$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft File: N_UNneVOb9butTKnYVzzDtJC72E.mft (raw, json) Hash identifier: ftwB0TKNNqRNAHKapgKx/CzhJLEihYyemxjOlS2T2uI= Subject key identifier: D7:F2:9F:AC:E1:C2:B9:D9:19:AD:A5:A2:AB:F2:F0:BB:06:6E:23:44 Authority key identifier: 37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 Certificate issuer: /CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Certificate serial: 1777 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft Manifest number: 52A3 Signing time: Fri 20 Jun 2025 15:04:59 +0000 Manifest this update: Fri 20 Jun 2025 15:04:58 +0000 Manifest next update: Fri 27 Jun 2025 15:04:58 +0000 Files and hashes: 1: N_UNneVOb9butTKnYVzzDtJC72E.crl (hash: tpXZtYMzzwRCOxIJL6udoikYqZ2uYjKSywPZ9GGP72M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6007 (0x1777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Validity Not Before: Jun 20 15:04:58 2025 GMT Not After : Jun 27 15:04:58 2025 GMT Subject: CN=6855789a-ae7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:08:0f:ba:e3:1a:de:06:8a:fb:52:e6:42: 75:e8:c7:21:49:c7:f8:62:cc:f8:c1:74:6c:f9:75: aa:d5:26:0d:f9:c3:0f:c8:13:2d:59:21:23:a6:f0: 6c:c8:7d:92:9e:38:2c:a5:8f:1c:b3:af:34:e5:69: d3:2b:52:6a:20:52:3e:22:2c:50:9c:0a:62:50:9d: 25:6f:95:31:22:50:79:99:7a:59:6e:29:b6:f7:fb: 17:a6:9f:7a:eb:3b:dc:7b:c4:1c:cd:8a:2a:4a:e4: b2:bd:5d:09:6d:37:3d:00:7d:5f:20:90:0f:c9:11: 42:0e:b9:ee:4b:be:39:18:8e:dc:62:20:1b:67:4b: 85:d1:f2:81:17:55:4e:09:69:a7:0e:d4:06:06:1c: 6a:6c:e5:23:18:10:2c:b0:ce:4c:7a:79:0a:3e:8f: 7d:08:e3:dd:5a:bb:c8:e5:8e:a6:d8:f6:7d:71:21: bb:f0:db:5c:89:24:6e:6e:af:32:81:d5:f7:e4:ce: 7b:25:03:b8:13:88:8c:c0:8c:bc:e5:7c:5c:91:1e: 50:ac:09:28:73:fb:95:2d:78:53:de:a2:9c:31:b2: 46:d6:46:31:9c:8d:f1:77:2c:0d:dd:47:f4:e7:e1: 11:0f:e4:ed:64:c8:5e:33:1f:84:35:b5:30:17:90: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F2:9F:AC:E1:C2:B9:D9:19:AD:A5:A2:AB:F2:F0:BB:06:6E:23:44 X509v3 Authority Key Identifier: keyid:37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1a:5a:8f:d7:76:18:1d:cc:a4:6a:58:97:78:07:6d:89:ed: c1:7a:3a:d0:be:26:0f:e4:7b:c8:5b:ce:03:ae:5f:1f:1d:05: a0:f3:a3:cc:ed:f9:82:a5:a8:39:97:5d:d0:85:72:ad:6e:61: 61:a1:6d:7b:db:d7:20:b0:32:4b:f1:78:5f:b8:83:5e:ca:4d: cb:d7:4a:1c:9d:a7:30:23:8d:35:15:77:1a:01:de:a9:78:5f: bf:c5:c6:25:a2:6f:4f:6d:c5:9e:2b:0a:ab:6e:a3:46:9e:1e: 61:31:63:00:bc:17:d0:8b:26:64:e0:83:3d:c8:35:9b:13:dd: d2:07:0f:d4:d2:65:11:be:13:8f:bb:d8:ec:d8:8e:52:8a:e9: e5:0b:04:65:ba:a9:20:cb:69:c6:22:ca:27:4f:34:60:0b:c6: 21:ff:24:4d:09:da:ee:be:35:e8:e9:55:56:e1:b7:a4:69:08: 61:35:b9:8f:53:a4:06:c1:14:3b:62:38:0a:ce:c9:49:f7:ac: fe:7a:01:1d:51:f0:1f:d3:e0:f3:6a:48:29:8a:41:6b:ee:ab: bd:0c:90:ad:89:83:1a:ed:a6:89:6a:cb:7a:43:61:51:12:9c: 14:bb:ea:a9:ea:30:96:ee:21:0e:c9:9f:87:09:c2:6b:7e:fe: 0c:35:ea:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDM3RjUwRDlERTU0RTZGRDZFRUI1MzJBNzYxNUNGMzBF RDI0MkVGNjEwHhcNMjUwNjIwMTUwNDU4WhcNMjUwNjI3MTUwNDU4WjAYMRYwFAYD VQQDEw02ODU1Nzg5YS1hZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi0ID7rjGt4GivtS5kJ16MchScf4Ysz4wXRs+XWq1SYN+cMPyBMtWSEjpvBs yH2SnjgspY8cs6805WnTK1JqIFI+IixQnApiUJ0lb5UxIlB5mXpZbim29/sXpp96 6zvce8QczYoqSuSyvV0JbTc9AH1fIJAPyRFCDrnuS745GI7cYiAbZ0uF0fKBF1VO CWmnDtQGBhxqbOUjGBAssM5MenkKPo99COPdWrvI5Y6m2PZ9cSG78NtciSRubq8y gdX35M57JQO4E4iMwIy85XxckR5QrAkoc/uVLXhT3qKcMbJG1kYxnI3xdywN3Uf0 5+ERD+TtZMheMx+ENbUwF5A52QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfyn6zh wrnZGa2loqvy8LsGbiNEMB8GA1UdIwQYMBaAFDf1DZ3lTm/W7rUyp2Fc8w7SQu9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5YnV0VEtuWVZ6ekR0SkM3 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05fVU5uZVZPYjlidXRUS25ZVnp6RHRKQzcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5 YnV0VEtuWVZ6ekR0SkM3MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSGlqP13YYHcykaliXeAdtie3BejrQviYP5HvIW84Drl8fHQWg86PM 7fmCpag5l13QhXKtbmFhoW1729cgsDJL8XhfuINeyk3L10ocnacwI401FXcaAd6p eF+/xcYlom9PbcWeKwqrbqNGnh5hMWMAvBfQiyZk4IM9yDWbE93SBw/U0mURvhOP u9js2I5SiunlCwRluqkgy2nGIsonTzRgC8Yh/yRNCdruvjXo6VVW4bekaQhhNbmP U6QGwRQ7YjgKzslJ96z+egEdUfAf0+DzakgpikFr7qu9DJCtiYMa7aaJast6Q2FR EpwUu+qp6jCW7iEOyZ+HCcJrfv4MNepq -----END CERTIFICATE-----Generated at Sat Jun 21 06:21:45 2025 by rpki-client