF 9AxuQtoJGq4HI15CNSTN+fjMroNAvaEd -----END CERTIFICATE-----Generated at Tue Aug 12 18:19:51 2025 by rpki-client