$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json) Hash identifier: 3rrjTpSnkNYDHz+eKR/PCbDO/dAX9XUpAPbdIrRQWO4= Subject key identifier: 39:11:8D:80:4C:98:0C:99:5C:B9:A3:A2:95:69:83:6A:5F:C4:C8:CA Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft Manifest number: 74 Signing time: Thu 19 Jun 2025 06:12:43 +0000 Manifest this update: Thu 19 Jun 2025 06:12:43 +0000 Manifest next update: Thu 26 Jun 2025 06:12:43 +0000 Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: xSLupNDPAolQYWepev4loueLr6a+TPQwW8QTt+orOgA=) 2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: 20U7R8Yje/fzXp5s/Ng4KAPvO8aTGVHHdc0Vt45hE8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Validity Not Before: Jun 19 06:12:43 2025 GMT Not After : Jun 26 06:12:43 2025 GMT Subject: CN=6853aa5b-ab9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:14:f5:cf:42:a6:c9:91:18:4e:bc:c0:f0:f2: 90:4a:f8:67:16:67:94:0c:16:77:fd:ee:6d:09:f0: 22:e9:60:0e:d8:7d:ff:80:d8:b6:63:64:d3:b3:74: 07:ae:84:e1:5e:8b:d0:59:76:15:7e:1b:3f:e0:0f: ee:53:68:c6:5a:6f:38:71:3a:c9:67:64:ff:5c:b8: 33:e9:e5:45:21:49:10:e8:5a:b2:b4:b6:d9:4f:9c: 52:43:de:fe:f5:d3:36:87:05:4c:d3:4c:d8:77:22: 8e:27:e7:2d:90:71:b9:68:26:24:b4:79:57:d1:ba: 22:27:f7:e1:5f:9c:0f:ce:1a:af:a3:60:3d:b9:2d: bf:62:80:e8:d5:b9:78:fd:5b:36:2c:1d:e4:22:8e: f8:63:82:69:df:55:3a:04:44:ec:76:6e:8d:6f:a0: 1a:d6:f6:99:e3:36:50:33:48:b7:c6:45:cf:d7:39: e2:e4:de:99:a4:67:21:f4:83:b1:b7:be:cb:57:64: 2f:98:b4:bd:5e:b5:2a:08:38:57:b6:d4:e0:ac:f5: 0a:0a:80:52:26:a9:4d:a1:42:76:70:e8:31:84:c2: fd:1f:b3:50:e2:41:bc:f8:40:27:49:f1:4b:48:9a: b9:40:8f:17:14:5f:ad:09:5c:95:cf:0b:b8:0a:89: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:11:8D:80:4C:98:0C:99:5C:B9:A3:A2:95:69:83:6A:5F:C4:C8:CA X509v3 Authority Key Identifier: keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:bb:95:d2:21:0e:de:67:27:00:96:01:45:bb:e8:8b:93:69: e5:11:9c:87:f1:e8:2a:5b:cc:40:65:dc:4e:70:c7:82:b5:4d: 03:2e:41:b4:3d:d4:c4:9b:7e:6b:85:20:32:09:c8:63:e5:f5: 18:a3:96:df:9a:16:8a:82:c5:bc:c5:f7:0d:4f:d7:fd:70:f5: bf:ef:70:70:d2:87:22:53:db:a9:07:df:9b:f3:09:b0:a5:81: 30:1f:6d:ca:4b:de:4d:e9:c1:d6:14:20:a5:20:c1:70:a4:ad: 4e:31:d4:35:60:93:c0:bf:df:80:08:48:f9:c4:87:6c:cf:4a: 2f:45:a7:b7:c5:23:14:41:c5:ba:17:f9:85:13:32:41:01:d4: 4a:03:99:7c:d0:12:18:65:3b:f1:b7:c2:5a:42:bb:06:5c:82: d1:8c:13:95:d3:5c:74:c1:e5:5b:2d:95:e9:c3:d5:38:2e:3a: 1a:68:30:77:d7:3d:7f:28:45:58:7f:07:64:b7:58:bb:2d:20: 94:f5:33:55:f6:58:cb:2f:27:31:3e:41:21:62:87:97:2b:ba: 10:00:76:91:a3:5f:55:8d:94:5a:ec:23:83:e7:22:44:e0:4b: 0c:7f:48:8b:5d:f9:4f:f2:f6:46:79:ef:a2:ae:35:0a:eb:57: 59:ff:24:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTk0MTExMC8GA1UEBRMoQjJFOURBNUVCMzg5NkJFRkMwREZENUE3RUIzMERCMjkz MTRCQkExMjAeFw0yNTA2MTkwNjEyNDNaFw0yNTA2MjYwNjEyNDNaMBgxFjAUBgNV BAMTDTY4NTNhYTViLWFiOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcFPXPQqbJkRhOvMDw8pBK+GcWZ5QMFnf97m0J8CLpYA7Yff+A2LZjZNOzdAeu hOFei9BZdhV+Gz/gD+5TaMZabzhxOslnZP9cuDPp5UUhSRDoWrK0ttlPnFJD3v71 0zaHBUzTTNh3Io4n5y2QcbloJiS0eVfRuiIn9+FfnA/OGq+jYD25Lb9igOjVuXj9 WzYsHeQijvhjgmnfVToEROx2bo1voBrW9pnjNlAzSLfGRc/XOeLk3pmkZyH0g7G3 vstXZC+YtL1etSoIOFe21OCs9QoKgFImqU2hQnZw6DGEwv0fs1DiQbz4QCdJ8UtI mrlAjxcUX60JXJXPC7gKicRjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUORGNgEyY DJlcuaOilWmDal/EyMowHwYDVR0jBBgwFoAUsunaXrOJa+/A39Wn6zDbKTFLuhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOTQxLzkzQUNBQjY0QTBB MDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVo SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3VuYVhyT0phLV9BMzlXbjZ6RGJLVEZMdWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OTQxLzkzQUNBQjY0QTBBMDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1f QTM5V242ekRiS1RGTHVoSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGK7ldIhDt5nJwCWAUW76IuTaeURnIfx6CpbzEBl3E5wx4K1TQMuQbQ9 1MSbfmuFIDIJyGPl9Rijlt+aFoqCxbzF9w1P1/1w9b/vcHDShyJT26kH35vzCbCl gTAfbcpL3k3pwdYUIKUgwXCkrU4x1DVgk8C/34AISPnEh2zPSi9Fp7fFIxRBxboX +YUTMkEB1EoDmXzQEhhlO/G3wlpCuwZcgtGME5XTXHTB5VstlenD1TguOhpoMHfX PX8oRVh/B2S3WLstIJT1M1X2WMsvJzE+QSFih5cruhAAdpGjX1WNlFrsI4PnIkTg Swx/SItd+U/y9kZ576KuNQrrV1n/JOA= -----END CERTIFICATE-----Generated at Fri Jun 20 08:32:57 2025 by rpki-client