$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: QDslkV7lTQB6aQEBK0z+spZ8+bWK6xd4AJEUitQu138= Subject key identifier: 4D:67:22:38:74:91:9E:FF:52:3C:1B:16:A2:84:00:6B:A8:0F:47:97 Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 07D2 Signing time: Fri 22 Aug 2025 21:14:40 +0000 Manifest this update: Fri 22 Aug 2025 21:14:39 +0000 Manifest next update: Fri 29 Aug 2025 21:14:39 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: +d4eR2DSskgiYMzD6TKIurNU/8BwwRBM4ARqOW0jFZg=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: wrP/aiUubLvMy2sDZxNt1LMzFgR4k2obYAa+c5WHPY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: Aug 22 21:14:39 2025 GMT Not After : Aug 29 21:14:39 2025 GMT Subject: CN=68a8ddbf-f5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:54:6c:df:8d:2d:65:c8:77:2b:e4:95:59: 6c:d6:07:d4:60:c5:ef:df:7a:1a:5a:ba:42:8f:d0: 14:60:a6:5b:94:0d:0d:9b:7f:bb:47:02:3b:23:1e: 06:74:c2:73:98:00:4f:ba:9b:fb:fe:04:b6:e3:f0: 03:37:59:eb:5c:f0:f8:c9:59:70:be:d2:05:2f:c1: 4e:e2:b1:32:1c:fb:0f:2c:44:0d:2b:2c:35:14:55: 80:8d:c1:66:3c:72:5a:5e:70:b8:6a:22:84:e9:1a: 28:0f:2d:11:10:71:8e:9d:b5:c7:09:e6:ed:28:b8: 05:a6:1d:b1:32:89:7d:5a:7a:bd:97:32:a3:d0:df: 4a:76:6d:cd:4b:8b:82:4c:92:28:4a:3b:41:bb:ab: 2d:1e:4b:0a:49:5e:28:84:52:c9:17:b6:ba:07:5d: 03:3f:d5:ca:8a:32:24:b1:73:46:74:34:b1:23:b2: 0b:59:fb:77:49:d2:e9:96:82:af:f0:db:d5:c5:a8: 49:b0:30:b4:a4:76:9e:93:68:c4:0d:1c:18:aa:0d: 64:13:28:64:2f:19:05:82:b0:29:ef:51:82:e6:d7: 25:6e:df:9e:78:3c:c2:96:0c:67:41:c6:b0:e9:fa: 67:ad:e3:81:81:f8:b5:8e:fa:6f:09:bc:3c:55:4a: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:67:22:38:74:91:9E:FF:52:3C:1B:16:A2:84:00:6B:A8:0F:47:97 X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d1:a9:9a:07:29:28:80:9a:be:96:90:fc:01:cb:58:46:86: a2:55:6f:18:bb:60:e9:81:eb:58:eb:15:2b:2f:e7:5f:37:ef: 25:ff:40:43:6b:8f:a8:bc:3a:5a:35:72:51:14:5d:6d:26:7d: 72:b4:0c:92:24:1c:9d:b8:b8:1c:fc:4c:d6:1d:ed:d7:c0:e0: 69:06:de:99:5e:79:a3:d7:f9:d2:d4:04:67:0f:92:07:f7:8c: f8:54:7e:da:4c:07:96:d8:8d:28:e3:7b:be:a5:6c:56:2a:8a: 69:64:64:9e:7a:27:61:21:7b:14:49:04:1a:0a:8c:b9:08:00: e3:5d:c5:fe:01:c8:57:85:00:71:4a:ad:c4:b2:cd:68:25:18: a7:11:8a:3d:60:ee:ea:a1:bb:f1:0a:51:76:67:fe:9d:9b:24: c1:d8:a4:7d:50:9f:05:00:87:32:af:e9:80:1d:8b:fd:1f:a2: 8a:15:e4:56:bf:71:4f:0f:5c:16:f1:08:01:57:b4:a2:a5:f0: de:21:ee:05:61:e7:37:fe:24:0f:a1:6e:73:02:ae:e3:55:3b: f4:c8:70:83:53:cb:98:32:2f:87:47:9f:f5:0a:0d:0f:95:0e: 7b:da:3c:7b:4f:5a:44:fe:51:2a:31:d3:5b:ba:e0:0b:b8:92: 2c:f7:d1:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjUwODIyMjExNDM5WhcNMjUwODI5MjExNDM5WjAYMRYwFAYD VQQDEw02OGE4ZGRiZi1mNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUpUbN+NLWXIdyvklVls1gfUYMXv33oaWrpCj9AUYKZblA0Nm3+7RwI7Ix4G dMJzmABPupv7/gS24/ADN1nrXPD4yVlwvtIFL8FO4rEyHPsPLEQNKyw1FFWAjcFm PHJaXnC4aiKE6RooDy0REHGOnbXHCebtKLgFph2xMol9Wnq9lzKj0N9Kdm3NS4uC TJIoSjtBu6stHksKSV4ohFLJF7a6B10DP9XKijIksXNGdDSxI7ILWft3SdLploKv 8NvVxahJsDC0pHaek2jEDRwYqg1kEyhkLxkFgrAp71GC5tclbt+eeDzClgxnQcaw 6fpnreOBgfi1jvpvCbw8VUrx0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1nIjh0 kZ7/UjwbFqKEAGuoD0eXMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn0amaBykogJq+lpD8ActYRoaiVW8Yu2DpgetY6xUrL+dfN+8l/0BD a4+ovDpaNXJRFF1tJn1ytAySJByduLgc/EzWHe3XwOBpBt6ZXnmj1/nS1ARnD5IH 94z4VH7aTAeW2I0o43u+pWxWKoppZGSeeidhIXsUSQQaCoy5CADjXcX+AchXhQBx Sq3Ess1oJRinEYo9YO7qobvxClF2Z/6dmyTB2KR9UJ8FAIcyr+mAHYv9H6KKFeRW v3FPD1wW8QgBV7SipfDeIe4FYec3/iQPoW5zAq7jVTv0yHCDU8uYMi+HR5/1Cg0P lQ572jx7T1pE/lEqMdNbuuALuJIs99Fz -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:46 2025 by rpki-client