$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft File: UNqjonFb7c_nFOVthUH381hubvc.mft (raw, json) Hash identifier: ShkwmiesL9MmBFrD66SD5m7ywmnngy7ecYTNWoZBlHE= Subject key identifier: 0C:80:1A:00:E5:84:78:A5:31:E0:37:AB:4D:94:56:25:9C:FE:26:E7 Authority key identifier: 50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 Certificate issuer: /CN=A91CBBC4/serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Certificate serial: 04FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft Manifest number: 04F7 Signing time: Tue 05 Aug 2025 00:08:29 +0000 Manifest this update: Tue 05 Aug 2025 00:08:28 +0000 Manifest next update: Tue 12 Aug 2025 00:08:28 +0000 Files and hashes: 1: UNqjonFb7c_nFOVthUH381hubvc.crl (hash: m0HH6iPwafvitHCKkInF+JdysFHTnXBFPqGl80vG8fY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1279 (0x4ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBBC4, serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7 Validity Not Before: Aug 5 00:08:28 2025 GMT Not After : Aug 12 00:08:28 2025 GMT Subject: CN=68914b7d-9fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:86:53:e5:90:f6:aa:8f:22:f3:bf:2b:83: 05:88:86:24:0b:66:25:bd:f3:a9:92:de:67:bd:7b: fa:45:81:d2:01:08:f9:cd:49:e8:6d:53:e3:00:c6: 58:e1:44:0a:be:75:c2:1d:87:23:63:c5:76:7a:6d: 25:dc:ba:4e:6e:21:10:4e:3a:01:66:76:62:b8:1a: 74:0d:1f:42:a6:44:75:3d:ae:c9:d9:f5:28:bc:61: b3:38:3c:b8:3d:c8:f1:fb:6b:14:15:ef:91:5c:f3: 8c:b6:75:56:80:ad:8f:f5:29:b5:a2:d7:5e:6d:28: 9e:ea:bd:1c:6a:ac:3b:d7:1c:6d:9e:82:e5:07:24: 2a:54:89:d2:88:71:ff:e9:33:54:e6:e4:4e:05:ec: 10:e6:38:94:df:5c:74:8c:ce:b3:2a:16:8f:d2:fc: 46:2a:32:c4:38:64:d2:4d:cb:a3:d2:59:17:a7:76: 83:35:5b:47:b9:eb:6c:27:01:ba:1d:5a:a4:01:ed: be:5f:e4:4e:aa:65:8e:cb:84:40:28:59:30:f1:72: 5d:38:d5:50:a1:f3:66:68:b9:c2:e7:bc:3f:13:a2: bf:ed:18:30:17:1d:55:1a:57:60:30:33:62:98:fc: 22:d6:9c:aa:1d:03:70:34:6e:89:91:29:84:c0:0c: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:80:1A:00:E5:84:78:A5:31:E0:37:AB:4D:94:56:25:9C:FE:26:E7 X509v3 Authority Key Identifier: keyid:50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:72:71:e5:0f:e9:9c:5d:e9:b5:cc:bb:1f:bb:44:a9:95:e2: 8c:99:18:45:ec:26:d3:31:1c:bc:72:01:56:31:59:60:b5:ff: 39:86:a0:38:ba:f2:54:0c:5a:d8:04:a9:47:9b:61:ff:d8:2c: ba:7a:de:ea:3c:50:90:3e:15:c6:d9:f7:8c:1e:fd:f8:87:f2: e5:5d:03:ea:10:a9:59:b2:3a:a1:34:bb:f0:fa:06:83:5b:66: d9:a0:7f:ec:be:7f:8d:ad:09:60:fd:7c:2d:4a:2d:7e:55:5a: 25:c3:af:5c:9a:94:a8:5b:2e:bf:85:14:78:e8:0a:c6:ff:1c: 99:e2:3b:da:be:58:95:dd:ca:b9:10:8c:90:d7:e3:ea:a7:fd: 28:69:37:cd:8b:81:74:61:2b:d4:3a:44:6f:21:bc:5f:3b:3e: d0:5e:97:2d:99:52:be:75:41:49:31:fc:1a:9b:4c:69:08:83: 62:b1:38:ae:dd:1a:49:6a:64:15:99:7e:a5:1b:7d:0b:7c:e7: ea:bf:64:ec:88:5b:b0:02:e1:e7:66:d8:99:fb:57:88:ee:42: 28:98:10:23:97:74:2f:b7:53:f3:11:00:f1:c4:c6:09:bd:e8: 6c:54:76:22:21:73:7a:f4:1d:6c:f1:7e:15:8b:9d:9f:d8:2f: 70:43:9e:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCQzQxMTAvBgNVBAUTKDUwREFBM0EyNzE1QkVEQ0ZFNzE0RTU2RDg1NDFGN0Yz NTg2RTZFRjcwHhcNMjUwODA1MDAwODI4WhcNMjUwODEyMDAwODI4WjAYMRYwFAYD VQQDEw02ODkxNGI3ZC05ZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RWGU+WQ9qqPIvO/K4MFiIYkC2YlvfOpkt5nvXv6RYHSAQj5zUnobVPjAMZY 4UQKvnXCHYcjY8V2em0l3LpObiEQTjoBZnZiuBp0DR9CpkR1Pa7J2fUovGGzODy4 Pcjx+2sUFe+RXPOMtnVWgK2P9Sm1otdebSie6r0caqw71xxtnoLlByQqVInSiHH/ 6TNU5uROBewQ5jiU31x0jM6zKhaP0vxGKjLEOGTSTcuj0lkXp3aDNVtHuetsJwG6 HVqkAe2+X+ROqmWOy4RAKFkw8XJdONVQofNmaLnC57w/E6K/7RgwFx1VGldgMDNi mPwi1pyqHQNwNG6JkSmEwAyuMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyAGgDl hHilMeA3q02UViWc/ibnMB8GA1UdIwQYMBaAFFDao6JxW+3P5xTlbYVB9/NYbm73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkJDNC8zQzRCMDEzMjFG OUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdjX25GT1Z0aFVIMzgxaHVi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VOcWpvbkZiN2NfbkZPVnRoVUgzODFodWJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkJDNC8zQzRCMDEzMjFGOUMxMUVDOTA5NEYwNURDNEY5QUUwMi9VTnFqb25GYjdj X25GT1Z0aFVIMzgxaHVidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXcnHlD+mcXem1zLsfu0SpleKMmRhF7CbTMRy8cgFWMVlgtf85hqA4 uvJUDFrYBKlHm2H/2Cy6et7qPFCQPhXG2feMHv34h/LlXQPqEKlZsjqhNLvw+gaD W2bZoH/svn+NrQlg/XwtSi1+VVolw69cmpSoWy6/hRR46ArG/xyZ4jvavliV3cq5 EIyQ1+Pqp/0oaTfNi4F0YSvUOkRvIbxfOz7QXpctmVK+dUFJMfwam0xpCINisTiu 3RpJamQVmX6lG30LfOfqv2TsiFuwAuHnZtiZ+1eI7kIomBAjl3Qvt1PzEQDxxMYJ vehsVHYiIXN69B1s8X4Vi52f2C9wQ55B -----END CERTIFICATE-----Generated at Wed Aug 6 04:17:25 2025 by rpki-client