$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json) Hash identifier: SnUFc48JHaICrSgpcjtxBfnJ4XtyXEqHEAIsIKD4NEQ= Subject key identifier: 6D:8F:12:A0:1B:9E:C9:DA:97:EF:C0:73:96:B0:CC:AD:F8:16:E3:9C Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft Manifest number: BB Signing time: Mon 03 Nov 2025 06:00:08 +0000 Manifest this update: Mon 03 Nov 2025 06:00:08 +0000 Manifest next update: Mon 10 Nov 2025 06:00:08 +0000 Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: QwMXJOT/bD4IFAphaGHi/OcnJzZnMq/T3KbJvQP540s=) 2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: Yj2V8/6jOgitXcRoNNna3W/sKqY/mfOcuez+bXMF3yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Validity Not Before: Nov 3 06:00:08 2025 GMT Not After : Nov 10 06:00:08 2025 GMT Subject: CN=690844e8-7f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:a7:33:fa:37:86:a6:cf:42:2f:aa:f1:16: 6f:3a:00:17:df:91:63:54:c6:98:df:5f:3a:83:90: 66:23:aa:1b:9a:6a:f5:5d:8a:f1:23:20:1d:2b:1a: b5:d5:36:1e:44:a1:a5:c0:79:e1:d5:5b:e6:97:d5: 02:dc:a3:de:12:2a:fb:16:d8:3d:d1:ca:17:69:15: 2b:d0:e4:5b:d4:f0:37:05:2b:1a:31:5c:05:0d:e0: cb:07:f3:93:65:b4:68:4d:88:eb:dc:83:36:78:9d: 50:05:9e:93:a6:4f:09:6b:f9:c8:46:0b:20:5d:51: 83:9c:fd:61:ad:11:55:10:df:59:ad:54:1d:bd:ed: 7f:df:a9:09:42:96:0e:bc:50:53:b5:da:dc:66:33: 63:5e:be:0b:e1:ff:a3:ea:2e:56:7a:27:cd:f6:26: 34:f4:ca:00:11:67:dc:3a:b1:c1:5a:31:17:18:c4: 5b:06:66:a2:5d:ee:43:06:0d:ce:c2:e7:4e:be:07: 85:9e:ba:05:da:d7:13:15:4f:b1:f5:0f:bf:44:ea: 72:57:e3:c9:b6:6f:ff:9a:74:aa:b8:b2:48:01:78: e5:e0:d2:19:34:0a:f6:18:c1:b7:6e:57:06:d7:de: 28:a7:2d:0b:6b:5d:2e:4a:ac:bf:a7:45:55:a1:57: 19:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8F:12:A0:1B:9E:C9:DA:97:EF:C0:73:96:B0:CC:AD:F8:16:E3:9C X509v3 Authority Key Identifier: keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:ae:a4:05:33:57:a9:f4:34:d4:10:b5:f7:07:31:d1:d5:9c: 9c:02:b7:25:d2:34:46:38:ef:f6:66:71:d2:9d:a2:e6:f0:0c: 71:b1:a7:10:8d:12:0a:82:e5:dc:df:b4:73:f2:27:07:68:14: 10:07:8a:07:4a:2a:c1:f8:00:f4:d1:40:ff:35:7d:e6:c5:07: f9:37:a9:57:9e:a8:c1:3f:4f:86:91:8e:36:33:20:28:82:4d: c3:84:18:e5:58:cf:7e:fe:c3:95:30:6f:a7:4b:e3:d8:75:d0: 89:fb:e0:89:8f:ee:74:10:49:26:a1:13:fd:74:a7:95:4f:7f: 5b:03:28:74:64:a6:86:24:e8:45:fb:99:22:9f:cc:06:16:6f: 68:60:68:73:23:25:f5:a1:f8:1d:17:1c:00:80:e3:f1:ed:79: e1:e9:5d:5d:30:6b:36:79:bc:b8:2c:d9:f0:8e:01:06:b1:f8: a0:ac:ab:be:b8:b2:78:20:5c:a0:4c:bc:5d:82:6d:ce:d8:fd: a2:d8:9c:85:9c:fc:cd:c7:22:ef:ef:ab:1b:20:a8:74:5b:9b: 3d:4d:bb:86:21:e6:f6:7f:da:1e:d6:34:e3:ea:54:40:2b:48: bd:c3:75:f2:6d:c8:27:e0:20:58:3a:8b:39:b3:11:ca:2b:92: 0f:8c:0b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKEIyRTlEQTVFQjM4OTZCRUZDMERGRDVBN0VCMzBEQjI5 MzE0QkJBMTIwHhcNMjUxMTAzMDYwMDA4WhcNMjUxMTEwMDYwMDA4WjAYMRYwFAYD VQQDEw02OTA4NDRlOC03ZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRynM/o3hqbPQi+q8RZvOgAX35FjVMaY3186g5BmI6obmmr1XYrxIyAdKxq1 1TYeRKGlwHnh1Vvml9UC3KPeEir7Ftg90coXaRUr0ORb1PA3BSsaMVwFDeDLB/OT ZbRoTYjr3IM2eJ1QBZ6Tpk8Ja/nIRgsgXVGDnP1hrRFVEN9ZrVQdve1/36kJQpYO vFBTtdrcZjNjXr4L4f+j6i5WeifN9iY09MoAEWfcOrHBWjEXGMRbBmaiXe5DBg3O wudOvgeFnroF2tcTFU+x9Q+/ROpyV+PJtm//mnSquLJIAXjl4NIZNAr2GMG3blcG 194opy0La10uSqy/p0VVoVcZZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2PEqAb nsnal+/Ac5awzK34FuOcMB8GA1UdIwQYMBaAFLLp2l6ziWvvwN/Vp+sw2ykxS7oS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85M0FDQUI2NEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEtX0EzOVduNnpEYktURkx1 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTk0MS85M0FDQUI2NEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEt X0EzOVduNnpEYktURkx1aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5rqQFM1ep9DTUELX3BzHR1ZycArcl0jRGOO/2ZnHSnaLm8AxxsacQ jRIKguXc37Rz8icHaBQQB4oHSirB+AD00UD/NX3mxQf5N6lXnqjBP0+GkY42MyAo gk3DhBjlWM9+/sOVMG+nS+PYddCJ++CJj+50EEkmoRP9dKeVT39bAyh0ZKaGJOhF +5kin8wGFm9oYGhzIyX1ofgdFxwAgOPx7Xnh6V1dMGs2eby4LNnwjgEGsfigrKu+ uLJ4IFygTLxdgm3O2P2i2JyFnPzNxyLv76sbIKh0W5s9TbuGIeb2f9oe1jTj6lRA K0i9w3Xybcgn4CBYOos5sxHKK5IPjAuH -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:50 2025 by rpki-client