$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: WDvKw5s/GtD6xKGwxK9+ZJE/8TSkXXieE5zt3HgE3J4= Subject key identifier: 14:B9:B4:19:67:E7:3A:02:66:13:E1:0B:54:8C:3B:9D:91:4D:84:98 Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 085C Signing time: Tue 12 May 2026 20:50:39 +0000 Manifest this update: Tue 12 May 2026 20:50:39 +0000 Manifest next update: Tue 19 May 2026 20:50:39 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: MKf6RVgCWBG5j6ny0kUyfW1K5EyitGRFWiCoRczvsE0=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: ttDGmX8Wz8ITP3sU4vGhTPNCup0+jAVIOIBp2YmhCbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: May 12 20:50:39 2026 GMT Not After : May 19 20:50:39 2026 GMT Subject: CN=6a03929f-2b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:6c:22:26:4c:54:77:0c:c4:e7:5d:cb:02: eb:aa:07:72:70:e1:75:a3:63:85:4a:07:79:35:7d: b0:47:25:77:95:e8:6c:a7:6f:26:2c:29:a2:f7:33: 9a:0f:07:31:cd:b4:1c:08:55:5b:fc:a6:9d:54:9c: 38:cc:20:6d:4a:52:a2:f8:66:4c:43:f4:37:d5:5b: 93:f2:bc:da:33:ea:59:0e:d0:99:1d:ff:cf:2d:9c: 31:ff:32:ae:87:b3:1e:99:7d:a4:f7:9c:03:05:7d: 79:e5:95:4f:3d:ee:60:8f:3d:f9:7c:0a:67:eb:c8: ad:fc:af:7d:19:7c:70:b4:1d:e2:ac:5e:ca:5e:e4: 3c:8a:66:8e:d5:c5:fc:0d:93:82:5f:2a:c5:5a:b6: e3:3a:40:75:49:21:d3:57:6d:bb:60:5d:bb:f9:3d: 7c:af:45:ee:b3:45:ac:1f:ee:23:7f:81:ec:c2:38: ab:30:2b:0b:02:25:87:9c:23:f1:ee:d9:88:ce:85: cb:7e:6d:a5:0e:63:6e:72:e2:44:08:25:08:94:8d: 25:70:83:e1:23:20:78:66:5d:df:fe:29:24:0f:97: 9a:aa:89:b2:2e:68:6a:6a:2a:c1:1e:77:fa:64:bb: c5:1c:01:f5:68:de:07:09:b3:92:66:76:e9:03:f8: 46:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B9:B4:19:67:E7:3A:02:66:13:E1:0B:54:8C:3B:9D:91:4D:84:98 X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:41:2d:fd:4f:b0:61:d9:de:42:09:ee:bc:a5:83:0b:a3:03: 80:5e:7d:49:3a:20:df:87:ff:6f:ee:71:9f:f2:2c:65:2a:fb: 64:20:d1:f2:47:a3:65:94:36:39:98:ff:e6:ad:fe:7f:6d:7c: e3:c2:f1:49:b3:e3:4f:e7:9c:6d:fa:57:41:2a:47:27:d7:02: ba:d2:c9:7b:69:92:47:a8:1a:c1:1c:4a:a1:f7:30:2f:cb:d7: af:9d:3b:ad:4d:3e:3f:54:91:b7:fe:b2:e6:b2:0d:35:51:e1: 03:01:af:12:64:9a:85:19:d7:19:49:a4:47:14:7e:54:3c:73: 10:f5:b6:12:e5:3c:8e:f9:75:83:3f:0b:57:b1:98:a9:1a:87: 64:59:aa:e9:ad:94:40:89:5b:65:ba:b8:79:ac:53:76:00:ae: 5c:58:f9:56:e4:70:67:fd:f9:b0:9d:ef:5b:66:53:8a:96:26: 4a:05:c1:65:f0:d0:16:c9:03:7e:7d:d5:48:6c:88:76:9f:08: 2f:1d:b1:f7:2f:28:da:b8:c6:86:42:6a:21:04:59:9b:e9:62: 29:61:b9:ed:2d:31:59:cd:e2:fe:88:08:de:c1:f9:f7:6b:b4: e6:04:06:c8:c8:bc:9f:87:1a:48:06:f5:92:99:34:c8:1c:4a: db:7e:79:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjYwNTEyMjA1MDM5WhcNMjYwNTE5MjA1MDM5WjAYMRYwFAYD VQQDEw02YTAzOTI5Zi0yYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz1sIiZMVHcMxOddywLrqgdycOF1o2OFSgd5NX2wRyV3lehsp28mLCmi9zOa DwcxzbQcCFVb/KadVJw4zCBtSlKi+GZMQ/Q31VuT8rzaM+pZDtCZHf/PLZwx/zKu h7MemX2k95wDBX155ZVPPe5gjz35fApn68it/K99GXxwtB3irF7KXuQ8imaO1cX8 DZOCXyrFWrbjOkB1SSHTV227YF27+T18r0Xus0WsH+4jf4HswjirMCsLAiWHnCPx 7tmIzoXLfm2lDmNucuJECCUIlI0lcIPhIyB4Zl3f/ikkD5eaqomyLmhqairBHnf6 ZLvFHAH1aN4HCbOSZnbpA/hGkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBS5tBln 5zoCZhPhC1SMO52RTYSYMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnUEt/U+wYdneQgnuvKWDC6MDgF59STog34f/b+5xn/IsZSr7ZCDR8kejZZQ2 OZj/5q3+f21848LxSbPjT+ecbfpXQSpHJ9cCutLJe2mSR6gawRxKofcwL8vXr507 rU0+P1SRt/6y5rINNVHhAwGvEmSahRnXGUmkRxR+VDxzEPW2EuU8jvl1gz8LV7GY qRqHZFmq6a2UQIlbZbq4eaxTdgCuXFj5VuRwZ/35sJ3vW2ZTipYmSgXBZfDQFskD fn3VSGyIdp8ILx2x9y8o2rjGhkJqIQRZm+liKWG57S0xWc3i/ogI3sH592u05gQG yMi8n4caSAb1kpk0yBxK2355Fg== -----END CERTIFICATE-----Generated at Wed May 13 08:20:46 2026 by rpki-client