$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json) Hash identifier: 5ktD3yN5uYX5HiIj74GdNoSXMfRWMdSWqCW+ltcVWw4= Subject key identifier: 7D:6B:F4:E6:69:E1:7B:BD:F2:D7:63:9B:EB:60:F3:BC:31:81:15:49 Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft Manifest number: 7B Signing time: Thu 03 Jul 2025 06:58:55 +0000 Manifest this update: Thu 03 Jul 2025 06:58:55 +0000 Manifest next update: Thu 10 Jul 2025 06:58:55 +0000 Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: q2dhGSPtpEdUbLsyXdS60UuJle+2j4VQ345e7wX86gQ=) 2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: 20U7R8Yje/fzXp5s/Ng4KAPvO8aTGVHHdc0Vt45hE8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Validity Not Before: Jul 3 06:58:55 2025 GMT Not After : Jul 10 06:58:55 2025 GMT Subject: CN=68662a2f-798e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:d3:d3:2f:de:33:0e:4f:15:61:80:65:cd: 72:5b:41:8b:e1:5b:40:f1:82:92:1c:be:89:cf:0f: 67:c7:94:1c:c6:0a:fc:92:14:c2:21:6e:bf:8c:d2: 72:7d:94:c5:8c:24:5a:9b:7a:f4:88:1e:a6:ab:f2: 3f:8d:61:6e:ee:52:af:75:1c:58:66:3d:b0:c7:51: 2a:a6:8d:81:da:dc:13:b0:9d:5a:30:a6:3c:5a:c9: fb:71:78:d6:8c:7d:de:0f:57:ca:8e:1a:3a:8e:8b: a4:8d:8c:a7:90:c1:04:51:e7:49:d9:d5:14:2c:26: 86:35:dc:cd:db:22:98:55:e8:0e:c2:cf:29:db:56: 2e:fd:e8:02:03:48:5d:30:31:ca:10:16:c0:52:15: 09:fb:a1:8c:9e:02:bd:cd:2f:ca:bb:13:78:35:38: c8:b3:1f:e5:95:be:38:d1:dd:47:d0:fe:83:c8:87: 68:46:17:da:e3:36:97:1d:41:02:e8:95:bc:4d:15: 1c:a9:35:71:53:6e:37:a2:87:3b:d6:07:d2:d7:79: 30:35:9a:2c:b5:ac:07:82:7c:ed:73:52:aa:c9:59: 94:ff:6c:5b:28:9f:4d:e1:42:7b:14:65:42:66:df: 9b:a3:6f:d3:3a:8b:a5:ce:41:63:b2:86:0e:ef:90: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6B:F4:E6:69:E1:7B:BD:F2:D7:63:9B:EB:60:F3:BC:31:81:15:49 X509v3 Authority Key Identifier: keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4c:66:bb:9f:bf:7d:ca:9f:e8:b9:24:84:1b:50:0f:ae:2a: 30:55:ff:54:df:02:fc:20:64:7b:7b:ed:4f:a3:98:1b:65:ff: 3d:64:37:1e:9d:df:8c:66:5a:20:37:1a:15:6f:c6:35:e1:98: 43:da:a3:a9:f4:d5:ef:7f:45:35:91:b6:a7:b0:7f:19:d2:0d: b4:c2:4b:d7:a2:03:15:86:19:19:a0:fb:aa:2f:a1:72:92:ae: 6e:53:65:f9:41:ff:9b:7a:20:81:10:60:01:35:ff:43:18:8d: c9:3b:ab:26:ba:f7:b3:da:33:e6:f9:21:35:8a:95:26:38:86: cd:53:3e:af:69:e0:1e:6e:dd:18:26:83:ba:22:3b:b2:7c:e4: 38:58:00:60:43:2d:a8:7a:36:9b:f0:cb:1c:c1:3d:2a:4e:9b: eb:7a:15:a3:ae:bf:b9:e9:d9:3a:b8:e6:c2:2f:6e:7b:ec:7f: 81:09:6e:13:ab:70:62:2c:b6:65:48:7e:a8:55:ec:f4:ca:aa: f2:03:c1:7b:9c:fd:c4:d3:5b:ae:c7:37:a6:2f:e0:b1:66:b1: d8:47:0b:77:9b:4c:dd:83:e0:8d:3d:a5:c3:c3:97:83:09:86: e2:93:31:e4:fa:55:6b:9c:f9:16:9d:79:eb:d0:ac:ce:48:73: 58:9b:f0:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTk0MTExMC8GA1UEBRMoQjJFOURBNUVCMzg5NkJFRkMwREZENUE3RUIzMERCMjkz MTRCQkExMjAeFw0yNTA3MDMwNjU4NTVaFw0yNTA3MTAwNjU4NTVaMBgxFjAUBgNV BAMTDTY4NjYyYTJmLTc5OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkWtPTL94zDk8VYYBlzXJbQYvhW0DxgpIcvonPD2fHlBzGCvySFMIhbr+M0nJ9 lMWMJFqbevSIHqar8j+NYW7uUq91HFhmPbDHUSqmjYHa3BOwnVowpjxayftxeNaM fd4PV8qOGjqOi6SNjKeQwQRR50nZ1RQsJoY13M3bIphV6A7CzynbVi796AIDSF0w McoQFsBSFQn7oYyeAr3NL8q7E3g1OMizH+WVvjjR3UfQ/oPIh2hGF9rjNpcdQQLo lbxNFRypNXFTbjeihzvWB9LXeTA1miy1rAeCfO1zUqrJWZT/bFson03hQnsUZUJm 35ujb9M6i6XOQWOyhg7vkM09AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfWv05mnh e73y12Ob62DzvDGBFUkwHwYDVR0jBBgwFoAUsunaXrOJa+/A39Wn6zDbKTFLuhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOTQxLzkzQUNBQjY0QTBB MDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVo SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3VuYVhyT0phLV9BMzlXbjZ6RGJLVEZMdWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OTQxLzkzQUNBQjY0QTBBMDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1f QTM5V242ekRiS1RGTHVoSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADVMZrufv33Kn+i5JIQbUA+uKjBV/1TfAvwgZHt77U+jmBtl/z1kNx6d 34xmWiA3GhVvxjXhmEPao6n01e9/RTWRtqewfxnSDbTCS9eiAxWGGRmg+6ovoXKS rm5TZflB/5t6IIEQYAE1/0MYjck7qya697PaM+b5ITWKlSY4hs1TPq9p4B5u3Rgm g7oiO7J85DhYAGBDLah6NpvwyxzBPSpOm+t6FaOuv7np2Tq45sIvbnvsf4EJbhOr cGIstmVIfqhV7PTKqvIDwXuc/cTTW67HN6Yv4LFmsdhHC3ebTN2D4I09pcPDl4MJ huKTMeT6VWuc+RadeevQrM5Ic1ib8Gk= -----END CERTIFICATE-----Generated at Fri Jul 4 11:15:29 2025 by rpki-client