$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: HAzode8xaIJz+jpbl6nSfanisoayQqMKcfyIQmsT8Zc= Subject key identifier: 27:54:BB:60:FD:79:3A:29:5D:6D:34:47:75:FA:B8:AF:42:7C:D5:13 Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 07BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 07B7 Signing time: Mon 30 Jun 2025 21:23:25 +0000 Manifest this update: Mon 30 Jun 2025 21:23:25 +0000 Manifest next update: Mon 07 Jul 2025 21:23:25 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: E1BlGqLMa9YLV3kGjc/Jyfn81L5Q1dz7GH7+6qqkTgU=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: wrP/aiUubLvMy2sDZxNt1LMzFgR4k2obYAa+c5WHPY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: Jun 30 21:23:25 2025 GMT Not After : Jul 7 21:23:25 2025 GMT Subject: CN=6863004d-a4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:1e:77:64:80:35:57:ad:52:a8:f6:13:d4: b2:f0:f7:3f:17:04:d4:76:94:ad:9a:96:09:1f:bb: d8:e0:a9:97:52:bb:6b:9f:65:d2:47:de:a7:d6:e2: fb:47:8e:f8:f2:ff:6d:81:8a:81:d4:b9:cf:9c:9b: 63:5c:67:e6:53:b8:ba:68:52:4d:97:d6:cd:97:88: b4:a9:ad:a5:6c:95:15:71:18:0d:54:a6:35:a1:d4: 9c:1c:7c:ac:da:e7:74:02:a6:32:5b:57:1a:78:fb: 95:c3:c9:fe:0f:43:d6:5c:4d:f7:ae:5f:85:f9:08: cb:60:d3:dc:56:07:e7:14:6b:fc:66:2c:0a:a1:b6: 69:25:a3:7b:11:61:7c:a0:cd:f4:bb:03:52:e4:b5: 6f:30:77:56:b3:85:d0:0a:28:45:4b:9b:ba:1a:4e: 1f:cf:3a:36:bb:48:5a:5c:43:ff:7a:21:66:55:59: 99:8a:3f:ac:93:e7:05:49:d2:e6:2b:8e:d2:26:4d: a2:4a:37:c1:e2:71:e7:bc:79:48:0f:e7:79:09:02: b8:54:87:14:e1:d6:49:7a:8a:ee:9b:cd:b2:58:43: 2e:df:d8:90:01:7b:b7:15:9e:55:4d:88:00:36:c9: ec:e0:df:ef:4f:25:13:4a:ed:dc:d7:ce:75:01:47: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:54:BB:60:FD:79:3A:29:5D:6D:34:47:75:FA:B8:AF:42:7C:D5:13 X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2c:28:c1:f5:3e:f9:ed:48:ec:e1:a1:4d:12:83:3f:a2:5f: da:e1:b2:4d:a6:bc:7b:b6:5a:19:03:93:58:ec:70:a9:fe:9d: 77:8e:2d:fd:4a:87:4a:5f:c2:4d:64:59:27:20:59:48:5d:01: 5d:29:52:b2:db:12:25:82:d1:a0:28:8a:4c:53:14:73:64:bb: 90:4d:7d:0d:9f:7c:b1:09:4d:a6:de:af:df:35:f2:fe:14:c7: d0:7e:d4:41:33:78:f9:e0:fc:32:8b:3a:3a:fd:79:3c:fb:e8: ca:ce:12:f0:2f:48:e8:97:c2:4c:c0:1b:3e:f7:95:14:c6:e1: 0b:0b:f0:35:ce:89:73:b3:d7:54:f6:dc:26:09:60:c5:df:45: 8f:74:04:13:6e:7d:d0:c1:6c:36:85:2c:2a:3e:39:40:40:fe: 11:69:c4:cc:0e:06:b3:f4:47:60:bb:a7:1c:bc:8f:e8:26:78: 0a:b1:40:65:8d:d4:28:65:f3:39:42:58:5b:2f:97:80:09:85: 0e:94:3f:a2:09:c8:46:cb:0f:2f:a5:c6:46:64:ff:b5:8e:f6: 7c:bc:b4:e1:2b:5e:e9:99:1c:4d:cb:0e:d7:f6:23:d3:aa:5f: b9:46:dc:35:6e:80:a0:1e:9a:c2:90:59:bc:c8:93:c5:c3:e2: ab:ab:5b:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjUwNjMwMjEyMzI1WhcNMjUwNzA3MjEyMzI1WjAYMRYwFAYD VQQDEw02ODYzMDA0ZC1hNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvYed2SANVetUqj2E9Sy8Pc/FwTUdpStmpYJH7vY4KmXUrtrn2XSR96n1uL7 R4748v9tgYqB1LnPnJtjXGfmU7i6aFJNl9bNl4i0qa2lbJUVcRgNVKY1odScHHys 2ud0AqYyW1caePuVw8n+D0PWXE33rl+F+QjLYNPcVgfnFGv8ZiwKobZpJaN7EWF8 oM30uwNS5LVvMHdWs4XQCihFS5u6Gk4fzzo2u0haXEP/eiFmVVmZij+sk+cFSdLm K47SJk2iSjfB4nHnvHlID+d5CQK4VIcU4dZJeorum82yWEMu39iQAXu3FZ5VTYgA Nsns4N/vTyUTSu3c1851AUfMlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdUu2D9 eTopXW00R3X6uK9CfNUTMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlLCjB9T757Ujs4aFNEoM/ol/a4bJNprx7tloZA5NY7HCp/p13ji39 SodKX8JNZFknIFlIXQFdKVKy2xIlgtGgKIpMUxRzZLuQTX0Nn3yxCU2m3q/fNfL+ FMfQftRBM3j54Pwyizo6/Xk8++jKzhLwL0jol8JMwBs+95UUxuELC/A1zolzs9dU 9twmCWDF30WPdAQTbn3QwWw2hSwqPjlAQP4RacTMDgaz9Edgu6ccvI/oJngKsUBl jdQoZfM5QlhbL5eACYUOlD+iCchGyw8vpcZGZP+1jvZ8vLThK17pmRxNyw7X9iPT ql+5Rtw1boCgHprCkFm8yJPFw+Krq1uW -----END CERTIFICATE-----Generated at Wed Jul 2 20:16:12 2025 by rpki-client