$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json) Hash identifier: h4hq7TWfWUKP/ZLqAbqeK7hOyx2H7/KCzHJ1wNsrNhA= Subject key identifier: B2:B7:41:33:50:64:E1:3A:CD:8F:40:A1:1E:4C:B7:B2:3A:1B:6E:B8 Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft Manifest number: 97 Signing time: Sat 23 Aug 2025 06:40:18 +0000 Manifest this update: Sat 23 Aug 2025 06:40:17 +0000 Manifest next update: Sat 30 Aug 2025 06:40:17 +0000 Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: S7BNq+SH3tQY5tlE4J2aEofelNzEhhkYq1SYdR/Yr74=) 2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: Yj2V8/6jOgitXcRoNNna3W/sKqY/mfOcuez+bXMF3yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Validity Not Before: Aug 23 06:40:17 2025 GMT Not After : Aug 30 06:40:17 2025 GMT Subject: CN=68a96251-6ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:95:ce:bc:f3:0e:6c:fe:57:46:12:d7:1c: fd:fb:8c:b2:1d:08:8d:c4:16:ba:57:61:0c:46:d7: 73:cc:d7:94:18:75:03:24:26:e9:6e:c0:9f:bd:e5: 14:de:8b:f8:76:d2:5f:96:a3:46:27:44:f7:17:3d: 76:0b:2f:d4:bf:8e:dc:2b:ff:63:15:7a:45:c3:4e: eb:2e:03:ba:23:4d:a6:74:51:81:6c:12:00:70:f7: ed:ac:cb:82:8e:79:31:10:f3:68:ab:34:e7:a0:f7: cc:fe:66:49:b8:de:3c:38:10:6d:37:42:1a:9b:14: 49:fe:85:a5:8c:f8:4e:00:df:37:04:a4:e6:c9:ae: 97:fa:b4:c0:f5:db:70:85:0b:34:75:88:5d:6a:a8: 56:94:5b:15:07:8c:de:7d:88:bd:c9:6a:aa:75:d1: a1:bb:b4:26:d8:cc:d4:82:7b:cc:3d:5b:4d:c3:82: da:aa:15:b8:39:c5:d0:dc:66:1d:d1:07:b3:e4:b7: 15:5d:2c:e2:40:bd:d2:98:e0:9d:60:f0:53:b7:d2: 97:11:11:47:2a:48:52:bc:72:75:bc:c7:46:c0:1b: bd:ad:5f:06:30:3d:dd:21:f3:d1:b3:dc:a3:0b:f7: b3:c7:2e:00:f6:87:a1:06:3e:b4:a9:90:78:d7:43: 99:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B7:41:33:50:64:E1:3A:CD:8F:40:A1:1E:4C:B7:B2:3A:1B:6E:B8 X509v3 Authority Key Identifier: keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:de:04:ac:f1:1e:e9:4d:cd:21:32:a5:0a:71:f9:c5:e1:07: 23:99:44:19:3c:84:91:3a:9a:60:92:79:5b:d0:52:70:9b:8d: a4:88:2c:5c:8e:e3:78:60:0d:42:21:c7:3d:2f:f9:1b:13:18: 40:f2:e2:16:c5:d8:6a:df:88:5d:2f:70:d6:e4:5b:11:cf:b1: 08:a4:3a:bf:0d:3f:44:9f:05:50:09:ef:01:81:e5:fd:74:3a: f2:ba:1c:bf:ef:c2:69:5e:05:16:88:fb:83:8d:71:3d:7f:c1: 8a:5f:3e:89:e0:24:a0:75:04:22:9a:90:93:5a:20:6f:b7:d6: 07:3a:f7:7c:77:72:2c:37:14:22:ac:28:a0:aa:ce:c6:fa:34: c3:c7:78:25:d9:5c:09:1d:77:b7:1a:0f:1a:fa:a8:dc:a1:08: 69:7c:64:a5:46:9f:e5:23:40:70:60:fe:f0:9b:f8:6f:ae:e1: 68:37:90:ab:56:7b:f9:b6:fb:75:d3:64:27:eb:cd:9a:f6:64: cd:a4:d5:fe:63:ad:34:da:6e:7c:e6:e2:f9:f7:82:d0:f0:03: 5a:84:1b:c1:0a:d9:9e:91:82:a8:5f:50:00:a8:f6:f1:c1:a3: c8:d5:92:a3:41:7e:51:55:d2:24:1a:6e:ec:a6:aa:f2:3a:37: 0d:7f:f9:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKEIyRTlEQTVFQjM4OTZCRUZDMERGRDVBN0VCMzBEQjI5 MzE0QkJBMTIwHhcNMjUwODIzMDY0MDE3WhcNMjUwODMwMDY0MDE3WjAYMRYwFAYD VQQDEw02OGE5NjI1MS02ZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbCVzrzzDmz+V0YS1xz9+4yyHQiNxBa6V2EMRtdzzNeUGHUDJCbpbsCfveUU 3ov4dtJflqNGJ0T3Fz12Cy/Uv47cK/9jFXpFw07rLgO6I02mdFGBbBIAcPftrMuC jnkxEPNoqzTnoPfM/mZJuN48OBBtN0IamxRJ/oWljPhOAN83BKTmya6X+rTA9dtw hQs0dYhdaqhWlFsVB4zefYi9yWqqddGhu7Qm2MzUgnvMPVtNw4LaqhW4OcXQ3GYd 0Qez5LcVXSziQL3SmOCdYPBTt9KXERFHKkhSvHJ1vMdGwBu9rV8GMD3dIfPRs9yj C/ezxy4A9oehBj60qZB410OZsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK3QTNQ ZOE6zY9AoR5Mt7I6G264MB8GA1UdIwQYMBaAFLLp2l6ziWvvwN/Vp+sw2ykxS7oS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85M0FDQUI2NEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEtX0EzOVduNnpEYktURkx1 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTk0MS85M0FDQUI2NEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEt X0EzOVduNnpEYktURkx1aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB83gSs8R7pTc0hMqUKcfnF4QcjmUQZPISROppgknlb0FJwm42kiCxc juN4YA1CIcc9L/kbExhA8uIWxdhq34hdL3DW5FsRz7EIpDq/DT9EnwVQCe8BgeX9 dDryuhy/78JpXgUWiPuDjXE9f8GKXz6J4CSgdQQimpCTWiBvt9YHOvd8d3IsNxQi rCigqs7G+jTDx3gl2VwJHXe3Gg8a+qjcoQhpfGSlRp/lI0BwYP7wm/hvruFoN5Cr Vnv5tvt102Qn682a9mTNpNX+Y6002m585uL594LQ8ANahBvBCtmekYKoX1AAqPbx waPI1ZKjQX5RVdIkGm7spqryOjcNf/nk -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:13 2025 by rpki-client